$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft File: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft (raw, json) Hash identifier: dv6K2ubUjnmQSfDMvjPw1ZYVY5rqmvJjl48VycOc3RE= Subject key identifier: E5:C3:3E:3A:58:E1:12:29:77:90:DC:14:61:7C:19:8D:64:1C:74:16 Authority key identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D Certificate issuer: /CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Certificate serial: 05BD59B255ECE76F89679E6A08AA82249074A49C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 03:40:13 +0000 Manifest this update: Thu 24 Sep 2026 03:35:13 +0000 Manifest next update: Fri 25 Sep 2026 05:30:13 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: 869cfXhcvOlyh0uB1ikVriiCxFRRijRoXRyS0ETdNZQ=) 2: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl (hash: D9nSIbjJyOe1SFunSBgakuZSmkruMbt5wcrq8kj+H6w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:bd:59:b2:55:ec:e7:6f:89:67:9e:6a:08:aa:82:24:90:74:a4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Validity Not Before: Sep 24 03:35:13 2026 GMT Not After : Sep 25 05:30:13 2026 GMT Subject: CN=E5C33E3A58E112297790DC14617C198D641C7416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:13:10:76:b8:7e:c3:62:c7:50:d3:42:72:61: 42:03:85:09:b3:f7:f1:32:e8:53:d7:7e:de:3c:20: b1:31:2c:48:ff:0b:fd:ee:54:d9:8c:8c:57:25:bd: 90:e0:3e:f4:ce:60:e1:8e:fe:74:6b:14:72:11:9d: 4f:fa:b0:9c:6f:49:6d:0e:51:09:d1:90:60:72:da: 2a:90:8e:04:fc:16:11:3f:e0:d6:22:58:10:99:fb: e1:d1:67:f9:13:65:bf:3b:9f:4f:57:53:eb:4b:f4: 76:db:75:91:5a:b8:97:22:9d:9f:cd:91:9f:87:b8: 45:33:46:61:cf:a6:c2:e4:b5:c9:6c:b5:c4:ac:21: 43:41:bc:ba:de:5c:b8:20:2a:5b:50:c4:ce:ec:95: 9c:9f:5d:09:fd:dd:5e:96:3a:f0:ac:03:07:21:f9: 94:c4:ae:45:f0:bc:cb:17:58:e3:c5:94:1b:04:82: 5e:71:d6:8a:10:8b:80:2a:a0:e9:15:99:e6:bc:18: 66:7d:3c:94:90:6a:da:bf:a9:37:d7:55:75:7f:22: 53:34:6e:e7:f4:de:cc:df:b2:b3:41:43:78:ef:d2: 31:39:b9:52:e1:bd:b3:48:10:dd:2a:32:7d:43:f4: b6:97:7b:bd:b7:c8:04:2b:d3:f3:e2:f1:5b:ea:81: 5a:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C3:3E:3A:58:E1:12:29:77:90:DC:14:61:7C:19:8D:64:1C:74:16 X509v3 Authority Key Identifier: keyid:4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8a:78:a9:c8:30:2f:9a:bb:12:76:da:9a:44:72:9a:89:9a: 19:d7:d1:b9:74:8f:01:20:a7:af:81:93:54:07:ea:18:58:09: 9a:99:0d:0c:57:ca:f6:f6:25:b7:d1:43:76:3e:33:46:3c:99: f8:bc:61:b7:08:73:c0:29:54:84:0e:20:10:6e:f0:db:00:c5: 7a:d2:44:19:9d:3a:58:f0:f5:a0:c5:e2:fb:b1:f1:8f:7f:1e: c6:24:c7:28:24:73:fd:79:6a:5e:de:b0:ac:bd:f5:b9:10:51: e1:e3:9f:a1:c7:c5:7a:cd:c9:d2:ba:a1:2f:43:be:c9:6a:59: 53:36:ca:4e:d5:d1:3e:d2:10:03:d2:57:b8:9a:02:f4:12:95: 6a:96:22:52:f8:dd:3c:a5:14:54:74:af:82:2c:93:7a:18:20: 39:4f:46:51:e9:58:1c:b1:20:0b:2d:0e:de:35:54:9d:47:5c: 82:78:98:95:de:1a:6e:32:7b:05:99:4c:40:39:37:e9:00:18: ad:fa:cb:51:b2:1b:30:08:8c:8e:58:23:24:fd:3e:5a:d3:62: 04:4f:82:60:53:f1:72:00:22:8b:98:5e:4e:66:77:68:25:ad: 69:79:d4:af:5b:38:44:d0:71:80:84:6d:28:63:ec:e9:8b:fe: bf:c1:be:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBb1ZslXs52+JZ55qCKqCJJB0pJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlBOTM1 QzU3M0Q0RDAeFw0yNjA5MjQwMzM1MTNaFw0yNjA5MjUwNTMwMTNaMDMxMTAvBgNV BAMTKEU1QzMzRTNBNThFMTEyMjk3NzkwREMxNDYxN0MxOThENjQxQzc0MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiExB2uH7DYsdQ00JyYUIDhQmz 9/Ey6FPXft48ILExLEj/C/3uVNmMjFclvZDgPvTOYOGO/nRrFHIRnU/6sJxvSW0O UQnRkGBy2iqQjgT8FhE/4NYiWBCZ++HRZ/kTZb87n09XU+tL9HbbdZFauJcinZ/N kZ+HuEUzRmHPpsLktclstcSsIUNBvLreXLggKltQxM7slZyfXQn93V6WOvCsAwch +ZTErkXwvMsXWOPFlBsEgl5x1ooQi4AqoOkVmea8GGZ9PJSQatq/qTfXVXV/IlM0 buf03szfsrNBQ3jv0jE5uVLhvbNIEN0qMn1D9LaXe723yAQr0/Pi8VvqgVqlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5cM+OljhEil3kNwUYXwZjWQcdBYwHwYDVR0j BBgwFoAUT0C9cJ0DQLfojN+dgBCak1xXPU0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBmNjIxNzYtZTE2NC00OTJjLThhNzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5 RDAzNDBCN0U4OENERjlEODAxMDlBOTM1QzU3M0Q0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjQwQkQ3MDlEMDM0MEI3RTg4Q0RGOUQ4MDEwOUE5MzVDNTcz RDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlB OTM1QzU3M0Q0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGKeKnIMC+auxJ22ppEcpqJmhnX0bl0jwEg p6+Bk1QH6hhYCZqZDQxXyvb2JbfRQ3Y+M0Y8mfi8YbcIc8ApVIQOIBBu8NsAxXrS RBmdOljw9aDF4vux8Y9/HsYkxygkc/15al7esKy99bkQUeHjn6HHxXrNydK6oS9D vslqWVM2yk7V0T7SEAPSV7iaAvQSlWqWIlL43TylFFR0r4Isk3oYIDlPRlHpWByx IAstDt41VJ1HXIJ4mJXeGm4yewWZTEA5N+kAGK36y1GyGzAIjI5YIyT9PlrTYgRP gmBT8XIAIouYXk5md2glrWl51K9bOETQcYCEbShj7OmL/r/BvrI= -----END CERTIFICATE-----Generated at Thu Sep 24 08:41:39 2026 by rpki-client