$ rpki-client -vvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft File: 40CAF98483C41DA7BDC759A128942EA7634B575E.mft (raw, json) Hash identifier: DROcLrcsvRnVPHM5WiUWwPzRpCqKhwIH6J/L1vVRuuA= Subject key identifier: C9:2A:1D:12:90:D3:7C:8B:A9:D3:E8:94:DA:8F:1A:F0:EA:21:25:D1 Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E Certificate issuer: /CN=40CAF98483C41DA7BDC759A128942EA7634B575E Certificate serial: 2D0A7CED74F59F87EAA3FD5BE77BC2292EE46847 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 15:13:35 +0000 Manifest this update: Thu 23 Jul 2026 15:08:35 +0000 Manifest next update: Fri 24 Jul 2026 15:16:35 +0000 Files and hashes: 1: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: CWqy2Yz1lUV+bgx0wIDq9A3JsKeVTWQekOJKBjnBtxc=) 2: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=) 3: 40CAF98483C41DA7BDC759A128942EA7634B575E.crl (hash: dQt8LhtoKjB0wfSYO/ZcTDUQowcGwm80K3zPup6Uh/w=) 4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: Meb8QhT2vDYvkg9nVv8g0QFyTeOgXHkvo1+qGouJHvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:16:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:0a:7c:ed:74:f5:9f:87:ea:a3:fd:5b:e7:7b:c2:29:2e:e4:68:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E Validity Not Before: Jul 23 15:08:35 2026 GMT Not After : Jul 24 15:16:35 2026 GMT Subject: CN=C92A1D1290D37C8BA9D3E894DA8F1AF0EA2125D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:25:e3:d3:b5:26:4b:63:5f:b3:05:05:8a: 08:e7:40:7d:df:75:64:55:fe:89:42:1f:fa:f7:5e: 9c:f4:39:67:6c:b4:0c:f4:1c:a7:4e:d0:0a:7a:2c: 67:42:45:83:4c:6f:3e:f6:ed:93:d5:17:2c:55:f2: 0b:21:cd:96:ce:a6:66:b6:53:43:cc:b7:99:49:11: 53:cb:1e:ab:2c:30:1f:0d:b1:0f:fc:de:f8:91:03: 0d:75:57:86:3c:ed:2f:30:98:49:2a:fc:6d:b8:a6: 51:b1:94:2f:96:2a:46:44:64:df:15:43:f4:d0:cb: 2b:12:87:6f:a5:d4:a2:ea:1e:30:33:fb:b8:7c:e5: 81:61:bc:2e:cd:ac:9a:82:bb:14:ca:a0:39:fe:4c: 00:be:82:9c:9e:a4:69:24:77:52:b1:07:d1:21:07: e5:c2:72:16:9d:08:b0:66:a2:86:85:ad:47:8d:7e: e5:10:5f:dd:a6:86:b4:e8:a6:a4:c5:6f:6f:ec:4a: 55:41:8e:05:45:d6:d8:39:83:4d:a4:48:17:4e:51: 7d:53:88:69:d8:09:c1:9f:1d:3e:34:8c:07:f8:45: d2:87:cb:ea:43:36:1c:47:0e:53:e1:29:8b:95:27: ca:7c:78:4d:f7:95:a5:07:52:68:74:9c:93:b1:eb: b1:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2A:1D:12:90:D3:7C:8B:A9:D3:E8:94:DA:8F:1A:F0:EA:21:25:D1 X509v3 Authority Key Identifier: keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9f:39:72:76:82:19:43:64:85:ad:95:26:68:72:91:ee:5e: 2c:fc:bc:f9:52:f3:35:3d:2c:e0:2b:4b:4b:19:df:9b:bc:11: 01:2c:5a:91:a0:af:42:c8:65:33:2c:5f:69:64:9d:f8:df:a6: e6:59:ee:4d:c4:04:67:96:53:bf:6d:6f:6e:97:ce:04:c2:21: e9:c4:27:a9:c2:15:28:0e:2e:7d:a9:49:fd:38:61:ed:3c:86: 4f:91:36:2f:5e:79:58:e6:69:d6:5c:3f:8a:9d:a2:68:40:7c: 10:50:6c:22:ae:ec:bf:b1:eb:93:93:5d:ce:6f:1d:ad:d7:44: 49:e4:62:9d:15:06:4d:dd:dd:00:cb:14:7d:4f:52:cd:1e:29: b2:3b:e1:45:0d:35:fa:9e:77:40:c0:00:49:f2:bc:23:21:72: ca:21:e2:a3:10:52:20:41:60:ee:0d:3b:ea:0f:52:8f:f0:0a: 53:f2:00:e0:79:47:ab:cc:3e:26:52:b0:8b:3b:3d:3e:71:78: 5c:01:98:0b:c8:2c:b6:31:c6:bd:cb:b5:e5:bc:e2:07:ef:a6: 2b:c1:13:e4:0b:09:1b:13:2d:84:ee:75:3d:38:bb:79:50:d3: 76:d6:a0:9a:6b:a0:65:4a:8f:74:49:14:e8:c1:c4:67:7d:fb: 3d:6f:02:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULQp87XT1n4fqo/1b53vCKS7kaEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2 MzRCNTc1RTAeFw0yNjA3MjMxNTA4MzVaFw0yNjA3MjQxNTE2MzVaMDMxMTAvBgNV BAMTKEM5MkExRDEyOTBEMzdDOEJBOUQzRTg5NERBOEYxQUYwRUEyMTI1RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwViXj07UmS2NfswUFigjnQH3f dWRV/olCH/r3Xpz0OWdstAz0HKdO0Ap6LGdCRYNMbz727ZPVFyxV8gshzZbOpma2 U0PMt5lJEVPLHqssMB8NsQ/83viRAw11V4Y87S8wmEkq/G24plGxlC+WKkZEZN8V Q/TQyysSh2+l1KLqHjAz+7h85YFhvC7NrJqCuxTKoDn+TAC+gpyepGkkd1KxB9Eh B+XCchadCLBmooaFrUeNfuUQX92mhrTopqTFb2/sSlVBjgVF1tg5g02kSBdOUX1T iGnYCcGfHT40jAf4RdKHy+pDNhxHDlPhKYuVJ8p8eE33laUHUmh0nJOx67GxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUySodEpDTfIup0+iU2o8a8OohJdEwHwYDVR0j BBgwFoAUQMr5hIPEHae9x1mhKJQup2NLV14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1ZTVhMzAtMDgwMi00YzVjLTk0N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4 M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2MzRCNTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MENBRjk4NDgzQzQxREE3QkRDNzU5QTEyODk0MkVBNzYzNEI1 NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJF QTc2MzRCNTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmfOXJ2ghlDZIWtlSZocpHuXiz8vPlS8zU9 LOArS0sZ35u8EQEsWpGgr0LIZTMsX2lknfjfpuZZ7k3EBGeWU79tb26XzgTCIenE J6nCFSgOLn2pSf04Ye08hk+RNi9eeVjmadZcP4qdomhAfBBQbCKu7L+x65OTXc5v Ha3XREnkYp0VBk3d3QDLFH1PUs0eKbI74UUNNfqed0DAAEnyvCMhcsoh4qMQUiBB YO4NO+oPUo/wClPyAOB5R6vMPiZSsIs7PT5xeFwBmAvILLYxxr3LteW84gfvpivB E+QLCRsTLYTudT04u3lQ03bWoJproGVKj3RJFOjBxGd9+z1vAns= -----END CERTIFICATE-----Generated at Fri Jul 24 05:18:24 2026 by rpki-client