$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft File: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft (raw, json) Hash identifier: HePrOlJz7ex83fO775kHxD9rhDNEC9LPSH9daC0lP8o= Subject key identifier: CE:48:38:0B:7B:B2:5C:43:30:75:96:F7:53:33:8E:EA:37:3F:29:C2 Authority key identifier: 40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD Certificate issuer: /CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Certificate serial: 76D47581F5F2248046BD389BDDCA9AE5C6ADAF7D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft Manifest number: C5 Signing time: Fri 25 Sep 2026 10:03:09 +0000 Manifest this update: Fri 25 Sep 2026 09:58:09 +0000 Manifest next update: Sat 26 Sep 2026 10:04:09 +0000 Files and hashes: 1: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl (hash: JjBznlGjjJioFjtJr3GLqyQKaYJ/HB5EN7ggT0bU+Z0=) 2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: 82pwwteNrzde+AkchimH6q5PxB6j+cy+EeI6Qefnyuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 10:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:d4:75:81:f5:f2:24:80:46:bd:38:9b:dd:ca:9a:e5:c6:ad:af:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Validity Not Before: Sep 25 09:58:09 2026 GMT Not After : Sep 26 10:04:09 2026 GMT Subject: CN=CE48380B7BB25C43307596F753338EEA373F29C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:a8:60:92:5d:f1:81:5c:69:c0:72:37:87:93: c7:7e:11:10:1d:c6:76:d9:89:ea:27:c3:24:bf:b3: e1:83:68:b6:7b:50:b4:c6:87:f1:18:3a:e7:a1:dc: c4:d0:40:25:8c:8d:9b:d5:9c:46:b4:9c:7d:c1:c3: e6:1c:a3:75:ec:87:cf:0e:b3:6d:ed:31:74:c0:51: 75:fb:be:13:bb:b0:a1:86:a5:03:f5:80:b2:39:19: 51:b0:5d:a3:ae:75:72:29:cc:0c:c9:81:66:5a:9d: bb:be:d2:57:26:11:a9:15:7a:5e:9b:c8:1a:32:08: 99:4c:2f:76:80:f6:7c:bb:3f:fe:55:86:4b:7e:b3: bf:d4:d7:4e:f0:5a:65:94:f6:0a:37:c4:38:49:34: 5b:92:33:3a:6f:fc:58:50:44:5c:83:ef:c7:14:ec: 7c:3a:87:92:a0:a5:4d:22:84:1a:fe:3b:25:c7:35: dc:a3:75:bb:e6:94:3f:4c:76:28:d0:59:79:29:ae: 83:d2:de:63:e9:69:9b:5e:14:87:30:0b:21:21:73: 73:b6:f4:bc:51:a5:46:23:d6:33:fd:a6:a9:d9:70: db:9b:11:0e:a1:18:d1:1a:56:56:fd:d8:82:11:92: 40:8d:b9:d6:f6:9a:5a:e2:7e:dc:2b:0b:c0:3a:21: 6c:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:48:38:0B:7B:B2:5C:43:30:75:96:F7:53:33:8E:EA:37:3F:29:C2 X509v3 Authority Key Identifier: keyid:40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7b:50:6b:82:eb:c1:c9:5c:ec:d4:93:73:72:c8:1c:db:c1: af:91:17:57:be:27:cb:fe:c9:5c:5d:5d:98:68:99:28:dd:51: 3d:c8:d0:06:94:a3:d9:6c:9f:45:6c:e7:bf:34:b4:65:7a:09: cf:04:08:63:b3:40:5c:9a:ed:1b:0b:f8:a1:a9:9a:f5:54:c3: b5:b0:0d:d5:a7:6e:5a:e0:eb:2d:94:4d:c1:2d:07:52:57:7f: fc:d3:e5:76:c2:c2:7c:4d:5a:7f:a2:f2:5c:8f:25:75:a2:21: 89:e8:98:80:8b:f0:1f:60:e0:ef:7e:f3:49:60:13:7f:9c:17: 32:9b:69:a4:5f:fa:85:ad:4d:8e:ea:8a:8c:f8:d5:4f:a4:7b: 88:f0:21:b0:94:bb:58:08:d4:46:aa:64:0d:ea:6c:d4:1c:f0: 2e:0b:33:b1:5c:be:a6:f1:09:56:f6:bc:2a:60:bb:c3:05:83: 0e:27:f8:26:ff:70:4a:1b:40:df:85:5d:7b:ec:2a:b2:1a:3f: 11:95:24:8c:15:aa:de:2a:7a:e7:f3:8a:73:b2:8e:28:11:f3: 2d:ac:36:f2:fb:d0:49:a7:55:76:46:ef:f5:a3:bf:0f:b4:b5: 2b:c7:fd:85:78:de:1b:1f:b6:09:32:3f:14:59:ea:0a:1d:bc: 2c:66:47:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdtR1gfXyJIBGvTib3cqa5catr30wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVF MDVFNjNDRDAeFw0yNjA5MjUwOTU4MDlaFw0yNjA5MjYxMDA0MDlaMDMxMTAvBgNV BAMTKENFNDgzODBCN0JCMjVDNDMzMDc1OTZGNzUzMzM4RUVBMzczRjI5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKqGCSXfGBXGnAcjeHk8d+ERAd xnbZieonwyS/s+GDaLZ7ULTGh/EYOueh3MTQQCWMjZvVnEa0nH3Bw+Yco3Xsh88O s23tMXTAUXX7vhO7sKGGpQP1gLI5GVGwXaOudXIpzAzJgWZanbu+0lcmEakVel6b yBoyCJlML3aA9ny7P/5Vhkt+s7/U107wWmWU9go3xDhJNFuSMzpv/FhQRFyD78cU 7Hw6h5KgpU0ihBr+OyXHNdyjdbvmlD9MdijQWXkproPS3mPpaZteFIcwCyEhc3O2 9LxRpUYj1jP9pqnZcNubEQ6hGNEaVlb92IIRkkCNudb2mlriftwrC8A6IWyxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzkg4C3uyXEMwdZb3UzOO6jc/KcIwHwYDVR0j BBgwFoAUQORKxEtMOjG/at1qQ+1E/uBeY80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThjNGJhMTItNjNiYi00NTUwLWFjMGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0 QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVFMDVFNjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEU0NEFDNDRCNEMzQTMxQkY2QURENkE0M0VENDRGRUUwNUU2 M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0 RkVFMDVFNjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ7UGuC68HJXOzUk3NyyBzbwa+RF1e+J8v+ yVxdXZhomSjdUT3I0AaUo9lsn0Vs5780tGV6Cc8ECGOzQFya7RsL+KGpmvVUw7Ww DdWnblrg6y2UTcEtB1JXf/zT5XbCwnxNWn+i8lyPJXWiIYnomICL8B9g4O9+80lg E3+cFzKbaaRf+oWtTY7qioz41U+ke4jwIbCUu1gI1EaqZA3qbNQc8C4LM7Fcvqbx CVb2vCpgu8MFgw4n+Cb/cEobQN+FXXvsKrIaPxGVJIwVqt4qeufzinOyjigR8y2s NvL70EmnVXZG7/Wjvw+0tSvH/YV43hsftgkyPxRZ6godvCxmR7o= -----END CERTIFICATE-----Generated at Sat Sep 26 03:01:14 2026 by rpki-client