$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft File: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft (raw, json) Hash identifier: MJOsxwAIIP1j+zj4xVH7UgNns9LoCqojQHOqZZrSsME= Subject key identifier: A6:42:F3:49:0F:B3:AA:3A:B5:90:7E:74:91:F2:42:8F:4E:34:ED:44 Authority key identifier: 04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 Certificate issuer: /CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Certificate serial: 6AEFD569DEA9547AACA5AD1AF3170DDE48BC9338 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft Manifest number: BD Signing time: Sun 20 Sep 2026 17:28:40 +0000 Manifest this update: Sun 20 Sep 2026 17:23:40 +0000 Manifest next update: Mon 21 Sep 2026 18:21:40 +0000 Files and hashes: 1: 040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl (hash: 1tYsuP3/tS1/y36BEVrqTjMnWCK4ACrTorm5vBpcHhI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:ef:d5:69:de:a9:54:7a:ac:a5:ad:1a:f3:17:0d:de:48:bc:93:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865 Validity Not Before: Sep 20 17:23:40 2026 GMT Not After : Sep 21 18:21:40 2026 GMT Subject: CN=A642F3490FB3AA3AB5907E7491F2428F4E34ED44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:67:75:96:50:0b:db:13:c9:6a:83:ee:f3:e8: c5:15:36:cb:74:77:54:e2:44:b9:b9:4d:66:02:90: e6:b8:7f:c8:04:1f:17:5e:60:6c:8c:6a:f9:75:3b: aa:cc:36:a1:ff:cd:b9:30:e7:5b:fe:ab:1a:3e:27: 19:a5:02:02:a0:8f:32:4d:7b:f4:cf:ce:47:f0:5e: f1:d6:79:19:8f:fd:fa:11:80:ad:8b:3e:6e:d6:e7: 78:65:b0:17:53:1b:f7:8b:d1:f6:ca:29:d1:86:b0: 4d:27:ce:f9:84:f4:fe:48:4e:96:8e:45:ec:45:28: 76:f7:46:2c:27:74:f4:f7:94:44:4a:c9:64:64:1d: 56:9f:0b:36:b3:8c:29:88:bf:b5:99:20:e6:73:ad: b0:0a:96:ca:16:63:08:05:52:14:fd:e2:e0:f3:da: 53:08:19:31:18:8d:6b:b7:7e:02:ef:e0:f7:15:1c: d9:2d:a8:37:ed:ed:77:96:27:c4:53:09:10:5d:82: c9:b6:72:b7:02:73:af:59:a3:19:e6:99:d8:75:d2: 3c:ae:33:a8:2b:ff:35:12:71:73:74:1a:8e:4f:fb: 37:87:f6:77:44:a9:2e:71:89:69:63:46:03:c7:f0: db:25:98:57:82:4c:37:97:33:08:17:6d:ab:de:cb: 6b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:42:F3:49:0F:B3:AA:3A:B5:90:7E:74:91:F2:42:8F:4E:34:ED:44 X509v3 Authority Key Identifier: keyid:04:0C:9F:4B:86:EC:13:FE:0F:91:FD:76:BB:0F:F8:E3:A6:40:28:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/040C9F4B86EC13FE0F91FD76BB0FF8E3A6402865.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ad:c8:70:e9:99:27:6d:64:86:15:45:12:db:fe:83:96:93: 38:0e:1f:3b:b2:11:ee:a4:54:0d:c9:47:b1:db:f4:9e:15:f5: 1c:63:98:16:9f:f1:7e:77:06:29:78:77:35:6a:45:e1:4d:db: de:da:f3:3b:c0:13:81:ad:5f:85:c7:92:ae:cb:47:bf:df:d8: 67:72:c6:ad:8e:4f:f0:d2:fc:da:a7:7f:50:a9:29:98:ab:0b: 62:c8:bd:49:7c:e6:ea:d6:9d:fb:a1:ad:f5:6d:10:60:35:78: e5:45:ef:5e:b8:5c:9f:0e:60:66:b9:b7:7c:70:ad:bf:c7:54: b1:0d:2b:dd:be:7e:d6:15:e4:6c:f6:fc:1b:ce:e0:b0:fd:cc: 2a:2e:76:f7:03:60:b3:fe:37:98:0f:ea:81:49:0f:1d:bc:9f: a0:13:78:53:4b:86:f4:22:3b:11:2c:4b:33:45:71:a0:8d:27: 87:8b:de:8b:5a:69:e4:11:4f:00:76:1c:f1:46:65:4c:5c:44: 66:dd:65:80:f7:0c:a6:16:57:02:54:4b:2b:b9:b9:69:83:26: e6:c0:38:a5:92:ed:43:55:ab:7d:f0:92:df:90:df:6c:e8:48: 7f:e0:56:ce:75:02:f0:76:4d:c8:fe:ed:5a:a4:4a:89:fc:4b: 5d:ad:ef:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUau/Vad6pVHqspa0a8xcN3ki8kzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNB NjQwMjg2NTAeFw0yNjA5MjAxNzIzNDBaFw0yNjA5MjExODIxNDBaMDMxMTAvBgNV BAMTKEE2NDJGMzQ5MEZCM0FBM0FCNTkwN0U3NDkxRjI0MjhGNEUzNEVENDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZ3WWUAvbE8lqg+7z6MUVNst0 d1TiRLm5TWYCkOa4f8gEHxdeYGyMavl1O6rMNqH/zbkw51v+qxo+JxmlAgKgjzJN e/TPzkfwXvHWeRmP/foRgK2LPm7W53hlsBdTG/eL0fbKKdGGsE0nzvmE9P5ITpaO RexFKHb3RiwndPT3lERKyWRkHVafCzazjCmIv7WZIOZzrbAKlsoWYwgFUhT94uDz 2lMIGTEYjWu3fgLv4PcVHNktqDft7XeWJ8RTCRBdgsm2crcCc69Zoxnmmdh10jyu M6gr/zUScXN0Go5P+zeH9ndEqS5xiWljRgPH8NslmFeCTDeXMwgXbavey2tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkLzSQ+zqjq1kH50kfJCj0407UQwHwYDVR0j BBgwFoAUBAyfS4bsE/4Pkf12uw/446ZAKGUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWI2MTBjOGQtYTkzNS00NGMzLTg5MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4 NkVDMTNGRTBGOTFGRDc2QkIwRkY4RTNBNjQwMjg2NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wNDBDOUY0Qjg2RUMxM0ZFMEY5MUZENzZCQjBGRjhFM0E2NDAy ODY1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMDQwQzlGNEI4NkVDMTNGRTBGOTFGRDc2QkIwRkY4 RTNBNjQwMjg2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGtyHDpmSdtZIYVRRLb/oOWkzgOHzuyEe6k VA3JR7Hb9J4V9RxjmBaf8X53Bil4dzVqReFN297a8zvAE4GtX4XHkq7LR7/f2Gdy xq2OT/DS/Nqnf1CpKZirC2LIvUl85urWnfuhrfVtEGA1eOVF7164XJ8OYGa5t3xw rb/HVLENK92+ftYV5Gz2/BvO4LD9zCoudvcDYLP+N5gP6oFJDx28n6ATeFNLhvQi OxEsSzNFcaCNJ4eL3otaaeQRTwB2HPFGZUxcRGbdZYD3DKYWVwJUSyu5uWmDJubA OKWS7UNVq33wkt+Q32zoSH/gVs51AvB2Tcj+7VqkSon8S12t77I= -----END CERTIFICATE-----Generated at Mon Sep 21 10:07:34 2026 by rpki-client