$ rpki-client -vvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: 64surXFdpbI5L6KjOSkXTaoFhNQ5QXkkchtLW898J4c= Subject key identifier: 61:C2:7B:C3:7C:14:1B:B0:2E:E1:1E:26:0F:B0:33:16:9B:EC:5D:2F Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 3AC76A3F60D8EB87DED2410DF8C14B51550775A0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:11:09 +0000 Manifest this update: Tue 16 Jun 2026 22:06:09 +0000 Manifest next update: Thu 18 Jun 2026 00:16:09 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) 3: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: E+u1E5ioSj7FbCkAfQbaB2AhFduuRHpv27yVka4qzxU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 00:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c7:6a:3f:60:d8:eb:87:de:d2:41:0d:f8:c1:4b:51:55:07:75:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Jun 16 22:06:09 2026 GMT Not After : Jun 18 00:16:09 2026 GMT Subject: CN=61C27BC37C141BB02EE11E260FB033169BEC5D2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2e:c8:6d:0f:26:c4:93:17:ac:77:f5:21:f1: fb:66:cd:ae:53:04:ce:db:b9:de:c5:60:e0:6a:a7: cc:a0:c6:42:3f:39:e6:4b:4f:f4:5c:57:2e:5e:08: f7:66:45:d3:50:d7:8b:44:38:22:6f:f4:6e:cd:c0: a2:33:0c:5e:79:05:a3:ba:79:74:66:90:7e:23:b5: d7:48:f4:12:1e:5a:c0:e2:98:f8:1f:44:16:24:d6: d1:2a:cf:32:c5:a8:e3:e1:2e:30:aa:02:e8:89:b7: 9d:e1:fb:57:f2:67:be:19:5a:84:1b:c2:63:6f:3e: 7e:e0:f3:e2:c7:51:a8:77:0a:0d:85:1b:2e:d7:7d: f9:d1:6e:5b:9b:02:4f:b8:9c:89:20:7f:a3:87:a4: d6:b8:0b:91:b7:c7:6c:53:cc:f7:78:c7:38:87:e5: 8c:55:98:bd:42:37:a2:5c:be:92:2f:c4:ae:7a:9d: b4:c0:23:df:59:1b:09:f6:a5:35:26:ea:0f:c6:d9: 5f:9c:97:a4:a1:ec:59:f7:18:eb:f1:b2:1e:04:b0: 13:59:8a:aa:56:c4:5b:25:92:a1:72:94:66:e6:d1: 5f:49:ef:ba:eb:de:e2:a4:90:2c:e0:3f:5a:2c:6c: de:e4:04:a9:31:46:0b:c5:d3:c8:97:8e:d5:33:40: b0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:C2:7B:C3:7C:14:1B:B0:2E:E1:1E:26:0F:B0:33:16:9B:EC:5D:2F X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:e6:df:e2:7e:dd:e7:20:dc:0a:c1:ea:7e:b5:34:ab:c4:37: 92:2f:38:1c:2d:6a:37:99:64:12:0f:ca:b3:e7:f4:4e:27:9d: 56:94:33:55:5d:da:e3:b7:2a:8a:e5:0d:50:0e:06:67:76:07: 44:f5:63:d7:b4:95:15:67:dd:6f:94:43:d8:83:e2:fb:52:3f: d9:bc:2f:8c:43:2e:c5:3b:67:cc:87:ff:83:d3:6e:22:70:4b: c8:c8:c8:c0:1d:b6:70:5e:d9:a2:bc:d9:24:06:08:89:71:9e: 29:b8:bd:4e:f6:cf:37:78:22:6b:6d:18:d4:af:d3:f2:99:6f: bf:91:53:70:ee:22:99:36:f1:21:d0:1b:9e:57:87:cb:89:17: 8f:9e:f4:2c:4f:1e:e7:6b:0c:cd:23:03:2a:b4:28:c0:7b:3c: df:a3:4c:c5:c7:47:27:4b:56:47:b7:60:76:46:85:7b:ba:bc: e5:6c:2f:34:bf:c7:02:17:84:11:7b:fe:03:c1:a7:9e:58:7f: de:20:01:b9:77:4f:6c:91:4b:92:b6:4e:89:65:c1:15:7d:fd: 43:2a:2c:04:98:bd:ac:64:ea:34:90:c4:1e:ae:1c:bc:bd:86: 37:b2:47:96:53:68:db:49:51:06:a9:b6:13:e9:2f:11:23:bf: 12:09:7a:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsdqP2DY64fe0kEN+MFLUVUHdaAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjA2MTYyMjA2MDlaFw0yNjA2MTgwMDE2MDlaMDMxMTAvBgNV BAMTKDYxQzI3QkMzN0MxNDFCQjAyRUUxMUUyNjBGQjAzMzE2OUJFQzVEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLshtDybEkxesd/Uh8ftmza5T BM7bud7FYOBqp8ygxkI/OeZLT/RcVy5eCPdmRdNQ14tEOCJv9G7NwKIzDF55BaO6 eXRmkH4jtddI9BIeWsDimPgfRBYk1tEqzzLFqOPhLjCqAuiJt53h+1fyZ74ZWoQb wmNvPn7g8+LHUah3Cg2FGy7XffnRblubAk+4nIkgf6OHpNa4C5G3x2xTzPd4xziH 5YxVmL1CN6JcvpIvxK56nbTAI99ZGwn2pTUm6g/G2V+cl6Sh7Fn3GOvxsh4EsBNZ iqpWxFslkqFylGbm0V9J77rr3uKkkCzgP1osbN7kBKkxRgvF08iXjtUzQLBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYcJ7w3wUG7Au4R4mD7AzFpvsXS8wHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDm3+J+3ecg3ArB6n61NKvEN5IvOBwtajeZ ZBIPyrPn9E4nnVaUM1Vd2uO3KorlDVAOBmd2B0T1Y9e0lRVn3W+UQ9iD4vtSP9m8 L4xDLsU7Z8yH/4PTbiJwS8jIyMAdtnBe2aK82SQGCIlxnim4vU72zzd4ImttGNSv 0/KZb7+RU3DuIpk28SHQG55Xh8uJF4+e9CxPHudrDM0jAyq0KMB7PN+jTMXHRydL Vke3YHZGhXu6vOVsLzS/xwIXhBF7/gPBp55Yf94gAbl3T2yRS5K2TollwRV9/UMq LASYvaxk6jSQxB6uHLy9hjeyR5ZTaNtJUQapthPpLxEjvxIJers= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:32 2026 by rpki-client