$ rpki-client -vvf rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft File: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft (raw, json) Hash identifier: ayHStQDzzuJtxQcKeCiTb3uS+kgmz+Q/BN2OadU8BIw= Subject key identifier: 21:CE:B3:D0:40:11:09:41:0A:D1:4D:43:D4:37:B6:54:41:93:87:39 Authority key identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D Certificate issuer: /CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Certificate serial: 6C80AAC70D7E87F47F76E699A92F7CB99723F806 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft Manifest number: 0E Signing time: Tue 12 May 2026 02:20:34 +0000 Manifest this update: Tue 12 May 2026 02:15:34 +0000 Manifest next update: Wed 13 May 2026 04:11:34 +0000 Files and hashes: 1: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl (hash: QzqkUBK5qAasZukAknve5fpePas+GaeIhjS0hASWUXA=) 2: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: 869cfXhcvOlyh0uB1ikVriiCxFRRijRoXRyS0ETdNZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 04:11:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:80:aa:c7:0d:7e:87:f4:7f:76:e6:99:a9:2f:7c:b9:97:23:f8:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Validity Not Before: May 12 02:15:34 2026 GMT Not After : May 13 04:11:34 2026 GMT Subject: CN=21CEB3D0401109410AD14D43D437B65441938739 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:43:7b:8c:3e:65:3e:b4:5c:81:b3:17:62:a2: f6:da:d4:55:61:38:3d:f2:8c:0b:b8:ee:25:35:d3: ec:9e:7f:9b:9c:68:1a:c1:92:8d:bf:1a:e8:63:eb: 56:96:16:dc:2c:b9:c8:2d:31:12:40:75:53:f1:c1: 9d:e6:96:e8:b8:da:c5:2f:4f:eb:9f:b9:76:1c:19: c0:cd:b7:8f:d9:a2:ed:c4:ba:b7:58:4a:33:65:bb: 9c:86:bc:ca:2e:e2:92:6e:a1:2d:36:7a:12:66:40: a4:2b:42:c8:67:a2:58:eb:3f:19:47:1c:33:24:03: 4f:bd:d1:48:d9:85:be:a9:e8:eb:3c:c5:23:88:e8: b1:67:7c:62:fc:e6:9c:05:b6:63:ac:8a:35:bf:26: 7b:47:7d:c1:e5:7c:83:56:b8:34:b4:3c:01:80:85: 73:64:d8:d4:62:63:e1:55:a2:e3:a0:3f:2a:c9:9a: 12:09:3b:89:36:09:b0:2c:b1:e3:07:bd:8f:92:19: e4:30:2a:f2:2e:87:05:2c:d1:7e:06:c6:40:18:16: 83:10:19:09:02:32:20:0c:03:1c:76:71:ba:0e:f5: 54:cc:93:3e:5f:d4:56:3b:16:b8:64:5f:aa:d8:67: 1b:50:a9:19:2b:9f:75:fb:f4:dd:cc:31:bc:5e:40: 86:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CE:B3:D0:40:11:09:41:0A:D1:4D:43:D4:37:B6:54:41:93:87:39 X509v3 Authority Key Identifier: keyid:4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:63:02:d7:b3:b6:4a:7e:c4:ae:28:d0:e7:e8:e9:01:c6:59: ce:49:93:bd:9e:7e:cc:67:cb:df:5b:e6:55:2f:b7:d7:9b:15: ef:a8:e2:f4:65:9e:25:a1:55:05:29:23:45:07:15:82:7b:58: 7f:a4:c6:02:6d:22:32:3a:db:af:0a:0b:1e:e4:12:c7:d6:8c: ae:4f:62:1c:00:61:fd:3a:35:5d:59:d2:4b:38:b5:6e:06:ce: cf:7d:a2:57:d5:5c:65:a7:51:f1:94:53:fb:b4:21:3e:6d:63: d5:cb:37:06:19:57:64:07:92:15:5e:56:67:e3:0e:61:7d:7a: 57:8b:d0:54:ff:8c:d6:6b:86:32:a3:c0:7d:da:11:d5:e7:d5: 9b:5e:7f:cb:87:60:81:93:d0:ee:ee:2a:43:d2:13:ff:ae:e1: 4a:d5:85:e7:1d:c4:70:74:5b:47:0c:67:9a:92:de:d9:9c:86: 9c:a3:93:90:6a:ad:72:3b:aa:58:bb:51:da:96:ca:21:ef:c5: 49:04:9b:27:3e:fe:06:4f:d6:cb:c8:ea:e9:73:67:ec:6d:fe: d2:90:de:b6:0b:ef:52:76:e4:92:f6:6c:45:a9:cb:1b:79:b8: 66:be:b1:31:c4:83:77:01:9b:09:0c:db:a7:02:6f:97:60:0d: 2c:95:ee:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbICqxw1+h/R/duaZqS98uZcj+AYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlBOTM1 QzU3M0Q0RDAeFw0yNjA1MTIwMjE1MzRaFw0yNjA1MTMwNDExMzRaMDMxMTAvBgNV BAMTKDIxQ0VCM0QwNDAxMTA5NDEwQUQxNEQ0M0Q0MzdCNjU0NDE5Mzg3MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQ3uMPmU+tFyBsxdiovba1FVh OD3yjAu47iU10+yef5ucaBrBko2/Guhj61aWFtwsucgtMRJAdVPxwZ3mlui42sUv T+ufuXYcGcDNt4/Zou3EurdYSjNlu5yGvMou4pJuoS02ehJmQKQrQshnoljrPxlH HDMkA0+90UjZhb6p6Os8xSOI6LFnfGL85pwFtmOsijW/JntHfcHlfINWuDS0PAGA hXNk2NRiY+FVouOgPyrJmhIJO4k2CbAsseMHvY+SGeQwKvIuhwUs0X4GxkAYFoMQ GQkCMiAMAxx2cboO9VTMkz5f1FY7FrhkX6rYZxtQqRkrn3X79N3MMbxeQIbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIc6z0EARCUEK0U1D1De2VEGThzkwHwYDVR0j BBgwFoAUT0C9cJ0DQLfojN+dgBCak1xXPU0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBmNjIxNzYtZTE2NC00OTJjLThhNzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5 RDAzNDBCN0U4OENERjlEODAxMDlBOTM1QzU3M0Q0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjQwQkQ3MDlEMDM0MEI3RTg4Q0RGOUQ4MDEwOUE5MzVDNTcz RDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlB OTM1QzU3M0Q0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtjAteztkp+xK4o0Ofo6QHGWc5Jk72efsxn y99b5lUvt9ebFe+o4vRlniWhVQUpI0UHFYJ7WH+kxgJtIjI6268KCx7kEsfWjK5P YhwAYf06NV1Z0ks4tW4Gzs99olfVXGWnUfGUU/u0IT5tY9XLNwYZV2QHkhVeVmfj DmF9eleL0FT/jNZrhjKjwH3aEdXn1Ztef8uHYIGT0O7uKkPSE/+u4UrVhecdxHB0 W0cMZ5qS3tmchpyjk5BqrXI7qli7UdqWyiHvxUkEmyc+/gZP1svI6ulzZ+xt/tKQ 3rYL71J25JL2bEWpyxt5uGa+sTHEg3cBmwkM26cCb5dgDSyV7so= -----END CERTIFICATE-----Generated at Tue May 12 22:20:09 2026 by rpki-client