$ rpki-client -vvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft File: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json) Hash identifier: o+BAos+1mybVhLemFbDxau3WqM/0oP0tQe7a5mjEB3k= Subject key identifier: 19:E7:66:AF:15:70:16:03:EE:FD:E9:4A:72:1E:95:1E:92:A1:6B:FF Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 Certificate issuer: /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Certificate serial: 6EB9B7B4260C86AE1598EF4BE8461E5C6671F2E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft Manifest number: 0F Signing time: Tue 12 May 2026 18:18:33 +0000 Manifest this update: Tue 12 May 2026 18:13:33 +0000 Manifest next update: Wed 13 May 2026 20:30:33 +0000 Files and hashes: 1: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: t6KQCpc5EIcNiYY3iLbmXz5K0N60u+e9aLb4eliUNL0=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 20:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:b9:b7:b4:26:0c:86:ae:15:98:ef:4b:e8:46:1e:5c:66:71:f2:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Validity Not Before: May 12 18:13:33 2026 GMT Not After : May 13 20:30:33 2026 GMT Subject: CN=19E766AF15701603EEFDE94A721E951E92A16BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:87:96:45:78:33:26:5d:59:f6:7b:97:81:b4: ba:91:8d:71:7c:55:84:60:13:6c:eb:ae:47:ad:19: ec:f3:2a:3d:43:13:1f:9f:0e:24:c1:78:0f:ca:6e: 9c:1b:e8:46:19:d6:40:7c:db:17:02:1f:41:1e:21: bb:8a:25:c9:47:42:f8:f1:b2:7d:fd:d1:56:ff:d1: 93:ad:1a:e2:bc:a9:65:b2:a1:ad:72:d5:41:1f:b8: a8:1c:fb:22:48:e9:c2:3b:73:1a:44:09:e9:02:8a: 45:5b:c6:6d:a4:f6:92:4d:ec:96:9f:7c:9e:e7:c7: 6e:f4:1d:4e:f7:14:c8:40:ae:de:69:df:c4:63:e8: 3f:3e:cf:99:d5:d8:c5:4c:64:28:88:36:14:65:7b: 3d:be:1d:c9:ab:63:19:36:aa:28:58:67:7f:3e:72: 10:70:cb:06:22:32:e9:27:76:8b:55:b3:29:cb:a2: 64:24:0a:ff:79:10:ae:67:2c:5a:4e:21:83:81:18: e2:0c:dc:41:d8:2a:49:7c:c1:7d:59:d0:b3:6e:56: 03:8d:c7:8b:0a:cc:0d:63:da:35:5d:91:9d:b3:43: cc:d9:18:db:87:e3:d4:15:c1:fb:26:27:c5:6d:9a: 69:f7:3c:3d:ae:f5:a4:2e:6d:d8:98:fb:99:54:1a: 6e:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E7:66:AF:15:70:16:03:EE:FD:E9:4A:72:1E:95:1E:92:A1:6B:FF X509v3 Authority Key Identifier: keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:25:72:44:07:f2:50:ba:47:1a:da:1c:20:25:a5:79:91:85: d8:0d:fb:30:85:93:84:61:a2:b0:4c:72:f4:04:83:be:9b:a8: 64:81:9f:4d:5c:78:3a:99:e6:ff:b9:26:85:53:26:6d:b7:c7: e1:ba:be:1c:3c:5c:22:f3:8d:ba:03:6f:51:b1:2d:32:c6:56: ed:bb:68:74:e1:67:81:ef:f5:69:6c:df:08:3f:6d:9a:1d:0f: ba:9a:f8:98:8d:61:42:8b:30:14:cf:1b:8b:8c:6f:c8:6e:58: 8f:05:93:40:0e:80:f0:17:77:a6:fc:75:49:15:00:d1:f4:a0: 2d:be:ee:df:56:7f:3b:f0:c3:3a:1f:4c:ed:b5:1d:dd:4b:d9: f7:22:10:c9:93:04:0a:b1:73:3b:57:49:bf:c6:df:84:cf:fa: 2c:c6:5b:80:67:da:92:40:13:15:71:21:80:87:df:2d:45:98: 4d:04:4b:ac:50:8a:53:10:2c:e1:3a:cb:fa:12:e1:ea:e4:09: 63:f7:00:74:c6:c6:53:cb:e4:2f:3e:08:8b:87:90:00:91:39: d3:ab:e6:ab:d1:90:4d:97:cb:75:19:4a:05:84:68:f6:2e:f0: d2:57:f5:c3:9f:d5:9d:bd:20:35:c7:b9:18:73:96:0d:53:1b: 1e:75:dc:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrm3tCYMhq4VmO9L6EYeXGZx8uMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlE OEY0NEVGODAeFw0yNjA1MTIxODEzMzNaFw0yNjA1MTMyMDMwMzNaMDMxMTAvBgNV BAMTKDE5RTc2NkFGMTU3MDE2MDNFRUZERTk0QTcyMUU5NTFFOTJBMTZCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUh5ZFeDMmXVn2e5eBtLqRjXF8 VYRgE2zrrketGezzKj1DEx+fDiTBeA/Kbpwb6EYZ1kB82xcCH0EeIbuKJclHQvjx sn390Vb/0ZOtGuK8qWWyoa1y1UEfuKgc+yJI6cI7cxpECekCikVbxm2k9pJN7Jaf fJ7nx270HU73FMhArt5p38Rj6D8+z5nV2MVMZCiINhRlez2+HcmrYxk2qihYZ38+ chBwywYiMukndotVsynLomQkCv95EK5nLFpOIYOBGOIM3EHYKkl8wX1Z0LNuVgON x4sKzA1j2jVdkZ2zQ8zZGNuH49QVwfsmJ8Vtmmn3PD2u9aQubdiY+5lUGm5nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGedmrxVwFgPu/elKch6VHpKha/8wHwYDVR0j BBgwFoAUQL7fET7Cjyekc1yBWS8Bqdj0TvgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4MjU5ZDYtMjY1NS00NDE3LWJlYzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEz RUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlEOEY0NEVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MEJFREYxMTNFQzI4RjI3QTQ3MzVDODE1OTJGMDFBOUQ4RjQ0 RUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAx QTlEOEY0NEVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHglckQH8lC6RxraHCAlpXmRhdgN+zCFk4Rh orBMcvQEg76bqGSBn01ceDqZ5v+5JoVTJm23x+G6vhw8XCLzjboDb1GxLTLGVu27 aHThZ4Hv9Wls3wg/bZodD7qa+JiNYUKLMBTPG4uMb8huWI8Fk0AOgPAXd6b8dUkV ANH0oC2+7t9WfzvwwzofTO21Hd1L2fciEMmTBAqxcztXSb/G34TP+izGW4Bn2pJA ExVxIYCH3y1FmE0ES6xQilMQLOE6y/oS4erkCWP3AHTGxlPL5C8+CIuHkACROdOr 5qvRkE2Xy3UZSgWEaPYu8NJX9cOf1Z29IDXHuRhzlg1TGx513Dg= -----END CERTIFICATE-----Generated at Wed May 13 02:59:53 2026 by rpki-client