$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft File: 40064999DEC3F3BD85C4F883982B58D76246EE84.mft (raw, json) Hash identifier: fMv1OOcIanG85+GpFUTpz7PoC03H0P6JdA8XDhfI0/0= Subject key identifier: 11:C0:8C:C7:96:66:26:AF:B5:50:4C:AA:7B:57:F8:A1:DE:F7:E2:67 Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 167577F619378DDD5C63A44BDC3F404436CCD5EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 20:14:49 +0000 Manifest this update: Thu 23 Jul 2026 20:09:49 +0000 Manifest next update: Fri 24 Jul 2026 22:05:49 +0000 Files and hashes: 1: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=) 2: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=) 3: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY=) 4: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=) 5: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: pVbAEY3jNiaOa2/I5+aOrojXUWJy/5MAJ3dSN22Pu3k=) 6: 40064999DEC3F3BD85C4F883982B58D76246EE84.crl (hash: QPwkR7TyqCWInlrti16g9bm9d0iJABtRC0taeugMqgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:75:77:f6:19:37:8d:dd:5c:63:a4:4b:dc:3f:40:44:36:cc:d5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: Jul 23 20:09:49 2026 GMT Not After : Jul 24 22:05:49 2026 GMT Subject: CN=11C08CC7966626AFB5504CAA7B57F8A1DEF7E267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:8d:bb:66:e6:ee:e1:2d:f9:60:d3:09:8c:30: b5:e1:86:f6:4f:f9:de:4d:a7:96:e3:97:a1:cb:6a: 05:df:a5:b9:8a:9a:6f:f7:36:21:07:86:66:36:d4: 9b:6e:84:3c:13:bd:9c:a4:15:c6:f6:89:87:a1:18: 3c:9f:1e:66:e4:21:b0:e1:60:14:c2:04:3d:4c:aa: af:0f:fc:9d:a1:83:3e:ef:57:d7:6c:51:af:02:77: c6:8b:7d:aa:b4:c3:7b:09:2b:4a:e4:0d:41:2d:bb: 6a:cb:6c:79:9c:ef:5c:6e:66:8c:84:95:88:3e:35: d2:a3:25:f8:6e:89:2d:51:fa:4e:62:ce:71:13:e9: 5b:04:fc:30:d9:0c:b4:64:e0:a4:3f:64:fb:fd:78: 84:d9:ba:90:5d:01:4f:78:5b:4a:ec:35:81:9b:80: 31:3e:88:b1:e6:b0:64:2d:17:f1:c3:36:9d:75:9f: e7:1a:7d:5f:23:1d:95:ca:bf:16:d2:60:f5:68:d0: d2:ca:fb:bc:74:6d:7a:4f:0b:41:74:1b:46:4d:ff: d3:8b:25:6e:8f:6e:49:a2:65:23:9f:9a:1f:c5:92: e8:79:c3:e3:f3:9c:a1:b1:f2:81:82:7e:f7:83:b1: 19:d7:21:53:24:17:c9:98:7f:7f:13:53:09:f4:6f: 1f:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:8C:C7:96:66:26:AF:B5:50:4C:AA:7B:57:F8:A1:DE:F7:E2:67 X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:7d:65:eb:f9:f5:de:b7:5a:bb:5f:e8:a0:9e:50:66:29:c5: f1:bd:60:87:ce:f3:24:d6:e2:9a:33:0e:f0:24:22:f3:5b:c7: fd:ad:5a:99:44:85:37:c0:ab:fd:df:6b:aa:a0:6d:ee:d7:9f: ae:a9:ee:c3:78:e6:79:f6:ab:26:fd:93:80:37:37:5e:65:2c: d9:c5:80:35:6f:d7:2f:61:0c:fb:08:76:3d:95:b0:ff:d8:20: 3c:57:00:df:ad:9f:88:df:85:12:cf:01:d7:ff:71:df:0d:73: af:73:46:ba:25:57:f6:f4:3f:42:22:00:cb:67:59:db:a8:cf: 34:08:fc:ef:fe:22:a8:c1:64:50:04:63:8d:f7:37:c2:d4:3d: 51:18:ed:8b:f4:7d:43:f0:14:c9:30:28:05:69:e9:1f:b5:10: dd:55:72:d1:d5:27:ea:0b:3c:bd:a1:55:f4:df:d0:b1:a6:c4: a5:69:36:b8:ae:6a:fd:dc:df:3e:0b:9f:41:b2:e4:a1:ae:f5: 0f:a5:69:f1:ba:ce:3a:4e:62:94:a6:fc:7c:43:d1:61:48:a7: 3c:1f:5c:55:75:3f:76:16:f0:e5:8a:d5:67:eb:d2:da:66:e3: ec:60:8f:7b:5b:7f:3b:12:88:e7:65:5a:fd:42:9c:d4:f0:f7: 24:3c:d2:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFnV39hk3jd1cY6RL3D9ARDbM1e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA3MjMyMDA5NDlaFw0yNjA3MjQyMjA1NDlaMDMxMTAvBgNV BAMTKDExQzA4Q0M3OTY2NjI2QUZCNTUwNENBQTdCNTdGOEExREVGN0UyNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjjbtm5u7hLflg0wmMMLXhhvZP +d5Np5bjl6HLagXfpbmKmm/3NiEHhmY21JtuhDwTvZykFcb2iYehGDyfHmbkIbDh YBTCBD1Mqq8P/J2hgz7vV9dsUa8Cd8aLfaq0w3sJK0rkDUEtu2rLbHmc71xuZoyE lYg+NdKjJfhuiS1R+k5iznET6VsE/DDZDLRk4KQ/ZPv9eITZupBdAU94W0rsNYGb gDE+iLHmsGQtF/HDNp11n+cafV8jHZXKvxbSYPVo0NLK+7x0bXpPC0F0G0ZN/9OL JW6PbkmiZSOfmh/Fkuh5w+PznKGx8oGCfveDsRnXIVMkF8mYf38TUwn0bx//AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEcCMx5ZmJq+1UEyqe1f4od734mcwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4 RDc2MjQ2RUU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACN9Zev59d63Wrtf6KCeUGYpxfG9YIfO8yTW 4pozDvAkIvNbx/2tWplEhTfAq/3fa6qgbe7Xn66p7sN45nn2qyb9k4A3N15lLNnF gDVv1y9hDPsIdj2VsP/YIDxXAN+tn4jfhRLPAdf/cd8Nc69zRrolV/b0P0IiAMtn WduozzQI/O/+IqjBZFAEY433N8LUPVEY7Yv0fUPwFMkwKAVp6R+1EN1VctHVJ+oL PL2hVfTf0LGmxKVpNriuav3c3z4Ln0Gy5KGu9Q+lafG6zjpOYpSm/HxD0WFIpzwf XFV1P3YW8OWK1Wfr0tpm4+xgj3tbfzsSiOdlWv1CnNTw9yQ80mk= -----END CERTIFICATE-----Generated at Fri Jul 24 10:38:44 2026 by rpki-client