$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: srYzVBS221xd/GV23nyYCO1YLpHGj+RSPe8iigI8eHc= Subject key identifier: 8C:F1:24:E9:39:BB:8E:13:A9:81:67:31:E5:C8:BF:52:7E:5A:08:D6 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 027CD98096034D2A62DB13ECF9E157DF4FE8153E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 04:46:32 +0000 Manifest this update: Thu 24 Sep 2026 04:41:32 +0000 Manifest next update: Fri 25 Sep 2026 05:15:32 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: WRb0ZidGhZM69fep6Jj5wF0/Po4aqogcuJfIIfra34U=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:15:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:7c:d9:80:96:03:4d:2a:62:db:13:ec:f9:e1:57:df:4f:e8:15:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Sep 24 04:41:32 2026 GMT Not After : Sep 25 05:15:32 2026 GMT Subject: CN=8CF124E939BB8E13A9816731E5C8BF527E5A08D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:1f:d1:67:b3:ff:93:22:44:a8:8f:be:69: a7:b3:13:e5:ad:cf:da:1a:58:ab:69:99:bb:42:6b: d5:b1:22:a3:e8:54:a7:63:ce:b6:db:89:9d:b2:71: 22:89:52:e8:21:35:6e:76:a2:6f:06:df:8f:ae:e3: 37:a8:b8:96:d4:39:f4:dd:f9:7a:fc:fa:3f:7c:bf: 24:3a:95:11:72:15:d5:eb:30:d8:6d:33:59:15:2f: ee:02:54:00:bf:2a:07:19:f8:be:39:ff:d7:7c:28: 3a:46:7e:f4:3a:46:0b:a5:12:54:20:ba:b9:cb:de: 5f:e7:1a:e5:79:93:05:39:99:75:4b:ec:01:99:89: 2b:c7:49:29:d0:b4:f5:93:fd:13:39:80:06:ca:1f: 4f:6a:86:cc:7f:ae:d9:4a:9c:63:dc:c8:81:a0:a1: c6:29:8f:7f:fc:28:c8:2c:70:4f:3f:da:60:90:ac: 82:b3:b2:01:8d:0a:7b:d3:53:e2:56:4e:41:77:1a: 79:30:e1:d0:c7:1b:dc:cb:af:4e:a8:72:05:22:27: 6e:a4:50:57:80:bb:37:fb:9a:4a:b6:95:42:14:a4: b5:28:2d:b6:25:96:0c:53:9a:da:bd:94:28:3d:7b: 3d:ac:57:4d:25:f4:ac:33:89:53:e6:48:a2:54:a6: 77:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:F1:24:E9:39:BB:8E:13:A9:81:67:31:E5:C8:BF:52:7E:5A:08:D6 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:71:da:82:31:78:30:60:04:f3:0e:67:c9:bf:75:a7:f9:60: 22:66:74:dc:8c:70:a4:8c:06:79:9b:5b:f6:9c:49:30:24:de: 5f:4d:cd:2b:93:29:88:67:25:e1:32:c3:cf:66:1f:3b:14:ba: c9:db:73:a7:dd:e0:11:60:99:ae:fd:2c:52:25:be:04:8f:64: d4:e8:2b:73:44:86:0e:04:00:7d:e7:b8:25:e7:9b:65:42:fc: ef:90:fb:e4:d8:a9:f7:4b:e2:d8:2c:c1:1b:76:62:71:da:58: 60:d5:09:8e:67:60:d1:1b:a0:9b:68:d5:90:30:1a:84:cb:ca: 0e:e3:28:c8:9f:57:4d:a5:21:29:d1:32:4d:38:f6:e6:02:8e: 7f:6b:a0:26:3e:87:e0:61:ba:a7:96:64:9e:1c:d8:83:7f:9a: 1d:b1:87:64:41:11:8f:5f:c3:eb:cd:6c:b2:05:cf:85:f9:22: 61:f0:50:0b:64:60:fc:78:04:33:da:8a:2b:7f:06:fa:4d:4f: a9:29:87:10:34:3f:3d:35:ea:e9:7a:cb:fd:a5:7e:7d:80:98: 2e:5c:5a:3b:06:d1:70:2f:fd:a4:1e:d9:88:48:bd:f1:99:d6: bc:f1:7d:2d:4a:34:8c:99:9f:11:1a:46:8a:56:b4:23:d9:3b: 76:ac:43:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAnzZgJYDTSpi2xPs+eFX30/oFT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA5MjQwNDQxMzJaFw0yNjA5MjUwNTE1MzJaMDMxMTAvBgNV BAMTKDhDRjEyNEU5MzlCQjhFMTNBOTgxNjczMUU1QzhCRjUyN0U1QTA4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwhx/RZ7P/kyJEqI++aaezE+Wt z9oaWKtpmbtCa9WxIqPoVKdjzrbbiZ2ycSKJUughNW52om8G34+u4zeouJbUOfTd +Xr8+j98vyQ6lRFyFdXrMNhtM1kVL+4CVAC/KgcZ+L45/9d8KDpGfvQ6RgulElQg urnL3l/nGuV5kwU5mXVL7AGZiSvHSSnQtPWT/RM5gAbKH09qhsx/rtlKnGPcyIGg ocYpj3/8KMgscE8/2mCQrIKzsgGNCnvTU+JWTkF3Gnkw4dDHG9zLr06ocgUiJ26k UFeAuzf7mkq2lUIUpLUoLbYllgxTmtq9lCg9ez2sV00l9KwziVPmSKJUpnfTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjPEk6Tm7jhOpgWcx5ci/Un5aCNYwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNx2oIxeDBgBPMOZ8m/daf5YCJmdNyMcKSM BnmbW/acSTAk3l9NzSuTKYhnJeEyw89mHzsUusnbc6fd4BFgma79LFIlvgSPZNTo K3NEhg4EAH3nuCXnm2VC/O+Q++TYqfdL4tgswRt2YnHaWGDVCY5nYNEboJto1ZAw GoTLyg7jKMifV02lISnRMk049uYCjn9roCY+h+BhuqeWZJ4c2IN/mh2xh2RBEY9f w+vNbLIFz4X5ImHwUAtkYPx4BDPaiit/BvpNT6kphxA0Pz016ul6y/2lfn2AmC5c WjsG0XAv/aQe2YhIvfGZ1rzxfS1KNIyZnxEaRopWtCPZO3asQ1Y= -----END CERTIFICATE-----Generated at Thu Sep 24 22:01:12 2026 by rpki-client