$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: LwQknF4n07ehGDL2RQ69iZUV3+MvqcTvu/bfe3fLA3A= Subject key identifier: DE:D4:F1:D0:25:58:69:AA:95:43:DD:1D:D8:EC:31:08:8F:4B:D1:5A Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 647B6EE737C44EE7A05370DEFAC160F5082B5F39 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:28:48 +0000 Manifest this update: Tue 12 May 2026 18:23:48 +0000 Manifest next update: Wed 13 May 2026 21:53:48 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) 3: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) 4: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: pXOrHH6OReHngc8erY0Oav82j1354wmrq0LKgeNPgIY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7b:6e:e7:37:c4:4e:e7:a0:53:70:de:fa:c1:60:f5:08:2b:5f:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: May 12 18:23:48 2026 GMT Not After : May 13 21:53:48 2026 GMT Subject: CN=DED4F1D0255869AA9543DD1DD8EC31088F4BD15A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d9:9b:97:84:82:94:b5:ba:48:e0:32:3b:f4: e4:c8:81:20:dc:8e:1f:00:3e:7d:a3:b7:ce:e8:91: 18:7c:e9:5f:47:db:6b:e1:df:a0:d2:e1:75:28:76: 05:06:a2:93:85:cb:e3:47:06:e2:b4:f9:23:29:16: bd:cd:5a:2b:60:a2:5d:d4:ab:1f:d3:83:b2:35:88: f9:c7:a3:83:8f:8c:e2:dc:31:5b:1c:5f:1c:dc:7a: 1f:4e:04:ef:45:37:cd:c3:ab:c7:58:65:8c:6f:48: 4d:18:12:fc:fa:32:f1:3e:27:a6:ef:27:47:2c:b2: b5:ac:f4:47:ca:2c:a8:a2:45:35:4b:44:c7:43:a4: 21:93:da:66:2a:a6:d3:1c:10:05:bb:d5:d7:11:cf: 31:8b:6f:a2:62:d2:4a:76:82:64:2a:74:08:8a:98: a6:35:d5:fe:64:86:b4:7e:90:51:c9:77:0b:b5:ee: db:68:02:31:de:02:ea:62:d7:a8:82:2b:e0:c0:1c: e2:6c:69:42:0a:f9:d3:65:7f:fb:eb:bb:a1:54:d4: 3f:9d:c7:af:de:40:a9:f6:f2:fb:b3:22:8c:d1:9d: 16:e4:ba:6b:3a:7b:07:42:10:a7:21:a9:a5:20:7f: 5c:30:90:c0:5e:de:f9:48:ca:e9:f0:b8:2a:1c:1a: 37:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D4:F1:D0:25:58:69:AA:95:43:DD:1D:D8:EC:31:08:8F:4B:D1:5A X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:de:b1:3b:7e:52:94:0c:01:72:3c:08:86:6d:30:66:f6:85: a5:13:5e:ef:fe:c2:6c:c6:74:64:03:ee:7e:b1:08:9d:2b:70: f3:3a:ba:0e:b0:74:23:51:ef:7f:fb:de:c2:90:30:4b:e5:bb: 05:c9:a1:32:c5:5d:a6:0f:d2:2a:53:f2:c3:98:80:85:de:67: 68:12:0b:9c:4b:5e:16:39:64:31:9a:e4:02:1b:60:bf:16:51: 65:fe:9f:12:11:41:41:07:16:f2:c1:b4:00:4c:9e:20:c8:90: 8b:8d:b0:0a:30:f2:39:32:07:fd:d9:5c:0e:af:fc:4e:2b:dc: 91:c9:28:1d:c3:02:2c:98:de:1b:82:78:e3:4c:84:8f:96:01: fb:9c:df:b1:e8:00:49:8a:69:97:a2:ef:e3:d2:b9:d1:6d:44: aa:83:71:65:72:84:7d:05:98:3a:89:a4:cf:d3:eb:66:2f:9a: f4:a1:39:95:6a:b8:67:0d:d5:2f:6f:ee:5e:18:31:91:dc:fe: 23:fd:d6:27:56:9e:13:8c:68:02:3a:47:9e:10:57:c7:b5:f1: 89:b0:ed:a0:be:c0:e7:0a:88:6a:46:b6:5e:29:e8:d9:9b:ff: dc:0b:2b:2e:2f:0d:8d:5e:d1:63:28:01:9c:b0:36:5a:60:82: f6:79:cf:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHtu5zfETuegU3De+sFg9QgrXzkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA1MTIxODIzNDhaFw0yNjA1MTMyMTUzNDhaMDMxMTAvBgNV BAMTKERFRDRGMUQwMjU1ODY5QUE5NTQzREQxREQ4RUMzMTA4OEY0QkQxNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2ZuXhIKUtbpI4DI79OTIgSDc jh8APn2jt87okRh86V9H22vh36DS4XUodgUGopOFy+NHBuK0+SMpFr3NWitgol3U qx/Tg7I1iPnHo4OPjOLcMVscXxzceh9OBO9FN83Dq8dYZYxvSE0YEvz6MvE+J6bv J0cssrWs9EfKLKiiRTVLRMdDpCGT2mYqptMcEAW71dcRzzGLb6Ji0kp2gmQqdAiK mKY11f5khrR+kFHJdwu17ttoAjHeAupi16iCK+DAHOJsaUIK+dNlf/vru6FU1D+d x6/eQKn28vuzIozRnRbkums6ewdCEKchqaUgf1wwkMBe3vlIyunwuCocGjcNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tTx0CVYaaqVQ90d2OwxCI9L0VowHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3esTt+UpQMAXI8CIZtMGb2haUTXu/+wmzG dGQD7n6xCJ0rcPM6ug6wdCNR73/73sKQMEvluwXJoTLFXaYP0ipT8sOYgIXeZ2gS C5xLXhY5ZDGa5AIbYL8WUWX+nxIRQUEHFvLBtABMniDIkIuNsAow8jkyB/3ZXA6v /E4r3JHJKB3DAiyY3huCeONMhI+WAfuc37HoAEmKaZei7+PSudFtRKqDcWVyhH0F mDqJpM/T62YvmvShOZVquGcN1S9v7l4YMZHc/iP91idWnhOMaAI6R54QV8e18Ymw 7aC+wOcKiGpGtl4p6Nmb/9wLKy4vDY1e0WMoAZywNlpggvZ5z8A= -----END CERTIFICATE-----Generated at Wed May 13 03:23:12 2026 by rpki-client