$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json) Hash identifier: Q3GgaMNgrmekBHUVylusNAtwxpAvzLXe1AFZJSTb5fY= Subject key identifier: D1:3D:3A:6D:B4:26:7A:29:0D:E4:5E:05:27:09:2B:32:CE:DC:7B:34 Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Certificate serial: 4F87591A07EAA0BD8AEE1B693EA132E42D259C58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 23:50:22 +0000 Manifest this update: Mon 09 Nov 2026 23:45:22 +0000 Manifest next update: Wed 11 Nov 2026 03:43:22 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=) 2: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: Ry6Oebx0nLbGaIJPbFU2tAhTcllBxBkmy3M/F6n7/70=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 03:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:87:59:1a:07:ea:a0:bd:8a:ee:1b:69:3e:a1:32:e4:2d:25:9c:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Validity Not Before: Nov 9 23:45:22 2026 GMT Not After : Nov 11 03:43:22 2026 GMT Subject: CN=D13D3A6DB4267A290DE45E0527092B32CEDC7B34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:24:4a:61:03:54:0a:fe:bf:90:c1:ab:c2:bc: 6b:4c:6b:23:c5:58:fc:a1:d1:ce:1f:64:d7:0f:b9: 4b:c3:3b:4e:96:c5:7c:4b:5f:d5:a5:0f:85:07:0e: df:7a:29:b2:7c:55:ab:d4:f6:06:b4:49:6d:98:75: 33:9b:9f:04:12:37:e9:ac:0f:3e:83:2e:5e:26:ae: 48:e0:db:8f:b3:32:15:ab:69:5d:51:30:21:be:a6: aa:3e:07:5b:a5:b4:44:41:f5:00:09:a7:81:2e:66: bd:82:ab:b4:64:65:7b:ca:9c:2f:f1:50:ea:73:2e: b2:79:33:29:3e:8b:97:06:8e:8e:69:5c:24:15:c6: 4e:5e:a9:93:24:16:d6:ad:29:15:bb:61:f8:4e:ea: 16:c8:01:66:64:f7:2f:73:11:eb:d6:bb:55:26:a2: 0c:79:7b:c4:22:f4:d1:90:55:d2:67:64:cb:82:be: b7:50:a1:b2:5c:71:2d:0a:ed:44:8a:63:01:75:9e: b1:b6:0e:d2:ae:89:56:54:8b:ec:ad:87:41:0f:0b: 80:62:3e:d0:9a:f2:8d:50:35:f2:69:c2:86:ac:48: 7d:04:01:ad:0e:d4:dc:09:f6:0b:3e:4a:01:e5:e8: 8a:ed:fc:8a:c2:55:17:59:bd:84:7c:de:13:d2:44: f6:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:3D:3A:6D:B4:26:7A:29:0D:E4:5E:05:27:09:2B:32:CE:DC:7B:34 X509v3 Authority Key Identifier: keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:52:04:c6:a3:45:81:db:ff:62:c5:96:01:b1:0b:48:a6:7e: 26:d9:cb:30:7b:f4:45:ae:23:79:ef:46:8a:4e:3f:c3:71:27: 64:67:9d:17:9e:e8:6b:03:de:f9:cd:34:5f:e3:24:7e:64:e3: 18:7f:c5:dd:bb:85:42:23:30:f7:a0:93:5f:0b:93:07:68:56: 5d:6d:60:0d:71:5b:d1:2a:b7:68:fc:f2:0b:cb:89:c2:f7:46: 47:ae:a3:59:60:0b:85:0a:d5:02:ef:2f:7e:2e:6b:aa:b4:79: 7e:95:6b:88:4c:40:80:16:f7:53:10:78:46:62:f1:64:94:55: eb:c6:2e:3a:a6:35:1d:0a:6d:0e:c5:88:6f:b7:d4:9c:94:18: db:90:3b:e8:d6:69:99:33:d3:a8:69:5f:bd:33:a2:2b:8a:1e: 38:b2:44:2f:04:3a:78:77:1e:39:e3:c2:c0:63:b0:12:9f:da: be:83:fe:85:04:ef:f7:8e:7b:5c:58:ee:f5:22:59:02:4e:4b: e4:5b:2f:d0:b2:d8:8c:1e:c3:fe:e4:5c:47:a4:2d:e9:cd:af: d7:a8:25:5c:63:28:1d:3d:05:7c:89:fe:9e:38:41:d9:65:b1: 1f:f2:1c:28:11:df:62:83:f0:14:89:27:08:3c:d1:02:a1:8e: 61:fa:c0:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4dZGgfqoL2K7htpPqEy5C0lnFgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3 NERDMkEwNTAeFw0yNjExMDkyMzQ1MjJaFw0yNjExMTEwMzQzMjJaMDMxMTAvBgNV BAMTKEQxM0QzQTZEQjQyNjdBMjkwREU0NUUwNTI3MDkyQjMyQ0VEQzdCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVJEphA1QK/r+QwavCvGtMayPF WPyh0c4fZNcPuUvDO06WxXxLX9WlD4UHDt96KbJ8VavU9ga0SW2YdTObnwQSN+ms Dz6DLl4mrkjg24+zMhWraV1RMCG+pqo+B1ultERB9QAJp4EuZr2Cq7RkZXvKnC/x UOpzLrJ5Myk+i5cGjo5pXCQVxk5eqZMkFtatKRW7YfhO6hbIAWZk9y9zEevWu1Um ogx5e8Qi9NGQVdJnZMuCvrdQobJccS0K7USKYwF1nrG2DtKuiVZUi+yth0EPC4Bi PtCa8o1QNfJpwoasSH0EAa0O1NwJ9gs+SgHl6Irt/IrCVRdZvYR83hPSRPZXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0T06bbQmeikN5F4FJwkrMs7cezQwHwYDVR0j BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2 RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNSBMajRYHb/2LFlgGxC0imfibZyzB79EWu I3nvRopOP8NxJ2RnnRee6GsD3vnNNF/jJH5k4xh/xd27hUIjMPegk18LkwdoVl1t YA1xW9Eqt2j88gvLicL3Rkeuo1lgC4UK1QLvL34ua6q0eX6Va4hMQIAW91MQeEZi 8WSUVevGLjqmNR0KbQ7FiG+31JyUGNuQO+jWaZkz06hpX70zoiuKHjiyRC8EOnh3 HjnjwsBjsBKf2r6D/oUE7/eOe1xY7vUiWQJOS+RbL9Cy2Iwew/7kXEekLenNr9eo JVxjKB09BXyJ/p44QdllsR/yHCgR32KD8BSJJwg80QKhjmH6wJk= -----END CERTIFICATE-----Generated at Tue Nov 10 14:09:37 2026 by rpki-client