$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: 1h2x4YuGgWgFLVSDlrnzlyC0MlmS2ZIrcmaYUROornk= Subject key identifier: B5:6A:3C:82:52:19:78:57:F6:20:7F:FD:46:59:ED:EE:5E:EC:DB:38 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 596EA1EEB4BA14E897BB64712E9769FA4EEFBFD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:39:19 +0000 Manifest this update: Wed 23 Sep 2026 10:34:19 +0000 Manifest next update: Thu 24 Sep 2026 12:44:19 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: lsXfHSDjBrrgyEXt/Ik8N/MtazOcaVm6RVW3huUqlKA=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6e:a1:ee:b4:ba:14:e8:97:bb:64:71:2e:97:69:fa:4e:ef:bf:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Sep 23 10:34:19 2026 GMT Not After : Sep 24 12:44:19 2026 GMT Subject: CN=B56A3C8252197857F6207FFD4659EDEE5EECDB38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:23:f6:43:e3:9e:86:06:50:cb:99:0b:cf:14: 00:95:3d:9d:91:ef:a8:4f:88:d4:22:f2:cf:9b:66: e4:04:47:23:a2:d2:5d:29:74:3c:f0:bb:4d:c3:49: 6c:bf:f7:8a:15:65:b1:22:0b:e4:58:9c:54:5a:7a: 23:01:28:25:af:d4:8a:3a:fc:4f:c2:01:eb:d6:86: 8c:23:3b:d1:cc:c4:99:e9:18:b0:c8:9f:b6:a9:2b: da:41:34:9a:eb:f8:47:35:00:be:15:b1:62:e2:f6: 25:71:a5:25:50:a3:fb:81:db:fd:ea:c6:b3:c2:7f: 1b:b9:7b:20:82:84:e2:22:1e:7d:35:92:06:0e:22: b9:da:a5:3e:aa:6c:cb:31:db:1f:ea:4e:61:ea:40: 9b:bb:c6:f3:e6:f8:d7:c3:a6:f4:36:1e:5a:11:68: 76:a5:22:5c:61:db:bf:aa:fa:8e:b3:a2:79:07:d9: c0:e2:4b:18:dc:83:e7:3f:f0:9a:1b:3d:99:10:ca: e5:a2:f4:94:0e:63:c5:b8:79:f1:84:8f:b1:e9:07: 00:f2:4a:24:f4:eb:f1:80:b2:c8:b3:ed:46:e2:31: 47:fb:70:17:51:f0:1d:6f:7c:1a:59:b6:0a:3b:49: 0a:cd:31:c4:00:b2:e6:08:7b:c9:bb:86:6e:05:09: 71:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:6A:3C:82:52:19:78:57:F6:20:7F:FD:46:59:ED:EE:5E:EC:DB:38 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:b3:e2:cb:e2:1c:1f:a3:25:a6:5a:8b:b2:79:6f:e1:3b:4a: 9b:15:6c:9b:dd:ab:36:56:6e:b6:05:fe:e5:81:b8:0a:42:0e: a2:0a:62:2a:f3:7a:e5:ee:12:76:c1:cf:a8:9a:bf:12:a3:bb: c9:b8:07:a6:92:00:91:d0:6b:1c:9e:c5:f5:7d:46:95:2d:02: 71:7d:f2:8b:2e:7a:b5:76:01:5f:60:cd:2d:ff:99:82:a9:67: d9:cb:1d:00:d6:e8:84:1e:33:70:1b:ef:47:54:a1:7a:75:09: 3e:0c:64:a7:21:8d:30:6c:0a:56:64:6a:40:93:b3:11:65:6c: ee:cd:0e:cb:82:3a:b8:34:b5:34:a5:d6:19:1d:8f:21:9a:9d: 69:53:69:1d:e4:6d:05:d3:ec:bd:f9:6e:45:d1:c5:19:48:87: 45:cd:33:fe:c7:9c:dd:a0:0d:7a:50:45:d3:80:d8:3d:5a:bd: 04:44:72:23:93:36:3f:73:82:5e:75:ce:1f:95:a6:40:d3:84: 42:4d:09:83:c7:cb:ef:c9:55:5e:71:b7:ed:ce:20:31:0d:cf: 00:64:07:25:bc:6d:84:e7:fc:02:56:2f:e1:40:27:f6:da:83: ac:e6:4f:90:cd:92:20:ca:4e:a9:93:ee:bb:6f:4a:5a:46:14: ff:db:c5:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW6h7rS6FOiXu2RxLpdp+k7vv9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA5MjMxMDM0MTlaFw0yNjA5MjQxMjQ0MTlaMDMxMTAvBgNV BAMTKEI1NkEzQzgyNTIxOTc4NTdGNjIwN0ZGRDQ2NTlFREVFNUVFQ0RCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCEI/ZD456GBlDLmQvPFACVPZ2R 76hPiNQi8s+bZuQERyOi0l0pdDzwu03DSWy/94oVZbEiC+RYnFRaeiMBKCWv1Io6 /E/CAevWhowjO9HMxJnpGLDIn7apK9pBNJrr+Ec1AL4VsWLi9iVxpSVQo/uB2/3q xrPCfxu5eyCChOIiHn01kgYOIrnapT6qbMsx2x/qTmHqQJu7xvPm+NfDpvQ2HloR aHalIlxh27+q+o6zonkH2cDiSxjcg+c/8JobPZkQyuWi9JQOY8W4efGEj7HpBwDy SiT06/GAssiz7UbiMUf7cBdR8B1vfBpZtgo7SQrNMcQAsuYIe8m7hm4FCXFHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtWo8glIZeFf2IH/9Rlnt7l7s2zgwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyz4sviHB+jJaZai7J5b+E7SpsVbJvdqzZW brYF/uWBuApCDqIKYirzeuXuEnbBz6iavxKju8m4B6aSAJHQaxyexfV9RpUtAnF9 8osuerV2AV9gzS3/mYKpZ9nLHQDW6IQeM3Ab70dUoXp1CT4MZKchjTBsClZkakCT sxFlbO7NDsuCOrg0tTSl1hkdjyGanWlTaR3kbQXT7L35bkXRxRlIh0XNM/7HnN2g DXpQRdOA2D1avQREciOTNj9zgl51zh+VpkDThEJNCYPHy+/JVV5xt+3OIDENzwBk ByW8bYTn/AJWL+FAJ/bag6zmT5DNkiDKTqmT7rtvSlpGFP/bxdQ= -----END CERTIFICATE-----Generated at Thu Sep 24 06:53:40 2026 by rpki-client