$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: 11q+p3WJfFEsM1zT2Tk5ApegIfO9yay1pwiy4c5nu1s= Subject key identifier: D2:87:B9:B3:16:82:CB:FE:53:AD:1E:27:EF:FB:4B:09:F9:8C:2C:59 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 3F1C33D89ECC956DD0B173889DFBBA71585102C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 15:40:33 +0000 Manifest this update: Wed 23 Sep 2026 15:35:33 +0000 Manifest next update: Thu 24 Sep 2026 17:33:33 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: Ws9tRNTMLCognofI3ICaZvgdxEBLOEM8R5WKMBUwgfs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:33:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:1c:33:d8:9e:cc:95:6d:d0:b1:73:88:9d:fb:ba:71:58:51:02:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Sep 23 15:35:33 2026 GMT Not After : Sep 24 17:33:33 2026 GMT Subject: CN=D287B9B31682CBFE53AD1E27EFFB4B09F98C2C59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:9e:2e:ec:a4:79:7e:35:9a:20:0d:3e:c7:64: 3b:20:3f:ca:5f:42:57:d3:7b:35:b5:11:8e:f4:88: 45:bc:d0:94:f1:83:82:ce:a8:74:35:8f:4a:66:af: 66:20:1e:d0:ee:75:af:6d:22:9b:7a:9c:c4:ce:0d: 8f:cd:12:a3:9d:87:2f:07:89:7e:87:e7:52:33:a9: 15:3b:e2:6a:21:d4:8e:9c:6a:4d:28:49:4f:40:e4: 0e:c1:9f:44:3f:78:6a:d0:6e:cb:bd:c8:99:b9:37: a8:5b:b2:38:84:0f:7e:06:f6:24:fe:6e:5a:3e:ea: b6:56:e9:fb:a8:58:e8:c6:ea:22:b2:01:97:83:2b: af:f4:bd:40:30:ee:81:9e:f7:eb:f7:de:63:40:df: 75:f6:08:0b:da:b6:0e:ff:db:66:c6:9a:0b:39:70: 84:10:c2:a0:d0:37:4d:d3:81:74:2d:60:47:a9:b3: 39:25:8d:da:d0:fd:90:7d:2e:b1:b7:69:b6:79:69: 40:4d:3c:9e:66:3e:80:e5:6f:e6:dc:1e:60:1e:f1: 0c:6b:12:60:ae:f7:c5:b9:d2:49:a8:ce:71:93:51: 21:df:7c:c2:9d:cf:ad:d9:15:70:b5:53:b3:ee:a5: d9:b8:1e:23:fb:b7:fe:06:7f:65:40:ee:1d:86:82: c8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:87:B9:B3:16:82:CB:FE:53:AD:1E:27:EF:FB:4B:09:F9:8C:2C:59 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:74:c3:6a:52:ce:4d:66:ac:11:a6:d9:e7:24:62:0c:c1:86: 6b:07:36:97:81:23:96:c8:71:fc:18:dc:37:20:e5:62:1c:21: 59:fc:e9:a5:09:ce:5e:4f:75:c1:a8:08:78:51:d8:d0:13:ae: 40:0e:1a:68:a7:48:ba:25:0d:fd:8a:ea:0b:8c:c0:36:33:66: 40:02:5a:ed:7a:17:c9:dc:dc:22:8e:3c:b7:73:08:42:fa:61: ba:84:6d:9d:76:61:84:c8:2e:f3:3a:89:17:6b:21:46:c0:07: 77:bb:f4:c5:6c:f9:af:e0:4f:3b:f1:72:c5:80:9c:66:9c:e9: 60:0a:73:8f:47:fb:44:ec:1c:ca:53:a6:2d:52:98:f5:00:d8: 41:02:1d:33:34:8c:17:da:a0:55:9d:6a:1b:79:b7:3b:2a:e6: b0:4f:1d:40:ca:91:56:4c:b6:24:fa:8d:57:43:d2:6c:e8:17: cd:51:ce:5e:7f:e7:ad:4a:20:65:64:3d:0f:ce:64:4f:fd:04: d6:b2:e2:31:69:27:9a:6a:9d:34:c1:6c:cd:37:68:5c:7e:ff: 49:37:2e:fa:be:ca:af:2b:e4:43:79:6a:9c:6c:40:33:82:91: 82:6b:54:fb:72:2a:ea:6c:eb:46:24:4f:d4:00:e1:ae:99:6b: b8:b3:00:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxwz2J7MlW3QsXOInfu6cVhRAsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA5MjMxNTM1MzNaFw0yNjA5MjQxNzMzMzNaMDMxMTAvBgNV BAMTKEQyODdCOUIzMTY4MkNCRkU1M0FEMUUyN0VGRkI0QjA5Rjk4QzJDNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrni7spHl+NZogDT7HZDsgP8pf QlfTezW1EY70iEW80JTxg4LOqHQ1j0pmr2YgHtDuda9tIpt6nMTODY/NEqOdhy8H iX6H51IzqRU74moh1I6cak0oSU9A5A7Bn0Q/eGrQbsu9yJm5N6hbsjiED34G9iT+ blo+6rZW6fuoWOjG6iKyAZeDK6/0vUAw7oGe9+v33mNA33X2CAvatg7/22bGmgs5 cIQQwqDQN03TgXQtYEepszkljdrQ/ZB9LrG3abZ5aUBNPJ5mPoDlb+bcHmAe8Qxr EmCu98W50kmoznGTUSHffMKdz63ZFXC1U7Pupdm4HiP7t/4Gf2VA7h2GgsjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0oe5sxaCy/5TrR4n7/tLCfmMLFkwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF0w2pSzk1mrBGm2eckYgzBhmsHNpeBI5bI cfwY3Dcg5WIcIVn86aUJzl5PdcGoCHhR2NATrkAOGminSLolDf2K6guMwDYzZkAC Wu16F8nc3CKOPLdzCEL6YbqEbZ12YYTILvM6iRdrIUbAB3e79MVs+a/gTzvxcsWA nGac6WAKc49H+0TsHMpTpi1SmPUA2EECHTM0jBfaoFWdaht5tzsq5rBPHUDKkVZM tiT6jVdD0mzoF81Rzl5/561KIGVkPQ/OZE/9BNay4jFpJ5pqnTTBbM03aFx+/0k3 Lvq+yq8r5EN5apxsQDOCkYJrVPtyKups60YkT9QA4a6Za7izANE= -----END CERTIFICATE-----Generated at Thu Sep 24 01:41:19 2026 by rpki-client