$ rpki-client -vvf repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft File: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft (raw, json) Hash identifier: uvvzCoKqg9bChJDxUMQctZwwH9ZJxbcqEVuFKC2qQtY= Subject key identifier: D4:4F:37:46:B8:11:06:09:3A:28:41:73:49:E5:32:01:0B:B1:57:3C Authority key identifier: 40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 Certificate issuer: /CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Certificate serial: 4FC1D01EABB37B19039AD2516CDBCFEEAD3BFD72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft Manifest number: 04E8 Signing time: Thu 19 Mar 2026 05:11:11 +0000 Manifest this update: Thu 19 Mar 2026 05:06:11 +0000 Manifest next update: Sun 22 Mar 2026 09:11:11 +0000 Files and hashes: 1: 408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl (hash: /fZO1FEbrpmXC+B0fIeoxVNeDo6eHTXMQ073gkUoOL4=) 2: 3130332e3134332e32302e302f32342d3234203d3e20313339343035.roa (hash: KCTbEne5sAEJgzltW4gEKsISpQ0m8wEifogPI/+bnQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:11:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:c1:d0:1e:ab:b3:7b:19:03:9a:d2:51:6c:db:cf:ee:ad:3b:fd:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408395914A1A74FF4E6AB1DE063F82C61E0801F2 Validity Not Before: Mar 19 05:06:11 2026 GMT Not After : Mar 22 09:11:11 2026 GMT Subject: CN=D44F3746B81106093A28417349E532010BB1573C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:a9:b6:2f:79:09:44:bc:b0:4e:6c:d2:e9:ed: c0:ef:a4:35:1c:71:a3:87:32:b3:70:4c:8c:38:61: e5:4f:01:c1:19:0a:3a:3a:bc:69:a4:4d:76:58:2a: 79:06:e1:62:07:a5:f7:a5:a8:15:92:0e:c3:a5:20: a5:a2:b2:5e:4c:a7:c4:1c:98:9a:3f:44:a4:27:c5: 70:52:e0:d0:ed:76:72:07:eb:df:db:65:8b:60:00: 5c:6b:0f:d4:03:5a:25:a6:f7:e4:dd:3e:c8:f2:5a: 8d:cc:c4:9c:b3:0f:a9:ec:ea:28:87:03:9f:a7:dd: 87:a8:5b:98:74:6b:c0:ec:1d:a4:75:f4:39:67:73: b3:1a:2d:7a:da:97:8a:a8:0e:c9:52:45:ae:9b:7c: dc:bc:c0:70:94:f3:ae:4a:86:7d:4d:4b:a7:dd:a3: 03:66:9c:6d:b8:fd:d5:c4:41:c1:c9:6f:f5:60:60: 29:27:b1:b6:a2:38:60:50:0e:30:35:af:96:95:6c: 2c:85:03:09:06:46:37:f0:f4:08:f5:cf:47:2a:13: 4a:03:13:96:8d:21:e5:af:9a:54:41:4c:0e:33:f0: cd:e4:f9:c9:1b:61:2e:b6:86:58:a0:71:0f:b5:9b: 4c:7c:0c:9c:07:c9:2a:84:fc:ab:3d:2f:ef:3b:60: b9:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4F:37:46:B8:11:06:09:3A:28:41:73:49:E5:32:01:0B:B1:57:3C X509v3 Authority Key Identifier: keyid:40:83:95:91:4A:1A:74:FF:4E:6A:B1:DE:06:3F:82:C6:1E:08:01:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408395914A1A74FF4E6AB1DE063F82C61E0801F2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c78c3c69-36d0-4ae8-a8df-63d3f44ccd8d/0/408395914A1A74FF4E6AB1DE063F82C61E0801F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6d:12:2c:58:6f:13:d3:5f:28:00:50:05:22:3c:c7:b7:90: 