$ rpki-client -vvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: qATEjPCkZy11pSQm4TCc45C0eaI/YgHzkbn7ceZMTSg= Subject key identifier: BD:8A:EF:56:E3:03:53:BE:EE:05:12:D8:65:57:8E:2E:46:C2:92:72 Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 05C1734EC2957C2333E368872E9C20127DD13B7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:42:59 +0000 Manifest this update: Thu 23 Jul 2026 18:37:59 +0000 Manifest next update: Fri 24 Jul 2026 19:28:59 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) 3: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: /y2TAoq2XmorGAxDEuvPcoCtNqGU6X5ZQ31YDSS4t4g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:28:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c1:73:4e:c2:95:7c:23:33:e3:68:87:2e:9c:20:12:7d:d1:3b:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Jul 23 18:37:59 2026 GMT Not After : Jul 24 19:28:59 2026 GMT Subject: CN=BD8AEF56E30353BEEE0512D865578E2E46C29272 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:cb:fa:28:0e:9a:19:a5:6a:26:4f:1e:a1: c9:31:62:54:e2:eb:3e:df:43:a4:57:7c:de:07:a3: 9b:2c:79:9f:0c:23:1a:7d:20:f1:c2:31:e5:16:b7: ad:3e:9e:66:dc:91:44:30:c9:71:9a:b3:29:3e:4d: 12:6a:ee:44:c8:8d:b9:d4:91:6e:c9:7c:1b:cd:02: a1:e2:cf:12:b8:67:12:7f:34:5a:2b:2f:db:4e:92: 46:2a:b6:c3:ba:4f:76:cd:d9:e9:e2:fd:44:ea:70: 71:99:c3:03:d9:53:a9:b5:0b:4e:0b:6e:ac:3d:d5: d7:cd:83:e6:20:98:57:9d:f4:81:21:d1:fd:0f:46: f5:5b:54:b6:70:fa:d0:05:06:0c:66:a9:75:be:a2: 8f:47:1d:b5:13:13:b7:d4:d4:17:91:53:42:1e:a1: b0:3f:89:c8:54:c5:29:17:f4:17:ff:70:ae:8d:4e: f6:bd:bf:a3:b6:35:2a:03:69:6e:6a:28:96:1b:9b: 44:f9:ce:77:62:b8:06:ee:e2:5e:db:fb:7c:3f:83: 31:e6:5b:01:a8:c5:38:1d:e6:80:c8:69:a9:68:19: 67:1d:0b:5a:3f:69:4d:fd:77:7d:ce:8c:60:1e:78: c4:8d:f4:5c:39:46:3a:80:42:78:c4:ac:64:7c:88: db:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:8A:EF:56:E3:03:53:BE:EE:05:12:D8:65:57:8E:2E:46:C2:92:72 X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:e0:de:b6:f2:b0:84:3b:2f:e5:af:a2:41:4f:a0:62:19:9c: 70:56:73:a1:9d:30:73:15:c3:de:46:45:a8:84:8a:ee:59:23: 9c:2c:2b:8c:84:8e:df:94:94:92:95:9f:36:8b:8f:56:52:fc: 45:fb:5c:54:67:cf:1b:66:30:a4:87:ec:2d:cc:cd:9d:8b:7e: a8:55:6a:c7:82:a3:57:51:87:3f:d5:6c:42:fa:e6:db:e7:24: 99:58:c7:1f:66:33:d8:8f:e2:7b:d6:01:79:03:66:98:09:c1: 7b:e1:4c:81:b4:dc:5a:e7:b7:ad:de:dd:03:49:a7:0d:f5:40: fa:66:10:0e:00:96:f6:a5:e7:37:77:7c:39:ae:e1:66:28:49: aa:7d:ea:31:39:47:d6:ec:a1:0d:6a:bf:2b:49:20:fb:85:72: 6c:20:f6:c5:0f:d6:ff:28:db:2a:9c:b9:4d:83:1f:ba:34:af: fc:d6:88:9c:0f:ad:9a:9b:46:02:b3:2f:14:b3:8f:ea:41:3d: da:79:42:9b:15:f6:fc:be:43:59:15:73:7f:2a:85:c0:36:f8: ed:e8:00:ca:13:5c:d6:a1:fc:e4:d8:16:40:9f:8d:96:fb:e4: df:ee:ea:97:02:03:c8:12:c5:0a:c2:a6:98:c1:26:1e:95:ea: db:f7:47:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcFzTsKVfCMz42iHLpwgEn3RO38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjA3MjMxODM3NTlaFw0yNjA3MjQxOTI4NTlaMDMxMTAvBgNV BAMTKEJEOEFFRjU2RTMwMzUzQkVFRTA1MTJEODY1NTc4RTJFNDZDMjkyNzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGsv6KA6aGaVqJk8eockxYlTi 6z7fQ6RXfN4Ho5sseZ8MIxp9IPHCMeUWt60+nmbckUQwyXGasyk+TRJq7kTIjbnU kW7JfBvNAqHizxK4ZxJ/NForL9tOkkYqtsO6T3bN2eni/UTqcHGZwwPZU6m1C04L bqw91dfNg+YgmFed9IEh0f0PRvVbVLZw+tAFBgxmqXW+oo9HHbUTE7fU1BeRU0Ie obA/ichUxSkX9Bf/cK6NTva9v6O2NSoDaW5qKJYbm0T5zndiuAbu4l7b+3w/gzHm WwGoxTgd5oDIaaloGWcdC1o/aU39d33OjGAeeMSN9Fw5RjqAQnjErGR8iNtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvYrvVuMDU77uBRLYZVeOLkbCknIwHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbg3rbysIQ7L+WvokFPoGIZnHBWc6GdMHMV w95GRaiEiu5ZI5wsK4yEjt+UlJKVnzaLj1ZS/EX7XFRnzxtmMKSH7C3MzZ2LfqhV aseCo1dRhz/VbEL65tvnJJlYxx9mM9iP4nvWAXkDZpgJwXvhTIG03Frnt63e3QNJ pw31QPpmEA4Alval5zd3fDmu4WYoSap96jE5R9bsoQ1qvytJIPuFcmwg9sUP1v8o 2yqcuU2DH7o0r/zWiJwPrZqbRgKzLxSzj+pBPdp5QpsV9vy+Q1kVc38qhcA2+O3o AMoTXNah/OTYFkCfjZb75N/u6pcCA8gSxQrCppjBJh6V6tv3RxI= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:22 2026 by rpki-client