$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: Gg5dIb2X+Vqi96+CXmKbbuB2b1BZfBmxLu9a4TS1qHM= Subject key identifier: 74:81:9C:8F:C4:A1:A6:BC:49:75:B5:1D:95:24:51:A6:B6:6D:BE:D4 Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 3FA90F6788A1F005FE71E8313CAD2268E0E8F04B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 21:16:51 +0000 Manifest this update: Thu 24 Sep 2026 21:11:51 +0000 Manifest next update: Fri 25 Sep 2026 23:32:51 +0000 Files and hashes: 1: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) 2: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: oqpAcO22F2hWXgs2LOiHbVXaFkrk5Z4GzZg0ehCbYDA=) 3: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) 4: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a9:0f:67:88:a1:f0:05:fe:71:e8:31:3c:ad:22:68:e0:e8:f0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: Sep 24 21:11:51 2026 GMT Not After : Sep 25 23:32:51 2026 GMT Subject: CN=74819C8FC4A1A6BC4975B51D952451A6B66DBED4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:19:3f:1d:4b:2c:b8:28:43:7e:90:2e:e5:da: a2:8f:f5:c0:be:77:ad:19:62:d9:b6:09:61:a8:c1: e9:18:fb:e6:45:0f:51:fb:90:36:d3:42:ff:bb:fb: 36:ab:34:5b:f8:9d:3a:b8:08:05:7a:ad:48:f7:29: 3a:bb:95:da:ca:20:dd:7e:02:c5:9f:9a:d5:70:a7: 73:7a:6f:bc:71:1d:24:3d:e2:e3:45:f3:97:a7:ec: f3:06:53:92:01:ea:14:0d:28:09:41:ca:b0:99:12: 24:53:06:1f:d0:8b:91:44:67:ab:9e:66:ab:2b:f5: 3e:56:94:62:0b:b2:17:24:74:85:d2:b8:a5:bc:75: 66:e2:ed:94:e7:bd:d5:7c:38:18:a9:3d:ae:54:27: 03:c2:0e:ee:46:ea:8a:ab:44:73:98:5d:77:32:3f: 7c:2d:ab:e5:25:39:2e:f0:b2:49:00:28:9d:92:0f: cd:ea:58:a1:48:d4:ec:51:7d:12:7e:12:87:e8:33: 57:1f:19:3d:ca:c2:06:f9:47:c1:49:cf:35:58:4f: 18:2b:4b:c9:b4:68:f6:b4:34:28:88:3c:68:ba:da: ff:cd:3d:a5:c6:69:b0:aa:e9:b8:3c:61:3d:71:70: 6c:a6:80:eb:c1:b4:3f:20:ab:ed:be:39:7b:fa:bc: a8:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:81:9C:8F:C4:A1:A6:BC:49:75:B5:1D:95:24:51:A6:B6:6D:BE:D4 X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:05:ef:4a:be:fd:8c:ad:55:45:58:cb:63:8c:4d:d9:45:a1: f0:6c:6b:c5:fc:c8:ed:3f:6a:8b:e5:06:73:90:24:7f:60:30: c7:1b:d1:07:48:cd:b2:4c:c5:ee:a0:0e:ec:af:ad:42:c5:b8: 7e:cd:7c:c3:f1:db:63:aa:f7:16:c1:26:8c:48:fe:0d:df:5d: 0d:44:3a:02:62:1f:8b:14:c2:d1:d5:60:d1:3a:34:b4:54:a0: 73:65:ea:df:4c:bb:60:85:98:8d:41:25:e4:17:44:49:09:ac: b3:45:5c:1a:c3:8e:c8:c2:84:c9:00:b7:00:39:e7:b8:ae:1d: 41:74:b8:fa:3b:a6:25:6e:bb:f0:9a:f8:7a:80:a2:dc:99:9a: 88:df:91:93:31:0f:81:bf:48:b2:b4:e6:07:74:f6:9f:39:f8: 88:3a:bd:ba:ed:fe:f6:9b:73:c3:e7:6c:80:88:0e:1b:8b:34: 90:6b:a1:fe:e3:f9:25:85:7a:e6:2e:bf:4d:64:7e:a3:e6:37: 69:99:29:aa:d6:29:1c:e5:36:80:d3:48:7d:8b:ef:b8:5d:92: b7:33:1a:0e:68:55:be:aa:fa:5b:13:b6:32:3b:14:55:04:71: 0e:c4:ee:d8:82:c6:a7:ec:c2:96:28:9d:d7:88:e7:2c:52:67: bb:0f:bd:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6kPZ4ih8AX+cegxPK0iaODo8EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA5MjQyMTExNTFaFw0yNjA5MjUyMzMyNTFaMDMxMTAvBgNV BAMTKDc0ODE5QzhGQzRBMUE2QkM0OTc1QjUxRDk1MjQ1MUE2QjY2REJFRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGT8dSyy4KEN+kC7l2qKP9cC+ d60ZYtm2CWGowekY++ZFD1H7kDbTQv+7+zarNFv4nTq4CAV6rUj3KTq7ldrKIN1+ AsWfmtVwp3N6b7xxHSQ94uNF85en7PMGU5IB6hQNKAlByrCZEiRTBh/Qi5FEZ6ue Zqsr9T5WlGILshckdIXSuKW8dWbi7ZTnvdV8OBipPa5UJwPCDu5G6oqrRHOYXXcy P3wtq+UlOS7wskkAKJ2SD83qWKFI1OxRfRJ+EofoM1cfGT3Kwgb5R8FJzzVYTxgr S8m0aPa0NCiIPGi62v/NPaXGabCq6bg8YT1xcGymgOvBtD8gq+2+OXv6vKhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdIGcj8ShprxJdbUdlSRRprZtvtQwHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUF70q+/YytVUVYy2OMTdlFofBsa8X8yO0/ aovlBnOQJH9gMMcb0QdIzbJMxe6gDuyvrULFuH7NfMPx22Oq9xbBJoxI/g3fXQ1E OgJiH4sUwtHVYNE6NLRUoHNl6t9Mu2CFmI1BJeQXREkJrLNFXBrDjsjChMkAtwA5 57iuHUF0uPo7piVuu/Ca+HqAotyZmojfkZMxD4G/SLK05gd09p85+Ig6vbrt/vab c8PnbICIDhuLNJBrof7j+SWFeuYuv01kfqPmN2mZKarWKRzlNoDTSH2L77hdkrcz Gg5oVb6q+lsTtjI7FFUEcQ7E7tiCxqfswpYondeI5yxSZ7sPveI= -----END CERTIFICATE-----Generated at Thu Sep 24 23:07:17 2026 by rpki-client