$ rpki-client -vvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: iSh2wBxx0DRL/g5bXsAMfWnX7j+izDW8evglzzqIbsA= Subject key identifier: E9:E0:AD:C1:F6:82:98:01:9A:40:77:9E:98:63:BD:F5:A4:9F:83:47 Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 1633DAED6C93F1AD2F8ABFF16525EDC6EAD5FB36 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 09:34:32 +0000 Manifest this update: Wed 17 Jun 2026 09:29:32 +0000 Manifest next update: Thu 18 Jun 2026 09:35:32 +0000 Files and hashes: 1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) 2: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) 3: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: tronv9iOUg+8f+BYuE+UVV2UZIurwIy/+y7uENP/KCU=) 4: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:33:da:ed:6c:93:f1:ad:2f:8a:bf:f1:65:25:ed:c6:ea:d5:fb:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Jun 17 09:29:32 2026 GMT Not After : Jun 18 09:35:32 2026 GMT Subject: CN=E9E0ADC1F68298019A40779E9863BDF5A49F8347 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:c2:f8:96:bd:6e:06:fe:5a:a2:bd:42:74:63: ae:1e:48:f8:75:dd:e8:73:59:98:40:41:14:c4:14: c4:4c:92:8f:d0:8f:59:91:57:f5:34:e7:c2:6f:18: 84:a8:37:49:2c:cb:fe:57:45:53:1f:6d:06:75:27: f1:62:65:97:d6:5f:c1:df:38:da:9a:c3:74:02:ed: 97:dc:c8:90:70:86:74:3f:b5:85:cd:28:24:c5:75: e0:e5:a0:d1:8e:02:cb:26:f3:80:f9:f2:77:e2:14: 40:d4:52:77:3c:0a:fe:5b:c9:73:bd:a3:37:90:42: a4:0c:8f:dd:32:94:3d:a1:6e:4a:3b:58:e6:c5:01: 0f:d4:b0:d5:7b:15:82:41:dc:bd:1e:78:64:0f:77: 73:e1:d9:37:d2:10:f4:3b:ce:e6:7b:db:c6:c5:af: ac:7f:42:a7:85:5f:b7:e7:29:9d:c2:d0:d4:d1:6e: f3:69:84:ca:56:68:42:19:52:bb:09:c6:7f:13:39: 37:ae:79:2e:15:29:b8:ed:43:06:ef:ad:7f:51:75: b3:63:1b:7c:4d:de:79:37:45:7f:57:f0:19:c8:d1: 84:de:a2:72:8d:4c:b8:8e:b3:d9:62:2c:c6:c8:85: 35:11:98:ea:b6:96:45:25:2d:0f:6c:92:95:e7:b0: f4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E0:AD:C1:F6:82:98:01:9A:40:77:9E:98:63:BD:F5:A4:9F:83:47 X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6b:9a:de:e0:41:56:8b:13:22:5a:04:69:91:6f:5e:9d:03: f8:a8:15:ca:7d:1e:08:eb:40:7c:3e:f4:a6:76:74:bd:00:a3: 50:c5:53:45:35:2f:f1:be:6a:1c:54:32:94:52:26:45:32:69: b2:6f:05:43:c0:3a:a5:ed:5b:1c:d8:19:b3:80:1f:9d:7a:15: f2:85:01:cc:fe:97:bd:e8:a1:57:f4:fe:d7:70:f0:54:40:fe: 08:b7:71:1f:bc:f3:b6:9e:13:6d:0e:0c:a6:67:ae:73:d9:53: 59:ba:6f:49:6d:0a:48:09:20:e0:fa:54:af:bc:da:fe:87:c1: e2:68:a8:f8:a2:72:43:64:c3:bc:d9:9b:1e:80:82:de:a7:0f: 0b:cf:66:68:b1:08:c4:2f:27:b6:e6:53:ad:f3:b3:c7:a9:42: a2:ed:0c:4b:5e:0b:ab:22:37:a8:40:49:e0:1c:34:e6:43:74: cd:f3:52:0e:c1:98:8f:95:6e:93:09:5c:c6:a3:a8:95:25:d8: e0:eb:1f:e1:e0:97:f7:09:c1:7c:0e:18:a8:50:31:ff:c0:ac: 16:81:4d:62:01:15:9c:39:e9:97:bb:f0:77:88:00:3d:83:d3: d3:f8:a6:bf:3a:20:72:f1:ea:43:c9:cb:b3:00:9a:de:44:2d: ee:89:9a:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFjPa7WyT8a0vir/xZSXtxurV+zYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA2MTcwOTI5MzJaFw0yNjA2MTgwOTM1MzJaMDMxMTAvBgNV BAMTKEU5RTBBREMxRjY4Mjk4MDE5QTQwNzc5RTk4NjNCREY1QTQ5RjgzNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDowviWvW4G/lqivUJ0Y64eSPh1 3ehzWZhAQRTEFMRMko/Qj1mRV/U058JvGISoN0ksy/5XRVMfbQZ1J/FiZZfWX8Hf ONqaw3QC7ZfcyJBwhnQ/tYXNKCTFdeDloNGOAssm84D58nfiFEDUUnc8Cv5byXO9 ozeQQqQMj90ylD2hbko7WObFAQ/UsNV7FYJB3L0eeGQPd3Ph2TfSEPQ7zuZ728bF r6x/QqeFX7fnKZ3C0NTRbvNphMpWaEIZUrsJxn8TOTeueS4VKbjtQwbvrX9RdbNj G3xN3nk3RX9X8BnI0YTeonKNTLiOs9liLMbIhTURmOq2lkUlLQ9skpXnsPTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eCtwfaCmAGaQHeemGO99aSfg0cwHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBrmt7gQVaLEyJaBGmRb16dA/ioFcp9Hgjr QHw+9KZ2dL0Ao1DFU0U1L/G+ahxUMpRSJkUyabJvBUPAOqXtWxzYGbOAH516FfKF Acz+l73ooVf0/tdw8FRA/gi3cR+887aeE20ODKZnrnPZU1m6b0ltCkgJIOD6VK+8 2v6HweJoqPiickNkw7zZmx6Agt6nDwvPZmixCMQvJ7bmU63zs8epQqLtDEteC6si N6hASeAcNOZDdM3zUg7BmI+VbpMJXMajqJUl2ODrH+Hgl/cJwXwOGKhQMf/ArBaB TWIBFZw56Ze78HeIAD2D09P4pr86IHLx6kPJy7MAmt5ELe6Jmo4= -----END CERTIFICATE-----Generated at Wed Jun 17 13:17:08 2026 by rpki-client