$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft File: 40064999DEC3F3BD85C4F883982B58D76246EE84.mft (raw, json) Hash identifier: xlzBTxMwmufDgyudxC26Xjafa/uHM6KflhwzjPeyPOw= Subject key identifier: D0:E2:73:39:22:D1:B2:F3:D0:E7:8C:8C:77:C5:BE:0B:87:09:A5:C5 Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 48895CE675D1C2A6656FF3A9FEBBA3FA89700E9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft Manifest number: BE Signing time: Mon 21 Sep 2026 23:05:20 +0000 Manifest this update: Mon 21 Sep 2026 23:00:20 +0000 Manifest next update: Wed 23 Sep 2026 01:50:20 +0000 Files and hashes: 1: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: pVbAEY3jNiaOa2/I5+aOrojXUWJy/5MAJ3dSN22Pu3k=) 2: 40064999DEC3F3BD85C4F883982B58D76246EE84.crl (hash: dKUwwmL8jMqkAqhJoF7hupiHwSQ/FmcuhUfiX8708vg=) 3: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=) 4: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=) 5: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY=) 6: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 01:50:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:89:5c:e6:75:d1:c2:a6:65:6f:f3:a9:fe:bb:a3:fa:89:70:0e:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: Sep 21 23:00:20 2026 GMT Not After : Sep 23 01:50:20 2026 GMT Subject: CN=D0E2733922D1B2F3D0E78C8C77C5BE0B8709A5C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:04:cd:9c:6e:df:a1:54:11:9e:ae:9c:37:c9: 49:e1:f0:be:ff:a7:2f:bd:02:40:08:94:df:b0:0b: 1c:c0:c5:91:1c:59:c5:cb:de:5e:5f:86:72:05:24: ab:21:9b:09:51:8d:52:c8:22:72:c7:57:ae:67:e8: 18:ed:18:47:a3:f7:a7:76:c4:99:39:d2:f7:ca:5e: 8e:4c:1f:d0:29:8f:4a:99:cf:e4:cb:8d:8f:25:07: d7:0c:c3:5c:16:82:c5:6d:0b:e9:33:dc:cd:b9:c0: fb:e8:19:28:03:21:d6:22:33:04:24:16:cf:88:7f: 99:35:29:60:1d:3b:e0:2c:77:54:1c:7c:6e:60:5a: 17:c4:ff:5c:89:7d:1f:6a:3b:9c:36:be:99:ef:cd: 3a:90:69:f9:fa:a6:1c:e3:41:6d:69:2d:cb:4a:b3: 13:49:a0:e2:ca:d9:24:d8:97:2c:3e:40:ff:b9:7c: 7e:2a:01:15:90:76:f2:8d:f3:b7:74:d3:81:18:83: c9:10:72:21:88:c5:16:67:8a:16:9d:58:19:f3:0b: b0:f3:d1:cf:69:57:5e:da:a9:12:93:37:b6:be:45: 88:26:e8:e5:82:ef:82:2f:8d:ef:df:9f:11:37:f7: 70:4c:25:ee:d2:14:52:93:5a:cf:96:59:53:3b:3e: 1b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E2:73:39:22:D1:B2:F3:D0:E7:8C:8C:77:C5:BE:0B:87:09:A5:C5 X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:bb:3c:b0:59:d3:cd:fc:7d:95:de:c1:aa:89:73:ee:d4:0b: e2:20:3e:b1:7f:6e:83:7b:fc:00:e9:eb:19:ee:33:22:23:05: a9:d9:dd:99:20:f5:21:26:40:72:75:50:40:b6:ff:1f:8b:67: 9d:db:f6:2d:9e:32:e2:51:4b:18:93:39:9a:e5:50:20:15:ea: d3:7f:a4:57:d7:9c:c3:d2:ce:dc:61:f0:a1:b5:03:0b:f4:99: cc:2c:5e:c8:47:e4:13:8f:45:1b:6c:a5:17:21:4b:60:40:8f: bd:53:82:16:c3:df:2f:20:0f:62:02:3b:4e:31:29:7e:80:a1: 29:df:f3:ea:80:7b:77:83:8f:51:87:91:15:70:84:15:a7:ac: 59:65:8f:b0:19:6b:0a:c2:0f:cf:2f:34:0a:a5:be:4b:bb:2a: a9:32:37:42:c6:21:88:55:74:46:a2:4b:96:11:56:aa:55:9f: 1f:c8:04:cc:1b:43:32:f9:6d:21:9d:ac:3d:65:17:25:4a:e6: ae:d0:70:b4:68:4b:32:92:57:b7:e8:04:d5:4f:2f:8c:5f:03: b7:47:d6:a2:3e:35:28:a5:1f:85:c6:64:2b:0e:d4:05:a5:08: 81:cd:b9:d2:a4:8e:a2:95:11:b4:7a:41:c1:fe:1a:e9:85:04: 9e:16:a8:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIlc5nXRwqZlb/Op/ruj+olwDp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA5MjEyMzAwMjBaFw0yNjA5MjMwMTUwMjBaMDMxMTAvBgNV BAMTKEQwRTI3MzM5MjJEMUIyRjNEMEU3OEM4Qzc3QzVCRTBCODcwOUE1QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1BM2cbt+hVBGerpw3yUnh8L7/ py+9AkAIlN+wCxzAxZEcWcXL3l5fhnIFJKshmwlRjVLIInLHV65n6BjtGEej96d2 xJk50vfKXo5MH9Apj0qZz+TLjY8lB9cMw1wWgsVtC+kz3M25wPvoGSgDIdYiMwQk Fs+If5k1KWAdO+Asd1QcfG5gWhfE/1yJfR9qO5w2vpnvzTqQafn6phzjQW1pLctK sxNJoOLK2STYlyw+QP+5fH4qARWQdvKN87d004EYg8kQciGIxRZnihadWBnzC7Dz 0c9pV17aqRKTN7a+RYgm6OWC74Ivje/fnxE393BMJe7SFFKTWs+WWVM7PhtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0OJzOSLRsvPQ54yMd8W+C4cJpcUwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4 RDc2MjQ2RUU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq7PLBZ0838fZXewaqJc+7UC+IgPrF/boN7 /ADp6xnuMyIjBanZ3Zkg9SEmQHJ1UEC2/x+LZ53b9i2eMuJRSxiTOZrlUCAV6tN/ pFfXnMPSztxh8KG1Awv0mcwsXshH5BOPRRtspRchS2BAj71TghbD3y8gD2ICO04x KX6AoSnf8+qAe3eDj1GHkRVwhBWnrFllj7AZawrCD88vNAqlvku7KqkyN0LGIYhV dEaiS5YRVqpVnx/IBMwbQzL5bSGdrD1lFyVK5q7QcLRoSzKSV7foBNVPL4xfA7dH 1qI+NSilH4XGZCsO1AWlCIHNudKkjqKVEbR6QcH+GumFBJ4WqP4= -----END CERTIFICATE-----Generated at Tue Sep 22 16:04:55 2026 by rpki-client