$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft File: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft (raw, json) Hash identifier: Q+riymO14Y0zxGkxkbyOg32cG0N5gf0d/8Af2u+FB8I= Subject key identifier: DC:51:2B:5A:C0:E1:26:6F:F8:34:2D:83:89:13:6D:73:3A:AC:93:0A Authority key identifier: 40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD Certificate issuer: /CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Certificate serial: 15DC7B2E606B7443F1EFE6FB58846121B9E6AC59 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft Manifest number: BF Signing time: Sun 20 Sep 2026 20:27:14 +0000 Manifest this update: Sun 20 Sep 2026 20:22:14 +0000 Manifest next update: Mon 21 Sep 2026 21:37:14 +0000 Files and hashes: 1: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl (hash: D9tyQYYGI1hljcIo9bYbiLErmS21JP60GqzE43BmMnc=) 2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: 82pwwteNrzde+AkchimH6q5PxB6j+cy+EeI6Qefnyuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:dc:7b:2e:60:6b:74:43:f1:ef:e6:fb:58:84:61:21:b9:e6:ac:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Validity Not Before: Sep 20 20:22:14 2026 GMT Not After : Sep 21 21:37:14 2026 GMT Subject: CN=DC512B5AC0E1266FF8342D8389136D733AAC930A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:26:8e:75:8d:b9:60:24:39:26:4e:4e:8f:5b: 9c:eb:46:fe:f1:72:13:dd:20:f9:58:e4:98:a7:0a: 30:28:3f:6c:eb:72:72:09:11:62:a4:b2:1c:9e:ba: 9a:d7:4f:f1:c4:6d:d8:dc:64:6b:f6:61:36:68:74: 33:1c:cf:3b:b8:a8:06:91:8c:6c:97:23:fc:35:73: fe:79:ce:83:52:a6:c9:89:b3:5c:1a:cc:b1:2e:6a: 80:f7:ba:48:85:53:b2:76:37:1b:6f:35:47:eb:a7: ab:d1:e3:19:ad:ab:54:91:64:a1:68:19:48:45:6e: 00:c8:33:33:78:12:8d:1e:c4:14:66:9e:ee:77:e9: ab:51:b7:b6:01:10:71:46:cd:fe:01:2a:5b:d2:29: 7f:20:5e:b9:0e:c8:b2:20:dc:e2:e4:0c:49:16:c7: 92:0e:8e:a3:b7:1f:b1:9d:22:ea:0c:24:2e:b8:a0: 44:38:4e:26:0a:03:5b:24:4b:29:8b:ec:29:85:c8: cf:bd:55:40:07:25:14:43:7e:21:3c:a3:c4:71:0d: b1:1f:5d:56:7d:a3:33:24:3f:79:2b:76:7a:b3:10: 98:03:02:98:14:21:eb:e8:ae:73:c2:3b:14:3a:fb: ba:04:fc:3e:8b:2c:1d:f3:c5:d5:d6:b3:2f:8c:51: bb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:2B:5A:C0:E1:26:6F:F8:34:2D:83:89:13:6D:73:3A:AC:93:0A X509v3 Authority Key Identifier: keyid:40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f0:bd:23:e6:97:ce:ed:ef:5e:77:16:c9:8b:61:c4:61:4e: c3:29:f2:81:2a:45:94:45:37:0f:5e:6a:42:77:c9:ea:f4:2b: 74:37:ca:b7:1b:32:5f:98:07:e7:46:07:8b:c5:e2:f0:ab:28: f7:b8:49:90:89:32:a5:7e:36:9a:f4:62:d5:2a:dc:d8:03:0c: e9:c9:bf:a9:07:83:a1:b7:4b:45:e0:52:9f:f6:7b:bd:6a:10: bb:52:ff:4a:e7:9e:77:e9:d8:d6:4f:7d:75:ee:d2:0e:28:46: 26:1a:35:ba:70:6d:3e:48:3e:1b:f2:18:5f:6b:5e:14:f3:03: 1f:94:c6:38:89:14:b2:a1:35:fa:84:15:64:7b:c2:1a:00:23: d8:30:f0:20:3e:c5:3b:cb:22:dc:df:e5:a7:19:b8:3d:ac:ce: 79:4f:40:1a:54:bd:99:39:b5:de:08:b1:ac:fd:3e:8b:0b:12: 53:74:ad:5d:b6:21:47:1b:c2:d8:d1:3c:ab:0f:b1:12:8f:e5: 08:57:df:0f:fc:42:0b:f5:f0:e7:9c:c6:83:fe:1f:ff:a2:dc: 71:19:38:ee:17:6b:1e:c1:7a:1a:6f:1e:93:38:28:c0:31:33: 02:0b:c5:17:39:b0:63:db:90:6e:b5:f8:ad:e0:af:d2:03:7a: 44:ea:7b:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFdx7LmBrdEPx7+b7WIRhIbnmrFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVF MDVFNjNDRDAeFw0yNjA5MjAyMDIyMTRaFw0yNjA5MjEyMTM3MTRaMDMxMTAvBgNV BAMTKERDNTEyQjVBQzBFMTI2NkZGODM0MkQ4Mzg5MTM2RDczM0FBQzkzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLJo51jblgJDkmTk6PW5zrRv7x chPdIPlY5JinCjAoP2zrcnIJEWKkshyeuprXT/HEbdjcZGv2YTZodDMczzu4qAaR jGyXI/w1c/55zoNSpsmJs1wazLEuaoD3ukiFU7J2NxtvNUfrp6vR4xmtq1SRZKFo GUhFbgDIMzN4Eo0exBRmnu536atRt7YBEHFGzf4BKlvSKX8gXrkOyLIg3OLkDEkW x5IOjqO3H7GdIuoMJC64oEQ4TiYKA1skSymL7CmFyM+9VUAHJRRDfiE8o8RxDbEf XVZ9ozMkP3krdnqzEJgDApgUIevornPCOxQ6+7oE/D6LLB3zxdXWsy+MUbv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FErWsDhJm/4NC2DiRNtczqskwowHwYDVR0j BBgwFoAUQORKxEtMOjG/at1qQ+1E/uBeY80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThjNGJhMTItNjNiYi00NTUwLWFjMGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0 QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVFMDVFNjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEU0NEFDNDRCNEMzQTMxQkY2QURENkE0M0VENDRGRUUwNUU2 M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0 RkVFMDVFNjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB3wvSPml87t7153FsmLYcRhTsMp8oEqRZRF Nw9eakJ3yer0K3Q3yrcbMl+YB+dGB4vF4vCrKPe4SZCJMqV+Npr0YtUq3NgDDOnJ v6kHg6G3S0XgUp/2e71qELtS/0rnnnfp2NZPfXXu0g4oRiYaNbpwbT5IPhvyGF9r XhTzAx+UxjiJFLKhNfqEFWR7whoAI9gw8CA+xTvLItzf5acZuD2sznlPQBpUvZk5 td4Isaz9PosLElN0rV22IUcbwtjRPKsPsRKP5QhX3w/8Qgv18OecxoP+H/+i3HEZ OO4Xax7BehpvHpM4KMAxMwILxRc5sGPbkG61+K3gr9IDekTqe2s= -----END CERTIFICATE-----Generated at Mon Sep 21 06:33:56 2026 by rpki-client