$ rpki-client -vvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft File: 40CAF98483C41DA7BDC759A128942EA7634B575E.mft (raw, json) Hash identifier: tzQWMJhlD7mMbyAc9O1OgwRRjJXBTsfslvpCtLLHCG4= Subject key identifier: D3:87:98:84:50:F1:2B:3A:E0:E8:EB:C1:A6:BF:9E:D0:4D:34:03:6E Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E Certificate issuer: /CN=40CAF98483C41DA7BDC759A128942EA7634B575E Certificate serial: 57A34A6D51E77C961D358C227686BF49FE1F178E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft Manifest number: 0F Signing time: Tue 12 May 2026 23:58:17 +0000 Manifest this update: Tue 12 May 2026 23:53:17 +0000 Manifest next update: Thu 14 May 2026 01:34:17 +0000 Files and hashes: 1: 40CAF98483C41DA7BDC759A128942EA7634B575E.crl (hash: gF6mw7Md5xXjs+0F52BtHEcKFOiPjYHMtNAefuuxI+k=) 2: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: CWqy2Yz1lUV+bgx0wIDq9A3JsKeVTWQekOJKBjnBtxc=) 3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=) 4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: Meb8QhT2vDYvkg9nVv8g0QFyTeOgXHkvo1+qGouJHvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:a3:4a:6d:51:e7:7c:96:1d:35:8c:22:76:86:bf:49:fe:1f:17:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E Validity Not Before: May 12 23:53:17 2026 GMT Not After : May 14 01:34:17 2026 GMT Subject: CN=D387988450F12B3AE0E8EBC1A6BF9ED04D34036E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:07:f1:24:5d:f6:bc:aa:58:55:8f:d9:00:0c: ac:1f:85:ba:f3:2c:07:a5:26:13:2a:b6:36:23:87: df:ba:67:2a:34:77:11:58:26:cf:e8:dc:b0:81:ca: 9e:da:25:69:c1:63:66:52:6a:2e:c9:5c:f4:72:30: 6a:88:c9:24:1b:13:2a:d1:f8:12:4a:2a:9b:77:74: f2:a7:fb:5d:19:69:4a:1a:19:17:9d:de:84:52:0f: 64:ef:14:e5:07:7d:32:0c:fb:c5:a7:b9:15:5f:67: db:cf:64:53:71:68:78:e5:ca:63:23:1d:62:a2:d0: b8:5b:a5:92:c4:d3:a7:ec:f2:15:0c:a9:37:2b:5c: 13:e0:a4:14:64:9b:0d:46:5e:8e:bd:13:35:ea:0b: 8a:56:69:60:93:3f:f2:a5:15:93:31:97:c0:bf:94: 94:ba:e2:86:28:a2:77:94:d7:ac:52:48:26:d0:f5: 2a:b2:09:6a:ce:14:e7:8a:cc:80:d6:d8:d1:b4:5a: 64:3f:69:f1:9a:53:48:c5:8d:ac:7f:42:8d:ee:f0: 21:89:78:13:89:f2:3d:fa:40:67:0b:cc:5e:c6:0d: 1b:16:1c:5c:ad:3d:4a:84:e6:ff:38:8a:2f:ab:5d: 7e:f6:73:8e:ef:f0:23:65:39:88:eb:83:a0:e7:11: 3b:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:87:98:84:50:F1:2B:3A:E0:E8:EB:C1:A6:BF:9E:D0:4D:34:03:6E X509v3 Authority Key Identifier: keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:f6:80:00:dc:50:e5:6d:71:fb:25:c8:3e:75:84:c6:30:f2: e6:44:01:5b:23:b4:b1:1e:56:f8:37:9b:f0:85:ce:96:8a:6c: 9e:59:66:73:c3:c3:ac:18:43:95:06:cc:b5:38:b0:73:41:41: 0f:7b:91:37:a9:dd:fb:46:b0:00:5d:84:be:ec:6b:8f:7e:1e: 21:17:60:63:cb:51:e9:c5:cd:6f:1c:98:f9:34:6a:6e:70:85: d1:9a:04:0f:12:07:19:b6:0f:42:5e:06:95:a2:07:ef:e0:7d: 46:34:b1:a2:80:e9:c4:ce:f1:46:f7:fe:c0:10:ae:e5:6e:fd: b8:b7:9d:d1:b9:c0:9e:46:be:62:b4:51:15:cc:6e:6a:a8:18: c4:96:cc:90:23:6f:76:87:3b:9c:35:d5:7c:f2:da:7e:6b:e5: 5e:80:5a:99:b4:a8:0d:95:34:52:a6:f8:36:29:74:e9:72:fd: 55:e9:26:41:25:03:46:a4:c1:09:49:67:8e:7d:d0:5a:b0:73: c6:ef:cb:eb:51:01:b0:c2:6f:89:51:89:6a:d5:80:c9:a9:c6: 0f:71:db:dc:0c:ce:97:6b:8a:45:34:82:07:d2:de:b0:cf:05: 2a:04:ac:ec:cd:b6:13:a6:a7:36:b9:5e:ff:a2:db:0e:fd:04: 9d:43:3b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV6NKbVHnfJYdNYwidoa/Sf4fF44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2 MzRCNTc1RTAeFw0yNjA1MTIyMzUzMTdaFw0yNjA1MTQwMTM0MTdaMDMxMTAvBgNV BAMTKEQzODc5ODg0NTBGMTJCM0FFMEU4RUJDMUE2QkY5RUQwNEQzNDAzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWB/EkXfa8qlhVj9kADKwfhbrz LAelJhMqtjYjh9+6Zyo0dxFYJs/o3LCByp7aJWnBY2ZSai7JXPRyMGqIySQbEyrR +BJKKpt3dPKn+10ZaUoaGRed3oRSD2TvFOUHfTIM+8WnuRVfZ9vPZFNxaHjlymMj HWKi0LhbpZLE06fs8hUMqTcrXBPgpBRkmw1GXo69EzXqC4pWaWCTP/KlFZMxl8C/ lJS64oYooneU16xSSCbQ9SqyCWrOFOeKzIDW2NG0WmQ/afGaU0jFjax/Qo3u8CGJ eBOJ8j36QGcLzF7GDRsWHFytPUqE5v84ii+rXX72c47v8CNlOYjrg6DnETulAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU04eYhFDxKzrg6OvBpr+e0E00A24wHwYDVR0j BBgwFoAUQMr5hIPEHae9x1mhKJQup2NLV14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1ZTVhMzAtMDgwMi00YzVjLTk0N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4 M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2MzRCNTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MENBRjk4NDgzQzQxREE3QkRDNzU5QTEyODk0MkVBNzYzNEI1 NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJF QTc2MzRCNTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEb2gADcUOVtcfslyD51hMYw8uZEAVsjtLEe Vvg3m/CFzpaKbJ5ZZnPDw6wYQ5UGzLU4sHNBQQ97kTep3ftGsABdhL7sa49+HiEX YGPLUenFzW8cmPk0am5whdGaBA8SBxm2D0JeBpWiB+/gfUY0saKA6cTO8Ub3/sAQ ruVu/bi3ndG5wJ5GvmK0URXMbmqoGMSWzJAjb3aHO5w11Xzy2n5r5V6AWpm0qA2V NFKm+DYpdOly/VXpJkElA0akwQlJZ4590Fqwc8bvy+tRAbDCb4lRiWrVgMmpxg9x 29wMzpdrikU0ggfS3rDPBSoErOzNthOmpza5Xv+i2w79BJ1DO9Q= -----END CERTIFICATE-----Generated at Wed May 13 03:17:07 2026 by rpki-client