$ rpki-client -vvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft File: 40CAF98483C41DA7BDC759A128942EA7634B575E.mft (raw, json) Hash identifier: XCHg9OWy/BJP/q4dnbtaXvDbfOyEYvWaTjecxdEyQIE= Subject key identifier: 83:44:05:3D:E9:F4:39:2C:EA:8A:C6:8D:E2:AC:5F:3B:D9:0A:1E:F0 Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E Certificate issuer: /CN=40CAF98483C41DA7BDC759A128942EA7634B575E Certificate serial: 5D9173011964AB1A68D12302486B506D66DB15D6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 02:10:22 +0000 Manifest this update: Wed 17 Jun 2026 02:05:22 +0000 Manifest next update: Thu 18 Jun 2026 05:09:22 +0000 Files and hashes: 1: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: CWqy2Yz1lUV+bgx0wIDq9A3JsKeVTWQekOJKBjnBtxc=) 2: 40CAF98483C41DA7BDC759A128942EA7634B575E.crl (hash: HJQcX/0y7emc5ezKpS0KQ+Nhf/UMXfhmJQ/daic7EMI=) 3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=) 4: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: Meb8QhT2vDYvkg9nVv8g0QFyTeOgXHkvo1+qGouJHvs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:91:73:01:19:64:ab:1a:68:d1:23:02:48:6b:50:6d:66:db:15:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E Validity Not Before: Jun 17 02:05:22 2026 GMT Not After : Jun 18 05:09:22 2026 GMT Subject: CN=8344053DE9F4392CEA8AC68DE2AC5F3BD90A1EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:39:dc:f9:a8:01:e9:0e:a7:81:81:81:68:2e: ee:a6:12:c5:84:36:4f:e9:75:8d:d6:c8:b7:50:e2: f2:c4:c3:6b:25:d2:d1:3f:f7:3b:b6:0f:58:18:1f: 7a:e7:5a:ad:05:81:9e:f9:50:df:27:b7:e4:4f:0a: 4a:03:a5:d5:bb:a8:35:25:df:0b:8a:d6:96:fd:76: 1d:d8:59:e5:57:db:35:ed:a7:5e:2b:78:4a:61:83: 89:1f:01:51:82:0a:c2:f5:5a:a8:13:1f:19:b0:d4: 92:37:bc:67:98:51:aa:75:11:ac:6e:b6:2e:cf:cd: a7:56:16:e4:bc:5a:75:09:5b:fc:16:4d:b9:25:5f: b6:94:6b:06:b7:9a:1c:40:ed:73:81:c4:64:d5:21: 8f:5e:3f:09:76:7a:c3:91:8f:7c:50:04:57:d1:6f: 54:e5:ad:8a:fe:bf:be:5b:f2:4d:5e:59:cf:ca:26: b6:c6:39:2b:f6:cc:09:2a:b9:07:58:e7:2f:2d:d6: 7d:8f:39:6b:b4:a9:be:6a:dd:61:63:cc:b9:49:29: 89:7d:f8:32:b5:06:25:33:6e:4e:f9:a0:48:29:52: 96:9d:a8:80:74:32:99:77:ae:00:93:58:db:ed:a1: 47:b2:93:ee:ac:37:f6:a2:21:1e:77:7e:ca:35:5e: 8c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:44:05:3D:E9:F4:39:2C:EA:8A:C6:8D:E2:AC:5F:3B:D9:0A:1E:F0 X509v3 Authority Key Identifier: keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:9a:b9:23:5e:a0:0e:03:6b:4f:cd:5d:44:99:e9:31:af:da: 8c:7e:ac:7f:d2:b0:51:1c:65:fb:9e:6a:00:0a:30:aa:50:52: a4:69:b9:37:ca:ba:f2:65:ac:9a:2f:44:8b:09:4e:04:45:b2: f4:d2:a1:15:a7:92:9a:7a:7c:c9:a8:7d:9e:47:bf:7f:8d:62: 54:9b:f4:7f:f6:7a:d8:0d:13:ea:c1:e2:a2:f0:66:7b:fc:d6: e8:3c:53:2e:49:e4:ee:40:67:71:a9:89:6f:47:34:58:aa:95: 9d:e1:c1:5e:7b:6a:31:49:48:cc:7e:cc:ed:71:70:fd:36:33: b7:ef:60:c9:53:e6:d4:4c:ff:1f:e1:5a:0c:f3:22:7c:6c:d9: 1d:a7:06:bf:d2:11:d2:af:da:39:91:92:c7:39:d3:c2:fe:13: ae:e7:10:aa:b8:bc:09:51:7b:28:2b:6b:ec:d9:bc:87:c9:7e: e8:5d:c1:30:00:aa:98:91:13:98:eb:75:4e:c6:47:5b:51:65: 1c:8d:8e:68:4a:4a:e0:ac:f2:86:91:a7:60:bb:da:6f:71:94: 11:61:c2:09:a8:b9:98:78:63:e3:03:3a:b5:37:e1:bd:2e:1d: fe:3d:57:95:83:7f:5f:f6:e0:93:7d:08:a7:d9:f8:54:46:c0: 1e:50:8b:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZFzARlkqxpo0SMCSGtQbWbbFdYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2 MzRCNTc1RTAeFw0yNjA2MTcwMjA1MjJaFw0yNjA2MTgwNTA5MjJaMDMxMTAvBgNV BAMTKDgzNDQwNTNERTlGNDM5MkNFQThBQzY4REUyQUM1RjNCRDkwQTFFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClOdz5qAHpDqeBgYFoLu6mEsWE Nk/pdY3WyLdQ4vLEw2sl0tE/9zu2D1gYH3rnWq0FgZ75UN8nt+RPCkoDpdW7qDUl 3wuK1pb9dh3YWeVX2zXtp14reEphg4kfAVGCCsL1WqgTHxmw1JI3vGeYUap1Eaxu ti7PzadWFuS8WnUJW/wWTbklX7aUawa3mhxA7XOBxGTVIY9ePwl2esORj3xQBFfR b1TlrYr+v75b8k1eWc/KJrbGOSv2zAkquQdY5y8t1n2POWu0qb5q3WFjzLlJKYl9 +DK1BiUzbk75oEgpUpadqIB0Mpl3rgCTWNvtoUeyk+6sN/aiIR53fso1XoxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg0QFPen0OSzqisaN4qxfO9kKHvAwHwYDVR0j BBgwFoAUQMr5hIPEHae9x1mhKJQup2NLV14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1ZTVhMzAtMDgwMi00YzVjLTk0N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4 M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2MzRCNTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MENBRjk4NDgzQzQxREE3QkRDNzU5QTEyODk0MkVBNzYzNEI1 NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJF QTc2MzRCNTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWauSNeoA4Da0/NXUSZ6TGv2ox+rH/SsFEc ZfueagAKMKpQUqRpuTfKuvJlrJovRIsJTgRFsvTSoRWnkpp6fMmofZ5Hv3+NYlSb 9H/2etgNE+rB4qLwZnv81ug8Uy5J5O5AZ3GpiW9HNFiqlZ3hwV57ajFJSMx+zO1x cP02M7fvYMlT5tRM/x/hWgzzInxs2R2nBr/SEdKv2jmRksc508L+E67nEKq4vAlR eygra+zZvIfJfuhdwTAAqpiRE5jrdU7GR1tRZRyNjmhKSuCs8oaRp2C72m9xlBFh wgmouZh4Y+MDOrU34b0uHf49V5WDf1/24JN9CKfZ+FRGwB5Qi9c= -----END CERTIFICATE-----Generated at Wed Jun 17 12:19:18 2026 by rpki-client