$ rpki-client -vvvf rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft File: 0A40D86EAE29C558B2406A52DF151128A596DFEF.mft (raw, json) Hash identifier: GDtrlG5p9PScVttdtD3HcCYcqng0sIK5+M+PpupuKn8= Subject key identifier: D4:7E:27:4E:D9:D2:20:0C:7E:35:3C:67:78:45:A9:EB:FB:96:59:E2 Authority key identifier: 0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF Certificate issuer: /CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Certificate serial: 4C7310304805801C2E918F8703D65ADA4BE1A9B2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft Manifest number: 29 Signing time: Mon 09 Nov 2026 18:33:49 +0000 Manifest this update: Mon 09 Nov 2026 18:28:49 +0000 Manifest next update: Tue 10 Nov 2026 21:42:49 +0000 Files and hashes: 1: 34352e3235302e3130332e302f32342d3234203d3e203435373135.roa (hash: JfR90L2fSkzh8gyVqNNZ5dWscKwV334XnwSqf7aqBcI=) 2: 0A40D86EAE29C558B2406A52DF151128A596DFEF.crl (hash: 5sbU8pK4ao+WUsB84bzZC9K64Kbii5F0v7YTNm/ZVFQ=) 3: 3130332e3235322e32312e302f32342d3234203d3e203539313337.roa (hash: GSntx/RVjmCYnJcJhITG93d29qmbasGCByLYGtPWFQ4=) 4: 3130332e3235322e32332e302f32342d3234203d3e203539313337.roa (hash: NSDpPtXGyl2DriTGymCGtuOiMBi77PdX52WDKu2MCX8=) 5: 3130332e3235322e32302e302f32342d3234203d3e203539313337.roa (hash: QB8SNUGufBSyKcGRX74WU933H/1fPaQd7wVXQMgyMm4=) 6: 34352e3235302e3130312e302f32342d3234203d3e203435373135.roa (hash: jkQHVpY+b8x1fVrBYmfrV/VR7GaRoecR+sAgoMdC2Ko=) 7: 3130332e3235322e32322e302f32342d3234203d3e203539313337.roa (hash: 1+scwTfe6FoFSzCOMQMP/l1HCgRWBgorKjqDF9t7ojE=) 8: 34352e3235302e3130302e302f32342d3234203d3e203435373135.roa (hash: cwM9Kh2yEw6ODn4twTe3API40rwhC1dzzCc6tmmVHY4=) 9: 34352e3235302e3130322e302f32342d3234203d3e203435373135.roa (hash: G+PT542BTAp7oo51CLlvxG0ylJrSzBSaYToDUtpAmw8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 21:42:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:73:10:30:48:05:80:1c:2e:91:8f:87:03:d6:5a:da:4b:e1:a9:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A40D86EAE29C558B2406A52DF151128A596DFEF Validity Not Before: Nov 9 18:28:49 2026 GMT Not After : Nov 10 21:42:49 2026 GMT Subject: CN=D47E274ED9D2200C7E353C677845A9EBFB9659E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:20:be:32:54:a6:81:3b:95:c5:d1:58:71:9c: af:85:46:c0:1b:8a:85:b9:63:fb:56:5d:f5:4d:aa: 3e:b7:38:f8:89:dc:c2:55:f8:b2:c2:19:29:46:20: a1:41:ab:66:3b:1e:08:ad:95:22:f4:c7:b1:10:9c: ed:9d:80:46:80:ff:9a:33:a0:08:33:6c:5d:a0:91: 3a:61:bf:c3:39:f8:5b:8d:82:cc:46:9b:a6:97:5a: 57:e9:31:73:69:aa:fc:55:0b:9d:b2:28:41:d9:4d: d2:af:e7:38:9e:84:be:77:f1:ca:60:50:ec:3b:3e: 26:89:8f:bd:c5:98:55:8a:a2:7d:0a:aa:9b:bf:8c: 91:14:c7:82:c6:49:1a:5f:2e:03:44:c9:57:52:27: 3b:a5:60:58:ac:b5:cc:0f:22:97:f9:7a:9d:9f:a9: ea:35:c0:69:1e:26:b3:97:d8:3c:b1:13:87:e5:60: 51:a6:7d:3a:10:f4:ae:e0:45:4d:cd:55:d1:fe:a1: 3e:1b:84:58:8b:3b:bb:4b:76:a1:b5:84:de:b0:0f: 52:e0:f6:fd:60:b2:ba:88:bb:9e:26:19:bf:c7:62: cb:4a:0c:e8:b9:ee:3a:d6:5a:0a:08:34:ad:3f:80: db:40:64:ec:ea:f1:97:ff:7d:17:4b:2d:bf:a3:9b: