$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: HjkxY1Y30EAFfBU2CaAiZRMDm0qa09YR1E2KbGKGcls= Subject key identifier: 73:FC:8A:47:56:D9:8B:78:50:BB:66:93:EA:AA:51:7C:75:26:CB:B1 Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 46927C6FD67B019991FC0D7EAD247BB843D11143 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:04:04 +0000 Manifest this update: Mon 21 Sep 2026 01:59:04 +0000 Manifest next update: Tue 22 Sep 2026 03:15:04 +0000 Files and hashes: 1: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: UhvwKvRj0cUo+ZNvBwM9tWUeQ+DF9MIINgQtw/5RPi4=) 2: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:92:7c:6f:d6:7b:01:99:91:fc:0d:7e:ad:24:7b:b8:43:d1:11:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Sep 21 01:59:04 2026 GMT Not After : Sep 22 03:15:04 2026 GMT Subject: CN=73FC8A4756D98B7850BB6693EAAA517C7526CBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:87:63:24:1b:00:3f:16:b6:a4:c9:4a:4c:64: f3:d7:c3:44:3a:6c:d7:90:93:5e:12:c4:67:f8:27: 9a:fe:1d:74:34:1e:8b:2a:37:69:c5:c3:24:df:2c: 12:d9:f2:d6:bc:d1:6a:f1:70:b9:9c:3f:b2:3a:ad: 7d:36:46:b9:a0:2d:ac:c9:17:f6:54:d8:43:49:03: 75:64:49:04:73:49:0a:50:b6:bd:09:c2:1f:2d:8d: b5:5d:4b:e0:2c:b3:a9:14:8b:34:e6:86:c5:39:92: 93:7b:79:e7:69:c1:6d:3e:a9:04:74:c6:f0:9c:13: 48:2d:b7:92:c7:7a:e7:c7:9a:e6:45:76:ba:be:91: b1:ff:45:dc:77:37:0a:bc:94:e7:c7:7e:c2:07:5a: 05:4f:f2:65:93:b3:f6:41:3f:d8:7d:57:d2:95:ea: 10:04:58:4f:4a:f7:ec:fe:e3:09:89:cd:38:04:2a: 72:02:f2:a2:9b:10:14:8e:90:62:50:30:05:11:7c: 9c:53:7e:b9:8e:5b:ee:67:0f:8e:a7:e2:60:ea:55: 46:37:2c:17:e4:d5:99:fe:36:a8:5b:2d:4f:3d:f1: 6c:12:a6:05:af:99:99:fd:21:38:cc:71:df:50:59: 4f:7d:c9:0c:27:0f:d6:fb:af:a6:e8:fc:f8:65:f2: ab:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FC:8A:47:56:D9:8B:78:50:BB:66:93:EA:AA:51:7C:75:26:CB:B1 X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f9:a1:cf:f7:cf:f1:da:c6:f4:81:37:2b:58:45:a5:20:4b: f3:07:60:4b:45:0f:ed:4a:97:d0:a6:bb:e4:30:1d:26:a8:d5: de:e6:25:c4:1c:08:5c:b0:5c:07:78:4a:7d:0c:e5:7d:98:29: 2b:8b:dc:80:69:de:7a:dd:79:c2:1e:ba:da:ca:99:07:75:93: c0:27:23:57:12:e6:d5:cc:40:85:60:59:24:47:d9:33:79:57: 07:4e:a2:ea:96:29:02:1e:e5:c0:a1:50:37:ab:1f:16:e8:3c: 4d:77:27:22:ea:e5:30:3a:1f:f0:81:65:02:9a:68:c6:6f:2c: d2:02:08:40:af:03:21:dc:1f:ab:3d:3c:4e:f2:e7:03:e4:a6: 03:3b:fa:d6:ba:cd:29:06:9a:ba:1e:ca:46:6d:45:fa:0f:66: 0a:1d:ba:ee:15:44:a7:e6:c6:0d:03:ea:f3:d0:ee:99:98:ed: 43:73:f3:fa:5c:72:21:1c:46:0b:d9:73:f1:52:45:94:3a:45: c4:89:3f:f9:9b:8c:5a:2b:d2:c8:05:72:47:4a:2f:1c:ab:56: 27:34:43:03:9c:39:cc:fa:a7:32:09:12:5d:c7:0f:15:87:e2: a5:81:20:70:7c:65:48:4f:3e:ec:cd:23:ee:d7:60:81:d6:a8: 55:0a:0f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURpJ8b9Z7AZmR/A1+rSR7uEPREUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjA5MjEwMTU5MDRaFw0yNjA5MjIwMzE1MDRaMDMxMTAvBgNV BAMTKDczRkM4QTQ3NTZEOThCNzg1MEJCNjY5M0VBQUE1MTdDNzUyNkNCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAh2MkGwA/FrakyUpMZPPXw0Q6 bNeQk14SxGf4J5r+HXQ0HosqN2nFwyTfLBLZ8ta80WrxcLmcP7I6rX02RrmgLazJ F/ZU2ENJA3VkSQRzSQpQtr0Jwh8tjbVdS+Ass6kUizTmhsU5kpN7eedpwW0+qQR0 xvCcE0gtt5LHeufHmuZFdrq+kbH/Rdx3Nwq8lOfHfsIHWgVP8mWTs/ZBP9h9V9KV 6hAEWE9K9+z+4wmJzTgEKnIC8qKbEBSOkGJQMAURfJxTfrmOW+5nD46n4mDqVUY3 LBfk1Zn+NqhbLU898WwSpgWvmZn9ITjMcd9QWU99yQwnD9b7r6bo/Phl8quTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc/yKR1bZi3hQu2aT6qpRfHUmy7EwHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABn5oc/3z/HaxvSBNytYRaUgS/MHYEtFD+1K l9Cmu+QwHSao1d7mJcQcCFywXAd4Sn0M5X2YKSuL3IBp3nrdecIeutrKmQd1k8An I1cS5tXMQIVgWSRH2TN5VwdOouqWKQIe5cChUDerHxboPE13JyLq5TA6H/CBZQKa aMZvLNICCECvAyHcH6s9PE7y5wPkpgM7+ta6zSkGmroeykZtRfoPZgoduu4VRKfm xg0D6vPQ7pmY7UNz8/pcciEcRgvZc/FSRZQ6RcSJP/mbjFor0sgFckdKLxyrVic0 QwOcOcz6pzIJEl3HDxWH4qWBIHB8ZUhPPuzNI+7XYIHWqFUKD9Q= -----END CERTIFICATE-----Generated at Mon Sep 21 05:34:11 2026 by rpki-client