$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: tm9oXAv5YkB+MsjEnV2a177B08mlMpBKJw8Z7mIsO0c= Subject key identifier: 7F:09:57:90:5F:D6:17:D5:98:6C:32:EF:1E:CC:A1:17:61:9C:B7:D5 Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 56737E8064DA2F939E04B246C7F95D0398A3BF90 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: FE Signing time: Mon 09 Nov 2026 11:45:26 +0000 Manifest this update: Mon 09 Nov 2026 11:40:26 +0000 Manifest next update: Tue 10 Nov 2026 14:53:26 +0000 Files and hashes: 1: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) 2: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: He1aiyUliDOiwwG5rIj8Zqolh2iLKpbFk7T2LdIbtMQ=) 3: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 14:53:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:73:7e:80:64:da:2f:93:9e:04:b2:46:c7:f9:5d:03:98:a3:bf:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Nov 9 11:40:26 2026 GMT Not After : Nov 10 14:53:26 2026 GMT Subject: CN=7F0957905FD617D5986C32EF1ECCA117619CB7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:37:a3:c9:33:97:aa:62:85:0c:c6:3e:fc:87: 1c:dc:62:68:eb:51:77:8d:74:61:84:3c:a2:38:51: 56:82:b1:01:76:89:03:69:46:7d:a6:7f:8e:52:b0: 46:82:f2:e6:3a:b9:df:68:8e:dc:ff:5a:d2:2d:cb: df:28:a9:a1:43:7d:32:0a:86:ca:27:84:eb:ca:a6: fc:ea:66:33:e9:b0:41:e5:77:80:b7:be:28:ce:10: a0:27:2b:e4:10:90:7d:5c:12:8e:26:6a:49:d6:ed: a0:ec:a7:59:58:28:d7:47:12:f2:58:3d:59:50:b7: 7c:8f:5a:bc:75:b3:5c:67:4d:a1:4e:54:a9:46:1e: 1a:36:ba:03:fa:9c:13:a5:75:80:37:43:25:2b:3e: 0d:60:66:ce:b7:1e:db:28:4f:50:a6:7a:49:f3:5c: 2d:ba:a4:45:6b:96:46:a3:79:80:6a:e3:19:64:cf: 65:bc:91:90:2d:08:3f:c1:5a:87:ce:be:f6:d0:4a: a7:b9:2e:e5:76:2f:f6:0a:8c:49:5e:6e:92:6d:fd: ae:5d:23:a7:f8:8a:08:27:9a:a9:84:ab:30:ef:64: bc:89:60:50:14:99:60:dc:8f:72:cc:ef:07:52:89: 90:c6:be:cc:65:09:77:7a:ff:f4:08:b7:b2:f1:35: fa:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:09:57:90:5F:D6:17:D5:98:6C:32:EF:1E:CC:A1:17:61:9C:B7:D5 X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:f2:b3:4b:60:27:67:6e:ab:23:af:34:01:4c:a4:c8:7d:e6: 0e:8d:5c:96:56:5e:c1:ba:f7:52:fa:23:4e:25:6c:2f:63:f0: a5:44:06:21:68:33:2c:97:1f:9b:b2:0b:a0:fc:c3:68:bb:a8: a8:ab:cf:b6:09:3e:c9:26:23:df:31:f8:9a:04:2d:8c:9c:d7: a9:32:c2:f9:e8:1e:38:3f:cd:8e:8c:79:59:b5:f6:ed:ea:26: bb:f6:4b:6e:3f:ee:9d:24:50:5c:da:ff:f2:70:c2:e5:b7:53: 5e:50:a9:09:1e:ac:88:1f:9f:84:f9:0c:8b:0e:41:27:d1:29: 8c:4a:03:53:f6:80:f7:98:b5:a4:4a:60:3e:90:29:e5:14:07: 87:88:31:0b:10:ab:1c:72:54:80:3b:de:f9:3b:32:15:b5:4c: 21:a3:90:d8:42:8f:e6:07:df:37:ac:53:11:35:14:09:5d:d4: 26:52:e1:b8:4f:3d:af:fa:30:3c:b5:70:ca:54:5d:ed:d5:6f: cb:ad:27:6f:f6:80:cf:8a:df:3e:2d:85:28:4c:0c:ce:84:b6: 6e:ae:ff:a9:0e:64:c0:dc:c6:a5:80:74:2e:8a:1d:64:03:4b: 58:54:62:23:d7:4e:4d:68:26:9b:ef:1c:e9:c8:fd:7c:a8:00: b1:86:f2:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVnN+gGTaL5OeBLJGx/ldA5ijv5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjExMDkxMTQwMjZaFw0yNjExMTAxNDUzMjZaMDMxMTAvBgNV BAMTKDdGMDk1NzkwNUZENjE3RDU5ODZDMzJFRjFFQ0NBMTE3NjE5Q0I3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSN6PJM5eqYoUMxj78hxzcYmjr UXeNdGGEPKI4UVaCsQF2iQNpRn2mf45SsEaC8uY6ud9ojtz/WtIty98oqaFDfTIK hsonhOvKpvzqZjPpsEHld4C3vijOEKAnK+QQkH1cEo4maknW7aDsp1lYKNdHEvJY PVlQt3yPWrx1s1xnTaFOVKlGHho2ugP6nBOldYA3QyUrPg1gZs63HtsoT1Cmeknz XC26pEVrlkajeYBq4xlkz2W8kZAtCD/BWofOvvbQSqe5LuV2L/YKjElebpJt/a5d I6f4iggnmqmEqzDvZLyJYFAUmWDcj3LM7wdSiZDGvsxlCXd6//QIt7LxNfohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwlXkF/WF9WYbDLvHsyhF2Gct9UwHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzys0tgJ2duqyOvNAFMpMh95g6NXJZWXsG6 91L6I04lbC9j8KVEBiFoMyyXH5uyC6D8w2i7qKirz7YJPskmI98x+JoELYyc16ky wvnoHjg/zY6MeVm19u3qJrv2S24/7p0kUFza//JwwuW3U15QqQkerIgfn4T5DIsO QSfRKYxKA1P2gPeYtaRKYD6QKeUUB4eIMQsQqxxyVIA73vk7MhW1TCGjkNhCj+YH 3zesUxE1FAld1CZS4bhPPa/6MDy1cMpUXe3Vb8utJ2/2gM+K3z4thShMDM6Etm6u /6kOZMDcxqWAdC6KHWQDS1hUYiPXTk1oJpvvHOnI/XyoALGG8gk= -----END CERTIFICATE-----Generated at Tue Nov 10 08:34:08 2026 by rpki-client