$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft File: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft (raw, json) Hash identifier: dMMqSg1N0eI0pXajBlVsBqBMVsRAXpV3+ckAKgbiz7M= Subject key identifier: F0:85:0A:B3:61:76:C3:67:99:85:A4:8C:1B:B1:62:00:FE:4F:06:CA Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 Certificate issuer: /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Certificate serial: 6F8D6DAD53FA79B45BC2DE7D4135D33DD4377CC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft Manifest number: 02EA Signing time: Sun 19 Apr 2026 23:00:48 +0000 Manifest this update: Sun 19 Apr 2026 22:55:48 +0000 Manifest next update: Thu 23 Apr 2026 10:42:48 +0000 Files and hashes: 1: 402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl (hash: GJcI6CwHI/A/EPY6ZtuTVlLntEKIQtK5gIJNhMt623A=) 2: 3130332e3137392e3133342e302f32332d3234203d3e20313531303030.roa (hash: uB6a447DP0BVfo+AyQQCYTW9WembPSjbDetzWb0LqT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 10:42:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:8d:6d:ad:53:fa:79:b4:5b:c2:de:7d:41:35:d3:3d:d4:37:7c:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43 Validity Not Before: Apr 19 22:55:48 2026 GMT Not After : Apr 23 10:42:48 2026 GMT Subject: CN=F0850AB36176C3679985A48C1BB16200FE4F06CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:55:18:d8:d3:b2:37:12:e4:bb:96:b7:1e: 62:e1:e0:17:45:10:db:1e:3a:1d:be:20:e4:aa:58: 41:a3:61:ff:37:27:60:1f:e3:61:80:4a:cf:dc:5a: 31:8c:08:6a:94:61:cb:bd:da:ad:10:4a:b2:10:65: be:20:80:c3:38:88:2e:4b:0a:dd:23:95:42:7f:3a: 8a:c0:b3:4b:be:ab:18:f1:24:4a:25:1c:bd:a4:e3: 8f:c1:1e:b6:d9:8f:da:30:b1:bf:2b:4e:4f:af:81: d7:1b:7a:86:27:0f:d6:2d:0b:40:f8:44:ee:b5:e4: b3:63:98:de:c2:bb:79:6a:cd:09:7b:0b:fd:33:d7: 6e:de:9f:4d:9d:9e:ff:4a:2e:80:9a:62:05:b7:73: 2a:bd:d6:c7:74:2a:f0:2c:1c:93:e9:f2:43:5f:4e: 65:00:ac:86:de:74:f0:b8:4b:26:c0:d7:bb:64:2a: 89:2c:40:a4:ae:ad:40:d9:b8:9e:f6:67:4a:52:1f: cd:07:c7:7f:65:7a:cc:fd:8f:c0:fc:46:76:f6:9c: 1b:9b:ff:46:56:6d:78:a3:ae:47:d1:9d:26:00:fd: 59:3c:ef:59:b2:84:d7:cd:1b:3a:c2:db:fa:d4:c9: d0:89:03:9a:10:ea:30:e9:e1:89:44:0b:ef:cc:73: 3a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:85:0A:B3:61:76:C3:67:99:85:A4:8C:1B:B1:62:00:FE:4F:06:CA X509v3 Authority Key Identifier: keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:71:25:2c:3b:c7:22:61:97:7a:88:f6:57:4d:b5:0f:fe:64: 8f:cf:ba:7b:47:0e:33:e4:c6:f3:57:da:18:08:87:f8:7a:0c: 4e:6b:c1:da:9f:a7:41:d0:79:b2:12:ed:6d:58:36:cb:17:62: 62:7f:9e:2a:4f:16:2e:13:a7:5e:9f:84:eb:da:0c:c6:e5:af: ec:a0:c3:ee:02:0f:c5:9f:40:45:6d:0b:33:cb:d4:65:ba:2a: 7a:98:b1:6c:f0:ac:20:67:08:cd:fa:8b:e4:ee:13:b5:8c:1e: 73:50:18:a4:2c:b1:7d:2d:07:76:35:b7:c8:0d:12:66:b2:f0: f5:e9:26:02:5f:e8:1f:ed:1f:4c:8a:e8:b7:18:9b:e5:34:59: 6b:cf:54:f6:ef:50:9a:cb:65:08:a7:17:13:63:a1:b9:62:85: f2:fa:1b:0e:23:23:87:f8:1a:31:07:00:19:99:b7:35:3b:12: ec:d2:a2:70:0c:e9:af:64:ec:c0:55:58:cd:8a:e5:3b:01:61: c5:86:27:dd:b9:c2:2c:66:ac:02:ea:41:3e:43:94:2f:9b:ab: 53:cc:f4:b9:73:59:6b:6a:5a:27:c2:b3:24:36:a0:11:73:22: 1d:8c:dc:16:2c:da:ed:87:2f:6b:b9:a0:07:c3:1e:5e:be:51: 9b:cf:96:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb41trVP6ebRbwt59QTXTPdQ3fMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4 RTMyQUI0MzAeFw0yNjA0MTkyMjU1NDhaFw0yNjA0MjMxMDQyNDhaMDMxMTAvBgNV BAMTKEYwODUwQUIzNjE3NkMzNjc5OTg1QTQ4QzFCQjE2MjAwRkU0RjA2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgVUY2NOyNxLku5a3HmLh4BdF ENseOh2+IOSqWEGjYf83J2Af42GASs/cWjGMCGqUYcu92q0QSrIQZb4ggMM4iC5L Ct0jlUJ/OorAs0u+qxjxJEolHL2k44/BHrbZj9owsb8rTk+vgdcbeoYnD9YtC0D4 RO615LNjmN7Cu3lqzQl7C/0z127en02dnv9KLoCaYgW3cyq91sd0KvAsHJPp8kNf TmUArIbedPC4SybA17tkKoksQKSurUDZuJ72Z0pSH80Hx39lesz9j8D8Rnb2nBub /0ZWbXijrkfRnSYA/Vk871myhNfNGzrC2/rUydCJA5oQ6jDp4YlEC+/Mczo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8IUKs2F2w2eZhaSMG7FiAP5PBsowHwYDVR0j BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1 QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy QUI0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2IzZGY2YWYtZDllZS00MDc2LTgx YTQtMjY0ODcyNzQ4OTcwLzAvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3 Qzg4RTMyQUI0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9xJSw7xyJhl3qI9ldNtQ/+ZI/PuntHDjPk xvNX2hgIh/h6DE5rwdqfp0HQebIS7W1YNssXYmJ/nipPFi4Tp16fhOvaDMblr+yg w+4CD8WfQEVtCzPL1GW6KnqYsWzwrCBnCM36i+TuE7WMHnNQGKQssX0tB3Y1t8gN Emay8PXpJgJf6B/tH0yK6LcYm+U0WWvPVPbvUJrLZQinFxNjoblihfL6Gw4jI4f4 GjEHABmZtzU7EuzSonAM6a9k7MBVWM2K5TsBYcWGJ925wixmrALqQT5DlC+bq1PM 9LlzWWtqWifCsyQ2oBFzIh2M3BYs2u2HL2u5oAfDHl6+UZvPlqo= -----END CERTIFICATE-----Generated at Wed Apr 22 07:28:33 2026 by rpki-client