$ rpki-client -vvf repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft File: 40F85FB380A012F2BB6D055D914C008674125D67.mft (raw, json) Hash identifier: yuik6upBq3kzn/LDGdUqcGqEQlAJxUPGgtwiputMHcA= Subject key identifier: 5E:89:1A:C2:AA:2F:A4:E7:B5:85:7F:CD:55:8B:FC:54:50:12:87:A0 Authority key identifier: 40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 Certificate issuer: /CN=40F85FB380A012F2BB6D055D914C008674125D67 Certificate serial: 59DCDFDA1440E0FEBA30067089C9C10E1FCE6EB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft Manifest number: 052A Signing time: Sat 28 Mar 2026 13:41:40 +0000 Manifest this update: Sat 28 Mar 2026 13:36:40 +0000 Manifest next update: Wed 01 Apr 2026 00:50:40 +0000 Files and hashes: 1: 3130332e3231322e3233392e302f32342d3234203d3e20313338383839.roa (hash: 34Zwk2rQxI6/8F/IkX/shAQb+olpsRnc3h6OinfJJ/w=) 2: 3130332e3231322e3233362e302f32332d3234203d3e203338373536.roa (hash: 778Q5HjUkZ/WVTVzYaqPWOxb/BdNeOK8Id+aBKl0ego=) 3: 3130332e3231322e3233382e302f32342d3234203d3e203338373536.roa (hash: VWZBwU3RWnROUShcpW3L74G67TSj+wYP3BWSlSltpjo=) 4: 40F85FB380A012F2BB6D055D914C008674125D67.crl (hash: JHNGTEON9mCITR+0KUlaPzTNVhXcRJLqHTvD38dfrV0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 01 Apr 2026 00:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:dc:df:da:14:40:e0:fe:ba:30:06:70:89:c9:c1:0e:1f:ce:6e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40F85FB380A012F2BB6D055D914C008674125D67 Validity Not Before: Mar 28 13:36:40 2026 GMT Not After : Apr 1 00:50:40 2026 GMT Subject: CN=5E891AC2AA2FA4E7B5857FCD558BFC54501287A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0b:dd:36:d2:d6:39:b4:51:00:01:07:c6:20: 8a:9a:9f:34:70:6d:66:f8:c5:d2:14:96:b9:85:b3: 72:50:22:aa:8b:e4:3f:0c:e8:22:f5:f2:65:49:6b: 70:2f:8e:dc:2e:26:15:62:d5:28:66:b3:91:bc:50: 3e:00:70:c1:57:09:ca:a5:62:db:34:3e:a6:0a:52: 3c:f4:ad:69:22:02:87:20:04:dc:3b:70:0c:92:ed: a4:4c:56:cf:d5:35:92:e0:8d:d7:b5:0c:ff:fa:5d: 78:89:76:13:07:f6:8f:8f:45:c7:04:2b:10:e7:b7: ab:ca:73:8e:f2:50:ad:4b:df:c0:9f:8d:4b:65:9e: d0:b1:56:01:8a:44:46:46:06:2f:bb:e8:d2:7c:b9: 77:14:34:80:ca:61:e8:d9:3f:11:b6:4c:87:ef:5c: 83:ce:de:38:29:b0:8d:c5:92:ca:e5:7f:2f:51:1f: 60:f7:c3:8a:1f:61:9a:9d:f2:c6:8c:11:59:65:73: f4:92:cc:93:ce:bb:50:de:89:3e:f6:d9:18:9c:a1: a2:bf:e9:50:94:b9:12:7b:d0:2a:95:14:66:32:41: 4c:75:b0:f4:0a:58:ef:2d:5c:f9:35:8a:a9:04:10: 5c:f7:eb:97:63:37:49:89:2b:23:c2:08:e9:c8:54: bb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:89:1A:C2:AA:2F:A4:E7:B5:85:7F:CD:55:8B:FC:54:50:12:87:A0 X509v3 Authority Key Identifier: keyid:40:F8:5F:B3:80:A0:12:F2:BB:6D:05:5D:91:4C:00:86:74:12:5D:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40F85FB380A012F2BB6D055D914C008674125D67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5972f9a2-b0ff-4298-8da6-e2e38348a07b/0/40F85FB380A012F2BB6D055D914C008674125D67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:5d:ff:19:6c:bd:c6:3c:c1:f4:60:f8:b3:58:e9:8b:c9:49: 24:d0:a3:f4:94:c0:94:a3:e8:56:e4:b4:5a:49:bc:42:23:1a: 02:51:dd:a9:bd:58:24:94:61:d0:62:6d:11:64:b5:7d:9a:05: 79:a3:7f:bf:c2:e5:ca:0a:17:bf:fc:26:ce:d5:5e:36:95:f4: 58:6a:2e:5f:e6:87:8d:07:f1:ba:d0:3a:f0:99:8a:53:3e:16: 76:2e:6c:da:7e:44:07:e4:72:38:3d:14:3b:2d:90:89:92:03: d8:77:3f:f1:e7:b5:9e:74:17:4d:b8:5c:ce:49:6c:06:30:17: 4d:32:c3:e2:c4:42:d9:59:a2:18:cc:fa:79:7c:ee:a1:c5:9a: 75:03:b8:5e:57:ac:05:94:9e:c2:62:7d:39:3b:84:c6:68:b5: a5:91:67:dc:ad:d4:72:7f:f6:9e:78:0f:6a:d2:0e:b8:28:cc: 05:3d:73:9f:9c:2a:a7:3b:66:46:77:1f:1d:5b:9d:ee:59:85: f0:9a:4d:f0:86:7c:c9:1b:88:53:a4:fc:b6:16:63:aa:12:3d: d5:c1:ee:c6:0f:16:74:ed:63:4e:f9:dc:40:08:94:d3:ea:b2: 9b:b2:5a:fa:15:ad:5f:0a:b4:4f:4a:bb:4c:f5:19:cc:1d:03: b5:31:b9:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWdzf2hRA4P66MAZwicnBDh/ObrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3 NDEyNUQ2NzAeFw0yNjAzMjgxMzM2NDBaFw0yNjA0MDEwMDUwNDBaMDMxMTAvBgNV BAMTKDVFODkxQUMyQUEyRkE0RTdCNTg1N0ZDRDU1OEJGQzU0NTAxMjg3QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1C9020tY5tFEAAQfGIIqanzRw bWb4xdIUlrmFs3JQIqqL5D8M6CL18mVJa3AvjtwuJhVi1Shms5G8UD4AcMFXCcql Yts0PqYKUjz0rWkiAocgBNw7cAyS7aRMVs/VNZLgjde1DP/6XXiJdhMH9o+PRccE KxDnt6vKc47yUK1L38CfjUtlntCxVgGKREZGBi+76NJ8uXcUNIDKYejZPxG2TIfv XIPO3jgpsI3Fksrlfy9RH2D3w4ofYZqd8saMEVllc/SSzJPOu1DeiT722RicoaK/ 6VCUuRJ70CqVFGYyQUx1sPQKWO8tXPk1iqkEEFz365djN0mJKyPCCOnIVLvrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXokawqovpOe1hX/NVYv8VFASh6AwHwYDVR0j BBgwFoAUQPhfs4CgEvK7bQVdkUwAhnQSXWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTcyZjlhMi1iMGZmLTQyOTgtOGRhNi1lMmUzODM0OGEwN2IvMC80MEY4NUZCMzgw QTAxMkYyQkI2RDA1NUQ5MTRDMDA4Njc0MTI1RDY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAwODY3NDEy NUQ2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTk3MmY5YTItYjBmZi00Mjk4LThk YTYtZTJlMzgzNDhhMDdiLzAvNDBGODVGQjM4MEEwMTJGMkJCNkQwNTVEOTE0QzAw ODY3NDEyNUQ2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZd/xlsvcY8wfRg+LNY6YvJSSTQo/SUwJSj 6FbktFpJvEIjGgJR3am9WCSUYdBibRFktX2aBXmjf7/C5coKF7/8Js7VXjaV9Fhq Ll/mh40H8brQOvCZilM+FnYubNp+RAfkcjg9FDstkImSA9h3P/HntZ50F024XM5J bAYwF00yw+LEQtlZohjM+nl87qHFmnUDuF5XrAWUnsJifTk7hMZotaWRZ9yt1HJ/ 9p54D2rSDrgozAU9c5+cKqc7ZkZ3Hx1bne5ZhfCaTfCGfMkbiFOk/LYWY6oSPdXB 7sYPFnTtY0753EAIlNPqspuyWvoVrV8KtE9Ku0z1GcwdA7UxuSQ= -----END CERTIFICATE-----Generated at Sun Mar 29 14:15:23 2026 by rpki-client