$ rpki-client -vvf repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft File: 408585C1D62A4F618C0424E9BEDC3B91411C2276.mft (raw, json) Hash identifier: +v9dbgPXFSbLW5+T+/WiX8x7ae2G5uG3nZrLcXllk0g= Subject key identifier: 63:0C:7C:A3:A0:74:54:7B:04:C8:B3:4B:F4:B1:58:8F:3E:74:D1:2E Authority key identifier: 40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 Certificate issuer: /CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Certificate serial: 19152FD4DD034C023CFE313E740E9725FCF0127C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft Manifest number: 026F Signing time: Mon 23 Mar 2026 19:42:19 +0000 Manifest this update: Mon 23 Mar 2026 19:37:19 +0000 Manifest next update: Thu 26 Mar 2026 21:48:19 +0000 Files and hashes: 1: 3130332e3132322e3132312e302f32342d3234203d3e20313338303836.roa (hash: 6JuDjem+v2RDSrt72WPISRVSPIrkM2UMhH/D+O2lhYE=) 2: 323030313a6466363a616630303a3a2f34382d3438203d3e20313338303836.roa (hash: pJzBSpecNdGxtRhriNjcTDwpDG6NNdRtxmQUp3nGEzE=) 3: 408585C1D62A4F618C0424E9BEDC3B91411C2276.crl (hash: SvqaubzG2LenhBtjeq1J0ztFijupttCKjpCJiai7ULM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 21:48:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:15:2f:d4:dd:03:4c:02:3c:fe:31:3e:74:0e:97:25:fc:f0:12:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=408585C1D62A4F618C0424E9BEDC3B91411C2276 Validity Not Before: Mar 23 19:37:19 2026 GMT Not After : Mar 26 21:48:19 2026 GMT Subject: CN=630C7CA3A074547B04C8B34BF4B1588F3E74D12E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:94:a2:31:45:b8:83:91:f5:a1:ca:fc:1e:7c: 04:76:d4:68:74:dc:6f:bd:5e:d7:2d:8e:c2:7e:59: 9f:8a:b0:3e:64:1a:eb:7b:84:de:ca:23:56:10:6e: 98:b8:8d:f9:2e:31:e5:b8:d2:81:9b:37:c6:f0:d0: 29:5d:91:99:9b:39:61:9f:22:d9:d8:6f:c6:f6:c6: f5:91:24:66:73:93:c9:86:c8:ab:5e:53:0b:df:f2: 17:d9:03:c8:eb:16:1e:88:f1:d6:0b:c0:51:4b:c6: 5d:2d:9e:dd:b9:5e:b3:74:86:37:72:a4:c2:98:9a: 08:02:10:5c:d6:ce:ee:aa:89:bb:3b:a1:f8:34:80: 2d:97:f9:78:0e:34:d9:5d:0e:2d:67:4f:5b:12:ae: 0d:5d:74:49:68:9d:86:2e:9a:97:b6:37:42:8f:b0: da:1c:98:c5:67:80:3c:82:0c:a0:ea:8d:16:6f:a3: 36:10:fb:d7:eb:ff:79:f3:f3:59:e9:77:25:b0:84: 29:99:b6:39:17:42:23:d9:2e:e0:8f:9e:83:71:ed: f5:88:0c:55:54:7b:ae:76:25:1c:a7:6d:41:d5:78: 7d:98:43:ff:80:d3:a8:84:a1:1c:11:25:49:b9:2d: 52:60:e8:14:b7:ab:3e:6d:42:62:79:f8:ed:9a:ef: 15:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0C:7C:A3:A0:74:54:7B:04:C8:B3:4B:F4:B1:58:8F:3E:74:D1:2E X509v3 Authority Key Identifier: keyid:40:85:85:C1:D6:2A:4F:61:8C:04:24:E9:BE:DC:3B:91:41:1C:22:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/408585C1D62A4F618C0424E9BEDC3B91411C2276.