$ rpki-client -vvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json) Hash identifier: Aozu2wHDSPDx8yAJXvrXEimXnW1XTkrA9NbvIENFrXI= Subject key identifier: 55:0B:84:E1:B9:BA:C1:53:C3:2D:66:D2:ED:EF:4C:05:8A:8B:8D:A7 Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Certificate serial: 5216A622BA9C7371E05E60E94EB7843BD697B85B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:41:16 +0000 Manifest this update: Tue 12 May 2026 16:36:16 +0000 Manifest next update: Wed 13 May 2026 17:05:16 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=) 2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: 4BLQoeZkK6HCoTOPIsVcRoiuya6dp0rTGSbPUgCul8M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:16:a6:22:ba:9c:73:71:e0:5e:60:e9:4e:b7:84:3b:d6:97:b8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Validity Not Before: May 12 16:36:16 2026 GMT Not After : May 13 17:05:16 2026 GMT Subject: CN=550B84E1B9BAC153C32D66D2EDEF4C058A8B8DA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:89:54:df:90:44:37:78:2b:a1:1c:71:f6:43: ec:67:81:da:13:bc:84:55:7c:b5:e4:a2:77:41:d4: 08:59:16:24:e3:15:ce:6a:7f:1d:78:ba:c2:5b:bb: 00:bf:59:16:7e:12:b0:01:c9:27:8c:39:c5:17:ce: 05:18:fc:df:db:cd:5a:b7:1c:90:e9:9e:31:5a:b7: 08:6d:a4:ef:e9:ec:71:d5:85:14:f2:07:9f:35:b5: e8:b1:c7:41:63:18:47:a2:81:2b:62:95:0d:b8:5c: d6:6c:a5:02:19:84:a1:2a:0e:df:3a:d4:5b:a1:10: f4:19:0d:df:a6:6d:8b:b6:26:06:48:54:92:43:a5: 00:86:61:5d:ad:c0:a5:1a:83:23:95:cd:63:90:79: 76:2e:b6:9f:7f:de:e3:23:36:a1:b7:e2:cd:52:76: 73:51:09:32:36:88:b6:ec:04:06:4a:6d:fb:70:4f: f8:70:fc:e0:cc:1d:77:18:a4:11:ce:d9:51:ff:8f: d3:d7:db:3c:52:6f:26:4c:35:a6:63:18:f5:88:d4: 62:ae:b2:f2:1c:ce:24:cf:d7:5f:2a:b3:68:d2:c5: d9:c8:fd:14:cc:36:d2:1e:fb:5e:93:41:43:14:d8: 40:1c:a2:4f:06:fc:4d:27:fc:2f:4c:e1:55:44:d4: 9e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:0B:84:E1:B9:BA:C1:53:C3:2D:66:D2:ED:EF:4C:05:8A:8B:8D:A7 X509v3 Authority Key Identifier: keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:32:2f:89:b7:f5:3e:70:92:19:31:9b:c3:23:a8:ae:d4:21: 65:f6:82:9b:2d:84:90:76:6e:63:96:86:df:98:5a:55:e5:be: dc:33:08:d7:3b:3a:40:1f:b3:b0:62:03:7f:0b:af:31:4a:b1: f9:b5:b4:6c:41:f2:6b:86:cc:17:72:96:ef:26:c6:ed:b0:f6: 5e:13:a2:e1:3a:07:7b:1f:3c:75:45:e0:c1:18:7f:ce:37:0d: f8:b3:c1:2e:8f:ad:0e:80:92:63:b8:74:05:c5:89:a1:c3:25: 73:b3:7a:4b:5e:46:b6:e7:ef:66:38:d8:1f:e5:2c:4c:54:58: d6:2d:76:c6:50:85:8b:b7:60:5d:26:4e:94:e6:f6:c3:35:60: a0:49:42:71:30:9e:4f:06:bb:12:fc:53:ac:82:49:5e:8c:39: 6f:eb:2a:34:45:26:91:a4:1b:06:b4:f6:14:03:fc:b6:e9:84: d3:5e:88:dd:20:b5:66:44:27:0f:3c:b5:5d:94:bd:12:e5:82: be:19:5c:dd:e0:5d:2d:7b:61:60:07:48:c2:83:74:3e:4d:50: b9:3c:17:0e:c3:af:85:a7:4e:a6:be:3e:fa:98:18:e8:93:b5: a4:24:03:3b:47:f6:2f:98:83:29:5e:5a:12:55:45:bf:56:65: b5:a6:5f:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUhamIrqcc3HgXmDpTreEO9aXuFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3 NERDMkEwNTAeFw0yNjA1MTIxNjM2MTZaFw0yNjA1MTMxNzA1MTZaMDMxMTAvBgNV BAMTKDU1MEI4NEUxQjlCQUMxNTNDMzJENjZEMkVERUY0QzA1OEE4QjhEQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8iVTfkEQ3eCuhHHH2Q+xngdoT vIRVfLXkondB1AhZFiTjFc5qfx14usJbuwC/WRZ+ErABySeMOcUXzgUY/N/bzVq3 HJDpnjFatwhtpO/p7HHVhRTyB581teixx0FjGEeigStilQ24XNZspQIZhKEqDt86 1FuhEPQZDd+mbYu2JgZIVJJDpQCGYV2twKUagyOVzWOQeXYutp9/3uMjNqG34s1S dnNRCTI2iLbsBAZKbftwT/hw/ODMHXcYpBHO2VH/j9PX2zxSbyZMNaZjGPWI1GKu svIcziTP118qs2jSxdnI/RTMNtIe+16TQUMU2EAcok8G/E0n/C9M4VVE1J4zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVQuE4bm6wVPDLWbS7e9MBYqLjacwHwYDVR0j BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2 RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIoyL4m39T5wkhkxm8MjqK7UIWX2gpsthJB2 bmOWht+YWlXlvtwzCNc7OkAfs7BiA38LrzFKsfm1tGxB8muGzBdylu8mxu2w9l4T ouE6B3sfPHVF4MEYf843DfizwS6PrQ6AkmO4dAXFiaHDJXOzekteRrbn72Y42B/l LExUWNYtdsZQhYu3YF0mTpTm9sM1YKBJQnEwnk8GuxL8U6yCSV6MOW/rKjRFJpGk Gwa09hQD/LbphNNeiN0gtWZEJw88tV2UvRLlgr4ZXN3gXS17YWAHSMKDdD5NULk8 Fw7Dr4WnTqa+PvqYGOiTtaQkAztH9i+YgyleWhJVRb9WZbWmX3g= -----END CERTIFICATE-----Generated at Tue May 12 22:47:09 2026 by rpki-client