$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: Fzf9K1HYisZI9HWHdgl2mBLAkDBKnYtPjhgv4cL3LLU= Subject key identifier: 70:A7:22:5A:73:39:18:AE:F7:65:4C:DC:49:6E:CA:70:1D:A1:7C:38 Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 777D6724CBA843312C1ADF995F114EDB0BF53A96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 11:35:21 +0000 Manifest this update: Wed 23 Sep 2026 11:30:21 +0000 Manifest next update: Thu 24 Sep 2026 12:02:21 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) 3: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: 6VAmOjjcxauE+tcu/lHwkzEEoM9H/MIbTKhR5hDMBwo=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:02:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:7d:67:24:cb:a8:43:31:2c:1a:df:99:5f:11:4e:db:0b:f5:3a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: Sep 23 11:30:21 2026 GMT Not After : Sep 24 12:02:21 2026 GMT Subject: CN=70A7225A733918AEF7654CDC496ECA701DA17C38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:aa:d6:8d:54:ef:85:61:1e:fa:a0:82:1a:b6: a6:42:e1:85:00:6d:f3:88:48:87:b6:b5:b2:b2:94: 3d:a6:30:5c:40:7a:7c:c4:08:d4:86:93:28:58:19: 05:ca:80:9a:a0:ac:92:3d:91:ee:bb:39:28:25:ce: 24:c0:e4:a8:f0:1d:ab:85:ab:60:69:ba:14:96:c2: 9c:df:a8:19:b0:3a:c3:66:2f:22:fc:04:c1:fd:2b: 1a:84:cc:74:f9:20:49:22:2c:d8:4f:f3:26:33:89: a2:ac:a9:2e:3d:de:71:31:8c:1b:f8:0b:a5:a2:23: 7d:1e:ab:01:0a:08:52:54:dc:f9:e8:65:96:97:a5: b3:0b:d3:7c:3d:41:a9:57:53:79:c3:7f:e0:96:2b: 81:e3:3c:f2:25:3b:14:1b:32:80:ad:0a:93:c1:49: f7:e0:c1:2d:2a:9f:7a:3c:af:39:6f:7c:e4:d1:2a: 61:4a:cd:5a:54:08:cf:42:5e:b5:9e:fe:2c:8f:d7: 86:c5:a9:c0:19:be:8b:15:45:ec:b6:54:6e:c5:41: 24:31:98:bd:d5:13:e0:c7:b4:0a:7a:65:dd:44:9a: bd:8d:eb:7a:a7:4f:8d:26:ce:89:c3:da:33:47:90: af:24:a5:ab:ba:fe:eb:4a:9f:86:1a:59:e8:6e:32: 49:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:A7:22:5A:73:39:18:AE:F7:65:4C:DC:49:6E:CA:70:1D:A1:7C:38 X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:87:81:06:89:c5:f9:3f:df:f7:04:bc:61:8c:50:14:59:d5: e3:42:6f:4b:45:0a:59:97:b3:e3:21:98:31:a0:8b:b6:22:8d: 96:63:db:55:ed:ff:d9:da:55:72:e2:8b:19:84:c3:fa:1a:73: b3:12:82:bf:5f:76:db:24:9a:f6:03:00:15:8a:94:ab:6d:8a: 2f:3f:58:21:ba:6f:c5:44:22:28:0d:98:95:07:5c:d5:d5:36: 22:7d:aa:95:64:88:69:bf:a3:66:73:f6:e9:73:e1:29:63:ef: f2:1e:7a:bb:fa:e1:98:67:f2:83:7a:ec:82:58:fb:97:42:7c: fd:7c:ba:3f:45:82:d1:03:bb:fb:6f:fd:5b:33:4a:c5:35:e8: 0b:c4:91:40:0f:6c:05:c1:9a:42:45:61:5d:e6:40:fc:41:aa: 1f:e8:06:45:13:4e:74:c6:7a:2f:f8:74:b7:f8:d7:14:89:a0: 73:05:69:ce:ac:08:78:b4:85:11:eb:b8:3a:80:01:ea:a0:28: eb:1c:6c:64:c4:66:4b:10:b7:17:4b:54:8d:80:45:b2:74:48: eb:ef:a0:2c:22:ca:aa:a1:86:09:c2:c8:f6:47:8b:cf:77:8c: bb:22:5b:d9:02:84:41:af:9b:48:10:01:33:6a:8c:d4:ca:aa: 19:31:bb:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd31nJMuoQzEsGt+ZXxFO2wv1OpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA5MjMxMTMwMjFaFw0yNjA5MjQxMjAyMjFaMDMxMTAvBgNV BAMTKDcwQTcyMjVBNzMzOTE4QUVGNzY1NENEQzQ5NkVDQTcwMURBMTdDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZqtaNVO+FYR76oIIatqZC4YUA bfOISIe2tbKylD2mMFxAenzECNSGkyhYGQXKgJqgrJI9ke67OSglziTA5KjwHauF q2BpuhSWwpzfqBmwOsNmLyL8BMH9KxqEzHT5IEkiLNhP8yYziaKsqS493nExjBv4 C6WiI30eqwEKCFJU3PnoZZaXpbML03w9QalXU3nDf+CWK4HjPPIlOxQbMoCtCpPB SffgwS0qn3o8rzlvfOTRKmFKzVpUCM9CXrWe/iyP14bFqcAZvosVRey2VG7FQSQx mL3VE+DHtAp6Zd1Emr2N63qnT40mzonD2jNHkK8kpau6/utKn4YaWehuMklVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcKciWnM5GK73ZUzcSW7KcB2hfDgwHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWHgQaJxfk/3/cEvGGMUBRZ1eNCb0tFClmX s+MhmDGgi7YijZZj21Xt/9naVXLiixmEw/oac7MSgr9fdtskmvYDABWKlKttii8/ WCG6b8VEIigNmJUHXNXVNiJ9qpVkiGm/o2Zz9ulz4Slj7/Ieerv64Zhn8oN67IJY +5dCfP18uj9FgtEDu/tv/VszSsU16AvEkUAPbAXBmkJFYV3mQPxBqh/oBkUTTnTG ei/4dLf41xSJoHMFac6sCHi0hRHruDqAAeqgKOscbGTEZksQtxdLVI2ARbJ0SOvv oCwiyqqhhgnCyPZHi893jLsiW9kChEGvm0gQATNqjNTKqhkxu8Q= -----END CERTIFICATE-----Generated at Thu Sep 24 00:37:53 2026 by rpki-client