$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft File: 40CAF98483C41DA7BDC759A128942EA7634B575E.mft (raw, json) Hash identifier: U/GN1aF9Yv0m86il12jVIgvxq0M/s4fpDNSofD6Nuj4= Subject key identifier: A0:89:1C:F0:72:5C:13:1D:2E:57:69:1B:06:C4:F5:32:D4:9A:29:46 Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E Certificate issuer: /CN=40CAF98483C41DA7BDC759A128942EA7634B575E Certificate serial: 2B3E28F0528090F77BDD7A90FE4B4688A397EAEB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft Manifest number: BF Signing time: Mon 21 Sep 2026 20:47:20 +0000 Manifest this update: Mon 21 Sep 2026 20:42:20 +0000 Manifest next update: Wed 23 Sep 2026 00:12:20 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: Meb8QhT2vDYvkg9nVv8g0QFyTeOgXHkvo1+qGouJHvs=) 2: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: CWqy2Yz1lUV+bgx0wIDq9A3JsKeVTWQekOJKBjnBtxc=) 3: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=) 4: 40CAF98483C41DA7BDC759A128942EA7634B575E.crl (hash: lG5WStjQJBJ7zfJMBI+d5HOpiECdc4EugFcG/M5dlFI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 00:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:3e:28:f0:52:80:90:f7:7b:dd:7a:90:fe:4b:46:88:a3:97:ea:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E Validity Not Before: Sep 21 20:42:20 2026 GMT Not After : Sep 23 00:12:20 2026 GMT Subject: CN=A0891CF0725C131D2E57691B06C4F532D49A2946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ec:7c:8e:cb:66:f7:29:4a:47:86:01:63:99: a5:4c:45:d2:d1:de:72:b2:91:f1:a5:65:6e:82:68: ea:97:42:4e:40:1e:b9:cd:9a:b4:62:7c:10:f3:b1: e8:a4:35:30:12:7b:36:dc:d5:7a:61:2d:57:b5:75: 41:fe:0a:1b:00:33:31:40:5b:82:fb:4a:24:17:95: 54:62:ee:af:11:28:92:9c:31:a1:45:29:fd:53:41: e7:11:d3:71:54:5f:16:53:58:85:9e:4a:d6:3b:9b: a9:f2:79:2b:ef:16:53:a8:8d:1b:1a:c8:af:40:52: 1a:ce:57:66:91:68:fe:21:74:b9:f2:50:a8:4b:c4: bf:0c:e4:95:23:67:e3:7b:85:cf:ee:14:51:f7:7c: c3:f4:a5:97:36:b8:5d:92:f5:aa:d5:d3:55:cc:97: 3b:94:ae:b7:b6:0e:20:8b:fc:27:4a:b8:15:b7:90: a6:87:b7:66:c6:01:0b:23:ae:64:19:a0:7b:cc:a0: 8a:3d:c0:b4:a4:5d:3a:9f:8c:6a:8a:2e:1e:9c:1a: d4:23:50:f1:63:05:fb:69:a0:9e:92:67:4b:a8:bc: 94:3b:cf:27:57:2e:5f:f7:1c:a1:b2:7e:d8:1a:ff: e8:e9:7c:04:aa:a6:38:8b:a0:ed:31:03:1c:e5:7a: 66:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:89:1C:F0:72:5C:13:1D:2E:57:69:1B:06:C4:F5:32:D4:9A:29:46 X509v3 Authority Key Identifier: keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d9:ed:cd:87:1e:93:ed:d7:59:fd:01:9c:4d:ab:42:24:8c: 24:10:cc:b1:ce:ab:aa:64:1b:48:c3:c1:e4:dd:f2:df:39:df: 97:69:c6:d5:de:15:7e:60:ac:28:30:c6:e2:c6:f8:59:e2:36: 71:4a:81:ca:13:e4:ca:35:87:73:5b:7e:60:38:7b:64:5e:cc: 77:74:42:09:c7:95:25:46:7a:67:8d:3e:d2:ed:61:d2:ba:3a: d7:f5:15:c3:e6:54:6d:ce:2a:3d:8d:b7:d7:b8:c9:c2:f3:a1: d1:8b:04:cb:de:ad:d8:7b:a7:9e:44:40:1d:8b:a9:43:4b:9a: 63:a4:b1:fd:2a:da:38:4b:2d:2a:86:15:9e:23:d7:0b:c5:55: 36:66:49:89:ab:e3:74:3e:fd:9a:58:59:80:28:a4:70:cd:d4: 81:f1:40:e0:65:06:3a:9a:b0:01:e2:bf:79:06:c4:91:4b:2f: 7d:34:d0:ce:f2:92:e3:8d:3d:be:c4:26:0f:1b:fd:5e:20:31: a3:38:9f:c6:ed:41:f7:85:41:eb:8d:80:c2:f2:c6:69:9d:15: 7c:a7:5b:56:c2:04:d1:f1:47:8b:c5:49:e7:be:38:d1:4d:58: 9d:d1:ca:48:9c:e6:d4:b4:9a:1e:03:23:2f:4f:89:19:91:4b: 5c:24:74:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKz4o8FKAkPd73XqQ/ktGiKOX6uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2 MzRCNTc1RTAeFw0yNjA5MjEyMDQyMjBaFw0yNjA5MjMwMDEyMjBaMDMxMTAvBgNV BAMTKEEwODkxQ0YwNzI1QzEzMUQyRTU3NjkxQjA2QzRGNTMyRDQ5QTI5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN7HyOy2b3KUpHhgFjmaVMRdLR 3nKykfGlZW6CaOqXQk5AHrnNmrRifBDzseikNTASezbc1XphLVe1dUH+ChsAMzFA W4L7SiQXlVRi7q8RKJKcMaFFKf1TQecR03FUXxZTWIWeStY7m6nyeSvvFlOojRsa yK9AUhrOV2aRaP4hdLnyUKhLxL8M5JUjZ+N7hc/uFFH3fMP0pZc2uF2S9arV01XM lzuUrre2DiCL/CdKuBW3kKaHt2bGAQsjrmQZoHvMoIo9wLSkXTqfjGqKLh6cGtQj UPFjBftpoJ6SZ0uovJQ7zydXLl/3HKGyftga/+jpfASqpjiLoO0xAxzlemYhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoIkc8HJcEx0uV2kbBsT1MtSaKUYwHwYDVR0j BBgwFoAUQMr5hIPEHae9x1mhKJQup2NLV14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1ZTVhMzAtMDgwMi00YzVjLTk0N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4 M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2MzRCNTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MENBRjk4NDgzQzQxREE3QkRDNzU5QTEyODk0MkVBNzYzNEI1 NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJF QTc2MzRCNTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3Z7c2HHpPt11n9AZxNq0IkjCQQzLHOq6pk G0jDweTd8t8535dpxtXeFX5grCgwxuLG+FniNnFKgcoT5Mo1h3NbfmA4e2RezHd0 QgnHlSVGemeNPtLtYdK6Otf1FcPmVG3OKj2Nt9e4ycLzodGLBMverdh7p55EQB2L qUNLmmOksf0q2jhLLSqGFZ4j1wvFVTZmSYmr43Q+/ZpYWYAopHDN1IHxQOBlBjqa sAHiv3kGxJFLL3000M7ykuONPb7EJg8b/V4gMaM4n8btQfeFQeuNgMLyxmmdFXyn W1bCBNHxR4vFSee+ONFNWJ3Rykic5tS0mh4DIy9PiRmRS1wkdNI= -----END CERTIFICATE-----Generated at Tue Sep 22 12:19:01 2026 by rpki-client