$ rpki-client -vvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: q+aIlIMPleWitiWMzqHsanhYns8mq/3vsg0sZ1UHeKs= Subject key identifier: BA:E9:10:C9:38:D7:4C:09:B0:2C:2F:41:B6:94:F5:63:9D:6B:C5:4D Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 2C4042ECEF7F3413D398E3F7F159A2E1E7A76AFE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: 0E Signing time: Tue 12 May 2026 14:19:11 +0000 Manifest this update: Tue 12 May 2026 14:14:11 +0000 Manifest next update: Wed 13 May 2026 18:12:11 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: l6Y4aoVbBvPVcUi0NyNEjMIbT/Z0ccmp401zvVTTocU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:40:42:ec:ef:7f:34:13:d3:98:e3:f7:f1:59:a2:e1:e7:a7:6a:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: May 12 14:14:11 2026 GMT Not After : May 13 18:12:11 2026 GMT Subject: CN=BAE910C938D74C09B02C2F41B694F5639D6BC54D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:70:20:c0:c3:bd:64:5f:b1:02:7e:0d:00:b0: 27:13:c7:14:8c:9c:40:e1:92:e0:b3:28:54:3d:51: 4a:69:bd:d3:c8:6e:1a:3c:44:f1:ef:3d:ac:fb:dc: fa:3a:fe:f4:98:2f:ac:6a:3b:60:96:6b:33:96:4d: 9d:99:bf:59:31:a6:c0:55:d6:7e:d5:0f:60:1d:d1: fb:89:52:33:15:26:71:64:99:22:c7:19:f4:9d:c7: 3f:8e:b0:06:63:fc:95:a7:9c:c0:a4:1c:c8:27:12: 98:bc:45:fe:d9:7f:a6:3a:b6:33:e3:8f:d7:88:20: 9a:79:c5:d0:cf:7c:9f:03:4d:67:0c:e0:e0:09:c3: 93:95:86:ee:b7:b9:b3:bf:45:33:e6:f8:d9:b3:0b: 6a:ee:73:2c:2b:3d:73:6f:1c:82:31:93:36:d4:d0: 2b:be:f1:a0:a4:6e:33:5b:77:17:6a:66:96:db:e0: 7e:3b:5b:2d:06:bd:f2:a8:95:b5:98:5d:36:ea:b0: 7b:21:e3:64:4e:c4:d4:89:00:ce:5f:55:7a:1a:9b: 8d:6f:b7:38:27:b7:4e:ac:be:6e:d0:8d:36:31:be: 7c:9a:31:6d:a8:9e:04:4f:71:67:a3:15:7b:c6:af: 3a:5b:45:6c:d1:2f:0f:de:4f:33:5c:32:8c:a6:a1: 4d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:E9:10:C9:38:D7:4C:09:B0:2C:2F:41:B6:94:F5:63:9D:6B:C5:4D X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:58:e5:e2:83:fc:68:72:f8:23:2a:e0:1f:f8:d7:15:95:c7: 66:ce:95:45:f8:0d:54:6b:cc:83:43:aa:cd:9c:dd:86:f5:78: 92:09:51:4d:c4:61:6e:3a:d3:df:19:68:df:d8:c5:b6:12:6f: 4e:2d:24:b5:ae:ba:85:a2:e7:17:db:ae:8a:94:64:55:16:36: 42:1e:1f:4f:c1:0a:62:af:ed:69:96:90:9c:f9:26:42:6e:07: fc:28:bc:c3:d7:42:8b:72:1c:55:b6:25:9d:09:72:8a:55:f7: 84:25:ac:da:8e:98:63:42:0a:4d:fc:b4:ef:05:c9:85:6e:d1: e2:0b:c8:2a:e7:4c:b9:e0:07:b6:d3:92:90:b3:00:9c:41:f4: 80:02:e1:5b:16:df:fd:5b:61:13:72:aa:fe:bd:69:0d:18:e1: e7:88:21:41:5a:80:29:0f:46:d5:4d:6e:f7:64:cd:e5:54:16: 2f:f9:13:f5:8b:75:19:69:2a:cd:48:73:d0:0b:43:18:cb:8d: 1c:6e:62:c8:20:d1:02:c6:fe:4c:21:3b:d8:8d:10:22:e8:ab: 76:3c:4c:59:d0:31:b9:82:40:b6:26:f4:28:31:e1:2e:aa:e1: 9f:7f:30:3a:0a:f0:82:77:eb:e5:80:89:a2:42:3b:c7:9d:7a: 7f:a1:b5:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULEBC7O9/NBPTmOP38Vmi4eenav4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA1MTIxNDE0MTFaFw0yNjA1MTMxODEyMTFaMDMxMTAvBgNV BAMTKEJBRTkxMEM5MzhENzRDMDlCMDJDMkY0MUI2OTRGNTYzOUQ2QkM1NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGcCDAw71kX7ECfg0AsCcTxxSM nEDhkuCzKFQ9UUppvdPIbho8RPHvPaz73Po6/vSYL6xqO2CWazOWTZ2Zv1kxpsBV 1n7VD2Ad0fuJUjMVJnFkmSLHGfSdxz+OsAZj/JWnnMCkHMgnEpi8Rf7Zf6Y6tjPj j9eIIJp5xdDPfJ8DTWcM4OAJw5OVhu63ubO/RTPm+NmzC2rucywrPXNvHIIxkzbU 0Cu+8aCkbjNbdxdqZpbb4H47Wy0GvfKolbWYXTbqsHsh42ROxNSJAM5fVXoam41v tzgnt06svm7QjTYxvnyaMW2ongRPcWejFXvGrzpbRWzRLw/eTzNcMoymoU3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuukQyTjXTAmwLC9BtpT1Y51rxU0wHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJY5eKD/Ghy+CMq4B/41xWVx2bOlUX4DVRr zINDqs2c3Yb1eJIJUU3EYW46098ZaN/YxbYSb04tJLWuuoWi5xfbroqUZFUWNkIe H0/BCmKv7WmWkJz5JkJuB/wovMPXQotyHFW2JZ0JcopV94QlrNqOmGNCCk38tO8F yYVu0eILyCrnTLngB7bTkpCzAJxB9IAC4VsW3/1bYRNyqv69aQ0Y4eeIIUFagCkP RtVNbvdkzeVUFi/5E/WLdRlpKs1Ic9ALQxjLjRxuYsgg0QLG/kwhO9iNECLoq3Y8 TFnQMbmCQLYm9Cgx4S6q4Z9/MDoK8IJ36+WAiaJCO8eden+htVE= -----END CERTIFICATE-----Generated at Wed May 13 00:34:28 2026 by rpki-client