$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: BPzHgllAWIKSSpdmdDeuQUSbaGCbE3UO30VhNX0S0U8= Subject key identifier: 62:5B:8A:1D:6A:6D:EE:83:CA:5B:01:A8:64:AB:89:B3:E1:D6:31:AE Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 718CAC26D5D5BF5535716FBC4DD3425B51936337 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 0E Signing time: Tue 12 May 2026 10:16:24 +0000 Manifest this update: Tue 12 May 2026 10:11:24 +0000 Manifest next update: Wed 13 May 2026 12:34:24 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: D1AK2TTvfuXoXZ+b6tOuNTGOImie14/K47/Nq9UL7tI=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 3: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:8c:ac:26:d5:d5:bf:55:35:71:6f:bc:4d:d3:42:5b:51:93:63:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: May 12 10:11:24 2026 GMT Not After : May 13 12:34:24 2026 GMT Subject: CN=625B8A1D6A6DEE83CA5B01A864AB89B3E1D631AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:95:de:41:ea:48:32:8f:0c:85:d6:a1:ec:76: db:8b:55:77:0e:81:15:ce:28:c1:f6:54:9b:03:72: e4:ad:3d:3a:e7:d7:d3:be:6c:90:7b:e1:a7:26:ff: eb:5a:a8:12:cc:d1:1b:6f:a5:98:14:ed:23:6b:4d: 3b:3f:7f:e5:bb:eb:c4:2c:79:9d:3a:f8:de:9d:72: 6f:e0:15:66:02:e1:be:dd:94:a1:26:4e:ac:cd:24: b5:dc:eb:1c:fe:f1:80:f9:4a:3f:a5:2c:3d:c9:c0: 7f:c1:9e:03:02:f0:a5:df:73:34:e8:65:e5:77:95: 9c:84:4e:12:24:9d:d9:48:fb:ad:14:4c:07:6c:a3: fc:29:5d:ff:97:57:fb:7a:5b:00:eb:8d:08:f7:73: f9:ca:29:95:60:0c:3e:65:ae:59:77:b5:dd:21:ee: 95:d9:79:46:d3:a2:5b:43:21:0d:48:20:56:8b:a2: 02:19:92:38:8a:49:3c:ae:28:f6:b9:f9:d7:03:1e: 62:06:2f:30:0a:df:2e:61:8b:2e:df:75:98:99:29: f4:ee:71:39:08:41:48:86:ea:fb:0f:32:61:4c:81: 6d:08:87:83:d3:f1:0e:ce:c3:12:63:d6:19:1c:63: 9e:8e:39:25:8e:eb:e9:ec:06:71:de:77:ce:4f:e4: c9:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:5B:8A:1D:6A:6D:EE:83:CA:5B:01:A8:64:AB:89:B3:E1:D6:31:AE X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:97:7f:df:ad:0b:e8:c3:49:b3:76:0a:38:21:79:a4:f2:44: 05:f8:5b:e7:d2:f0:59:af:c1:a3:68:2e:0f:13:5d:c2:ea:4c: db:f4:49:fd:80:8d:22:62:1f:fb:45:63:7e:a7:71:d1:00:52: ba:c0:b8:3d:9f:9a:a0:8e:7f:4f:0a:6c:bd:a4:e0:12:ab:a3: 8e:bd:d5:1f:f6:6c:00:f1:df:d6:fb:ec:27:00:64:1e:a4:50: 67:ab:41:b1:2b:b2:03:35:d2:6f:5e:d9:fe:dc:49:6d:32:62: 65:cd:30:5e:00:56:17:b7:2e:cf:b2:af:4f:ef:86:dc:04:2c: 62:19:a6:44:2c:4b:24:bb:88:ba:22:26:18:91:73:88:09:1f: 5c:41:cd:be:89:a3:3a:e1:7d:1f:7a:99:e8:5a:41:66:58:2d: 0e:4e:06:37:a7:f7:b4:36:b1:0b:38:7a:38:5c:a2:35:b1:5a: 2d:4e:de:b4:f3:3b:98:a0:65:6e:cf:37:8d:ae:ba:62:ce:e1: 24:94:da:3b:22:2b:ae:93:71:4b:16:60:62:a2:53:0c:a3:52: 7e:45:a1:c2:86:b2:a0:20:a9:76:fc:cf:63:93:56:26:88:fb: 20:66:9e:b2:2f:6a:81:b1:2a:b3:f9:af:97:6d:5d:89:0e:72: 19:63:10:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYysJtXVv1U1cW+8TdNCW1GTYzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA1MTIxMDExMjRaFw0yNjA1MTMxMjM0MjRaMDMxMTAvBgNV BAMTKDYyNUI4QTFENkE2REVFODNDQTVCMDFBODY0QUI4OUIzRTFENjMxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnld5B6kgyjwyF1qHsdtuLVXcO gRXOKMH2VJsDcuStPTrn19O+bJB74acm/+taqBLM0RtvpZgU7SNrTTs/f+W768Qs eZ06+N6dcm/gFWYC4b7dlKEmTqzNJLXc6xz+8YD5Sj+lLD3JwH/BngMC8KXfczTo ZeV3lZyEThIkndlI+60UTAdso/wpXf+XV/t6WwDrjQj3c/nKKZVgDD5lrll3td0h 7pXZeUbToltDIQ1IIFaLogIZkjiKSTyuKPa5+dcDHmIGLzAK3y5hiy7fdZiZKfTu cTkIQUiG6vsPMmFMgW0Ih4PT8Q7OwxJj1hkcY56OOSWO6+nsBnHed85P5Mm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYluKHWpt7oPKWwGoZKuJs+HWMa4wHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeXf9+tC+jDSbN2CjgheaTyRAX4W+fS8Fmv waNoLg8TXcLqTNv0Sf2AjSJiH/tFY36ncdEAUrrAuD2fmqCOf08KbL2k4BKro469 1R/2bADx39b77CcAZB6kUGerQbErsgM10m9e2f7cSW0yYmXNMF4AVhe3Ls+yr0/v htwELGIZpkQsSyS7iLoiJhiRc4gJH1xBzb6JozrhfR96mehaQWZYLQ5OBjen97Q2 sQs4ejhcojWxWi1O3rTzO5igZW7PN42uumLO4SSU2jsiK66TcUsWYGKiUwyjUn5F ocKGsqAgqXb8z2OTViaI+yBmnrIvaoGxKrP5r5dtXYkOchljEEQ= -----END CERTIFICATE-----Generated at Tue May 12 22:46:09 2026 by rpki-client