$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: ah4r2KvzJlR5nvl5ZYr5emfQ2YVUhClH01D5HgQthYU= Subject key identifier: 06:D0:AE:C5:8D:DE:30:DC:E4:1C:07:AD:BE:3D:CA:A1:64:E3:37:95 Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 30BDC522DA429BF6C67D7353CBD495AEDA6ABFD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 20:20:36 +0000 Manifest this update: Thu 24 Sep 2026 20:15:36 +0000 Manifest next update: Fri 25 Sep 2026 22:55:36 +0000 Files and hashes: 1: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) 2: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) 3: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) 4: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: VgHUtrAliw7XXepVIxpEop+RSiUhA1jgbxCaZ1N6vTY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 22:55:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:bd:c5:22:da:42:9b:f6:c6:7d:73:53:cb:d4:95:ae:da:6a:bf:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Sep 24 20:15:36 2026 GMT Not After : Sep 25 22:55:36 2026 GMT Subject: CN=06D0AEC58DDE30DCE41C07ADBE3DCAA164E33795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e9:ea:8f:39:db:37:a0:4a:36:d1:ff:07:3b: 4c:05:5d:cc:04:75:7c:d0:65:d6:5a:f8:8d:ca:ea: e5:2a:2b:c4:4a:09:70:34:99:06:82:ec:3d:c4:c8: a5:4f:b1:fa:d9:3f:7f:4d:22:d8:6e:82:da:68:98: 29:71:60:82:7e:49:9d:f2:52:56:ed:63:f1:49:8d: f2:0a:6b:31:c2:dc:67:ca:7e:92:d5:48:d9:2c:4f: e1:55:9e:e1:52:cb:72:d7:24:6f:74:6a:4a:8d:81: 51:67:e2:7b:62:d1:db:f0:ff:ed:98:dc:b7:51:c8: eb:4f:8a:24:e2:62:6e:95:55:4f:75:87:41:93:3e: 91:6e:23:a4:01:78:f8:50:d1:30:a5:05:e9:f9:e1: 4b:05:9f:1a:d8:1a:4c:2f:f1:83:6c:25:20:f1:30: 22:c7:55:b1:3b:c8:07:16:d0:5f:ca:d3:e8:12:dc: 58:d5:f3:9c:50:69:ce:37:65:e1:36:a3:2b:c3:7a: c7:91:99:0a:55:12:d8:6a:39:7b:38:08:ea:a0:bf: 9c:b1:56:af:f5:f9:18:00:89:8b:c4:93:ee:82:ff: fb:bf:18:06:44:51:2d:4c:ab:60:70:ba:50:32:88: 71:58:b1:7c:35:65:14:8e:df:0b:0b:f2:bc:be:4e: 1a:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:D0:AE:C5:8D:DE:30:DC:E4:1C:07:AD:BE:3D:CA:A1:64:E3:37:95 X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:30:7d:5b:be:a5:0e:47:ea:bb:a5:39:41:1e:33:9b:32:2b: e7:8d:69:90:f2:74:ef:a9:9e:75:01:63:24:59:93:d1:67:b0: 65:56:43:d1:b6:de:5b:d4:a5:d8:91:6e:1f:0f:5a:32:d3:a5: 5e:14:26:8b:85:c1:bb:34:11:66:66:00:ca:df:39:c1:30:18: 18:b3:1e:97:0f:fb:af:ca:37:61:62:d1:f4:95:bd:34:3d:30: 18:ef:de:ac:06:d8:c3:0e:fa:4f:a4:06:d8:6d:a3:bf:ed:1a: 20:81:86:7a:a0:28:a0:a3:20:fb:90:ff:16:02:98:34:2d:09: 70:13:fa:f2:4d:a6:53:50:ce:69:ee:6f:5a:d9:9e:e9:96:0b: 37:a8:54:75:0f:6a:76:c4:9c:0e:df:18:8e:ac:83:40:07:86: 07:3e:a5:7f:35:18:5c:76:58:e1:9d:0e:33:ea:c9:d8:b5:3f: a1:3b:95:00:0d:01:9d:92:96:33:e5:64:42:06:51:3b:e4:6b: bb:33:51:c9:d4:ff:39:08:99:da:4a:55:47:14:a1:17:5d:08: 9d:cb:d1:cf:27:9b:a5:38:86:6e:34:79:7d:41:61:41:28:58: d9:0d:e2:1d:37:b6:f1:07:9f:84:70:28:6e:36:2d:1e:54:df: a0:47:37:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUML3FItpCm/bGfXNTy9SVrtpqv9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA5MjQyMDE1MzZaFw0yNjA5MjUyMjU1MzZaMDMxMTAvBgNV BAMTKDA2RDBBRUM1OERERTMwRENFNDFDMDdBREJFM0RDQUExNjRFMzM3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC16eqPOds3oEo20f8HO0wFXcwE dXzQZdZa+I3K6uUqK8RKCXA0mQaC7D3EyKVPsfrZP39NIthugtpomClxYIJ+SZ3y UlbtY/FJjfIKazHC3GfKfpLVSNksT+FVnuFSy3LXJG90akqNgVFn4nti0dvw/+2Y 3LdRyOtPiiTiYm6VVU91h0GTPpFuI6QBePhQ0TClBen54UsFnxrYGkwv8YNsJSDx MCLHVbE7yAcW0F/K0+gS3FjV85xQac43ZeE2oyvDeseRmQpVEthqOXs4COqgv5yx Vq/1+RgAiYvEk+6C//u/GAZEUS1Mq2BwulAyiHFYsXw1ZRSO3wsL8ry+ThqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBtCuxY3eMNzkHAetvj3KoWTjN5UwHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAswfVu+pQ5H6rulOUEeM5syK+eNaZDydO+p nnUBYyRZk9FnsGVWQ9G23lvUpdiRbh8PWjLTpV4UJouFwbs0EWZmAMrfOcEwGBiz HpcP+6/KN2Fi0fSVvTQ9MBjv3qwG2MMO+k+kBthto7/tGiCBhnqgKKCjIPuQ/xYC mDQtCXAT+vJNplNQzmnub1rZnumWCzeoVHUPanbEnA7fGI6sg0AHhgc+pX81GFx2 WOGdDjPqydi1P6E7lQANAZ2SljPlZEIGUTvka7szUcnU/zkImdpKVUcUoRddCJ3L 0c8nm6U4hm40eX1BYUEoWNkN4h03tvEHn4RwKG42LR5U36BHN1Q= -----END CERTIFICATE-----Generated at Fri Sep 25 06:14:52 2026 by rpki-client