c9:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:7E:27:4E:D9:D2:20:0C:7E:35:3C:67:78:45:A9:EB:FB:96:59:E2 X509v3 Authority Key Identifier: keyid:0A:40:D8:6E:AE:29:C5:58:B2:40:6A:52:DF:15:11:28:A5:96:DF:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0A40D86EAE29C558B2406A52DF151128A596DFEF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/664a734f-984e-49cb-b4b0-7c1d79237cb1/0/0A40D86EAE29C558B2406A52DF151128A596DFEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a6:06:d3:85:52:4c:e2:76:d2:e0:25:03:c7:32:e4:85:c0: a8:75:49:7b:2e:f6:48:1a:8f:fb:a0:b3:65:1b:3e:e5:6d:1a: c2:a2:ae:34:5f:7d:6b:9f:01:d2:98:6f:75:c2:89:dd:6a:e4: 51:8d:16:f1:d0:14:e4:14:bf:e4:4e:c4:5b:45:ad:d9:51:7f: 13:c1:21:1e:37:d1:e2:0b:5d:89:18:9f:e0:c6:05:16:31:a9: 46:1e:7d:46:35:e5:b5:94:8e:46:fc:94:37:3b:88:07:95:91: 42:02:a3:15:af:47:6e:54:15:27:01:b9:5c:31:2a:97:33:7c: 3b:b5:c8:ea:44:cc:90:09:3a:eb:a8:fa:24:ed:e1:31:c9:46: 36:3d:6d:21:d4:8c:d7:f3:d6:38:8c:7a:70:7f:2b:63:62:56: d2:0d:4f:60:55:7c:82:ba:e4:c7:42:3b:e9:05:f9:b2:02:37: 5c:27:4b:39:1f:a5:05:4b:e4:8a:1c:a5:01:a5:a6:3d:41:9f: 86:8c:82:e7:08:ce:9c:5c:e0:19:92:2d:8d:ec:60:b7:a0:11: ca:fd:12:96:7f:18:7f:f7:3e:00:ca:4e:a0:82:cd:c3:aa:7f: 24:ee:c1:64:e3:d8:1b:14:1c:92:c2:66:85:4f:6d:a0:57:38: 48:86:93:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHMQMEgFgBwukY+HA9Za2kvhqbIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE0MEQ4NkVBRTI5QzU1OEIyNDA2QTUyREYxNTExMjhB NTk2REZFRjAeFw0yNjExMDkxODI4NDlaFw0yNjExMTAyMTQyNDlaMDMxMTAvBgNV BAMTKEQ0N0UyNzRFRDlEMjIwMEM3RTM1M0M2Nzc4NDVBOUVCRkI5NjU5RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvIL4yVKaBO5XF0VhxnK+FRsAb ioW5Y/tWXfVNqj63OPiJ3MJV+LLCGSlGIKFBq2Y7HgitlSL0x7EQnO2dgEaA/5oz oAgzbF2gkTphv8M5+FuNgsxGm6aXWlfpMXNpqvxVC52yKEHZTdKv5ziehL538cpg UOw7PiaJj73FmFWKon0Kqpu/jJEUx4LGSRpfLgNEyVdSJzulYFistcwPIpf5ep2f qeo1wGkeJrOX2DyxE4flYFGmfToQ9K7gRU3NVdH+oT4bhFiLO7tLdqG1hN6wD1Lg 9v1gsrqIu54mGb/HYstKDOi57jrWWgoINK0/gNtAZOzq8Zf/fRdLLb+jm8lfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1H4nTtnSIAx+NTxneEWp6/uWWeIwHwYDVR0j BBgwFoAUCkDYbq4pxViyQGpS3xURKKWW3+8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjY0YTczNGYtOTg0ZS00OWNiLWI0YjAtN2MxZDc5MjM3Y2IxLzAvMEE0MEQ4NkVB RTI5QzU1OEIyNDA2QTUyREYxNTExMjhBNTk2REZFRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wQTQwRDg2RUFFMjlDNTU4QjI0MDZBNTJERjE1MTEyOEE1OTZE RkVGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjY0YTczNGYtOTg0ZS00OWNiLWI0 YjAtN2MxZDc5MjM3Y2IxLzAvMEE0MEQ4NkVBRTI5QzU1OEIyNDA2QTUyREYxNTEx MjhBNTk2REZFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGymBtOFUkzidtLgJQPHMuSFwKh1SXsu9kga j/ugs2UbPuVtGsKirjRffWufAdKYb3XCid1q5FGNFvHQFOQUv+ROxFtFrdlRfxPB IR430eILXYkYn+DGBRYxqUYefUY15bWUjkb8lDc7iAeVkUICoxWvR25UFScBuVwx KpczfDu1yOpEzJAJOuuo+iTt4THJRjY9bSHUjNfz1jiMenB/K2NiVtINT2BVfIK6 5MdCO+kF+bICN1wnSzkfpQVL5IocpQGlpj1Bn4aMgucIzpxc4BmSLY3sYLegEcr9 EpZ/GH/3PgDKTqCCzcOqfyTuwWTj2BsUHJLCZoVPbaBXOEiGk0s= -----END CERTIFICATE-----Generated at Tue Nov 10 10:12:20 2026 by rpki-client