$ rpki-client -vvf repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft File: F40A3B698C292462E4AF862C69FB242F66E56191.mft (raw, json) Hash identifier: zycIEw9tBzDsVRhT6l9S7Iz90pNRO73Mv5aY/9OCxUU= Subject key identifier: D7:E5:9C:86:C7:DE:A1:70:EE:72:FC:5C:4E:33:20:C7:F3:C2:20:28 Authority key identifier: F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 Certificate issuer: /CN=F40A3B698C292462E4AF862C69FB242F66E56191 Certificate serial: 774725BE2468D4E5E075A66DEF367D263E22F24A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject info access: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft Manifest number: 035A Signing time: Wed 18 Mar 2026 15:10:58 +0000 Manifest this update: Wed 18 Mar 2026 15:05:58 +0000 Manifest next update: Sat 21 Mar 2026 21:13:58 +0000 Files and hashes: 1: 3130332e3137342e33362e302f32332d3234203d3e20313331313131.roa (hash: gIT/zHc/1K0b1PiVmUPHw03fHkctz7eSoTHWuLp5tjo=) 2: F40A3B698C292462E4AF862C69FB242F66E56191.crl (hash: pFDdZD0U2dSQjPy/BF83e0cLXc9QBNZ/3QSKJUmvVNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 21:13:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:47:25:be:24:68:d4:e5:e0:75:a6:6d:ef:36:7d:26:3e:22:f2:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40A3B698C292462E4AF862C69FB242F66E56191 Validity Not Before: Mar 18 15:05:58 2026 GMT Not After : Mar 21 21:13:58 2026 GMT Subject: CN=D7E59C86C7DEA170EE72FC5C4E3320C7F3C22028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:65:1a:f5:e1:35:aa:2d:fc:af:88:37:c7:43: dc:b7:a1:a7:6f:6b:00:5f:1b:24:c9:a5:ae:f8:8c: 1c:e3:62:27:ce:e5:ee:6c:ec:e5:7d:e9:7c:b9:6e: 9c:c4:bd:5d:61:b1:6a:44:bd:be:08:50:f3:25:0c: 9c:f4:b7:d1:e6:58:b0:83:a1:af:c5:02:80:ad:79: 44:db:16:c7:28:2d:06:e3:60:ad:04:ff:c3:3e:b7: 82:9c:28:24:75:9a:5b:eb:a5:4a:63:18:f6:3b:95: b7:4b:64:ba:ff:3a:a8:cd:5e:ef:23:97:db:16:8a: bd:f6:9b:61:f0:26:ca:1b:91:20:45:95:69:c3:87: 1b:94:27:b8:b4:41:06:d8:13:5a:36:1a:c9:02:c6: 34:76:34:da:16:e9:a1:61:27:67:5f:44:c3:e6:d5: ef:87:d3:d9:c6:84:fd:83:3f:6b:18:1f:e7:08:e2: 66:b9:37:e5:0e:60:19:5b:ac:64:f9:13:bf:14:59: f8:2c:c9:c6:2f:57:09:d3:ea:05:76:c9:43:de:f3: 87:61:39:30:22:05:e0:d9:d0:9d:3e:f7:aa:fd:86: 55:03:fc:e3:7e:ca:85:52:e2:b5:ed:39:09:39:fb: ad:f7:30:22:55:c0:07:a2:11:62:da:a9:ec:5e:bf: 64:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:E5:9C:86:C7:DE:A1:70:EE:72:FC:5C:4E:33:20:C7:F3:C2:20:28 X509v3 Authority Key Identifier: keyid:F4:0A:3B:69:8C:29:24:62:E4:AF:86:2C:69:FB:24:2F:66:E5:61:91 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F40A3B698C292462E4AF862C69FB242F66E56191.