$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft File: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft (raw, json) Hash identifier: g0HMNnhqgJQHjg6kNHou3zL+iNkkMyO8h+Q7cn4klUg= Subject key identifier: F3:83:A1:A7:C9:10:3D:C2:FA:0F:8C:99:7D:5F:FA:E4:25:DB:2D:A9 Authority key identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D Certificate issuer: /CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Certificate serial: 2F493B7EC2EF1937A5CE7946B7D4EFD7644900CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:04:00 +0000 Manifest this update: Mon 21 Sep 2026 21:59:00 +0000 Manifest next update: Wed 23 Sep 2026 01:51:00 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: 869cfXhcvOlyh0uB1ikVriiCxFRRijRoXRyS0ETdNZQ=) 2: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl (hash: Bqgu//X4Ex8mc3loj0U8bGcpNLxouKuU4vWxPtg/QSg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:51:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:49:3b:7e:c2:ef:19:37:a5:ce:79:46:b7:d4:ef:d7:64:49:00:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Validity Not Before: Sep 21 21:59:00 2026 GMT Not After : Sep 23 01:51:00 2026 GMT Subject: CN=F383A1A7C9103DC2FA0F8C997D5FFAE425DB2DA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bf:81:50:4f:d3:8e:b8:cf:0a:47:0a:69:c4: bb:4c:d6:c2:f2:90:8d:e7:00:1c:3c:46:65:a8:4b: 40:9a:55:d0:8d:1e:7a:c4:11:0a:27:50:5b:2b:56: c5:19:4b:8a:b7:b4:2a:d3:d3:87:56:44:36:b9:2b: e8:4c:2b:55:e4:be:41:9d:5f:06:e8:ca:1c:a3:38: 4b:c8:34:3a:a7:9b:d0:d5:8f:f8:c9:6d:ec:11:5b: 60:e5:e0:4d:99:ad:a0:d1:68:01:0d:30:b5:b5:79: 51:e1:53:ba:cb:f8:bb:80:ea:62:d0:61:15:60:28: b6:0b:e7:7a:94:78:23:1d:59:c5:f8:af:0f:35:e4: 67:18:45:ab:25:47:8e:79:c0:28:06:d1:d0:6b:b5: 06:f1:ae:2c:9c:8a:7d:65:2c:94:a2:8d:e2:60:d5: 4d:23:92:9b:c4:8f:da:85:db:e4:e2:56:a4:33:b7: 04:63:5c:8a:43:a4:84:a8:b6:98:2a:b5:bf:28:bd: 0f:4f:1e:8f:0b:b4:b5:9a:83:01:8d:21:84:f4:37: 8e:92:5b:dc:d6:7c:11:bc:be:37:02:6f:fa:bc:f4: a1:e0:17:aa:be:f3:9a:a6:95:75:87:bd:9c:54:91: 1b:a6:0f:23:64:b5:19:00:85:00:b4:cd:cf:17:d0: 86:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:83:A1:A7:C9:10:3D:C2:FA:0F:8C:99:7D:5F:FA:E4:25:DB:2D:A9 X509v3 Authority Key Identifier: keyid:4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:b9:98:ff:0f:fd:0d:f0:15:b6:8b:57:68:a8:e3:97:33:38: c2:4a:2e:ec:06:47:17:0e:73:b7:b7:05:d7:da:50:af:1e:56: 85:a1:87:76:ee:fa:99:49:d1:44:bc:e5:59:dc:a9:7c:e0:fe: bf:0c:4f:a6:74:c3:5f:8d:27:27:3e:c9:d6:70:9c:45:58:84: ab:e4:89:1d:d8:b8:7e:d2:e5:8b:d7:0b:12:d9:1b:ad:e8:99: f0:91:9d:7c:4f:00:c7:9d:d8:56:5e:79:8d:10:50:f7:24:10: e4:e7:e2:da:53:67:ed:ae:c2:92:0c:1e:d4:92:11:03:6a:9e: 4e:f6:9c:e2:1c:35:bc:fa:1d:df:62:a3:a5:52:ea:e8:42:43: 6b:ee:28:6a:19:9d:b4:51:53:d2:73:2a:1c:1f:eb:62:e9:20: 46:c9:ad:83:b8:05:3c:ac:79:e2:ca:a3:2c:2b:d9:26:c6:42: 13:5a:18:29:1f:20:98:16:af:02:a9:69:5a:ea:7d:55:b6:7b: 4f:d2:88:79:7c:0c:67:ba:19:81:a9:52:4c:3d:b1:b1:69:9a: 78:46:61:d7:89:0a:be:9c:96:83:4a:ba:a0:f7:41:86:ea:37: 9c:9b:62:1d:4c:89:19:de:08:f2:84:57:39:da:f7:79:b0:a0: 9a:cf:4f:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL0k7fsLvGTelznlGt9Tv12RJAMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlBOTM1 QzU3M0Q0RDAeFw0yNjA5MjEyMTU5MDBaFw0yNjA5MjMwMTUxMDBaMDMxMTAvBgNV BAMTKEYzODNBMUE3QzkxMDNEQzJGQTBGOEM5OTdENUZGQUU0MjVEQjJEQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpv4FQT9OOuM8KRwppxLtM1sLy kI3nABw8RmWoS0CaVdCNHnrEEQonUFsrVsUZS4q3tCrT04dWRDa5K+hMK1XkvkGd XwboyhyjOEvINDqnm9DVj/jJbewRW2Dl4E2ZraDRaAENMLW1eVHhU7rL+LuA6mLQ YRVgKLYL53qUeCMdWcX4rw815GcYRaslR455wCgG0dBrtQbxriycin1lLJSijeJg 1U0jkpvEj9qF2+TiVqQztwRjXIpDpISotpgqtb8ovQ9PHo8LtLWagwGNIYT0N46S W9zWfBG8vjcCb/q89KHgF6q+85qmlXWHvZxUkRumDyNktRkAhQC0zc8X0IY5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU84Ohp8kQPcL6D4yZfV/65CXbLakwHwYDVR0j BBgwFoAUT0C9cJ0DQLfojN+dgBCak1xXPU0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBmNjIxNzYtZTE2NC00OTJjLThhNzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5 RDAzNDBCN0U4OENERjlEODAxMDlBOTM1QzU3M0Q0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjQwQkQ3MDlEMDM0MEI3RTg4Q0RGOUQ4MDEwOUE5MzVDNTcz RDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlB OTM1QzU3M0Q0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+5mP8P/Q3wFbaLV2io45czOMJKLuwGRxcO c7e3BdfaUK8eVoWhh3bu+plJ0US85VncqXzg/r8MT6Z0w1+NJyc+ydZwnEVYhKvk iR3YuH7S5YvXCxLZG63omfCRnXxPAMed2FZeeY0QUPckEOTn4tpTZ+2uwpIMHtSS EQNqnk72nOIcNbz6Hd9io6VS6uhCQ2vuKGoZnbRRU9JzKhwf62LpIEbJrYO4BTys eeLKoywr2SbGQhNaGCkfIJgWrwKpaVrqfVW2e0/SiHl8DGe6GYGpUkw9sbFpmnhG YdeJCr6cloNKuqD3QYbqN5ybYh1MiRneCPKEVzna93mwoJrPT64= -----END CERTIFICATE-----Generated at Tue Sep 22 15:59:51 2026 by rpki-client