$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: opXT28Vs0wzNDPqlDWqTo7Y0f7koay3oxnjmonuiSeA= Subject key identifier: 78:4A:E3:C4:CE:71:85:1C:DD:9E:0B:5D:2C:9F:52:46:21:D5:46:24 Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 3F9690FC7F98714CBE2A9A6BC9B971DCDDDC3D2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 04EB Signing time: Wed 25 Mar 2026 21:11:11 +0000 Manifest this update: Wed 25 Mar 2026 21:06:11 +0000 Manifest next update: Sun 29 Mar 2026 02:36:11 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: xm4WmRdnaxd5nSwiiqJ44lq8hbQs8LElHsYsXKeG1nU=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:96:90:fc:7f:98:71:4c:be:2a:9a:6b:c9:b9:71:dc:dd:dc:3d:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Mar 25 21:06:11 2026 GMT Not After : Mar 29 02:36:11 2026 GMT Subject: CN=784AE3C4CE71851CDD9E0B5D2C9F524621D54624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f6:a6:ce:90:0c:ca:3f:31:10:b0:9c:41:5a: 1f:3e:f4:81:aa:1f:e1:27:25:68:97:14:93:2f:64: 5d:a3:c6:0e:bb:8d:a5:42:20:d0:13:5d:ee:61:1f: b4:f6:d0:40:42:19:2a:e4:7c:00:d1:40:94:35:a2: 0b:8c:50:60:60:0e:dd:44:b2:92:9f:91:2a:22:75: 08:f3:89:1d:ea:8e:e3:b5:84:01:95:fa:1a:e6:b4: 6f:78:ca:2d:0b:2a:05:eb:8b:c0:1b:55:0d:9e:3b: ae:c8:dd:03:3c:7a:83:10:1a:8a:f2:7e:c7:4f:80: bf:b0:29:32:e4:2e:2b:55:6a:f4:3d:66:4b:98:2a: 04:d1:fd:09:bd:b1:92:7d:65:8c:67:b3:24:83:fe: f2:e7:b3:4f:79:a7:6e:95:7b:b0:22:43:3d:c8:35: f3:9e:fa:60:e7:0b:b2:65:b3:1f:d1:47:2b:a8:3c: 3b:3b:dd:ce:03:ef:3a:a7:cc:36:19:bc:89:83:90: 0d:52:31:26:67:8b:9c:d3:83:71:fa:ee:3f:f4:c7: ee:96:97:6d:25:63:51:76:5c:75:90:1d:51:89:16: ff:ff:c9:db:cc:7d:f3:87:8f:90:e5:c6:4d:0c:60: fd:35:d1:86:ce:47:4f:b8:87:7d:9e:32:bc:e9:d7: cd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:4A:E3:C4:CE:71:85:1C:DD:9E:0B:5D:2C:9F:52:46:21:D5:46:24 X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:da:11:78:bd:e2:aa:98:40:b5:e7:1c:69:b6:cd:e2:68:57: 19:c5:aa:92:8d:9c:91:a5:d3:85:01:45:f8:99:fb:bb:42:0d: 78:a0:fc:c3:84:d1:7e:9c:ed:3b:ef:f7:e0:de:29:2f:f1:1e: 9c:85:9a:75:6f:cd:23:82:bc:f2:33:bb:d7:ab:cd:97:06:e2: 33:dc:ca:6a:8d:fe:18:3c:12:71:cf:a7:4b:41:ab:45:a6:fe: 9e:91:15:c0:c4:e6:d4:f5:5c:55:ee:a5:7a:8e:b7:30:43:2a: 58:bd:4a:33:e4:81:e1:d0:d2:9a:6c:1e:2e:a5:c7:2f:70:e1: 71:13:fa:4a:4b:81:6e:74:b7:c9:e9:24:02:02:9e:2a:06:94: d8:47:a4:51:ed:0c:9d:81:58:bc:46:e4:80:b3:52:de:27:08: 3c:96:0c:a6:80:c1:b2:09:d1:75:0a:66:2e:45:01:05:fe:e9: 9a:8b:5a:cd:87:ce:b2:2d:04:dd:b6:ed:72:98:cf:b8:43:d1: 4f:b1:d3:53:3a:9b:87:b6:c8:5f:6f:9a:8b:12:4b:18:36:e6: 55:99:70:b0:b0:d8:9c:5d:c4:ef:77:77:b7:8c:a9:76:6d:09: a0:eb:49:cf:c3:0b:29:b8:7a:e2:76:88:73:ce:8b:12:95:b2: 34:92:31:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5aQ/H+YcUy+Kppryblx3N3cPS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNjAzMjUyMTA2MTFaFw0yNjAzMjkwMjM2MTFaMDMxMTAvBgNV BAMTKDc4NEFFM0M0Q0U3MTg1MUNERDlFMEI1RDJDOUY1MjQ2MjFENTQ2MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC99qbOkAzKPzEQsJxBWh8+9IGq H+EnJWiXFJMvZF2jxg67jaVCINATXe5hH7T20EBCGSrkfADRQJQ1oguMUGBgDt1E spKfkSoidQjziR3qjuO1hAGV+hrmtG94yi0LKgXri8AbVQ2eO67I3QM8eoMQGory fsdPgL+wKTLkLitVavQ9ZkuYKgTR/Qm9sZJ9ZYxnsySD/vLns095p26Ve7AiQz3I NfOe+mDnC7Jlsx/RRyuoPDs73c4D7zqnzDYZvImDkA1SMSZni5zTg3H67j/0x+6W l20lY1F2XHWQHVGJFv//ydvMffOHj5Dlxk0MYP010YbOR0+4h32eMrzp180VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeErjxM5xhRzdngtdLJ9SRiHVRiQwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTaEXi94qqYQLXnHGm2zeJoVxnFqpKNnJGl 04UBRfiZ+7tCDXig/MOE0X6c7Tvv9+DeKS/xHpyFmnVvzSOCvPIzu9erzZcG4jPc ymqN/hg8EnHPp0tBq0Wm/p6RFcDE5tT1XFXupXqOtzBDKli9SjPkgeHQ0ppsHi6l xy9w4XET+kpLgW50t8npJAICnioGlNhHpFHtDJ2BWLxG5ICzUt4nCDyWDKaAwbIJ 0XUKZi5FAQX+6ZqLWs2HzrItBN227XKYz7hD0U+x01M6m4e2yF9vmosSSxg25lWZ cLCw2JxdxO93d7eMqXZtCaDrSc/DCym4euJ2iHPOixKVsjSSMVM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:09 2026 by rpki-client