$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: S8eKKBmvPJhbJ+2QgpVsQ9q2KnqVm2kF37ej3ZZ4vOA= Subject key identifier: 8F:D8:D5:28:B1:A2:61:47:9D:E0:0B:14:CB:E2:B8:3D:F5:DD:83:D5 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 62908BEF58311BEF5DE10A34F5C3EDBE57C1E70E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 07:28:31 +0000 Manifest this update: Sat 14 Nov 2026 07:23:31 +0000 Manifest next update: Sun 15 Nov 2026 09:59:31 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: TWzc9kUkv9zwCGGuLzYmrkG7exMvmH77WG8oM7RZv2E=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 09:59:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:90:8b:ef:58:31:1b:ef:5d:e1:0a:34:f5:c3:ed:be:57:c1:e7:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Nov 14 07:23:31 2026 GMT Not After : Nov 15 09:59:31 2026 GMT Subject: CN=8FD8D528B1A261479DE00B14CBE2B83DF5DD83D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cd:03:43:1e:03:ad:07:29:20:67:e8:dc:90: fb:81:8a:52:a3:9d:ce:94:18:ef:2a:7e:23:c6:c2: 4f:ce:b5:60:2e:d6:84:0f:84:44:b4:0d:83:f9:90: b8:00:83:1b:60:6c:b8:22:ba:93:6a:9b:cc:87:d2: 25:f4:08:cf:76:56:e5:72:41:b5:2b:b6:54:04:ea: ca:f5:b4:55:a7:77:6f:4d:ae:ea:e5:a8:da:71:bc: 57:01:a5:1f:b9:a8:d8:9a:59:55:f0:a7:ff:93:2a: 8c:36:e6:92:aa:3f:84:f1:1d:e2:23:d1:a1:72:27: 28:ac:a9:da:53:d9:41:15:0d:47:6b:0c:ce:83:cf: 18:be:39:c9:1c:e9:81:d1:35:1c:11:e0:05:2c:67: bf:c3:2c:d2:0d:49:ee:15:2f:17:94:94:7e:88:3c: 11:e7:0c:2f:c6:b4:a8:6d:b7:ad:e1:03:2b:08:37: cb:35:16:ca:3f:d5:16:20:51:88:ec:5b:98:c3:89: e2:57:2b:0f:72:5b:29:1e:72:27:cd:02:66:af:81: 0f:fd:38:72:13:43:08:a6:72:ac:79:bb:80:6b:2d: 8d:bd:2d:18:52:00:25:c8:7a:0e:b2:14:78:81:78: 3e:a0:11:de:d6:9e:a0:89:1b:c9:a3:24:9d:f8:65: da:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:D8:D5:28:B1:A2:61:47:9D:E0:0B:14:CB:E2:B8:3D:F5:DD:83:D5 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:af:84:d9:5c:11:70:cb:d2:5d:04:8c:13:d8:22:9a:a7:e4: 05:2c:08:1e:47:92:a8:c7:d1:9d:c2:e2:4e:db:d2:b8:3c:10: 1b:f7:24:81:1f:62:67:a0:6a:fb:60:fc:5d:6a:e9:71:f4:cb: 64:9d:88:d5:85:78:ad:1e:cd:3f:09:9d:21:c3:23:6b:37:ab: 42:39:3e:17:f8:15:07:b5:f6:18:d1:36:5d:89:0f:1f:68:d3: 53:b2:a5:04:94:66:e4:87:b9:13:24:8c:39:6b:a5:4e:c4:12: 44:0d:c6:cc:df:86:d1:ed:94:17:a0:4b:f8:b0:21:bc:f1:09: 59:8f:7a:d7:ea:69:20:89:be:61:5b:08:81:18:a4:73:22:14: 15:59:0d:51:6a:55:8d:1b:e2:27:36:4d:ed:a2:b1:b7:c3:02: 22:c9:05:82:c8:64:a8:2c:20:b4:88:93:ee:a1:39:93:0f:d3: a8:e8:06:eb:b0:56:96:cf:cd:63:85:15:66:2e:67:34:95:f4: 03:cb:bc:4c:6c:72:80:f2:7d:65:f3:80:9b:cc:d4:55:3c:16: 18:bd:b6:b4:25:49:64:92:bf:d2:10:2a:da:21:f0:3c:a0:cc: 9f:b4:2e:a3:85:5e:81:43:2e:d4:74:cd:2c:a2:18:77:a0:f9: f7:04:90:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpCL71gxG+9d4Qo09cPtvlfB5w4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjExMTQwNzIzMzFaFw0yNjExMTUwOTU5MzFaMDMxMTAvBgNV BAMTKDhGRDhENTI4QjFBMjYxNDc5REUwMEIxNENCRTJCODNERjVERDgzRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpzQNDHgOtBykgZ+jckPuBilKj nc6UGO8qfiPGwk/OtWAu1oQPhES0DYP5kLgAgxtgbLgiupNqm8yH0iX0CM92VuVy QbUrtlQE6sr1tFWnd29NrurlqNpxvFcBpR+5qNiaWVXwp/+TKow25pKqP4TxHeIj 0aFyJyisqdpT2UEVDUdrDM6Dzxi+Ockc6YHRNRwR4AUsZ7/DLNINSe4VLxeUlH6I PBHnDC/GtKhtt63hAysIN8s1Fso/1RYgUYjsW5jDieJXKw9yWykecifNAmavgQ/9 OHITQwimcqx5u4BrLY29LRhSACXIeg6yFHiBeD6gEd7WnqCJG8mjJJ34Zdo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj9jVKLGiYUed4AsUy+K4PfXdg9UwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyvhNlcEXDL0l0EjBPYIpqn5AUsCB5HkqjH 0Z3C4k7b0rg8EBv3JIEfYmegavtg/F1q6XH0y2SdiNWFeK0ezT8JnSHDI2s3q0I5 Phf4FQe19hjRNl2JDx9o01OypQSUZuSHuRMkjDlrpU7EEkQNxszfhtHtlBegS/iw IbzxCVmPetfqaSCJvmFbCIEYpHMiFBVZDVFqVY0b4ic2Te2isbfDAiLJBYLIZKgs ILSIk+6hOZMP06joBuuwVpbPzWOFFWYuZzSV9APLvExscoDyfWXzgJvM1FU8Fhi9 trQlSWSSv9IQKtoh8DygzJ+0LqOFXoFDLtR0zSyiGHeg+fcEkC4= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:02 2026 by rpki-client