86:d9:63:54:7f:d0:d9:21:70:67:10:e6:8a:12:21:4e:33:f9: 9b:fa:ba:28:aa:8a:45:4f:97:19:3c:8f:29:a8:53:43:18:98: 72:c8:03:81:08:8c:d2:86:5f:b6:1c:bf:4e:6b:24:63:2b:83: b8:48:3a:83:a0:d2:a9:59:ac:a0:f4:0f:3f:73:fd:a5:58:35: 84:b4:1c:40:c9:43:97:ad:85:bd:33:74:ad:e2:09:2b:ec:dc: 98:15:2d:00:da:72:30:e1:a7:72:22:b8:43:ca:fb:71:b9:26: f3:a8:50:66:54:71:29:a4:55:9b:47:de:4b:96:71:ea:9d:e7: 0f:a9:29:dc:7e:e7:e2:76:f5:95:dd:41:58:bc:97:79:3d:08: 61:a8:b1:46:19:54:2a:1c:aa:6b:6c:02:23:90:d2:31:5f:e9: 69:25:0d:16:4a:6e:44:3f:63:37:95:e0:fe:93:80:04:e9:b5: 84:3d:78:d3:5d:a8:df:bb:7c:32:49:28:87:ca:e9:b2:36:f2: 0b:03:35:d8:25:af:bb:e2:be:85:34:5e:65:d0:1b:4f:37:53: e0:56:d3:d8:ab:08:85:ee:cc:c8:26:00:18:ce:52:ac:3c:7b: 78:60:3d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT8HQHquzexkDmtJRbNvP7q07/XIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYx RTA4MDFGMjAeFw0yNjAzMTkwNTA2MTFaFw0yNjAzMjIwOTExMTFaMDMxMTAvBgNV BAMTKEQ0NEYzNzQ2QjgxMTA2MDkzQTI4NDE3MzQ5RTUzMjAxMEJCMTU3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtqbYveQlEvLBObNLp7cDvpDUc caOHMrNwTIw4YeVPAcEZCjo6vGmkTXZYKnkG4WIHpfelqBWSDsOlIKWisl5Mp8Qc mJo/RKQnxXBS4NDtdnIH69/bZYtgAFxrD9QDWiWm9+TdPsjyWo3MxJyzD6ns6iiH A5+n3YeoW5h0a8DsHaR19Dlnc7MaLXral4qoDslSRa6bfNy8wHCU865Khn1NS6fd owNmnG24/dXEQcHJb/VgYCknsbaiOGBQDjA1r5aVbCyFAwkGRjfw9Aj1z0cqE0oD E5aNIeWvmlRBTA4z8M3k+ckbYS62hligcQ+1m0x8DJwHySqE/Ks9L+87YLkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1E83RrgRBgk6KEFzSeUyAQuxVzwwHwYDVR0j BBgwFoAUQIOVkUoadP9OarHeBj+Cxh4IAfIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzhjM2M2OS0zNmQwLTRhZTgtYThkZi02M2QzZjQ0Y2NkOGQvMC80MDgzOTU5MTRB MUE3NEZGNEU2QUIxREUwNjNGODJDNjFFMDgwMUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgyQzYxRTA4 MDFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc4YzNjNjktMzZkMC00YWU4LWE4 ZGYtNjNkM2Y0NGNjZDhkLzAvNDA4Mzk1OTE0QTFBNzRGRjRFNkFCMURFMDYzRjgy QzYxRTA4MDFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNtEixYbxPTXygAUAUiPMe3kIbZY1R/0Nkh cGcQ5ooSIU4z+Zv6uiiqikVPlxk8jymoU0MYmHLIA4EIjNKGX7Ycv05rJGMrg7hI OoOg0qlZrKD0Dz9z/aVYNYS0HEDJQ5ethb0zdK3iCSvs3JgVLQDacjDhp3IiuEPK +3G5JvOoUGZUcSmkVZtH3kuWceqd5w+pKdx+5+J29ZXdQVi8l3k9CGGosUYZVCoc qmtsAiOQ0jFf6WklDRZKbkQ/YzeV4P6TgATptYQ9eNNdqN+7fDJJKIfK6bI28gsD Ndglr7vivoU0XmXQG083U+BW09irCIXuzMgmABjOUqw8e3hgPR0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:28:44 2026 by rpki-client