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7e26c83-5ed2-4c8b-8a03-6cb00d1ed338/0/408585C1D62A4F618C0424E9BEDC3B91411C2276.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:90:41:3a:21:69:29:91:02:ac:01:cf:e3:4c:f3:1a:37:c8: 22:c4:20:d0:6b:49:6f:57:23:05:a7:b0:c9:65:1c:60:73:d2: c6:6e:8b:25:61:67:40:19:2e:18:03:63:06:93:b0:82:cb:7e: 5b:0e:2c:9d:89:b7:b5:52:5f:77:bd:7e:74:18:8e:36:f5:df: 6d:68:1c:0d:11:53:e9:31:ee:46:34:5e:ce:b9:40:09:cc:7a: 29:ca:59:d1:18:9e:ab:98:d6:3d:8f:22:4c:85:67:e3:83:a6: 62:89:02:cc:01:ce:b6:f5:54:fa:4f:c6:bf:0a:0c:ef:f4:1d: 04:b1:b7:fe:0e:5d:54:5b:14:f3:b4:03:f2:97:98:c2:42:7b: 13:19:55:dc:f1:e1:03:c1:56:16:a7:de:fe:63:fd:e8:27:d9: ab:31:83:8f:f7:12:dd:99:01:2f:7d:aa:50:60:68:68:ad:b2: 43:b2:57:af:85:ef:98:24:37:31:6a:1c:69:7c:da:87:2b:66: d0:f8:0c:a4:0e:25:04:b1:7b:88:f0:e4:7a:28:d1:a9:9a:ca: 02:12:17:48:bf:37:3f:50:f9:9a:ec:2f:10:cf:12:78:7a:3b: c8:24:58:46:18:3d:65:e3:57:43:0e:bb:63:55:c1:10:96:2a: 47:2b:0e:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRUv1N0DTAI8/jE+dA6XJfzwEnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0 MTFDMjI3NjAeFw0yNjAzMjMxOTM3MTlaFw0yNjAzMjYyMTQ4MTlaMDMxMTAvBgNV BAMTKDYzMEM3Q0EzQTA3NDU0N0IwNEM4QjM0QkY0QjE1ODhGM0U3NEQxMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylKIxRbiDkfWhyvwefAR21Gh0 3G+9XtctjsJ+WZ+KsD5kGut7hN7KI1YQbpi4jfkuMeW40oGbN8bw0CldkZmbOWGf ItnYb8b2xvWRJGZzk8mGyKteUwvf8hfZA8jrFh6I8dYLwFFLxl0tnt25XrN0hjdy pMKYmggCEFzWzu6qibs7ofg0gC2X+XgONNldDi1nT1sSrg1ddElonYYumpe2N0KP sNocmMVngDyCDKDqjRZvozYQ+9fr/3nz81npdyWwhCmZtjkXQiPZLuCPnoNx7fWI DFVUe652JRynbUHVeH2YQ/+A06iEoRwRJUm5LVJg6BS3qz5tQmJ5+O2a7xWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYwx8o6B0VHsEyLNL9LFYjz500S4wHwYDVR0j BBgwFoAUQIWFwdYqT2GMBCTpvtw7kUEcInYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i N2UyNmM4My01ZWQyLTRjOGItOGEwMy02Y2IwMGQxZWQzMzgvMC80MDg1ODVDMUQ2 MkE0RjYxOEMwNDI0RTlCRURDM0I5MTQxMUMyMjc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNCOTE0MTFD MjI3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjdlMjZjODMtNWVkMi00YzhiLThh MDMtNmNiMDBkMWVkMzM4LzAvNDA4NTg1QzFENjJBNEY2MThDMDQyNEU5QkVEQzNC OTE0MTFDMjI3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCQQTohaSmRAqwBz+NM8xo3yCLEINBrSW9X IwWnsMllHGBz0sZuiyVhZ0AZLhgDYwaTsILLflsOLJ2Jt7VSX3e9fnQYjjb1321o HA0RU+kx7kY0Xs65QAnMeinKWdEYnquY1j2PIkyFZ+ODpmKJAswBzrb1VPpPxr8K DO/0HQSxt/4OXVRbFPO0A/KXmMJCexMZVdzx4QPBVhan3v5j/egn2asxg4/3Et2Z AS99qlBgaGitskOyV6+F75gkNzFqHGl82ocrZtD4DKQOJQSxe4jw5Hoo0amaygIS F0i/Nz9Q+ZrsLxDPEnh6O8gkWEYYPWXjV0MOu2NVwRCWKkcrDng= -----END CERTIFICATE-----Generated at Tue Mar 24 17:52:41 2026 by rpki-client