$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: GX1c+mjezyzIoieWNi6QjySrcmWarl6j0wDqrPdJ6l4= Subject key identifier: CB:34:F9:3D:B4:EF:25:01:5B:AE:6E:EF:74:07:05:47:81:14:B7:C2 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 0AC8B92129ECD5F8D95D374BEA8ABF64B43BD0EA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:57:57 +0000 Manifest this update: Fri 24 Jul 2026 06:52:57 +0000 Manifest next update: Sat 25 Jul 2026 07:44:57 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: kN397XjHy6A/TnIxLzT7QupzDQevdtBogOQtSry9hjk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:c8:b9:21:29:ec:d5:f8:d9:5d:37:4b:ea:8a:bf:64:b4:3b:d0:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Jul 24 06:52:57 2026 GMT Not After : Jul 25 07:44:57 2026 GMT Subject: CN=CB34F93DB4EF25015BAE6EEF740705478114B7C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:70:9a:80:83:fb:ce:c5:4d:32:1a:ff:65:49: c7:59:5e:c3:63:ca:f9:ab:10:32:10:00:d5:33:69: eb:b3:13:3d:7b:c0:59:e9:cb:e6:9c:84:bb:11:43: 36:3d:6b:11:c6:92:0c:8d:8b:55:46:07:2e:ad:f1: 55:a6:75:25:12:cc:f5:6e:48:d4:af:72:77:e6:86: c8:51:f4:ce:5a:16:f7:03:91:90:74:a9:9c:91:0e: 29:2b:10:1b:7e:bc:a0:87:fe:da:e2:74:37:a2:1c: dc:b8:a9:ab:51:a0:d8:cb:11:16:2f:fc:8f:d6:c3: 7a:e8:0e:22:61:1b:1d:22:e2:38:79:9f:bf:2b:c8: 59:d2:5d:6e:58:23:7a:88:3f:c4:bb:31:a9:31:c0: 3a:fc:8d:2a:05:11:39:a3:50:12:88:38:25:fc:9c: 79:fc:6b:0f:89:f7:7a:b9:e9:0f:c7:42:bd:61:a5: 18:03:11:79:24:38:12:89:84:d1:a6:7e:7f:7d:52: 1e:9c:22:b0:95:c7:ee:ce:d2:8f:f1:04:56:09:89: 5c:50:0f:43:3d:59:db:1a:51:55:a9:b8:cd:e2:61: 05:85:e2:fb:f3:41:1b:7d:7d:a7:92:d3:61:0d:1c: 41:77:7d:6a:c8:de:51:59:ec:ca:23:17:4d:de:b2: bf:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:34:F9:3D:B4:EF:25:01:5B:AE:6E:EF:74:07:05:47:81:14:B7:C2 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:28:80:35:69:8e:e5:c0:21:8e:1f:9e:5c:e0:23:ea:74:12: ed:e1:a4:9a:8f:5e:22:40:53:26:05:ce:e2:cd:e2:19:5e:4d: f0:47:d4:ec:89:32:9d:80:dc:70:7b:9c:16:20:b1:3e:2f:a6: 41:71:e4:2c:29:93:bf:fb:24:a1:fb:91:6f:ea:ca:3d:9f:ee: 84:1d:bd:08:c0:7b:82:73:5e:e8:8d:79:ac:19:c3:26:21:cd: d1:ba:bb:e1:63:ae:32:c4:fe:88:a5:29:16:a0:ca:c5:fd:cf: 84:4d:0b:69:ee:59:5e:58:ef:24:94:06:90:fc:a3:81:b7:83: b8:d5:92:54:e7:7e:5d:1b:c2:39:77:21:d2:2b:d0:7e:97:f3: f1:2c:18:17:5e:e8:af:3d:fd:b8:9b:1c:f6:29:b8:98:b2:69: 25:ae:96:bd:86:15:7a:c0:1e:c2:31:94:ab:65:49:d5:1e:a5: 37:f8:ff:a9:ae:8c:be:39:e6:47:b9:2e:ad:36:55:88:7d:cf: 60:99:89:4e:c0:65:c9:56:ae:a1:d3:aa:28:77:a1:12:41:33: f1:56:22:5b:37:aa:f5:b6:3b:63:3e:ee:25:76:ec:c4:d4:42: 5e:44:84:54:c2:a1:3b:09:b5:67:0e:cf:13:97:e2:14:85:99: d0:89:1a:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCsi5ISns1fjZXTdL6oq/ZLQ70OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA3MjQwNjUyNTdaFw0yNjA3MjUwNzQ0NTdaMDMxMTAvBgNV BAMTKENCMzRGOTNEQjRFRjI1MDE1QkFFNkVFRjc0MDcwNTQ3ODExNEI3QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cJqAg/vOxU0yGv9lScdZXsNj yvmrEDIQANUzaeuzEz17wFnpy+achLsRQzY9axHGkgyNi1VGBy6t8VWmdSUSzPVu SNSvcnfmhshR9M5aFvcDkZB0qZyRDikrEBt+vKCH/tridDeiHNy4qatRoNjLERYv /I/Ww3roDiJhGx0i4jh5n78ryFnSXW5YI3qIP8S7MakxwDr8jSoFETmjUBKIOCX8 nHn8aw+J93q56Q/HQr1hpRgDEXkkOBKJhNGmfn99Uh6cIrCVx+7O0o/xBFYJiVxQ D0M9WdsaUVWpuM3iYQWF4vvzQRt9faeS02ENHEF3fWrI3lFZ7MojF03esr/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyzT5PbTvJQFbrm7vdAcFR4EUt8IwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYogDVpjuXAIY4fnlzgI+p0Eu3hpJqPXiJA UyYFzuLN4hleTfBH1OyJMp2A3HB7nBYgsT4vpkFx5Cwpk7/7JKH7kW/qyj2f7oQd vQjAe4JzXuiNeawZwyYhzdG6u+FjrjLE/oilKRagysX9z4RNC2nuWV5Y7ySUBpD8 o4G3g7jVklTnfl0bwjl3IdIr0H6X8/EsGBde6K89/bibHPYpuJiyaSWulr2GFXrA HsIxlKtlSdUepTf4/6mujL455ke5Lq02VYh9z2CZiU7AZclWrqHTqih3oRJBM/FW Ils3qvW2O2M+7iV27MTUQl5EhFTCoTsJtWcOzxOX4hSFmdCJGvA= -----END CERTIFICATE-----Generated at Fri Jul 24 13:21:47 2026 by rpki-client