$ rpki-client -vvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: 8nRoKTM6XGLWEbr1Hi4sdTgHBrJGcDmpZqin5WcBYOI= Subject key identifier: 8D:A4:36:37:89:04:B2:1E:CA:00:36:B1:A7:16:7D:59:DB:B5:F3:F4 Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 2CAD4E4AA926A629251D7285F4D553060DA8024D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 01:15:39 +0000 Manifest this update: Fri 24 Jul 2026 01:10:39 +0000 Manifest next update: Sat 25 Jul 2026 04:45:39 +0000 Files and hashes: 1: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) 2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) 3: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: 8PcOf67YZlLc/rwkBzgDJ8QtackpaiaWxpzaOa9czww=) 4: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:45:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:ad:4e:4a:a9:26:a6:29:25:1d:72:85:f4:d5:53:06:0d:a8:02:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Jul 24 01:10:39 2026 GMT Not After : Jul 25 04:45:39 2026 GMT Subject: CN=8DA436378904B21ECA0036B1A7167D59DBB5F3F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d7:01:de:b0:25:43:83:e9:60:4e:31:a1:ac: b1:41:dd:05:e2:16:e5:2e:74:84:69:5d:fd:1e:f1: 0a:09:a2:e2:d5:22:a5:36:1c:c0:1b:79:08:d3:94: 1a:73:ba:1e:13:a4:5e:cf:67:d7:c0:e3:63:4c:f6: 9b:ef:de:3e:e3:1a:9a:d2:44:b4:1d:2b:da:c0:05: 17:53:93:95:4e:96:19:92:06:55:1b:12:16:37:84: e7:37:db:b0:fc:8a:f0:24:ce:65:5b:0e:86:c1:0a: c3:d1:ca:e1:c9:b0:fe:58:23:b9:34:35:d5:7c:2f: 89:bd:67:67:ea:c8:dd:a9:ff:75:9c:36:a0:eb:8b: 3e:05:04:59:d5:95:c2:66:84:b5:35:b5:4c:f7:ca: ec:95:8f:26:b8:47:95:6b:b2:a0:9a:42:c2:fd:6c: 9d:21:3d:07:81:ce:d8:ed:82:af:04:10:c4:d2:09: 15:4d:7d:09:8a:f3:18:ee:bc:a6:1e:e3:5a:c8:a3: a8:65:5a:9b:7a:ee:9e:e2:8d:59:ac:62:ca:1e:aa: 7a:80:31:7d:3c:65:df:7a:6f:90:12:09:2a:ac:9c: 04:e7:55:c4:76:d4:aa:e1:2e:87:a7:bc:aa:b7:ea: b3:ec:42:32:f2:3c:8b:39:31:30:a8:b0:f1:35:9e: a0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:A4:36:37:89:04:B2:1E:CA:00:36:B1:A7:16:7D:59:DB:B5:F3:F4 X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:e8:08:cc:cc:28:f0:9a:af:38:16:78:ee:0e:02:00:d2:5f: 7f:8d:e4:e9:48:a5:eb:92:d5:f3:05:81:32:6a:c7:d7:4b:22: 65:59:f0:64:a1:e9:9e:e7:02:74:6a:18:72:c5:27:38:d7:94: 0d:82:89:bf:26:cb:79:bf:84:e1:da:22:ad:65:bf:9d:39:d3: 1a:36:82:0c:b3:c0:8a:44:54:45:49:94:34:15:87:9e:bc:4a: dd:00:7e:ec:1a:45:09:9b:f1:1c:87:16:d6:55:e3:cc:a5:5c: 5e:c5:a9:eb:97:87:5a:fb:cc:c1:50:ca:13:dd:dc:9a:18:2a: 55:ba:5e:05:45:0e:cf:a8:9b:fd:4d:5e:aa:58:32:bf:8e:c8: 24:3b:95:25:e2:23:1c:3a:e6:b6:39:66:26:ba:36:2f:fa:fc: 2c:a2:e4:f1:cb:63:33:ad:16:85:3c:4a:65:32:a1:e6:39:4c: 64:ec:30:b6:e2:23:e3:84:62:bb:ac:a9:e8:1b:ba:ca:05:e7: 94:b8:49:40:7b:31:07:ef:ca:2d:85:17:ea:b0:1c:9d:a4:7d: 0f:f4:1f:8a:9b:99:e3:5e:ca:03:c7:21:27:3a:fa:bb:e6:be: 77:90:70:89:48:67:7e:89:0d:78:5e:9b:61:e9:6c:bd:91:f5: ee:d0:60:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULK1OSqkmpiklHXKF9NVTBg2oAk0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA3MjQwMTEwMzlaFw0yNjA3MjUwNDQ1MzlaMDMxMTAvBgNV BAMTKDhEQTQzNjM3ODkwNEIyMUVDQTAwMzZCMUE3MTY3RDU5REJCNUYzRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi1wHesCVDg+lgTjGhrLFB3QXi FuUudIRpXf0e8QoJouLVIqU2HMAbeQjTlBpzuh4TpF7PZ9fA42NM9pvv3j7jGprS RLQdK9rABRdTk5VOlhmSBlUbEhY3hOc327D8ivAkzmVbDobBCsPRyuHJsP5YI7k0 NdV8L4m9Z2fqyN2p/3WcNqDriz4FBFnVlcJmhLU1tUz3yuyVjya4R5VrsqCaQsL9 bJ0hPQeBztjtgq8EEMTSCRVNfQmK8xjuvKYe41rIo6hlWpt67p7ijVmsYsoeqnqA MX08Zd96b5ASCSqsnATnVcR21KrhLoenvKq36rPsQjLyPIs5MTCosPE1nqClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjaQ2N4kEsh7KADaxpxZ9Wdu18/QwHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXoCMzMKPCarzgWeO4OAgDSX3+N5OlIpeuS 1fMFgTJqx9dLImVZ8GSh6Z7nAnRqGHLFJzjXlA2Cib8my3m/hOHaIq1lv5050xo2 ggyzwIpEVEVJlDQVh568St0AfuwaRQmb8RyHFtZV48ylXF7FqeuXh1r7zMFQyhPd 3JoYKlW6XgVFDs+om/1NXqpYMr+OyCQ7lSXiIxw65rY5Zia6Ni/6/Cyi5PHLYzOt FoU8SmUyoeY5TGTsMLbiI+OEYrusqegbusoF55S4SUB7MQfvyi2FF+qwHJ2kfQ/0 H4qbmeNeygPHISc6+rvmvneQcIlIZ36JDXhem2HpbL2R9e7QYAs= -----END CERTIFICATE-----Generated at Fri Jul 24 11:28:42 2026 by rpki-client