$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: ChRqCZJPEkAgzfZID+o6uRi9rfvJke6QSHvqQVnvX4Q= Subject key identifier: A7:AC:1D:A8:41:89:26:CA:56:7C:9F:96:B2:49:66:44:0A:4F:A1:C7 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 52F464DBB67AF19F0DDE0A692FE9A1EFC42A0C69 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 02:01:36 +0000 Manifest this update: Sun 15 Nov 2026 01:56:36 +0000 Manifest next update: Mon 16 Nov 2026 02:32:36 +0000 Files and hashes: 1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 2: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: q8io7h/I1s8kHsnx5FarKj2Duje++C3RRiVegiC4UGQ=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 02:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f4:64:db:b6:7a:f1:9f:0d:de:0a:69:2f:e9:a1:ef:c4:2a:0c:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Nov 15 01:56:36 2026 GMT Not After : Nov 16 02:32:36 2026 GMT Subject: CN=A7AC1DA8418926CA567C9F96B24966440A4FA1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:6f:9f:2d:a6:92:f1:0c:9b:b9:b7:d2:6a:02: 95:ae:42:39:1a:07:10:c5:13:b8:8c:8b:e0:df:a8: 50:1c:4c:d0:0a:c1:a3:50:e2:87:3a:31:60:2d:bc: 9c:72:80:ea:89:8a:ee:59:15:58:59:a3:d9:3a:8d: e0:45:c6:e7:04:82:a8:6d:6d:ed:6f:92:dc:0c:9e: c1:34:ee:a4:de:56:e3:66:81:dd:c3:99:ca:09:5b: 25:ea:1b:c1:e2:fb:3f:66:d1:aa:d5:b4:7e:51:dd: 04:4f:57:70:56:36:a4:70:90:2e:0d:a1:f6:c1:3f: 35:5d:48:76:df:cc:19:51:fd:eb:f1:28:9b:50:19: a4:c9:9c:54:e7:fb:d0:f5:52:ef:c5:e3:05:1b:69: 91:0a:19:4f:ae:75:79:52:49:08:8d:0a:32:b2:83: 69:87:62:2c:f5:67:88:da:98:b7:32:5b:5e:7c:4b: 7b:ec:a8:39:8e:96:98:04:de:f3:25:9a:23:ce:99: ce:cb:a8:75:0a:52:5b:e5:f9:f3:a8:ce:c5:8a:1b: 4f:17:f1:7d:d7:1d:9f:b1:97:39:46:c8:ab:90:09: b2:d5:5a:a7:44:01:20:4b:e5:18:ac:b6:38:3d:a2: 40:3c:66:49:2d:50:f0:4a:35:7a:65:bb:fa:76:ad: 65:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:AC:1D:A8:41:89:26:CA:56:7C:9F:96:B2:49:66:44:0A:4F:A1:C7 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:5c:6b:3d:56:91:63:2d:1f:88:3b:83:7b:e4:28:47:9c:79: 8f:43:75:d9:f4:20:94:b0:83:1d:d1:de:2c:12:d2:75:26:33: e6:8c:ba:a2:4f:91:64:eb:d2:19:02:cc:5a:c5:30:da:6b:ac: 4e:fe:93:ae:1d:8a:12:bc:f5:b9:3f:9f:1d:11:a5:43:ed:4f: 1f:a4:e3:14:8b:8f:e3:a8:b7:a4:aa:60:5c:ea:18:69:96:26: 63:55:70:a1:5d:76:65:2d:9b:a5:f6:59:bd:61:f0:33:80:67: c8:e5:9e:9e:08:41:20:d2:c7:18:6c:0b:08:a8:7e:8d:fd:ff: 1e:b5:6f:64:51:2e:3b:5e:49:b9:b0:87:56:17:b1:3c:06:35: d6:73:76:bd:01:b2:ab:ff:89:1d:e0:51:53:1e:69:20:6f:51: 00:6b:ae:e6:ee:38:48:a1:4f:1c:84:c4:99:c7:a5:79:84:c7: 98:2f:2d:31:51:6d:da:58:6a:f5:f5:2b:55:eb:c6:6d:6a:b7: 48:80:61:a9:86:ee:14:bc:ec:ad:f8:5d:29:06:eb:18:38:9d: 03:83:4e:f6:3d:13:6a:9c:ea:af:8e:75:c9:4c:2f:71:5e:33: 87:cc:cb:92:4d:d8:25:ea:2e:0f:32:ee:51:d4:6f:bf:2e:9e: 47:30:29:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvRk27Z68Z8N3gppL+mh78QqDGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjExMTUwMTU2MzZaFw0yNjExMTYwMjMyMzZaMDMxMTAvBgNV BAMTKEE3QUMxREE4NDE4OTI2Q0E1NjdDOUY5NkIyNDk2NjQ0MEE0RkExQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsb58tppLxDJu5t9JqApWuQjka BxDFE7iMi+DfqFAcTNAKwaNQ4oc6MWAtvJxygOqJiu5ZFVhZo9k6jeBFxucEgqht be1vktwMnsE07qTeVuNmgd3DmcoJWyXqG8Hi+z9m0arVtH5R3QRPV3BWNqRwkC4N ofbBPzVdSHbfzBlR/evxKJtQGaTJnFTn+9D1Uu/F4wUbaZEKGU+udXlSSQiNCjKy g2mHYiz1Z4jamLcyW158S3vsqDmOlpgE3vMlmiPOmc7LqHUKUlvl+fOozsWKG08X 8X3XHZ+xlzlGyKuQCbLVWqdEASBL5Ristjg9okA8ZkktUPBKNXplu/p2rWVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp6wdqEGJJspWfJ+WsklmRApPoccwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApcaz1WkWMtH4g7g3vkKEeceY9Dddn0IJSw gx3R3iwS0nUmM+aMuqJPkWTr0hkCzFrFMNprrE7+k64dihK89bk/nx0RpUPtTx+k 4xSLj+Oot6SqYFzqGGmWJmNVcKFddmUtm6X2Wb1h8DOAZ8jlnp4IQSDSxxhsCwio fo39/x61b2RRLjteSbmwh1YXsTwGNdZzdr0Bsqv/iR3gUVMeaSBvUQBrrubuOEih TxyExJnHpXmEx5gvLTFRbdpYavX1K1Xrxm1qt0iAYamG7hS87K34XSkG6xg4nQOD TvY9E2qc6q+OdclML3FeM4fMy5JN2CXqLg8y7lHUb78unkcwKb8= -----END CERTIFICATE-----Generated at Sun Nov 15 17:10:53 2026 by rpki-client