$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: QtR0SspKJKK8LiGPHO26sd9rP5FokagFurhYtJKCz6o= Subject key identifier: D3:41:97:68:1D:87:D5:6F:A4:4A:5D:7F:39:D1:17:B0:8E:40:B2:BC Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 22D9D8561FA2D3EB4D9EAC59F0E647822175ED35 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 75 Signing time: Tue 28 Jul 2026 19:15:21 +0000 Manifest this update: Tue 28 Jul 2026 19:10:21 +0000 Manifest next update: Wed 29 Jul 2026 22:04:21 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: xgT/53v+/9TXdll4mAAshq4V5QOwKkuPLEzqYLEiP14=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 22:04:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d9:d8:56:1f:a2:d3:eb:4d:9e:ac:59:f0:e6:47:82:21:75:ed:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Jul 28 19:10:21 2026 GMT Not After : Jul 29 22:04:21 2026 GMT Subject: CN=D34197681D87D56FA44A5D7F39D117B08E40B2BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:77:e8:89:a3:2a:a4:11:4d:b8:c7:8f:2e:db: f2:9b:cc:8a:a1:bb:05:ec:c3:8a:42:e4:62:dc:e6: dc:15:76:9f:c1:01:cd:1f:c1:a7:50:6f:11:17:85: 13:70:d3:f4:e6:5b:2b:bc:e2:25:fc:6b:f9:43:f7: d8:81:b6:45:8e:b5:0d:e6:c4:2f:7e:ae:8f:cc:64: c3:fc:52:2e:8a:f9:30:8b:af:d9:65:58:85:9b:3e: 2b:29:2b:dc:6a:9a:02:b1:4c:16:52:7c:1e:cc:43: fb:05:c8:8d:8f:80:51:ae:28:3d:51:75:d6:7d:e0: 10:ee:f7:83:1d:bd:1d:03:72:78:7a:3b:97:62:1f: 6d:0d:e9:ff:e1:ff:ff:ba:4e:83:c3:af:3e:17:64: 01:21:76:80:48:4a:8a:82:b9:71:64:c0:4c:a8:87: 23:c1:e2:f2:a5:8b:b8:99:55:9a:ef:ee:b9:1e:2a: 4b:05:5c:d7:5f:14:07:db:42:c1:27:8f:1e:05:6f: 69:10:3b:45:bc:6a:14:52:c5:e3:48:3e:ff:64:64: a7:e1:ab:59:5f:73:88:da:85:c9:16:b1:ec:c2:f5: 84:8e:85:4a:04:ad:0a:97:1a:d5:80:50:ab:aa:80: 68:fe:ae:0e:19:eb:4e:f8:4f:91:f7:df:fb:c2:4d: 2b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:97:68:1D:87:D5:6F:A4:4A:5D:7F:39:D1:17:B0:8E:40:B2:BC X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:31:56:f1:67:c3:b5:16:3f:da:49:6b:a5:0c:e7:21:de:fc: cc:1b:93:ae:30:6c:4c:3f:94:8d:cd:9f:ca:81:df:ab:95:94: 2e:33:a6:d3:b4:f8:a0:9d:b9:f1:19:75:d6:df:73:42:99:ad: 06:0d:1e:e7:19:7e:df:6c:46:3d:84:1c:77:6d:02:9a:9b:2f: 05:4b:18:be:fd:8f:c8:fb:86:88:87:e4:ec:2d:ba:7e:dc:10: f6:b7:d2:f3:2d:7a:7f:67:b5:1d:c6:fb:73:1e:a4:ec:7a:3a: b4:c4:f3:56:84:76:f5:c6:7d:2b:90:1b:ec:27:31:e1:f8:d1: 30:b4:d5:b4:ff:92:ae:c4:8e:52:e4:0e:7d:be:4e:ca:74:28: 4c:0e:9c:49:43:37:72:d5:42:b8:f1:24:50:37:05:f1:16:00: 02:a9:3d:6e:8d:91:72:be:d6:be:98:60:ee:f6:fc:6b:e0:25: 38:df:44:6e:65:82:d7:30:bc:d2:f6:f7:2a:32:ad:e5:d0:11: 13:da:49:04:67:5a:01:19:6b:cb:68:cb:fd:24:5b:d8:6b:3e: cb:67:b8:95:a7:7b:f1:e2:bc:63:16:3c:da:03:59:36:fb:c8: bd:0a:6e:53:dd:f1:0b:f1:dc:c2:d3:78:6a:01:2a:76:39:06: e9:c8:a8:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItnYVh+i0+tNnqxZ8OZHgiF17TUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA3MjgxOTEwMjFaFw0yNjA3MjkyMjA0MjFaMDMxMTAvBgNV BAMTKEQzNDE5NzY4MUQ4N0Q1NkZBNDRBNUQ3RjM5RDExN0IwOEU0MEIyQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+d+iJoyqkEU24x48u2/KbzIqh uwXsw4pC5GLc5twVdp/BAc0fwadQbxEXhRNw0/TmWyu84iX8a/lD99iBtkWOtQ3m xC9+ro/MZMP8Ui6K+TCLr9llWIWbPispK9xqmgKxTBZSfB7MQ/sFyI2PgFGuKD1R ddZ94BDu94MdvR0Dcnh6O5diH20N6f/h//+6ToPDrz4XZAEhdoBISoqCuXFkwEyo hyPB4vKli7iZVZrv7rkeKksFXNdfFAfbQsEnjx4Fb2kQO0W8ahRSxeNIPv9kZKfh q1lfc4jahckWsezC9YSOhUoErQqXGtWAUKuqgGj+rg4Z6074T5H33/vCTSu7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU00GXaB2H1W+kSl1/OdEXsI5AsrwwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM8xVvFnw7UWP9pJa6UM5yHe/Mwbk64wbEw/ lI3Nn8qB36uVlC4zptO0+KCdufEZddbfc0KZrQYNHucZft9sRj2EHHdtApqbLwVL GL79j8j7hoiH5Owtun7cEPa30vMten9ntR3G+3MepOx6OrTE81aEdvXGfSuQG+wn MeH40TC01bT/kq7EjlLkDn2+Tsp0KEwOnElDN3LVQrjxJFA3BfEWAAKpPW6NkXK+ 1r6YYO72/GvgJTjfRG5lgtcwvNL29yoyreXQERPaSQRnWgEZa8toy/0kW9hrPstn uJWne/HivGMWPNoDWTb7yL0KblPd8Qvx3MLTeGoBKnY5BunIqM4= -----END CERTIFICATE-----Generated at Wed Jul 29 02:50:27 2026 by rpki-client