$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: NqRSDgIUmxHJ2fRVnQ5fsWV3eDUmnrtazC+NaauBev8= Subject key identifier: B5:88:5D:EA:3F:F6:AF:74:EE:99:71:08:79:57:4B:E8:32:E6:CF:3B Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 0F528819F23C662F276893E527E2C82681B25478 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02D6 Signing time: Sat 07 Mar 2026 05:30:47 +0000 Manifest this update: Sat 07 Mar 2026 05:25:47 +0000 Manifest next update: Tue 10 Mar 2026 08:32:47 +0000 Files and hashes: 1: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=) 2: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: u76KkIWv11GFwmx9+y+0LptOxgZE7o73a85PeTceyMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:52:88:19:f2:3c:66:2f:27:68:93:e5:27:e2:c8:26:81:b2:54:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Mar 7 05:25:47 2026 GMT Not After : Mar 10 08:32:47 2026 GMT Subject: CN=B5885DEA3FF6AF74EE99710879574BE832E6CF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a9:f9:81:e9:66:3f:43:43:66:91:b9:65:32: 32:09:ae:79:37:eb:13:26:de:94:b2:34:9a:a0:38: 13:e8:0d:9c:23:6a:49:56:45:6a:24:6d:7e:43:a1: 39:4b:ca:7a:79:c9:e6:ca:f1:30:e6:e9:c9:e2:ca: c8:f3:14:5d:96:25:f0:0b:fe:4c:13:1b:02:f5:a6: 14:85:96:b6:07:97:ed:a2:26:58:c9:1c:26:5d:b2: a6:60:f7:32:31:29:a7:5b:6b:03:26:79:4a:70:db: 25:7f:d3:9f:48:ea:bf:82:59:82:e1:83:9a:09:b6: 14:46:92:04:8d:ee:a5:7d:b9:9b:82:24:fd:f0:b0: 94:97:74:19:72:83:0a:ed:28:87:07:71:ba:3e:f6: 42:ce:12:1a:7a:28:93:6b:03:b4:8c:3b:f8:12:02: 28:7b:24:96:fe:ef:a6:40:81:24:96:0d:5e:93:88: 8b:6d:b3:d5:de:a1:c4:e4:d9:35:68:0c:a9:c0:91: b1:07:db:f2:0c:33:fc:ff:c8:4b:02:91:d3:d0:87: 45:ac:2b:66:05:26:a2:26:39:05:ae:1f:e9:02:fa: 87:2b:86:40:20:f2:07:80:1e:0a:11:6f:54:01:09: 63:1f:05:7f:26:51:12:20:db:2a:74:d3:b8:e3:11: b8:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:88:5D:EA:3F:F6:AF:74:EE:99:71:08:79:57:4B:E8:32:E6:CF:3B X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:37:91:02:90:f9:48:56:19:ee:07:65:db:9d:1d:cc:b8:5d: 02:0a:6c:85:d7:dc:02:3a:c8:26:24:9e:c6:77:c6:82:35:ce: e3:ea:c6:dd:59:bc:54:6f:83:c3:00:7e:84:6b:9e:65:c0:1b: 61:85:5a:4c:fd:e2:d6:da:ca:3f:bb:31:83:80:f6:de:b4:7d: 26:71:44:14:3c:a0:ff:98:fb:3f:ee:29:3f:ea:56:d2:86:f7: de:39:d3:59:51:d4:f2:2d:c2:f8:f7:e3:26:f2:29:14:d4:69: 8f:2e:a5:f0:85:f6:79:05:4c:d6:a7:cc:bd:a0:d8:37:1b:dd: 54:bd:74:80:c4:03:c0:03:c4:33:2c:ab:c9:40:34:d9:9e:cb: de:ed:44:a9:d6:a7:f5:f1:0a:87:5e:b6:16:ea:6f:ae:13:e2: 5b:d6:2c:85:bd:63:0c:fa:ec:7f:1d:df:20:45:7b:85:15:8b: ae:1d:98:0b:25:96:e0:2b:88:27:22:be:02:bb:f8:ca:d2:2d: cc:cc:18:df:c6:ef:c1:83:f2:f9:7b:9c:dc:bd:09:68:67:24: ae:87:76:4f:b5:5d:88:a9:eb:30:24:f0:08:45:3d:80:09:2b: 6e:53:65:58:39:55:4a:6e:b2:c5:43:39:78:9a:21:2e:ce:82: 12:5e:87:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1KIGfI8Zi8naJPlJ+LIJoGyVHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjAzMDcwNTI1NDdaFw0yNjAzMTAwODMyNDdaMDMxMTAvBgNV BAMTKEI1ODg1REVBM0ZGNkFGNzRFRTk5NzEwODc5NTc0QkU4MzJFNkNGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxqfmB6WY/Q0NmkbllMjIJrnk3 6xMm3pSyNJqgOBPoDZwjaklWRWokbX5DoTlLynp5yebK8TDm6cniysjzFF2WJfAL /kwTGwL1phSFlrYHl+2iJljJHCZdsqZg9zIxKadbawMmeUpw2yV/059I6r+CWYLh g5oJthRGkgSN7qV9uZuCJP3wsJSXdBlygwrtKIcHcbo+9kLOEhp6KJNrA7SMO/gS Aih7JJb+76ZAgSSWDV6TiItts9XeocTk2TVoDKnAkbEH2/IMM/z/yEsCkdPQh0Ws K2YFJqImOQWuH+kC+ocrhkAg8geAHgoRb1QBCWMfBX8mURIg2yp007jjEbgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtYhd6j/2r3TumXEIeVdL6DLmzzswHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs3kQKQ+UhWGe4HZdudHcy4XQIKbIXX3AI6 yCYknsZ3xoI1zuPqxt1ZvFRvg8MAfoRrnmXAG2GFWkz94tbayj+7MYOA9t60fSZx RBQ8oP+Y+z/uKT/qVtKG994501lR1PItwvj34ybyKRTUaY8upfCF9nkFTNanzL2g 2Dcb3VS9dIDEA8ADxDMsq8lANNmey97tRKnWp/XxCodethbqb64T4lvWLIW9Ywz6 7H8d3yBFe4UVi64dmAslluAriCcivgK7+MrSLczMGN/G78GD8vl7nNy9CWhnJK6H dk+1XYip6zAk8AhFPYAJK25TZVg5VUpussVDOXiaIS7OghJeh3E= -----END CERTIFICATE-----Generated at Sat Mar 7 21:06:06 2026 by rpki-client