$ rpki-client -vvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft File: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json) Hash identifier: T78AfZtogZZk660/23DfgchsWeSvGsND5+MOtjDrSHI= Subject key identifier: D6:2E:7D:A0:43:37:08:7A:DD:71:BA:C7:52:88:89:60:9E:3A:CA:50 Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 Certificate issuer: /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Certificate serial: 44EF9598D8834F07707EA409506433E2A9C4B8CE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 05:10:50 +0000 Manifest this update: Fri 24 Jul 2026 05:05:50 +0000 Manifest next update: Sat 25 Jul 2026 07:56:50 +0000 Files and hashes: 1: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=) 2: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: SKs9LvBikADN5LJXZRQYq2zqnvEsnU+RZm9BNsCRUms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:ef:95:98:d8:83:4f:07:70:7e:a4:09:50:64:33:e2:a9:c4:b8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Validity Not Before: Jul 24 05:05:50 2026 GMT Not After : Jul 25 07:56:50 2026 GMT Subject: CN=D62E7DA04337087ADD71BAC7528889609E3ACA50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:e4:06:b0:a0:d5:1b:1c:20:0e:ea:00:40:5c: cc:45:e3:d0:9b:66:10:67:85:c7:2d:5a:0a:07:4d: b9:0f:d0:cc:59:f4:61:10:52:97:82:bf:92:26:b8: ed:81:11:be:34:22:3f:22:0a:10:92:48:ae:98:7f: 2a:79:e4:cb:79:4c:6e:66:d9:79:14:f8:cd:99:62: bc:6e:38:7b:08:a6:f9:6e:37:f0:84:39:f1:d3:4d: 2a:64:c7:a6:ff:06:f2:e8:d1:f3:ab:14:4c:72:59: 92:7a:52:32:e0:7b:8c:1a:ab:d2:bf:8a:61:01:ea: 68:f0:0a:bc:d5:11:e7:14:7b:4b:8b:dd:dd:13:6a: f2:4a:b7:80:c9:a7:5f:78:9c:36:c2:a5:07:8c:03: 19:29:5e:d4:55:ab:7e:8b:66:ae:8e:00:2d:5b:55: 9e:f9:bd:87:40:df:66:ce:18:d0:76:a5:fb:e2:61: 04:24:ee:30:35:74:d3:ce:15:4d:34:d6:90:69:34: 76:f3:dc:56:76:5f:9d:d6:c8:df:d1:0d:ec:98:79: c4:34:0e:09:6b:e7:06:5b:be:05:7e:23:f0:ed:8b: 76:fa:66:da:96:f6:77:f7:f9:81:46:e5:a4:d3:ee: cb:38:0d:81:9b:71:45:0d:26:54:31:70:93:db:b7: b5:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:2E:7D:A0:43:37:08:7A:DD:71:BA:C7:52:88:89:60:9E:3A:CA:50 X509v3 Authority Key Identifier: keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:9c:c4:d7:35:0e:14:7c:b9:96:c7:2a:09:99:a1:e9:28:a7: 1b:33:c4:47:2e:c9:24:ef:4d:77:ac:89:79:6a:07:ab:4a:95: 50:d4:32:0b:04:90:34:29:3c:27:27:15:2d:2a:19:8b:cb:0a: ba:01:88:6d:43:c6:73:57:59:dd:be:b8:9e:93:ea:e6:d8:c2: 26:09:be:fd:76:92:6c:0e:51:c3:0d:d9:34:e1:ec:dc:df:41: 18:c5:dc:94:6d:78:8f:79:7e:01:6d:f1:05:63:d3:fa:9e:8f: cd:65:2b:12:c5:7b:2a:c9:51:aa:64:7f:7e:d6:33:ad:ec:6d: 0c:5a:d9:54:28:c0:8b:29:b3:f5:8c:ad:dc:2a:da:62:ec:d3: 4a:c2:e7:3d:28:68:9f:da:6e:7b:c9:f7:e0:5f:d1:52:71:60: 27:55:0e:2e:68:42:52:f5:9b:3a:0e:00:2c:f7:a3:51:8f:97: 51:44:23:bd:0d:aa:83:a4:9a:80:f2:f5:8b:f4:ae:c3:3d:a5: 8f:9a:27:13:af:09:71:93:35:25:33:75:e3:5c:42:e9:5d:77: d6:fb:ac:ab:17:c7:d3:b5:40:ac:09:64:6a:f4:30:ee:c7:7e: 3f:ee:b0:a6:5b:a3:8d:dc:3a:7d:5b:48:81:d0:c9:e8:46:46: f3:74:e5:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURO+VmNiDTwdwfqQJUGQz4qnEuM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlE OEY0NEVGODAeFw0yNjA3MjQwNTA1NTBaFw0yNjA3MjUwNzU2NTBaMDMxMTAvBgNV BAMTKEQ2MkU3REEwNDMzNzA4N0FERDcxQkFDNzUyODg4OTYwOUUzQUNBNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV5AawoNUbHCAO6gBAXMxF49Cb ZhBnhcctWgoHTbkP0MxZ9GEQUpeCv5ImuO2BEb40Ij8iChCSSK6Yfyp55Mt5TG5m 2XkU+M2ZYrxuOHsIpvluN/CEOfHTTSpkx6b/BvLo0fOrFExyWZJ6UjLge4waq9K/ imEB6mjwCrzVEecUe0uL3d0TavJKt4DJp194nDbCpQeMAxkpXtRVq36LZq6OAC1b VZ75vYdA32bOGNB2pfviYQQk7jA1dNPOFU001pBpNHbz3FZ2X53WyN/RDeyYecQ0 Dglr5wZbvgV+I/Dti3b6ZtqW9nf3+YFG5aTT7ss4DYGbcUUNJlQxcJPbt7UzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1i59oEM3CHrdcbrHUoiJYJ46ylAwHwYDVR0j BBgwFoAUQL7fET7Cjyekc1yBWS8Bqdj0TvgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4MjU5ZDYtMjY1NS00NDE3LWJlYzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEz RUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlEOEY0NEVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MEJFREYxMTNFQzI4RjI3QTQ3MzVDODE1OTJGMDFBOUQ4RjQ0 RUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAx QTlEOEY0NEVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFScxNc1DhR8uZbHKgmZoekopxszxEcuySTv TXesiXlqB6tKlVDUMgsEkDQpPCcnFS0qGYvLCroBiG1DxnNXWd2+uJ6T6ubYwiYJ vv12kmwOUcMN2TTh7NzfQRjF3JRteI95fgFt8QVj0/qej81lKxLFeyrJUapkf37W M63sbQxa2VQowIsps/WMrdwq2mLs00rC5z0oaJ/abnvJ9+Bf0VJxYCdVDi5oQlL1 mzoOACz3o1GPl1FEI70NqoOkmoDy9Yv0rsM9pY+aJxOvCXGTNSUzdeNcQuldd9b7 rKsXx9O1QKwJZGr0MO7Hfj/usKZbo43cOn1bSIHQyehGRvN05VM= -----END CERTIFICATE-----Generated at Fri Jul 24 09:28:56 2026 by rpki-client