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/34a23c4e-3932-43bd-8176-f6251ddea842/0/F40A3B698C292462E4AF862C69FB242F66E56191.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:52:5f:53:dc:d6:f2:8b:8c:04:11:af:64:2a:db:0d:dd:11: ce:61:2e:19:42:a9:b2:24:70:30:e2:93:5e:8e:d0:7f:ab:17: a1:b6:99:13:85:64:56:4a:99:57:18:98:ef:08:4a:f5:2b:d9: f9:f9:a9:3e:b9:60:2f:35:46:5b:9e:7a:fe:1e:9e:26:6b:9e: a6:11:c2:62:6b:5d:0d:a7:fb:3a:0d:a0:f8:9f:29:df:48:c9: ea:b3:15:dc:2d:a6:86:17:65:55:47:ee:bf:c0:0e:8a:15:d7: 84:96:e5:fc:75:39:6b:62:b6:6c:4d:67:f7:95:85:39:46:51: 9c:96:28:95:6b:2a:48:a9:58:e2:db:ca:31:d8:c8:4a:36:73: e3:d2:fa:89:f5:09:58:18:b2:16:f4:68:f8:d5:4e:dd:21:f8: 61:4e:1c:54:42:32:42:be:67:a3:44:eb:de:dc:c3:e6:1a:e2: ba:c3:76:00:f8:6b:48:8f:9e:27:c3:3a:5d:ea:c5:1f:16:3d: 56:7e:02:e8:af:93:8f:8b:91:2c:03:e2:87:59:b9:ff:3d:29: f9:aa:30:03:ae:97:ae:f3:f2:fc:37:c4:bd:68:c2:9d:ba:da: 3b:ad:d2:d9:e8:27:dc:a9:8c:88:82:41:18:31:cc:cc:c0:10: d1:1b:8d:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd0clviRo1OXgdaZt7zZ9Jj4i8kowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2 NkU1NjE5MTAeFw0yNjAzMTgxNTA1NThaFw0yNjAzMjEyMTEzNThaMDMxMTAvBgNV BAMTKEQ3RTU5Qzg2QzdERUExNzBFRTcyRkM1QzRFMzMyMEM3RjNDMjIwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHZRr14TWqLfyviDfHQ9y3oadv awBfGyTJpa74jBzjYifO5e5s7OV96Xy5bpzEvV1hsWpEvb4IUPMlDJz0t9HmWLCD oa/FAoCteUTbFscoLQbjYK0E/8M+t4KcKCR1mlvrpUpjGPY7lbdLZLr/OqjNXu8j l9sWir32m2HwJsobkSBFlWnDhxuUJ7i0QQbYE1o2GskCxjR2NNoW6aFhJ2dfRMPm 1e+H09nGhP2DP2sYH+cI4ma5N+UOYBlbrGT5E78UWfgsycYvVwnT6gV2yUPe84dh OTAiBeDZ0J0+96r9hlUD/ON+yoVS4rXtOQk5+633MCJVwAeiEWLaqexev2Q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1+WchsfeoXDucvxcTjMgx/PCICgwHwYDVR0j BBgwFoAU9Ao7aYwpJGLkr4YsafskL2blYZEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NGEyM2M0ZS0zOTMyLTQzYmQtODE3Ni1mNjI1MWRkZWE4NDIvMC9GNDBBM0I2OThD MjkyNDYyRTRBRjg2MkM2OUZCMjQyRjY2RTU2MTkxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0MkY2NkU1 NjE5MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzRhMjNjNGUtMzkzMi00M2JkLTgx NzYtZjYyNTFkZGVhODQyLzAvRjQwQTNCNjk4QzI5MjQ2MkU0QUY4NjJDNjlGQjI0 MkY2NkU1NjE5MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJSX1Pc1vKLjAQRr2Qq2w3dEc5hLhlCqbIk cDDik16O0H+rF6G2mROFZFZKmVcYmO8ISvUr2fn5qT65YC81Rlueev4eniZrnqYR wmJrXQ2n+zoNoPifKd9IyeqzFdwtpoYXZVVH7r/ADooV14SW5fx1OWtitmxNZ/eV hTlGUZyWKJVrKkipWOLbyjHYyEo2c+PS+on1CVgYshb0aPjVTt0h+GFOHFRCMkK+ Z6NE697cw+Ya4rrDdgD4a0iPnifDOl3qxR8WPVZ+Auivk4+LkSwD4odZuf89Kfmq MAOul67z8vw3xL1owp262jut0tnoJ9ypjIiCQRgxzMzAENEbjZE= -----END CERTIFICATE-----Generated at Fri Mar 20 21:57:30 2026 by rpki-client