$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: aRw45/0rCnXa9nm1Xh+z6JoXwDoqMgoijogw4kXOjD4= Subject key identifier: C9:5F:85:4D:76:3E:1C:F6:B6:E5:40:0F:3D:BD:4D:93:27:8B:17:15 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 16A1E74D674871C10ECD1BF46790EAA5D8FE7C89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 05:41:25 +0000 Manifest this update: Fri 24 Jul 2026 05:36:25 +0000 Manifest next update: Sat 25 Jul 2026 06:54:25 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: ShGafLIj/h1TQWMwtic1QDVqfFPWiGPvLSArza/1N70=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 03:44:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a1:e7:4d:67:48:71:c1:0e:cd:1b:f4:67:90:ea:a5:d8:fe:7c:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Jul 24 05:36:25 2026 GMT Not After : Jul 25 06:54:25 2026 GMT Subject: CN=C95F854D763E1CF6B6E5400F3DBD4D93278B1715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:2c:56:0f:25:ab:81:60:e9:a9:e1:38:53:64: 59:0d:84:7c:db:12:2d:5f:4e:fc:df:c8:41:06:ef: 86:ad:1a:db:b1:01:31:2c:b5:1a:49:ee:cd:43:72: 6a:3b:1d:13:db:2b:eb:9b:85:f5:16:e7:ac:1c:9e: d5:44:a8:e8:3c:e3:ff:9a:53:e8:8b:e2:5b:9c:ad: 40:38:99:e8:7c:d3:c0:ea:fe:80:e6:0e:fc:fb:d7: f2:2d:25:c0:ab:5d:15:f7:e2:39:3d:c3:63:3a:0b: c2:84:5f:42:a5:1d:51:76:15:45:78:7d:19:18:f7: 49:65:bd:75:be:36:a6:10:be:d0:4f:9a:ba:c0:20: 7d:9e:98:85:06:6c:ef:b4:30:83:f8:b4:6e:17:63: a4:9a:e1:93:15:f0:f8:6b:2a:02:01:7e:00:c0:15: 86:53:5f:33:1d:de:54:e2:27:a2:c9:d5:36:ae:ab: c3:1f:12:32:44:24:71:79:5c:f6:3a:b5:f2:31:56: 87:9d:42:b7:53:97:80:7c:95:31:e9:0f:44:de:9f: 3f:24:ae:51:f6:7c:8f:cf:a4:ae:cb:22:32:83:00: 56:de:a3:f2:e5:b1:b0:e4:1b:94:14:af:32:db:8e: 64:f3:a7:47:7e:77:b5:5d:e6:3f:d4:1b:82:f5:12: 8b:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:5F:85:4D:76:3E:1C:F6:B6:E5:40:0F:3D:BD:4D:93:27:8B:17:15 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:58:dc:c2:d9:a6:55:ee:38:84:88:54:86:5c:34:10:23:b5: 30:3b:06:18:11:80:47:26:a5:cf:0a:16:e4:6e:91:06:b8:ee: 52:f9:f4:07:cd:22:09:c3:91:c2:e8:7e:6f:3a:2c:f0:39:26: 26:8f:a1:e4:33:7c:21:b6:5f:e4:9b:07:61:f4:b1:a6:43:53: 7b:aa:f4:e9:67:1a:66:b3:be:c5:80:fe:90:44:e1:94:c7:d0: 4c:d8:dc:1d:4e:6e:eb:9c:b8:63:49:d4:4a:27:19:d4:fc:ee: ab:76:21:e9:ff:7f:25:cd:6b:df:ff:e9:77:d7:6e:10:50:d5: c6:f7:b8:df:a6:e4:a2:19:c7:ba:e3:f7:90:35:e9:2e:72:7f: 0a:42:10:f5:72:d4:cc:6c:eb:63:d3:92:27:27:2b:fe:ec:3b: aa:6f:03:c8:2b:d1:6d:36:a0:cd:95:06:c8:17:44:e0:af:d4: 0d:f0:0e:72:39:80:21:c0:08:01:b8:d4:4e:36:f7:7f:16:26: 8c:3d:76:97:ff:56:e2:cd:ce:58:df:dd:3a:53:92:c5:e6:b4: 9a:2d:81:ca:0f:33:70:51:07:b3:1b:a9:50:a1:1d:bf:ab:ef: 08:1a:fe:4b:0c:dc:41:77:6c:63:08:b8:d1:6d:39:72:d3:eb: a5:a5:17:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqHnTWdIccEOzRv0Z5Dqpdj+fIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA3MjQwNTM2MjVaFw0yNjA3MjUwNjU0MjVaMDMxMTAvBgNV BAMTKEM5NUY4NTRENzYzRTFDRjZCNkU1NDAwRjNEQkQ0RDkzMjc4QjE3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnLFYPJauBYOmp4ThTZFkNhHzb Ei1fTvzfyEEG74atGtuxATEstRpJ7s1Dcmo7HRPbK+ubhfUW56wcntVEqOg84/+a U+iL4lucrUA4meh808Dq/oDmDvz71/ItJcCrXRX34jk9w2M6C8KEX0KlHVF2FUV4 fRkY90llvXW+NqYQvtBPmrrAIH2emIUGbO+0MIP4tG4XY6Sa4ZMV8PhrKgIBfgDA FYZTXzMd3lTiJ6LJ1Tauq8MfEjJEJHF5XPY6tfIxVoedQrdTl4B8lTHpD0Tenz8k rlH2fI/PpK7LIjKDAFbeo/LlsbDkG5QUrzLbjmTzp0d+d7Vd5j/UG4L1EovHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyV+FTXY+HPa25UAPPb1NkyeLFxUwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMlY3MLZplXuOISIVIZcNBAjtTA7BhgRgEcm pc8KFuRukQa47lL59AfNIgnDkcLofm86LPA5JiaPoeQzfCG2X+SbB2H0saZDU3uq 9OlnGmazvsWA/pBE4ZTH0EzY3B1ObuucuGNJ1EonGdT87qt2Ien/fyXNa9//6XfX bhBQ1cb3uN+m5KIZx7rj95A16S5yfwpCEPVy1Mxs62PTkicnK/7sO6pvA8gr0W02 oM2VBsgXROCv1A3wDnI5gCHACAG41E42938WJow9dpf/VuLNzljf3TpTksXmtJot gcoPM3BRB7MbqVChHb+r7wga/ksM3EF3bGMIuNFtOXLT66WlF6U= -----END CERTIFICATE-----Generated at Fri Jul 24 07:29:17 2026 by rpki-client