$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: ZD/eGVDrcagIuSHf4a5kE5QF0WNRS46fg4fJwvwor94= Subject key identifier: 8F:56:A8:BC:AF:00:2F:49:07:FA:9F:ED:49:B6:72:D7:12:2C:BC:2D Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 2E3190B124500191E7B4912CE05C0A3D440A92FA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: BD Signing time: Mon 21 Sep 2026 05:43:40 +0000 Manifest this update: Mon 21 Sep 2026 05:38:40 +0000 Manifest next update: Tue 22 Sep 2026 06:03:40 +0000 Files and hashes: 1: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: XGVH/5+ZUyOuuCLTLZflTxQE1StHGxamM0Yyc2hbLAQ=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:31:90:b1:24:50:01:91:e7:b4:91:2c:e0:5c:0a:3d:44:0a:92:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Sep 21 05:38:40 2026 GMT Not After : Sep 22 06:03:40 2026 GMT Subject: CN=8F56A8BCAF002F4907FA9FED49B672D7122CBC2D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:20:bf:62:bc:f2:8e:5f:d2:75:82:eb:b6:45: 2c:aa:4e:16:a7:b4:e6:a3:30:80:4c:da:42:c5:b8: 62:48:9c:3e:57:c2:7d:0a:5a:ac:fd:fa:1e:26:68: d3:b7:73:7d:fb:71:ea:64:74:d7:31:13:d0:10:fd: 56:c6:b4:ff:18:b8:5c:bd:db:30:bc:3c:66:8f:10: 52:c9:99:27:02:87:df:83:cc:fa:34:2b:15:05:14: ef:7b:1b:79:92:2d:05:59:62:49:9b:4a:a7:6c:d6: 10:9d:e6:ac:9a:eb:13:4b:2c:8c:c1:e3:52:2b:58: 00:50:6d:29:80:1a:f7:3d:40:2d:8c:07:e8:3b:cb: 1a:9c:39:97:ae:d4:17:41:01:35:79:58:57:0c:b6: ac:ba:fa:86:b7:05:41:17:8b:f8:6b:43:89:f5:e6: 84:c1:8f:8f:65:94:83:82:d0:97:fd:02:2c:80:4f: 6a:40:77:1d:8c:7c:26:e0:30:03:30:4c:2f:fe:6e: 35:20:4f:1b:be:53:58:88:6e:24:6d:e1:9e:4b:5c: 3c:e2:da:2e:43:72:3d:bd:31:90:37:7b:da:8a:db: 4a:ff:68:84:24:8f:d5:5b:af:6a:f3:98:ae:fd:06: 40:c6:f3:e4:8f:5e:3f:3d:a4:30:ed:72:ef:13:72: 30:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:56:A8:BC:AF:00:2F:49:07:FA:9F:ED:49:B6:72:D7:12:2C:BC:2D X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:8c:d2:da:68:cb:67:27:44:7f:be:8e:24:ad:f3:7d:a9:5b: 95:59:96:82:f5:49:cb:07:2f:67:ee:39:0a:97:61:94:67:b4: 89:e6:7e:94:cc:73:21:47:62:ac:f9:24:ae:e6:b2:27:92:7b: 9a:7b:f7:ce:92:08:d2:ca:cf:f7:b4:eb:83:63:fb:4b:ef:f1: cf:af:31:e0:1e:07:78:be:6f:15:c3:b3:87:48:7e:9b:3e:ea: 1a:5d:c4:dc:7d:3b:5e:20:c3:ca:55:fd:6c:98:dc:d6:34:ed: 26:c0:86:24:5f:d0:47:60:62:30:08:ea:f2:84:87:90:99:3e: 26:b4:eb:bf:ee:87:bf:fe:20:78:d6:63:4c:09:66:31:57:6c: 10:92:93:da:61:13:17:47:c4:3c:4d:b7:e3:4b:b3:4b:24:75: b7:83:34:c0:3c:37:8b:f3:5c:c1:92:bc:cf:e1:8d:6b:bf:8d: 0a:ed:b6:c9:cb:4d:5f:99:2c:6d:7d:13:fc:80:6b:a7:fb:45: e3:25:37:35:60:d2:01:db:42:75:f4:c6:8b:a7:38:5b:b8:f7: 1e:b2:84:16:85:43:2c:c5:06:5f:b8:94:84:25:4f:97:4a:f3: 97:97:ec:8f:d1:62:f2:15:77:5b:51:17:ea:6c:30:02:23:ad: b3:d1:40:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULjGQsSRQAZHntJEs4FwKPUQKkvowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA5MjEwNTM4NDBaFw0yNjA5MjIwNjAzNDBaMDMxMTAvBgNV BAMTKDhGNTZBOEJDQUYwMDJGNDkwN0ZBOUZFRDQ5QjY3MkQ3MTIyQ0JDMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhIL9ivPKOX9J1guu2RSyqThan tOajMIBM2kLFuGJInD5Xwn0KWqz9+h4maNO3c337cepkdNcxE9AQ/VbGtP8YuFy9 2zC8PGaPEFLJmScCh9+DzPo0KxUFFO97G3mSLQVZYkmbSqds1hCd5qya6xNLLIzB 41IrWABQbSmAGvc9QC2MB+g7yxqcOZeu1BdBATV5WFcMtqy6+oa3BUEXi/hrQ4n1 5oTBj49llIOC0Jf9AiyAT2pAdx2MfCbgMAMwTC/+bjUgTxu+U1iIbiRt4Z5LXDzi 2i5Dcj29MZA3e9qK20r/aIQkj9Vbr2rzmK79BkDG8+SPXj89pDDtcu8TcjArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj1aovK8AL0kH+p/tSbZy1xIsvC0wHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKeM0tpoy2cnRH++jiSt832pW5VZloL1ScsH L2fuOQqXYZRntInmfpTMcyFHYqz5JK7msieSe5p7986SCNLKz/e064Nj+0vv8c+v MeAeB3i+bxXDs4dIfps+6hpdxNx9O14gw8pV/WyY3NY07SbAhiRf0EdgYjAI6vKE h5CZPia067/uh7/+IHjWY0wJZjFXbBCSk9phExdHxDxNt+NLs0skdbeDNMA8N4vz XMGSvM/hjWu/jQrttsnLTV+ZLG19E/yAa6f7ReMlNzVg0gHbQnX0xounOFu49x6y hBaFQyzFBl+4lIQlT5dK85eX7I/RYvIVd1tRF+psMAIjrbPRQNk= -----END CERTIFICATE-----Generated at Mon Sep 21 10:59:49 2026 by rpki-client