$ rpki-client -vvvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: U24gpTEXEe0UEwMI7JM38HtN2tHoVxV0n0YchduLmX4= Subject key identifier: 6D:14:4D:F5:B8:DE:FA:C4:CE:91:78:CF:2B:2E:B4:70:AC:36:8A:08 Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 190B0344795A7A37F3F5462530FB4C50F102F557 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 04:28:41 +0000 Manifest this update: Wed 04 Nov 2026 04:23:41 +0000 Manifest next update: Thu 05 Nov 2026 08:25:41 +0000 Files and hashes: 1: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) 2: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: +ReZvZP1FQjav5VRRNOq/q8nK4izBuN+gjzQ1vX4sug=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 08:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:0b:03:44:79:5a:7a:37:f3:f5:46:25:30:fb:4c:50:f1:02:f5:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Nov 4 04:23:41 2026 GMT Not After : Nov 5 08:25:41 2026 GMT Subject: CN=6D144DF5B8DEFAC4CE9178CF2B2EB470AC368A08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:12:e7:77:e9:09:44:c2:29:9b:5b:35:e3:f7: 33:04:d3:b3:d6:64:29:b1:09:04:73:37:94:64:b4: e3:7d:66:30:18:85:19:e2:8f:b0:7b:67:23:2c:ff: 20:34:1c:63:ca:98:92:0c:80:7c:5f:8a:ef:af:66: 97:72:b6:95:5a:db:d7:9e:35:d1:7b:e5:28:19:bd: 2f:14:c1:74:2b:32:0a:e2:de:d6:90:7f:1b:c0:80: a1:c0:61:fe:bd:e0:84:8d:ee:36:e7:40:71:8f:08: 84:68:e9:21:0f:97:be:79:c4:92:84:91:e5:95:87: ae:5c:25:3c:82:23:d4:db:65:67:38:1a:20:6b:5f: b8:cc:47:49:39:49:c2:7b:0e:d2:bd:22:a8:c5:bb: 79:4d:d9:77:9b:8f:ba:ea:b3:a9:97:60:da:b0:e0: 01:7b:21:fb:fd:c9:b7:b2:3e:68:b9:2e:52:16:31: 99:05:df:ef:90:96:c2:fd:a4:1e:db:8d:14:3a:d6: e4:0e:99:64:28:6b:1b:e8:d4:42:9d:bf:cc:ab:7a: 5f:73:16:fe:a3:42:bc:a1:d1:be:bd:3b:b5:c1:0a: 3f:f0:90:12:56:9e:57:84:d1:4c:74:12:39:4f:3a: 76:41:30:1b:44:18:a5:da:1d:6a:6e:7b:11:d2:07: df:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:14:4D:F5:B8:DE:FA:C4:CE:91:78:CF:2B:2E:B4:70:AC:36:8A:08 X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:2f:c7:b9:ad:41:20:75:b3:c8:3b:23:08:4b:8d:df:2b:47: f5:97:fd:0e:5e:82:e3:85:33:f9:60:21:62:d0:3f:af:08:e7: fd:d1:b4:a1:f7:22:58:ce:af:d9:7e:90:85:2a:dc:41:f9:27: 5d:02:ba:54:d8:8a:25:bf:5f:23:4e:e0:99:64:eb:2b:9b:55: 88:43:a8:64:2a:d3:cd:d5:31:58:2d:24:45:e8:34:cf:e9:84: 7e:cb:df:32:36:05:34:92:02:9c:5b:af:16:c8:a5:ba:7e:c3: 53:64:1c:86:9b:8d:04:e8:96:eb:89:97:df:00:eb:91:fa:88: 60:c0:02:5c:bc:52:a5:20:a6:06:10:bc:23:bd:a5:1c:89:5c: 5a:da:f9:70:87:6a:5e:0d:ac:ed:ce:74:2a:74:d2:01:06:28: ae:c8:91:bf:61:c2:e1:e6:4c:4e:c3:c4:d2:b0:6e:31:28:e5: 08:9f:51:c8:f5:f4:34:ed:73:87:52:91:e5:14:02:51:a9:73: 7a:70:54:4f:57:4f:13:c6:8e:f0:e5:80:cc:5b:3f:69:ab:b5: 8a:49:18:c3:de:5f:dc:9f:45:26:2b:75:51:33:16:82:02:42: f1:5f:2a:86:03:6f:81:f0:46:c4:47:a7:86:76:db:d2:e0:9f: fe:3c:6c:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQsDRHlaejfz9UYlMPtMUPEC9VcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjExMDQwNDIzNDFaFw0yNjExMDUwODI1NDFaMDMxMTAvBgNV BAMTKDZEMTQ0REY1QjhERUZBQzRDRTkxNzhDRjJCMkVCNDcwQUMzNjhBMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHEud36QlEwimbWzXj9zME07PW ZCmxCQRzN5RktON9ZjAYhRnij7B7ZyMs/yA0HGPKmJIMgHxfiu+vZpdytpVa29ee NdF75SgZvS8UwXQrMgri3taQfxvAgKHAYf694ISN7jbnQHGPCIRo6SEPl755xJKE keWVh65cJTyCI9TbZWc4GiBrX7jMR0k5ScJ7DtK9IqjFu3lN2Xebj7rqs6mXYNqw 4AF7Ifv9ybeyPmi5LlIWMZkF3++QlsL9pB7bjRQ61uQOmWQoaxvo1EKdv8yrel9z Fv6jQryh0b69O7XBCj/wkBJWnleE0Ux0EjlPOnZBMBtEGKXaHWpuexHSB9+RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbRRN9bje+sTOkXjPKy60cKw2iggwHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8vx7mtQSB1s8g7IwhLjd8rR/WX/Q5eguOF M/lgIWLQP68I5/3RtKH3IljOr9l+kIUq3EH5J10CulTYiiW/XyNO4Jlk6yubVYhD qGQq083VMVgtJEXoNM/phH7L3zI2BTSSApxbrxbIpbp+w1NkHIabjQToluuJl98A 65H6iGDAAly8UqUgpgYQvCO9pRyJXFra+XCHal4NrO3OdCp00gEGKK7Ikb9hwuHm TE7DxNKwbjEo5QifUcj19DTtc4dSkeUUAlGpc3pwVE9XTxPGjvDlgMxbP2mrtYpJ GMPeX9yfRSYrdVEzFoICQvFfKoYDb4HwRsRHp4Z229Lgn/48bEM= -----END CERTIFICATE-----Generated at Wed Nov 4 20:11:53 2026 by rpki-client