$ rpki-client -vvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft File: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json) Hash identifier: JPQyJk2qocEbimNr2WfbvRbH+8SSE5qxmZkB8WUoD/g= Subject key identifier: 8B:A0:07:CA:EA:04:88:82:2F:64:13:72:78:A3:A7:90:CD:FD:9A:5F Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 Certificate issuer: /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Certificate serial: 16EBC3271DCCEAC039EE1D8F53C3F03E3C6C5E78 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:24:26 +0000 Manifest this update: Wed 17 Jun 2026 05:19:26 +0000 Manifest next update: Thu 18 Jun 2026 06:01:26 +0000 Files and hashes: 1: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: Ako5bvK38SpYqCdZYpkGjlGYxfFDu1snOvgcOp2GbZo=) 2: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 04:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:eb:c3:27:1d:cc:ea:c0:39:ee:1d:8f:53:c3:f0:3e:3c:6c:5e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Validity Not Before: Jun 17 05:19:26 2026 GMT Not After : Jun 18 06:01:26 2026 GMT Subject: CN=8BA007CAEA0488822F64137278A3A790CDFD9A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:2f:0b:ae:8c:9d:fb:c1:cd:7d:30:9f:bc:aa: ef:b9:c7:bc:1b:6d:5e:00:9f:0a:04:3f:14:66:72: a4:44:f6:09:e4:14:bc:b0:cc:ff:68:a1:ce:45:e2: c2:fb:b5:9b:37:ba:57:a2:ef:52:a3:25:64:33:63: 83:15:13:90:5c:83:ef:e7:0f:2b:cc:42:10:aa:2a: 8b:45:8b:7b:52:92:e6:01:df:af:29:f4:02:ca:37: bd:55:2e:20:ab:8f:d7:29:e7:18:4c:67:8b:36:eb: 05:f6:0d:8c:7c:bd:aa:f5:3c:63:72:75:dc:ce:1f: 97:2e:1b:e4:ae:cb:62:a0:5e:37:54:fb:b8:3c:1f: aa:68:02:8c:f7:e3:23:22:98:05:63:fc:0a:d8:d6: 9d:bc:e3:d6:57:5d:af:9a:f6:57:89:50:b7:9a:76: 9d:ed:3f:5d:b3:a1:bf:5b:d5:cf:98:4f:45:a1:8c: fc:b0:4e:f8:4a:88:f4:2e:f9:d0:ac:a4:60:b5:4c: 66:c1:17:b0:68:3d:f9:82:58:32:7e:21:d6:47:09: ec:0f:84:f3:96:7d:16:5b:dd:c1:38:d9:13:15:19: 68:4b:5d:54:36:f0:00:17:88:44:a7:35:9c:9d:42: 88:a8:f0:eb:b2:fa:ec:73:91:7a:c0:90:38:80:be: ee:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A0:07:CA:EA:04:88:82:2F:64:13:72:78:A3:A7:90:CD:FD:9A:5F X509v3 Authority Key Identifier: keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:31:b7:ce:c5:0d:92:89:ad:01:77:6a:a2:74:a9:9c:be:66: 89:ce:e0:a8:9c:38:6f:fb:0a:94:29:91:6f:04:fe:f1:d2:5f: b5:a5:b8:a0:12:55:64:a6:f7:95:cb:47:3c:08:a6:9b:22:ba: ba:32:65:32:9d:a0:d5:70:16:b0:d0:fd:3d:96:d9:f9:44:0f: aa:e9:ad:f6:d1:d9:93:13:15:0f:22:d8:b0:08:2d:52:1c:1e: 24:52:d8:6c:2b:d6:8f:40:ec:b2:85:8f:5d:94:4f:ff:bb:44: c6:f8:f4:54:60:e4:56:0c:52:d2:ed:ff:a6:85:dd:7f:84:f4: ae:a8:45:62:02:d9:4a:55:d1:0d:7a:a5:1b:92:11:21:99:6a: 4d:91:14:51:b9:4e:4e:87:31:74:b2:99:e3:0b:62:52:dc:cc: c7:f0:d5:f3:b4:08:d4:5d:cb:58:55:7b:2a:aa:e6:07:d8:ae: 0a:28:a8:f5:fa:62:cd:f1:99:b0:fd:65:54:54:58:87:68:c0: 91:a6:57:b5:fc:22:fa:cf:18:c1:ec:50:00:5c:47:13:27:db: d6:82:8f:36:d2:9b:9c:0d:c8:78:2b:e7:f0:f7:8f:b1:d7:04: a8:2b:5a:2f:c1:12:13:35:85:58:f2:14:b8:9d:72:75:3d:51: 8f:f9:ea:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuvDJx3M6sA57h2PU8PwPjxsXngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlE OEY0NEVGODAeFw0yNjA2MTcwNTE5MjZaFw0yNjA2MTgwNjAxMjZaMDMxMTAvBgNV BAMTKDhCQTAwN0NBRUEwNDg4ODIyRjY0MTM3Mjc4QTNBNzkwQ0RGRDlBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuLwuujJ37wc19MJ+8qu+5x7wb bV4AnwoEPxRmcqRE9gnkFLywzP9ooc5F4sL7tZs3ulei71KjJWQzY4MVE5Bcg+/n DyvMQhCqKotFi3tSkuYB368p9ALKN71VLiCrj9cp5xhMZ4s26wX2DYx8var1PGNy ddzOH5cuG+Suy2KgXjdU+7g8H6poAoz34yMimAVj/ArY1p2849ZXXa+a9leJULea dp3tP12zob9b1c+YT0WhjPywTvhKiPQu+dCspGC1TGbBF7BoPfmCWDJ+IdZHCewP hPOWfRZb3cE42RMVGWhLXVQ28AAXiESnNZydQoio8Ouy+uxzkXrAkDiAvu6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi6AHyuoEiIIvZBNyeKOnkM39ml8wHwYDVR0j BBgwFoAUQL7fET7Cjyekc1yBWS8Bqdj0TvgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4MjU5ZDYtMjY1NS00NDE3LWJlYzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEz RUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlEOEY0NEVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MEJFREYxMTNFQzI4RjI3QTQ3MzVDODE1OTJGMDFBOUQ4RjQ0 RUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAx QTlEOEY0NEVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMUxt87FDZKJrQF3aqJ0qZy+ZonO4KicOG/7 CpQpkW8E/vHSX7WluKASVWSm95XLRzwIppsiuroyZTKdoNVwFrDQ/T2W2flED6rp rfbR2ZMTFQ8i2LAILVIcHiRS2Gwr1o9A7LKFj12UT/+7RMb49FRg5FYMUtLt/6aF 3X+E9K6oRWIC2UpV0Q16pRuSESGZak2RFFG5Tk6HMXSymeMLYlLczMfw1fO0CNRd y1hVeyqq5gfYrgooqPX6Ys3xmbD9ZVRUWIdowJGmV7X8IvrPGMHsUABcRxMn29aC jzbSm5wNyHgr5/D3j7HXBKgrWi/BEhM1hVjyFLidcnU9UY/56j8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:48:17 2026 by rpki-client