$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft File: 40064999DEC3F3BD85C4F883982B58D76246EE84.mft (raw, json) Hash identifier: 90z/HzxnfMtIG6hVPupZfTc72nRQkjtWDIfBW1Ag3pI= Subject key identifier: 22:89:D9:C9:D7:6D:1F:03:64:DF:A1:89:99:81:77:23:1F:69:3C:97 Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 2A8D2A3322259ABE025B21083BB8680FAFD67175 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 12:57:09 +0000 Manifest this update: Wed 23 Sep 2026 12:52:09 +0000 Manifest next update: Thu 24 Sep 2026 13:36:09 +0000 Files and hashes: 1: 40064999DEC3F3BD85C4F883982B58D76246EE84.crl (hash: AN42IPlKPhYfXlpWpjbOWQgJidOQUuMDAxx5WffiJxc=) 2: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=) 3: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=) 4: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=) 5: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY=) 6: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: pVbAEY3jNiaOa2/I5+aOrojXUWJy/5MAJ3dSN22Pu3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:8d:2a:33:22:25:9a:be:02:5b:21:08:3b:b8:68:0f:af:d6:71:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: Sep 23 12:52:09 2026 GMT Not After : Sep 24 13:36:09 2026 GMT Subject: CN=2289D9C9D76D1F0364DFA189998177231F693C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:b7:3f:de:6c:2c:03:d0:49:ea:e3:ef:e9: cd:ee:33:dc:9a:0a:74:8f:e2:2c:f0:81:c0:c2:d2: 94:9b:29:45:7c:7f:ec:10:5e:42:ff:04:39:84:73: a6:b8:6e:df:83:5e:86:8a:3c:7d:51:e5:e5:03:28: 35:ee:d2:d4:43:76:c6:c1:28:28:31:1f:56:37:c7: 71:a6:86:3e:76:29:77:cf:c4:3d:a8:ef:68:ee:3f: d0:08:b0:c1:df:fb:fb:2d:dc:aa:fb:63:ec:47:c5: 82:8d:48:02:72:57:7a:96:09:97:b6:d6:53:fe:c0: 87:da:f3:cc:63:12:97:14:4b:5b:68:30:ad:cb:19: 75:96:73:be:f9:85:b9:fc:24:08:50:c2:59:5e:6d: 7b:34:9f:77:38:f6:9f:79:9b:43:f3:20:70:20:52: 2f:e5:f7:11:a8:18:e1:bb:53:70:b5:b6:35:90:57: e3:bf:00:17:ec:ca:a2:d3:4a:10:0f:63:52:34:ff: 0d:10:38:27:f9:3d:f0:bb:9b:95:b8:46:ad:5e:92: cf:a8:c6:f1:3a:ef:84:59:dd:e7:a7:40:36:61:c9: 97:6d:d9:70:2e:71:fe:f3:c6:b3:53:8f:f5:09:ff: 75:31:67:e6:d8:3a:05:6f:80:6d:60:71:bc:8a:f0: 14:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:89:D9:C9:D7:6D:1F:03:64:DF:A1:89:99:81:77:23:1F:69:3C:97 X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:ec:f1:47:49:95:c3:81:a2:20:5f:d7:f1:84:8c:cc:82:56: 8e:0d:db:73:75:25:21:47:76:23:13:c4:26:08:8e:bc:11:bf: 4b:cc:b6:cd:0b:44:5e:fb:4d:6d:2f:b2:86:aa:36:5b:0f:ae: 3a:a0:46:50:f1:54:7d:02:8f:42:09:18:f2:cf:1d:bf:e3:4a: 8a:1f:26:7a:f4:9a:51:cc:4b:cc:8f:f2:ba:9a:13:3a:3e:85: 0e:62:81:a7:20:51:21:87:00:f9:00:70:b8:02:73:3e:f1:87: 62:4d:81:1a:e2:96:83:ed:35:f9:8b:98:d9:c3:b7:1b:cd:a4: 42:35:f8:57:4c:2d:c7:1c:d2:87:69:36:6e:ad:fd:27:ec:df: ef:c3:ee:91:ef:0b:10:3b:3b:2b:4b:58:f2:42:f9:e6:05:77: f7:27:5e:dc:6b:c1:b7:16:4f:23:c6:9a:b6:b4:a0:ad:3f:63: 65:a3:8b:07:87:48:82:06:ed:f5:8e:00:be:0d:10:eb:74:55: 46:ea:17:68:03:a8:60:f8:1d:84:eb:00:fa:01:57:55:48:d3: 7a:2d:86:d4:d3:e2:02:fd:ae:41:ff:02:ba:df:42:48:69:59: c1:70:7e:d6:58:8b:00:00:3e:9f:d4:dc:61:65:a7:a8:26:2f: e7:4d:a9:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKo0qMyIlmr4CWyEIO7hoD6/WcXUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA5MjMxMjUyMDlaFw0yNjA5MjQxMzM2MDlaMDMxMTAvBgNV BAMTKDIyODlEOUM5RDc2RDFGMDM2NERGQTE4OTk5ODE3NzIzMUY2OTNDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwibc/3mwsA9BJ6uPv6c3uM9ya CnSP4izwgcDC0pSbKUV8f+wQXkL/BDmEc6a4bt+DXoaKPH1R5eUDKDXu0tRDdsbB KCgxH1Y3x3Gmhj52KXfPxD2o72juP9AIsMHf+/st3Kr7Y+xHxYKNSAJyV3qWCZe2 1lP+wIfa88xjEpcUS1toMK3LGXWWc775hbn8JAhQwllebXs0n3c49p95m0PzIHAg Ui/l9xGoGOG7U3C1tjWQV+O/ABfsyqLTShAPY1I0/w0QOCf5PfC7m5W4Rq1eks+o xvE674RZ3eenQDZhyZdt2XAucf7zxrNTj/UJ/3UxZ+bYOgVvgG1gcbyK8BSnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIonZyddtHwNk36GJmYF3Ix9pPJcwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4 RDc2MjQ2RUU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbs8UdJlcOBoiBf1/GEjMyCVo4N23N1JSFH diMTxCYIjrwRv0vMts0LRF77TW0vsoaqNlsPrjqgRlDxVH0Cj0IJGPLPHb/jSoof Jnr0mlHMS8yP8rqaEzo+hQ5igacgUSGHAPkAcLgCcz7xh2JNgRriloPtNfmLmNnD txvNpEI1+FdMLccc0odpNm6t/Sfs3+/D7pHvCxA7OytLWPJC+eYFd/cnXtxrwbcW TyPGmra0oK0/Y2WjiweHSIIG7fWOAL4NEOt0VUbqF2gDqGD4HYTrAPoBV1VI03ot htTT4gL9rkH/ArrfQkhpWcFwftZYiwAAPp/U3GFlp6gmL+dNqeQ= -----END CERTIFICATE-----Generated at Thu Sep 24 03:53:34 2026 by rpki-client