$ rpki-client -vvvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft File: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json) Hash identifier: vJOSqq43ixYicZwzyApkHZq7duWlVK4y11RjxKUKWE0= Subject key identifier: 4D:CB:DF:39:16:1B:B4:F6:41:29:B1:56:33:B4:0C:E0:10:1F:AA:42 Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 Certificate issuer: /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Certificate serial: 4FFFE8CCDB75BAA0EA15DAFA211F8CA2C2F48925 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 22:33:27 +0000 Manifest this update: Thu 24 Sep 2026 22:28:27 +0000 Manifest next update: Sat 26 Sep 2026 02:27:27 +0000 Files and hashes: 1: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: UF9+tRrcozl67lcOntYi7wS2BR9ihI7qXn538ibnfaw=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 02:27:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:ff:e8:cc:db:75:ba:a0:ea:15:da:fa:21:1f:8c:a2:c2:f4:89:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Validity Not Before: Sep 24 22:28:27 2026 GMT Not After : Sep 26 02:27:27 2026 GMT Subject: CN=4DCBDF39161BB4F64129B15633B40CE0101FAA42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d8:60:bd:cd:03:01:0a:34:96:9e:48:74:31: d0:95:4f:a9:87:9a:83:e4:0e:c5:45:20:99:82:c8: 92:8a:fc:a0:cb:95:79:50:c8:65:3a:c1:06:cb:9f: b7:b3:15:6f:98:a3:c4:0d:cf:73:e8:64:30:69:78: 49:ce:60:ec:5a:e9:cb:9a:4d:b1:9c:de:52:77:e8: 96:8b:05:88:c1:2d:d9:1f:6d:f4:de:b6:7b:1a:7b: 59:38:52:ed:bd:f3:01:f4:02:5e:09:33:db:41:d5: 77:df:fd:c0:43:01:3b:04:53:50:02:f0:8a:90:59: d2:1e:53:aa:f9:f0:ec:26:a6:9d:8c:e1:47:5f:8e: 43:48:23:cb:f3:3c:73:52:a0:e4:73:e5:0a:0f:c9: 15:fe:d1:a5:c2:12:55:a2:5e:5a:95:4a:24:d3:58: b6:90:59:2b:fc:08:2f:e3:f2:19:93:f9:7f:50:6c: fe:01:1b:fe:39:3d:7c:12:a6:65:75:c8:9a:66:05: b3:75:84:8f:d6:f4:f4:8f:ff:6f:ab:0c:46:b3:23: 65:46:df:24:f5:f6:e9:1e:d5:f8:aa:16:c9:17:e1: 80:ab:3c:19:a3:7c:a1:cf:55:50:e8:08:73:e7:de: e7:cb:cb:ae:3a:cb:4a:29:a0:83:f2:71:6f:38:6c: c2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CB:DF:39:16:1B:B4:F6:41:29:B1:56:33:B4:0C:E0:10:1F:AA:42 X509v3 Authority Key Identifier: keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b8:c6:46:bb:ef:68:58:b2:a9:ee:14:61:15:5c:e2:e0:e9: fa:84:d3:f9:b3:20:cf:bd:99:b1:5c:37:09:74:32:a1:58:83: 8a:1e:fb:b7:d5:65:fe:cd:2b:aa:3c:0a:23:6b:f7:dd:5f:3b: 2b:89:c9:b7:bc:d8:d5:1a:99:96:69:24:52:13:e8:3a:a8:cd: 0f:ff:b7:4a:06:b8:92:1f:db:dc:1c:e2:06:a9:f9:a8:af:4a: f9:dd:e0:d6:a3:01:78:de:97:0d:33:dc:6e:9c:d0:4f:20:ec: 25:24:1a:70:ce:07:da:f4:c9:03:0c:4b:75:36:07:42:f8:f7: cf:8b:f4:25:50:1b:34:d5:1c:49:0a:ca:15:7e:c5:18:81:99: 2a:67:f1:a5:03:6d:dd:93:90:d1:b4:c3:d9:98:66:bb:b8:3b: e9:fc:09:15:a3:fa:32:6c:ef:84:59:46:58:b9:01:cc:2c:fe: 82:12:75:06:fd:c2:6e:d1:36:87:56:e6:46:a4:36:f9:d5:34: 91:cf:ea:ae:52:53:8b:24:14:0a:24:e0:a6:1d:84:08:32:28: bd:3b:47:28:a2:a3:53:b8:d7:9f:2f:f5:38:38:58:b0:9f:62: b4:9d:2d:5e:01:03:89:eb:12:c1:d4:dd:96:ae:10:76:68:7e: 7a:97:46:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT//ozNt1uqDqFdr6IR+MosL0iSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlE OEY0NEVGODAeFw0yNjA5MjQyMjI4MjdaFw0yNjA5MjYwMjI3MjdaMDMxMTAvBgNV BAMTKDREQ0JERjM5MTYxQkI0RjY0MTI5QjE1NjMzQjQwQ0UwMTAxRkFBNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2GC9zQMBCjSWnkh0MdCVT6mH moPkDsVFIJmCyJKK/KDLlXlQyGU6wQbLn7ezFW+Yo8QNz3PoZDBpeEnOYOxa6cua TbGc3lJ36JaLBYjBLdkfbfTetnsae1k4Uu298wH0Al4JM9tB1Xff/cBDATsEU1AC 8IqQWdIeU6r58Owmpp2M4UdfjkNII8vzPHNSoORz5QoPyRX+0aXCElWiXlqVSiTT WLaQWSv8CC/j8hmT+X9QbP4BG/45PXwSpmV1yJpmBbN1hI/W9PSP/2+rDEazI2VG 3yT19uke1fiqFskX4YCrPBmjfKHPVVDoCHPn3ufLy646y0opoIPycW84bMKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcvfORYbtPZBKbFWM7QM4BAfqkIwHwYDVR0j BBgwFoAUQL7fET7Cjyekc1yBWS8Bqdj0TvgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4MjU5ZDYtMjY1NS00NDE3LWJlYzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEz RUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlEOEY0NEVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MEJFREYxMTNFQzI4RjI3QTQ3MzVDODE1OTJGMDFBOUQ4RjQ0 RUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAx QTlEOEY0NEVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa4xka772hYsqnuFGEVXOLg6fqE0/mzIM+9 mbFcNwl0MqFYg4oe+7fVZf7NK6o8CiNr991fOyuJybe82NUamZZpJFIT6DqozQ// t0oGuJIf29wc4gap+aivSvnd4NajAXjelw0z3G6c0E8g7CUkGnDOB9r0yQMMS3U2 B0L498+L9CVQGzTVHEkKyhV+xRiBmSpn8aUDbd2TkNG0w9mYZru4O+n8CRWj+jJs 74RZRli5Acws/oISdQb9wm7RNodW5kakNvnVNJHP6q5SU4skFAok4KYdhAgyKL07 Ryiio1O4158v9Tg4WLCfYrSdLV4BA4nrEsHU3ZauEHZofnqXRjY= -----END CERTIFICATE-----Generated at Fri Sep 25 07:33:15 2026 by rpki-client