$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: AMyApAfrDPKn3syXZoHPHd4vniH/F+AevpMxEk8oElg= Subject key identifier: 8D:50:C5:14:43:DC:50:3E:DE:86:D3:B1:CB:BA:F9:49:3F:5B:E4:7A Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 0502DFD54F342DC279E93F571ADEC684EE628053 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 08:12:39 +0000 Manifest this update: Mon 02 Nov 2026 08:07:39 +0000 Manifest next update: Tue 03 Nov 2026 08:26:39 +0000 Files and hashes: 1: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: oUtqlskTJlf30gTsyNxd+gdqkjKzVKV7sPxATyY0Ges=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 3: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 08:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:02:df:d5:4f:34:2d:c2:79:e9:3f:57:1a:de:c6:84:ee:62:80:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Nov 2 08:07:39 2026 GMT Not After : Nov 3 08:26:39 2026 GMT Subject: CN=8D50C51443DC503EDE86D3B1CBBAF9493F5BE47A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:aa:d3:13:ff:10:c7:00:db:ca:ab:07:8c:6d: 5d:8e:c2:aa:32:ff:fa:27:2a:4f:a4:1f:a1:99:3e: 04:6f:80:90:46:06:01:3b:68:95:b4:b6:e7:db:03: 0e:62:7d:cd:e5:d8:f9:10:f2:2f:37:61:3a:37:f8: de:1c:39:17:59:84:4a:bd:b7:bd:12:c0:e6:9e:9f: 60:bc:d7:ee:85:d9:18:01:9a:6e:63:59:55:a2:88: 37:ef:fe:ca:fd:68:fe:da:f9:51:d2:03:7f:a0:72: 59:96:6d:6f:4c:61:3a:6f:f7:29:93:40:18:d6:10: 26:96:f7:8b:2a:af:79:6c:3a:c3:6f:a7:32:e4:52: e0:0a:74:34:6b:ed:71:e1:1c:9f:83:9c:3d:78:bd: 5f:4c:89:8b:cc:51:0c:27:95:a2:f5:f7:5f:3e:b0: ec:f5:25:6f:cb:9f:1d:3a:ec:71:6e:62:fa:1e:dd: a0:1f:02:00:26:c0:77:72:69:2a:9f:01:da:0a:4a: f0:71:d9:9a:c0:9f:a4:7e:b8:31:20:df:ba:d5:6a: 31:7b:ec:8e:46:3d:58:0a:c9:68:f6:7e:ea:15:c3: 15:74:21:90:a7:94:b2:32:d7:75:7d:fa:dd:a9:12: c1:f3:d6:b9:37:12:fd:aa:2c:bc:9f:21:b6:f2:e9: b9:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:50:C5:14:43:DC:50:3E:DE:86:D3:B1:CB:BA:F9:49:3F:5B:E4:7A X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4a:27:f7:22:44:57:94:ac:50:6e:32:28:e9:17:4f:f8:35: 03:db:9b:28:73:1c:b5:83:79:d5:0f:58:8f:a9:aa:43:f0:27: 30:9d:cc:e4:40:dc:ad:46:b3:80:ca:d0:72:08:2a:7b:f1:3d: c2:3f:86:00:13:97:3d:de:10:1e:37:0a:60:8c:01:bd:ab:62: b5:a5:17:c1:c6:af:ba:0e:da:6c:cf:62:f0:ef:8e:d7:eb:b6: 12:6d:7b:1f:46:ce:2c:9f:41:2c:82:68:89:b7:47:04:e7:62: 67:bd:59:4d:0a:df:de:df:b4:56:ea:5c:17:66:4b:71:06:bf: 27:d7:3c:aa:f9:a2:3b:57:3c:b7:06:2d:22:0c:18:58:2c:d3: a4:90:2c:f5:e8:a5:51:11:9a:49:12:9d:65:31:80:e0:bd:64: ee:bb:dd:2c:e9:ac:61:80:a8:ad:e4:c2:0a:79:e8:77:0b:45: db:c7:6e:97:81:3a:fa:d7:f6:7f:c0:51:e8:83:a2:d3:6f:8d: 80:48:30:1c:90:7f:dc:f7:db:1a:5e:be:ac:34:3d:bf:ba:a2: 52:41:3c:1b:3f:5e:cf:f2:a6:c3:e4:c0:1f:ad:3c:6a:85:fd: ea:b1:f0:5c:60:a8:7e:20:65:3b:12:0b:bf:7d:ee:9e:db:c7: 56:56:da:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQLf1U80LcJ56T9XGt7GhO5igFMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjExMDIwODA3MzlaFw0yNjExMDMwODI2MzlaMDMxMTAvBgNV BAMTKDhENTBDNTE0NDNEQzUwM0VERTg2RDNCMUNCQkFGOTQ5M0Y1QkU0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqtMT/xDHANvKqweMbV2Owqoy //onKk+kH6GZPgRvgJBGBgE7aJW0tufbAw5ifc3l2PkQ8i83YTo3+N4cORdZhEq9 t70SwOaen2C81+6F2RgBmm5jWVWiiDfv/sr9aP7a+VHSA3+gclmWbW9MYTpv9ymT QBjWECaW94sqr3lsOsNvpzLkUuAKdDRr7XHhHJ+DnD14vV9MiYvMUQwnlaL1918+ sOz1JW/Lnx067HFuYvoe3aAfAgAmwHdyaSqfAdoKSvBx2ZrAn6R+uDEg37rVajF7 7I5GPVgKyWj2fuoVwxV0IZCnlLIy13V9+t2pEsHz1rk3Ev2qLLyfIbby6bnFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjVDFFEPcUD7ehtOxy7r5ST9b5HowHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdKJ/ciRFeUrFBuMijpF0/4NQPbmyhzHLWD edUPWI+pqkPwJzCdzORA3K1Gs4DK0HIIKnvxPcI/hgATlz3eEB43CmCMAb2rYrWl F8HGr7oO2mzPYvDvjtfrthJtex9GziyfQSyCaIm3RwTnYme9WU0K397ftFbqXBdm S3EGvyfXPKr5ojtXPLcGLSIMGFgs06SQLPXopVERmkkSnWUxgOC9ZO673SzprGGA qK3kwgp56HcLRdvHbpeBOvrX9n/AUeiDotNvjYBIMByQf9z32xpevqw0Pb+6olJB PBs/Xs/ypsPkwB+tPGqF/eqx8FxgqH4gZTsSC7997p7bx1ZW2mQ= -----END CERTIFICATE-----Generated at Mon Nov 2 12:44:55 2026 by rpki-client