$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: duLDv3wZUQzHpUgmXRNXvA+DnCVVATv+ugv+n59oxUg= Subject key identifier: 79:6A:76:A4:D6:8D:0F:63:8B:CE:D1:FC:09:F9:97:B5:9E:BE:6E:BF Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 2708420139E52F865FED6677B0B98F684FB6BC18 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 14:44:41 +0000 Manifest this update: Tue 28 Jul 2026 14:39:41 +0000 Manifest next update: Wed 29 Jul 2026 15:51:41 +0000 Files and hashes: 1: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) 3: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: iHgfpsZ+VhxQihgqo+S7ZrEXAkUANUOM4pBUF+6VDoQ=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 15:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:08:42:01:39:e5:2f:86:5f:ed:66:77:b0:b9:8f:68:4f:b6:bc:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: Jul 28 14:39:41 2026 GMT Not After : Jul 29 15:51:41 2026 GMT Subject: CN=796A76A4D68D0F638BCED1FC09F997B59EBE6EBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:17:4d:3c:74:2f:da:bd:e2:86:3d:e7:d0:f6: bd:75:1e:87:97:7a:6e:22:8b:01:63:b6:71:d1:d6: 51:a3:f9:c3:b4:b6:c3:e1:c2:63:14:f0:51:3b:b7: a1:b3:1c:c9:f0:51:f0:fb:cc:00:aa:15:51:ae:87: b3:d5:73:cc:99:eb:b0:72:67:f2:f7:cf:e5:38:be: ac:35:3a:d4:3e:cc:ff:97:9b:53:f9:5a:01:01:a7: df:12:0a:36:7b:38:cc:b0:49:16:e4:f1:09:8b:53: fe:64:5b:2a:99:05:51:74:a2:e3:54:8f:bb:68:e2: bd:f2:7e:f2:06:78:c0:91:b4:89:96:ac:da:d5:ad: dd:e6:92:0b:76:e0:ec:b7:5a:d6:9d:d2:ba:66:d1: 73:08:fe:f7:cb:58:d8:5e:d5:bb:76:c9:14:bd:d5: ae:a0:bb:cb:79:b4:a1:e6:ed:bd:27:b6:8b:1c:41: dc:f0:f7:d9:39:24:d5:06:42:33:55:d6:31:7e:34: 61:77:ec:52:58:8f:76:b2:4e:67:e5:ce:5f:1d:f4: ad:22:71:b2:fa:3b:da:92:5f:0b:2e:6b:ab:28:32: 5a:ae:9f:81:0f:53:e9:d2:f6:31:10:ee:a6:0e:0e: 9a:b5:66:ba:18:ac:ad:92:f2:b9:65:5d:e3:e7:99: 9f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:76:A4:D6:8D:0F:63:8B:CE:D1:FC:09:F9:97:B5:9E:BE:6E:BF X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:4c:22:14:33:27:cc:39:d0:ae:91:83:a9:79:83:72:4c:35: 8e:49:e0:9a:be:da:5c:ee:f2:cb:e9:e1:85:cc:35:f9:86:bd: ec:7a:e0:40:62:23:aa:06:9d:0a:6e:f4:6d:ea:ac:4d:4f:c6: 01:44:24:ce:1c:3b:aa:9a:3e:41:5a:9f:67:ee:6c:3f:44:43: 11:19:5f:73:a5:3c:cc:a2:d9:87:6d:e6:9b:3b:4c:4e:84:e3: 85:32:06:21:67:6a:f1:fe:cb:d1:59:26:13:2d:fc:c5:ab:6f: 7e:2a:02:60:9f:0e:d2:ef:50:79:db:5e:42:fe:60:f2:89:a7: 31:2d:f4:98:44:6a:38:53:4a:6d:71:04:bd:9a:03:4b:75:fb: 50:d0:5c:0b:b9:cd:0d:7b:05:80:fd:2e:15:c2:f2:33:c5:e3: 38:93:96:8f:48:f5:4b:b5:f0:14:9c:7f:ba:fd:c9:e0:cf:0c: 1d:47:7e:83:8f:bd:88:b6:77:c7:62:62:13:8a:cf:72:74:f1: 73:32:02:37:b1:9e:4c:cc:77:e3:a0:76:0e:62:e9:4b:06:cd: a1:a5:a5:35:d9:82:69:d9:25:ca:c3:64:d7:72:bf:c4:f8:66: f3:2c:e9:e3:38:65:4f:19:44:eb:62:04:91:2b:3b:ad:c4:4b: 7d:dc:1c:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJwhCATnlL4Zf7WZ3sLmPaE+2vBgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA3MjgxNDM5NDFaFw0yNjA3MjkxNTUxNDFaMDMxMTAvBgNV BAMTKDc5NkE3NkE0RDY4RDBGNjM4QkNFRDFGQzA5Rjk5N0I1OUVCRTZFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsF008dC/aveKGPefQ9r11HoeX em4iiwFjtnHR1lGj+cO0tsPhwmMU8FE7t6GzHMnwUfD7zACqFVGuh7PVc8yZ67By Z/L3z+U4vqw1OtQ+zP+Xm1P5WgEBp98SCjZ7OMywSRbk8QmLU/5kWyqZBVF0ouNU j7to4r3yfvIGeMCRtImWrNrVrd3mkgt24Oy3Wtad0rpm0XMI/vfLWNhe1bt2yRS9 1a6gu8t5tKHm7b0ntoscQdzw99k5JNUGQjNV1jF+NGF37FJYj3ayTmflzl8d9K0i cbL6O9qSXwsua6soMlqun4EPU+nS9jEQ7qYODpq1ZroYrK2S8rllXePnmZ9fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeWp2pNaND2OLztH8CfmXtZ6+br8wHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRMIhQzJ8w50K6Rg6l5g3JMNY5J4Jq+2lzu 8svp4YXMNfmGvex64EBiI6oGnQpu9G3qrE1PxgFEJM4cO6qaPkFan2fubD9EQxEZ X3OlPMyi2Ydt5ps7TE6E44UyBiFnavH+y9FZJhMt/MWrb34qAmCfDtLvUHnbXkL+ YPKJpzEt9JhEajhTSm1xBL2aA0t1+1DQXAu5zQ17BYD9LhXC8jPF4ziTlo9I9Uu1 8BScf7r9yeDPDB1HfoOPvYi2d8diYhOKz3J08XMyAjexnkzMd+Ogdg5i6UsGzaGl pTXZgmnZJcrDZNdyv8T4ZvMs6eM4ZU8ZROtiBJErO63ES33cHGk= -----END CERTIFICATE-----Generated at Wed Jul 29 05:45:28 2026 by rpki-client