$ rpki-client -vvf rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft File: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft (raw, json) Hash identifier: 0aWEHODpV4L9QcP7v8Hd/MWsJQrb2tCYNMzQVuTcnKc= Subject key identifier: 7B:1A:23:38:B2:19:1A:0F:EB:FC:B4:E8:B0:D1:41:94:96:A5:4C:8A Authority key identifier: 40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD Certificate issuer: /CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Certificate serial: 57ECF9A538F548AA1BA3B881FC3DDD1DFFF38B85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 13:26:30 +0000 Manifest this update: Thu 23 Jul 2026 13:21:30 +0000 Manifest next update: Fri 24 Jul 2026 15:15:30 +0000 Files and hashes: 1: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl (hash: arJZsBY+EZvExlKkW16P8JHQ0VJJ9fBshH5eJuCk4ZI=) 2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: 82pwwteNrzde+AkchimH6q5PxB6j+cy+EeI6Qefnyuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:ec:f9:a5:38:f5:48:aa:1b:a3:b8:81:fc:3d:dd:1d:ff:f3:8b:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Validity Not Before: Jul 23 13:21:30 2026 GMT Not After : Jul 24 15:15:30 2026 GMT Subject: CN=7B1A2338B2191A0FEBFCB4E8B0D1419496A54C8A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:72:e8:15:77:22:a0:cf:a5:33:de:59:8d:94: 20:dc:bc:85:48:0e:57:fb:95:e7:ad:69:f4:ed:73: 5e:8a:3e:17:51:f9:08:9b:28:5f:ef:b9:d6:ef:a1: 6a:49:80:22:88:a9:3c:4d:fe:11:de:6e:23:74:2b: f2:05:8a:c7:4a:ea:37:7e:b4:9f:e4:4d:bf:54:1a: eb:8b:3d:46:08:9e:5e:80:8e:df:e4:16:60:f6:54: ef:b4:6d:f6:d9:f8:a4:64:d8:0f:27:a4:d6:87:3b: be:40:5b:4e:41:69:59:c1:4e:d2:71:71:3c:94:8f: fc:9b:fb:9e:11:92:e4:ea:44:d9:4f:a6:c6:35:99: a7:61:3b:41:5e:63:84:94:48:ba:f7:63:b4:2c:44: 18:94:2f:b1:69:c6:4d:bc:f7:8c:35:9e:d5:e8:51: 3c:13:b0:1f:03:06:96:3b:f6:f9:e3:f5:04:36:68: 75:52:32:58:42:39:5f:0c:bb:a4:0f:ef:cb:70:73: 28:71:d3:ed:f9:e9:11:9a:4e:d9:cb:cd:f2:19:df: 09:ed:1f:bf:ba:f5:b3:ad:f5:3b:59:2e:85:7e:69: 1d:ba:89:bc:5c:7f:8b:b3:ba:7d:40:94:a2:e8:32: 5c:c2:ef:6b:3b:80:12:08:ed:98:33:f5:87:c4:f9: 04:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:1A:23:38:B2:19:1A:0F:EB:FC:B4:E8:B0:D1:41:94:96:A5:4C:8A X509v3 Authority Key Identifier: keyid:40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:40:91:fa:69:2f:89:3b:9c:6e:b2:02:3c:05:49:c7:3c:96: 78:ba:59:ef:3f:3b:65:4a:d9:cc:4f:d6:6f:4e:fe:bb:27:85: ab:b3:c7:10:6f:be:50:5e:0e:6a:da:b1:d3:d3:1c:d0:33:39: 3e:62:1c:c8:bb:93:99:e5:4c:e7:2e:ba:d3:fe:9f:37:b7:21: ee:7a:f4:2e:97:3d:5f:63:b6:70:f4:4c:0f:71:17:87:60:26: 46:2f:8d:c8:f6:a7:72:18:c3:92:4f:7b:68:86:b7:e0:32:d8: 1d:33:b9:0b:ef:a8:c1:11:52:64:35:5f:d4:ae:88:2c:a7:1a: 70:29:c7:b8:14:eb:a0:72:e1:b2:e9:6b:c0:c9:ac:f9:fa:04: 81:63:04:14:4e:a0:39:a9:48:da:f7:fb:9a:17:bd:49:8e:2a: 4e:d4:ea:f5:bc:70:ce:e9:aa:46:b5:51:23:ab:d1:33:ad:c4: 04:34:fb:85:e9:ff:bd:92:72:6e:fe:b0:db:ef:76:a9:54:60: fa:04:c2:4d:ad:9b:43:82:28:81:57:cf:fa:44:c0:ba:97:01: 7c:a0:71:64:5f:dc:17:17:38:6a:ac:7b:c3:bb:99:d6:6c:18: 97:c4:64:f6:a1:3c:cd:ec:8e:8f:4d:17:c7:11:41:4a:24:2e: 6c:ab:75:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV+z5pTj1SKobo7iB/D3dHf/zi4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVF MDVFNjNDRDAeFw0yNjA3MjMxMzIxMzBaFw0yNjA3MjQxNTE1MzBaMDMxMTAvBgNV BAMTKDdCMUEyMzM4QjIxOTFBMEZFQkZDQjRFOEIwRDE0MTk0OTZBNTRDOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcugVdyKgz6Uz3lmNlCDcvIVI Dlf7leetafTtc16KPhdR+QibKF/vudbvoWpJgCKIqTxN/hHebiN0K/IFisdK6jd+ tJ/kTb9UGuuLPUYInl6Ajt/kFmD2VO+0bfbZ+KRk2A8npNaHO75AW05BaVnBTtJx cTyUj/yb+54RkuTqRNlPpsY1madhO0FeY4SUSLr3Y7QsRBiUL7Fpxk2894w1ntXo UTwTsB8DBpY79vnj9QQ2aHVSMlhCOV8Mu6QP78twcyhx0+356RGaTtnLzfIZ3wnt H7+69bOt9TtZLoV+aR26ibxcf4uzun1AlKLoMlzC72s7gBII7Zgz9YfE+QSVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUexojOLIZGg/r/LTosNFBlJalTIowHwYDVR0j BBgwFoAUQORKxEtMOjG/at1qQ+1E/uBeY80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThjNGJhMTItNjNiYi00NTUwLWFjMGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0 QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVFMDVFNjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEU0NEFDNDRCNEMzQTMxQkY2QURENkE0M0VENDRGRUUwNUU2 M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0 RkVFMDVFNjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBAkfppL4k7nG6yAjwFScc8lni6We8/O2VK 2cxP1m9O/rsnhauzxxBvvlBeDmrasdPTHNAzOT5iHMi7k5nlTOcuutP+nze3Ie56 9C6XPV9jtnD0TA9xF4dgJkYvjcj2p3IYw5JPe2iGt+Ay2B0zuQvvqMERUmQ1X9Su iCynGnApx7gU66By4bLpa8DJrPn6BIFjBBROoDmpSNr3+5oXvUmOKk7U6vW8cM7p qka1USOr0TOtxAQ0+4Xp/72Scm7+sNvvdqlUYPoEwk2tm0OCKIFXz/pEwLqXAXyg cWRf3BcXOGqse8O7mdZsGJfEZPahPM3sjo9NF8cRQUokLmyrdbc= -----END CERTIFICATE-----Generated at Fri Jul 24 04:21:42 2026 by rpki-client