$ rpki-client -vvvf rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft File: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft (raw, json) Hash identifier: XJ4CNOW8T7Sste6VPf6Kp3rr9z5ZxICKSokN4XZFtEY= Subject key identifier: D7:9F:39:FF:64:68:01:57:3E:83:9A:1D:A9:23:95:66:AB:6C:D6:96 Authority key identifier: 40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 Certificate issuer: /CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Certificate serial: 5F5199AD72BFC1FFDD7995A7A717415C0D7FF112 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft Manifest number: C1 Signing time: Tue 22 Sep 2026 19:25:30 +0000 Manifest this update: Tue 22 Sep 2026 19:20:30 +0000 Manifest next update: Wed 23 Sep 2026 20:24:30 +0000 Files and hashes: 1: 3136302e32352e3131362e302f32342d3234203d3e20313533303739.roa (hash: jxc7vQHdOIHycwiO9oNFG6v0dLybRsunkkDru5UJgoI=) 2: 40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl (hash: qMRDHF0pt9vQnnYFPJ83Mo2YxCfebIVqRGa/T15oW+A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 15:18:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:51:99:ad:72:bf:c1:ff:dd:79:95:a7:a7:17:41:5c:0d:7f:f1:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40BEDF113EC28F27A4735C81592F01A9D8F44EF8 Validity Not Before: Sep 22 19:20:30 2026 GMT Not After : Sep 23 20:24:30 2026 GMT Subject: CN=D79F39FF646801573E839A1DA9239566AB6CD696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:98:b4:ea:f1:78:a5:c8:c6:0a:80:3b:06:01: b9:ff:e3:80:88:87:7a:54:7b:73:3d:f7:52:0d:02: 66:08:a4:85:90:86:3f:c1:e6:35:24:92:47:c3:e1: e4:91:2e:65:18:77:f7:ce:91:7d:a1:e5:4f:73:27: 58:cf:f8:07:43:ad:36:35:bd:40:ae:50:d8:90:07: e5:1d:7e:60:1f:fe:38:69:1d:0d:ee:a7:58:28:b2: 6c:63:ef:40:c0:4b:22:1c:7c:85:32:3d:1e:5b:b7: d8:14:aa:b0:6b:46:48:78:63:84:f5:83:b6:30:6e: dd:6f:65:11:c4:e1:b3:1c:ef:0c:d2:59:52:73:39: 10:8c:a3:57:20:7d:38:a7:dd:9c:c4:de:b5:c1:83: b7:06:c1:4a:8a:65:a9:06:60:a3:49:9a:7a:be:eb: eb:8d:c8:8f:58:35:89:c3:0d:2a:4f:01:65:a2:5b: a3:c3:49:65:f3:fb:34:43:a4:06:db:64:34:eb:c4: 3e:25:67:d1:53:ab:08:16:d9:25:b5:fc:42:07:47: a2:21:6e:8c:41:37:7f:9c:4b:cc:c9:bc:f9:8b:07: 32:b4:70:a7:3b:af:e3:20:a1:8f:13:fb:87:97:8b: 91:8c:cc:b7:3b:0d:3e:d8:a5:58:87:6a:8b:97:88: 55:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:9F:39:FF:64:68:01:57:3E:83:9A:1D:A9:23:95:66:AB:6C:D6:96 X509v3 Authority Key Identifier: keyid:40:BE:DF:11:3E:C2:8F:27:A4:73:5C:81:59:2F:01:A9:D8:F4:4E:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/478259d6-2655-4417-bec4-83ef6644f57e/0/40BEDF113EC28F27A4735C81592F01A9D8F44EF8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:93:ff:4c:6e:bb:25:71:54:63:6a:47:28:81:16:73:8d:2b: 