$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json) Hash identifier: G0wAX1jni0IB9hjKBj+D+zGFhIV6kbHgYqDbQVqS4mo= Subject key identifier: BE:30:C4:66:38:D0:EE:C9:25:31:02:9D:70:CB:74:34:4D:18:55:D8 Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Certificate serial: 29B05DE3CEE7AC38950295788C22484A4CCF8FCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 14:17:22 +0000 Manifest this update: Thu 23 Jul 2026 14:12:22 +0000 Manifest next update: Fri 24 Jul 2026 18:00:22 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=) 2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: osd6b3ajQyrad6whZxIPFLqNHFqgtOMGqPihqp/HsRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:b0:5d:e3:ce:e7:ac:38:95:02:95:78:8c:22:48:4a:4c:cf:8f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Validity Not Before: Jul 23 14:12:22 2026 GMT Not After : Jul 24 18:00:22 2026 GMT Subject: CN=BE30C46638D0EEC92531029D70CB74344D1855D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ed:a6:5f:a7:87:79:84:a1:b0:6e:54:24:00: 38:f0:86:ec:ce:a5:7a:f6:e1:44:81:fa:fc:ed:bd: dd:b8:33:b4:1c:d8:4c:09:79:4f:43:57:c2:b2:c8: 82:3c:c1:79:d9:95:de:c9:49:d5:70:bc:dd:4b:35: 0a:4d:17:18:21:69:13:09:fc:d6:0c:4b:c2:30:08: de:e8:fd:4b:c1:4d:48:38:cf:88:ac:c5:10:c3:ae: fc:35:25:6b:7c:3e:8f:2a:9c:ac:85:f5:d2:21:75: e2:1d:46:36:13:e1:5a:7a:66:fc:35:77:68:7f:68: 3c:42:26:0f:a8:76:38:f4:5e:a9:a4:2a:c5:16:77: 62:f8:f1:36:b0:ee:fa:45:77:2a:60:f2:4c:41:90: 3f:88:35:6b:eb:3d:89:36:ad:4b:86:bb:03:fd:3b: e1:f8:87:97:7e:b2:cf:be:f2:8d:3e:54:78:11:32: 1d:9e:8a:95:6f:47:16:f8:9e:42:9d:7b:7b:a5:8c: 16:d0:74:4c:9a:4c:7e:b3:56:dc:92:43:af:cd:73: 60:2a:6a:31:4b:f5:1e:21:f3:d9:63:65:41:20:02: 23:a5:11:52:19:40:2d:02:6d:9b:b4:88:d5:b4:27: 2b:0e:68:b2:d9:db:5f:c2:fc:47:ea:c8:71:53:bc: d3:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:30:C4:66:38:D0:EE:C9:25:31:02:9D:70:CB:74:34:4D:18:55:D8 X509v3 Authority Key Identifier: keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:a8:ef:ec:96:b2:eb:a5:59:e0:96:28:3f:12:93:7e:91:8f: 18:7a:30:26:dd:1c:e4:53:e4:41:98:ae:7b:74:78:9e:16:d9: ff:c0:9b:d2:f9:6a:3e:34:4b:d4:6e:1c:e0:f2:91:f3:40:14: 7a:97:a4:92:9f:9e:de:93:bc:1e:c3:35:f3:70:09:b9:99:8c: 4d:3b:4d:b2:e6:3e:5a:c4:18:f6:00:d6:cf:50:b8:1a:66:0f: 40:11:4c:fd:eb:15:a5:20:1d:79:bd:8a:d1:bf:b9:13:22:0c: c1:c3:10:d0:a3:99:23:78:e2:70:4d:f9:5b:a1:5d:43:95:86: 88:ba:52:73:9a:50:c4:28:2d:7e:52:75:8d:a5:85:d4:bc:4d: 18:e6:1e:2d:e4:9a:51:58:89:ad:4e:dc:5e:d5:37:ce:95:37: 2a:53:cd:57:2b:71:e2:73:c7:c8:c1:ce:e0:90:91:d7:6e:60: b4:fd:cc:1a:80:6e:d2:7e:25:b1:35:37:1b:31:d7:af:dd:1f: 34:af:a1:73:1b:9c:2e:21:70:9e:90:ab:1f:44:78:3e:f5:91: 07:33:c7:22:af:e3:1f:8a:ff:7e:52:2e:61:94:83:09:af:09: 28:76:5b:fa:01:14:90:1e:df:e1:44:0b:3b:0d:79:18:f9:ea: 6b:be:cb:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKbBd487nrDiVApV4jCJISkzPj8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3 NERDMkEwNTAeFw0yNjA3MjMxNDEyMjJaFw0yNjA3MjQxODAwMjJaMDMxMTAvBgNV BAMTKEJFMzBDNDY2MzhEMEVFQzkyNTMxMDI5RDcwQ0I3NDM0NEQxODU1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV7aZfp4d5hKGwblQkADjwhuzO pXr24USB+vztvd24M7Qc2EwJeU9DV8KyyII8wXnZld7JSdVwvN1LNQpNFxghaRMJ /NYMS8IwCN7o/UvBTUg4z4isxRDDrvw1JWt8Po8qnKyF9dIhdeIdRjYT4Vp6Zvw1 d2h/aDxCJg+odjj0XqmkKsUWd2L48Taw7vpFdypg8kxBkD+INWvrPYk2rUuGuwP9 O+H4h5d+ss++8o0+VHgRMh2eipVvRxb4nkKde3uljBbQdEyaTH6zVtySQ6/Nc2Aq ajFL9R4h89ljZUEgAiOlEVIZQC0CbZu0iNW0JysOaLLZ21/C/EfqyHFTvNPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvjDEZjjQ7sklMQKdcMt0NE0YVdgwHwYDVR0j BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2 RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2o7+yWsuulWeCWKD8Sk36Rjxh6MCbdHORT 5EGYrnt0eJ4W2f/Am9L5aj40S9RuHODykfNAFHqXpJKfnt6TvB7DNfNwCbmZjE07 TbLmPlrEGPYA1s9QuBpmD0ARTP3rFaUgHXm9itG/uRMiDMHDENCjmSN44nBN+Vuh XUOVhoi6UnOaUMQoLX5SdY2lhdS8TRjmHi3kmlFYia1O3F7VN86VNypTzVcrceJz x8jBzuCQkdduYLT9zBqAbtJ+JbE1Nxsx16/dHzSvoXMbnC4hcJ6Qqx9EeD71kQcz xyKv4x+K/35SLmGUgwmvCSh2W/oBFJAe3+FECzsNeRj56mu+y0E= -----END CERTIFICATE-----Generated at Fri Jul 24 05:09:27 2026 by rpki-client