$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft File: 40CAF98483C41DA7BDC759A128942EA7634B575E.mft (raw, json) Hash identifier: taIlIKrMWit97bDFRGIg1R0p/GTrBgy2Ck07htnplWM= Subject key identifier: 28:EC:A9:DA:82:23:62:A0:1C:0A:22:A5:F8:6B:8E:C3:A8:98:DF:50 Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E Certificate issuer: /CN=40CAF98483C41DA7BDC759A128942EA7634B575E Certificate serial: 637583762A1BA57748BC7449BA3133C16F350E58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 20:30:52 +0000 Manifest this update: Thu 24 Sep 2026 20:25:52 +0000 Manifest next update: Fri 25 Sep 2026 20:57:52 +0000 Files and hashes: 1: 40CAF98483C41DA7BDC759A128942EA7634B575E.crl (hash: lwgrTsmhsPHivsbHS0KVNfaz8jL/942nayBNhNJ9O7A=) 2: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: CWqy2Yz1lUV+bgx0wIDq9A3JsKeVTWQekOJKBjnBtxc=) 3: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: Meb8QhT2vDYvkg9nVv8g0QFyTeOgXHkvo1+qGouJHvs=) 4: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:75:83:76:2a:1b:a5:77:48:bc:74:49:ba:31:33:c1:6f:35:0e:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E Validity Not Before: Sep 24 20:25:52 2026 GMT Not After : Sep 25 20:57:52 2026 GMT Subject: CN=28ECA9DA822362A01C0A22A5F86B8EC3A898DF50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c8:d8:fa:54:5d:89:f8:ca:be:c6:22:75:db: 30:c5:49:e3:3f:91:71:51:78:64:55:c5:91:b0:f1: 83:c8:73:dc:26:72:b9:17:76:74:f9:1d:10:04:b4: 6b:72:91:89:06:c6:33:f8:95:1d:e2:34:81:92:c8: 3f:f4:54:17:7a:9b:24:4f:e9:a3:49:e4:35:53:08: d8:bd:10:6d:23:03:a8:b9:f3:89:83:9b:84:70:1f: 01:c8:d3:47:6b:f6:fe:95:19:f9:5c:c4:4c:42:01: d4:cc:aa:37:58:63:a5:c4:b9:9a:3b:0f:c7:b6:26: 77:04:9a:c3:26:ad:a8:94:9f:06:5c:0d:08:d6:2c: 67:2a:d2:c6:b9:57:b5:52:18:ef:64:33:9f:ad:ee: 0c:c5:63:4b:e6:cf:99:c2:ec:7d:7c:69:8b:0a:65: 5e:4f:e1:17:92:c8:34:b9:38:dc:54:83:b3:95:07: 3e:0c:7f:ae:cb:a2:81:6d:7c:c2:7d:89:fe:09:cf: e0:14:5f:f9:97:bc:aa:95:20:5b:2e:40:ac:54:55: ab:a1:22:35:0f:87:03:21:c7:37:d7:b8:8a:4c:5b: b9:b0:5d:35:93:a6:b4:f5:1e:00:14:18:e6:aa:1d: 47:d6:65:a7:b1:80:93:87:0f:f9:ae:2d:ce:7c:fd: 41:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:EC:A9:DA:82:23:62:A0:1C:0A:22:A5:F8:6B:8E:C3:A8:98:DF:50 X509v3 Authority Key Identifier: keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:89:61:e4:66:1e:89:d0:65:f2:ec:25:ab:ae:a3:a1:d7:40: 87:d3:2e:c3:8a:ad:af:e2:af:db:8a:1a:68:4b:ae:82:c4:cc: 43:f7:e2:b7:72:f2:28:10:41:d0:b0:16:89:5b:04:ba:1f:db: 5f:24:92:42:d6:14:73:04:6d:29:b2:4b:b9:28:76:46:5b:62: 7c:97:6a:c5:6e:cf:77:7d:0f:0c:db:3e:79:a4:ff:4b:4f:08: a9:08:59:7c:4f:33:9a:29:e0:17:d9:42:19:c0:c4:88:60:97: 38:9b:04:7d:c5:4a:94:b9:50:f8:6f:f2:64:bd:b4:d7:26:a4: 21:6c:f2:a5:98:5c:7a:18:03:ac:7f:07:e2:64:37:34:b0:99: a0:56:6d:63:61:57:e1:8d:6d:36:27:5a:0e:63:da:06:b2:c6: aa:43:7d:5b:89:85:37:75:71:e7:32:c1:ff:de:9b:0a:c8:e2: 8c:4e:fc:b4:48:ad:5c:1f:6f:71:06:d2:8c:28:04:8e:f5:00: c0:e9:96:b8:0f:81:fa:bf:8b:b8:0e:ae:03:97:6c:1d:c1:a7: 8a:59:f8:49:6c:83:32:21:85:61:a1:e2:a6:be:6d:e8:b0:f3: fa:f1:1b:f1:30:de:da:45:75:82:b7:67:3f:c5:a9:4e:c3:6e: 8d:f4:a0:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY3WDdiobpXdIvHRJujEzwW81DlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2 MzRCNTc1RTAeFw0yNjA5MjQyMDI1NTJaFw0yNjA5MjUyMDU3NTJaMDMxMTAvBgNV BAMTKDI4RUNBOURBODIyMzYyQTAxQzBBMjJBNUY4NkI4RUMzQTg5OERGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuyNj6VF2J+Mq+xiJ12zDFSeM/ kXFReGRVxZGw8YPIc9wmcrkXdnT5HRAEtGtykYkGxjP4lR3iNIGSyD/0VBd6myRP 6aNJ5DVTCNi9EG0jA6i584mDm4RwHwHI00dr9v6VGflcxExCAdTMqjdYY6XEuZo7 D8e2JncEmsMmraiUnwZcDQjWLGcq0sa5V7VSGO9kM5+t7gzFY0vmz5nC7H18aYsK ZV5P4ReSyDS5ONxUg7OVBz4Mf67LooFtfMJ9if4Jz+AUX/mXvKqVIFsuQKxUVauh IjUPhwMhxzfXuIpMW7mwXTWTprT1HgAUGOaqHUfWZaexgJOHD/muLc58/UGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKOyp2oIjYqAcCiKl+GuOw6iY31AwHwYDVR0j BBgwFoAUQMr5hIPEHae9x1mhKJQup2NLV14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1ZTVhMzAtMDgwMi00YzVjLTk0N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4 M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2MzRCNTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MENBRjk4NDgzQzQxREE3QkRDNzU5QTEyODk0MkVBNzYzNEI1 NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJF QTc2MzRCNTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOJYeRmHonQZfLsJauuo6HXQIfTLsOKra/i r9uKGmhLroLEzEP34rdy8igQQdCwFolbBLof218kkkLWFHMEbSmyS7kodkZbYnyX asVuz3d9DwzbPnmk/0tPCKkIWXxPM5op4BfZQhnAxIhglzibBH3FSpS5UPhv8mS9 tNcmpCFs8qWYXHoYA6x/B+JkNzSwmaBWbWNhV+GNbTYnWg5j2gayxqpDfVuJhTd1 cecywf/emwrI4oxO/LRIrVwfb3EG0owoBI71AMDplrgPgfq/i7gOrgOXbB3Bp4pZ +ElsgzIhhWGh4qa+beiw8/rxG/Ew3tpFdYK3Zz/FqU7Dbo30oPk= -----END CERTIFICATE-----Generated at Fri Sep 25 12:58:51 2026 by rpki-client