84:8d:cd:96:13:87:f7:2d:29:7a:5d:c6:81:60:f3:b0:ee:83: 8a:b1:b0:aa:58:40:6c:b0:29:67:88:ac:1b:94:5f:4a:7e:52: 19:8c:ee:8d:1f:58:17:fc:74:80:d9:cb:52:c6:3e:ed:5e:f6: 25:c7:40:fc:82:03:7f:0a:46:f8:26:29:28:e1:2b:23:f6:ae: 87:a2:ad:a5:68:b9:af:6d:1c:6c:53:a0:6c:5d:f2:7e:65:5e: 65:a0:31:26:dd:93:fb:ca:7e:1c:50:2f:54:cb:0f:0f:f4:35: 8e:f9:f6:8a:db:b0:f8:12:00:b6:59:59:2c:9f:1f:a0:be:98: d4:e5:fe:62:0b:a5:b9:00:9d:88:ab:d7:d2:67:e0:22:bf:8e: 60:8a:6b:4d:88:38:63:42:70:10:a7:a6:b3:34:4c:66:d4:a6: bd:a3:b3:90:d5:6a:7e:67:05:64:e2:4e:d0:35:17:9e:2d:94: ac:19:41:65:2c:27:44:93:6c:97:a5:b9:f3:f6:69:99:43:6c: b2:15:75:24:5b:0b:e4:e9:cd:b3:3b:1f:b7:93:0f:79:58:73: ca:b3:78:e3:b3:d4:07:3b:fb:70:00:b2:7c:1a:cd:e9:10:54: d3:6a:e3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX1GZrXK/wf/deZWnpxdBXA1/8RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlE OEY0NEVGODAeFw0yNjA5MjIxOTIwMzBaFw0yNjA5MjMyMDI0MzBaMDMxMTAvBgNV BAMTKEQ3OUYzOUZGNjQ2ODAxNTczRTgzOUExREE5MjM5NTY2QUI2Q0Q2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmLTq8XilyMYKgDsGAbn/44CI h3pUe3M991INAmYIpIWQhj/B5jUkkkfD4eSRLmUYd/fOkX2h5U9zJ1jP+AdDrTY1 vUCuUNiQB+UdfmAf/jhpHQ3up1gosmxj70DASyIcfIUyPR5bt9gUqrBrRkh4Y4T1 g7Ywbt1vZRHE4bMc7wzSWVJzORCMo1cgfTin3ZzE3rXBg7cGwUqKZakGYKNJmnq+ 6+uNyI9YNYnDDSpPAWWiW6PDSWXz+zRDpAbbZDTrxD4lZ9FTqwgW2SW1/EIHR6Ih boxBN3+cS8zJvPmLBzK0cKc7r+MgoY8T+4eXi5GMzLc7DT7YpViHaouXiFV3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1585/2RoAVc+g5odqSOVZqts1pYwHwYDVR0j BBgwFoAUQL7fET7Cjyekc1yBWS8Bqdj0TvgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDc4MjU5ZDYtMjY1NS00NDE3LWJlYzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEz RUMyOEYyN0E0NzM1QzgxNTkyRjAxQTlEOEY0NEVGOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MEJFREYxMTNFQzI4RjI3QTQ3MzVDODE1OTJGMDFBOUQ4RjQ0 RUY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDc4MjU5ZDYtMjY1NS00NDE3LWJl YzQtODNlZjY2NDRmNTdlLzAvNDBCRURGMTEzRUMyOEYyN0E0NzM1QzgxNTkyRjAx QTlEOEY0NEVGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2T/0xuuyVxVGNqRyiBFnONK4SNzZYTh/ct KXpdxoFg87Dug4qxsKpYQGywKWeIrBuUX0p+UhmM7o0fWBf8dIDZy1LGPu1e9iXH QPyCA38KRvgmKSjhKyP2roeiraVoua9tHGxToGxd8n5lXmWgMSbdk/vKfhxQL1TL Dw/0NY759orbsPgSALZZWSyfH6C+mNTl/mILpbkAnYir19Jn4CK/jmCKa02IOGNC cBCnprM0TGbUpr2js5DVan5nBWTiTtA1F54tlKwZQWUsJ0STbJelufP2aZlDbLIV dSRbC+TpzbM7H7eTD3lYc8qzeOOz1Ac7+3AAsnwazekQVNNq4/g= -----END CERTIFICATE-----Generated at Wed Sep 23 02:22:44 2026 by rpki-client