$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: 6nUZhtBhNCY+z9/dWMYxKq+LM9gispVlGoBidCL9Xxk= Subject key identifier: 1E:79:CD:AC:F1:6D:79:52:EE:54:E7:39:AA:47:8B:1C:20:82:48:2C Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 3400C06FA5B94EB486B2083ABB4338D7A30580AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: C6 Signing time: Mon 28 Sep 2026 14:07:13 +0000 Manifest this update: Mon 28 Sep 2026 14:02:13 +0000 Manifest next update: Tue 29 Sep 2026 14:47:13 +0000 Files and hashes: 1: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: QdskOzHSvXK+dcBqajUjR4r45Anh2KvFGZ91bwv6xYI=) 2: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) 3: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) 4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 14:47:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:00:c0:6f:a5:b9:4e:b4:86:b2:08:3a:bb:43:38:d7:a3:05:80:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Sep 28 14:02:13 2026 GMT Not After : Sep 29 14:47:13 2026 GMT Subject: CN=1E79CDACF16D7952EE54E739AA478B1C2082482C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:99:0f:2d:2d:b1:c6:9d:c5:c2:b8:d6:c3:d1: 55:d6:cf:42:e5:85:7d:c0:66:77:30:1d:c1:1f:d7: 67:37:5c:87:e1:b3:67:50:1b:cc:dc:cd:25:93:2e: 74:9f:e6:29:63:ce:22:ba:68:4f:fe:c7:66:32:c2: fb:f4:78:60:ba:6a:05:e4:d7:12:00:9f:4a:99:0d: 63:29:fe:d0:da:e3:a5:db:1c:43:09:1c:b4:87:2e: e1:a4:b7:95:d3:3e:88:1e:12:c6:d5:cc:d4:f7:06: 01:4a:f2:ef:f2:6c:dd:99:62:91:6f:91:85:d4:e6: 32:db:dc:57:11:61:ec:d3:2d:0f:88:d8:78:19:8e: 3e:61:bf:1c:bc:5d:ca:a9:9e:f2:56:ff:a0:93:79: a8:d1:c5:9f:03:43:ce:85:51:77:81:8b:13:8f:99: 56:a6:e3:ef:ac:1e:f7:2c:68:05:1e:63:ba:45:3f: 0e:db:f4:f7:51:3f:22:b2:3a:e6:85:42:01:b0:79: 92:74:d4:2d:df:0a:ac:03:4d:cf:37:be:5f:70:a2: 45:82:e3:78:97:71:ad:85:ef:59:ad:32:25:b1:82: c0:dd:94:de:db:d0:97:08:6c:b4:65:17:d2:9f:12: 4b:f1:6e:8a:19:d9:60:33:9a:76:5a:b6:2d:1e:fe: 1c:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:79:CD:AC:F1:6D:79:52:EE:54:E7:39:AA:47:8B:1C:20:82:48:2C X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:12:61:64:29:aa:77:b2:71:04:d0:9d:34:e2:cc:a4:b7:2c: 31:03:95:65:a6:e7:e6:a4:d3:25:16:4a:cd:48:3a:93:0f:c9: d1:89:1a:0f:fc:21:19:a1:93:e7:39:d6:53:d1:f1:90:5d:87: 19:ae:84:17:df:69:37:62:b7:da:61:a0:0c:ab:70:6c:e9:c9: c8:ff:33:9c:63:56:28:8b:56:2e:cf:66:45:70:ac:ae:80:1c: 9e:c9:6e:19:06:15:79:ef:e8:8f:d1:89:f0:35:52:48:69:77: b5:16:72:8d:ed:82:7c:9a:f3:46:55:8c:10:5d:46:1e:be:f5: e1:0e:41:d0:68:72:6c:d8:88:1a:ea:ca:f3:7e:75:ed:69:ea: 55:a6:d1:50:4b:e6:5d:55:36:6b:91:3b:6a:99:59:6d:91:c5: 63:5e:a9:18:4b:5a:9f:98:90:60:63:04:9e:3a:2b:e6:ac:bb: 93:6f:4a:4f:0e:47:4b:27:6e:20:70:b3:fc:03:f0:b6:09:94: 64:18:12:f4:0a:d5:84:5b:f7:2f:70:9b:d9:43:6a:dc:a2:2b: 55:2f:af:fc:ff:9c:65:8d:cc:b2:da:dd:c3:d9:8e:62:ba:9a: 5b:92:a2:5d:7b:01:3e:e7:e9:8a:31:c0:80:5e:0b:ee:a5:fb: 55:0e:df:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNADAb6W5TrSGsgg6u0M416MFgKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA5MjgxNDAyMTNaFw0yNjA5MjkxNDQ3MTNaMDMxMTAvBgNV BAMTKDFFNzlDREFDRjE2RDc5NTJFRTU0RTczOUFBNDc4QjFDMjA4MjQ4MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mQ8tLbHGncXCuNbD0VXWz0Ll hX3AZncwHcEf12c3XIfhs2dQG8zczSWTLnSf5iljziK6aE/+x2Yywvv0eGC6agXk 1xIAn0qZDWMp/tDa46XbHEMJHLSHLuGkt5XTPogeEsbVzNT3BgFK8u/ybN2ZYpFv kYXU5jLb3FcRYezTLQ+I2HgZjj5hvxy8XcqpnvJW/6CTeajRxZ8DQ86FUXeBixOP mVam4++sHvcsaAUeY7pFPw7b9PdRPyKyOuaFQgGweZJ01C3fCqwDTc83vl9wokWC 43iXca2F71mtMiWxgsDdlN7b0JcIbLRlF9KfEkvxbooZ2WAzmnZati0e/hxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHnnNrPFteVLuVOc5qkeLHCCCSCwwHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEASYWQpqneycQTQnTTizKS3LDEDlWWm5+ak 0yUWSs1IOpMPydGJGg/8IRmhk+c51lPR8ZBdhxmuhBffaTdit9phoAyrcGzpycj/ M5xjViiLVi7PZkVwrK6AHJ7JbhkGFXnv6I/RifA1Ukhpd7UWco3tgnya80ZVjBBd Rh6+9eEOQdBocmzYiBrqyvN+de1p6lWm0VBL5l1VNmuRO2qZWW2RxWNeqRhLWp+Y kGBjBJ46K+asu5NvSk8OR0snbiBws/wD8LYJlGQYEvQK1YRb9y9wm9lDatyiK1Uv r/z/nGWNzLLa3cPZjmK6mluSol17AT7n6YoxwIBeC+6l+1UO32E= -----END CERTIFICATE-----Generated at Tue Sep 29 06:46:16 2026 by rpki-client