$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: cy6VXvu5zSOV/vdkdl1XmlzK+ft1dBO4NfpN0bXHk+Q= Subject key identifier: 15:5D:4F:0F:2C:2D:05:18:A0:4B:FB:F9:E1:9B:8B:24:3C:F7:E2:51 Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 3030B41FDF8F2200A9FF6A6AB333A16B0E7A4E06 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 10:59:47 +0000 Manifest this update: Wed 23 Sep 2026 10:54:47 +0000 Manifest next update: Thu 24 Sep 2026 11:08:47 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) 2: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: ZH66IMEJDONOs8ZIAzwOjJ1CNH3Wdf1HNUrasnjNwt0=) 3: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:08:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:30:b4:1f:df:8f:22:00:a9:ff:6a:6a:b3:33:a1:6b:0e:7a:4e:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Sep 23 10:54:47 2026 GMT Not After : Sep 24 11:08:47 2026 GMT Subject: CN=155D4F0F2C2D0518A04BFBF9E19B8B243CF7E251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b7:55:61:10:c3:00:0a:60:22:20:2e:e3:6c: a4:7f:c8:94:21:d6:e0:f8:44:a3:6c:86:7c:f2:d2: 73:e7:07:23:e9:3e:e6:b6:a7:6b:7d:7a:76:e7:82: f1:62:ac:6d:61:6c:66:01:14:6a:d6:7d:be:d3:ec: fc:61:4d:17:47:69:45:57:8f:34:f7:55:5e:5a:ce: 72:aa:87:01:84:2c:10:10:df:6a:77:50:91:2b:16: d7:51:24:86:8f:83:17:9d:61:dc:54:9e:f0:44:b4: 8d:d6:84:89:60:9e:01:ed:09:c2:15:ce:74:ae:82: 9e:7d:36:95:52:93:a2:5d:94:c7:c8:3c:dc:15:8c: a6:16:0b:d9:d2:2c:f6:90:b7:f5:66:ac:bb:6f:3b: 9d:c8:d6:6d:f5:95:70:5d:94:e8:2a:3a:a5:ac:fb: a3:99:10:b0:1b:b8:37:8c:67:67:6c:50:f0:c5:b3: c0:c6:ac:98:84:98:6e:67:42:94:6e:cd:7d:3f:0b: 8d:70:a0:7d:c3:10:a3:42:b0:a9:9b:0e:ce:53:03: 66:a9:01:77:87:ec:1c:a6:1c:02:f1:0c:24:ce:68: 66:75:9a:3a:e5:e2:c5:14:c6:38:f3:81:77:d7:6b: 55:1f:25:1b:c4:cf:01:70:f6:b4:a7:6c:24:0b:69: dc:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:5D:4F:0F:2C:2D:05:18:A0:4B:FB:F9:E1:9B:8B:24:3C:F7:E2:51 X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c0:ca:90:d3:4f:2d:cf:e4:ef:88:1d:1e:65:de:aa:e5:1d: 76:41:24:9c:08:18:74:75:10:c7:f3:2d:87:ca:47:1a:3e:3d: 17:46:d4:8f:69:f8:0a:4b:84:c1:41:2e:30:4d:2a:36:ac:79: 27:47:44:67:9c:5f:ca:3e:29:99:63:1c:97:89:34:42:93:1f: 15:99:dd:68:3d:2d:ea:9d:8a:48:91:4f:3d:10:e3:1e:53:f9: f3:99:53:cd:a7:fc:4a:0e:c4:c9:b2:a5:03:c5:5c:64:d8:2f: 47:2f:3d:d4:f6:04:9d:22:af:7f:77:3a:48:21:52:be:5d:a5: b3:a6:2e:9b:70:ef:54:0a:d9:db:04:e3:af:15:97:ce:75:5c: 6e:ac:1f:e5:64:c4:56:52:db:80:5f:29:e0:c9:16:4c:39:c1: 75:28:ff:68:19:43:6e:e4:dd:2e:a5:b5:b3:37:44:ab:f6:7c: e9:10:e7:35:29:30:38:bf:08:09:3b:6a:2d:07:43:d3:6b:6d: 36:fd:b9:85:5b:03:8f:7d:44:ed:f8:63:7d:53:a3:58:d6:f8: ef:77:4f:59:8b:a7:f6:3f:28:d0:93:cc:2e:f6:be:6e:2c:ca: e0:d3:cf:5f:fa:9e:40:de:f8:c7:ed:b7:52:bb:2a:2e:f1:00: d5:bc:de:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDC0H9+PIgCp/2pqszOhaw56TgYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjA5MjMxMDU0NDdaFw0yNjA5MjQxMTA4NDdaMDMxMTAvBgNV BAMTKDE1NUQ0RjBGMkMyRDA1MThBMDRCRkJGOUUxOUI4QjI0M0NGN0UyNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCt1VhEMMACmAiIC7jbKR/yJQh 1uD4RKNshnzy0nPnByPpPua2p2t9enbngvFirG1hbGYBFGrWfb7T7PxhTRdHaUVX jzT3VV5aznKqhwGELBAQ32p3UJErFtdRJIaPgxedYdxUnvBEtI3WhIlgngHtCcIV znSugp59NpVSk6JdlMfIPNwVjKYWC9nSLPaQt/VmrLtvO53I1m31lXBdlOgqOqWs +6OZELAbuDeMZ2dsUPDFs8DGrJiEmG5nQpRuzX0/C41woH3DEKNCsKmbDs5TA2ap AXeH7BymHALxDCTOaGZ1mjrl4sUUxjjzgXfXa1UfJRvEzwFw9rSnbCQLadyJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFV1PDywtBRigS/v54ZuLJDz34lEwHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXAypDTTy3P5O+IHR5l3qrlHXZBJJwIGHR1 EMfzLYfKRxo+PRdG1I9p+ApLhMFBLjBNKjaseSdHRGecX8o+KZljHJeJNEKTHxWZ 3Wg9LeqdikiRTz0Q4x5T+fOZU82n/EoOxMmypQPFXGTYL0cvPdT2BJ0ir393Okgh Ur5dpbOmLptw71QK2dsE468Vl851XG6sH+VkxFZS24BfKeDJFkw5wXUo/2gZQ27k 3S6ltbM3RKv2fOkQ5zUpMDi/CAk7ai0HQ9NrbTb9uYVbA499RO34Y31To1jW+O93 T1mLp/Y/KNCTzC72vm4syuDTz1/6nkDe+Mftt1K7Ki7xANW83uM= -----END CERTIFICATE-----Generated at Thu Sep 24 04:29:46 2026 by rpki-client