$ rpki-client -vvf rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft File: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft (raw, json) Hash identifier: UnkLQKj/Ef89HNtxchIi5Cn8Yw+LDEppWggUbiaVXAc= Subject key identifier: 80:DB:85:20:1A:63:A1:05:F6:F8:37:BB:AC:0C:58:32:1F:59:A1:8E Authority key identifier: 40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 Certificate issuer: /CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Certificate serial: 7D0D35CC34AA9E4A1394FC0F5C4F851B8E34DB9E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 15:39:02 +0000 Manifest this update: Tue 02 Jun 2026 15:34:02 +0000 Manifest next update: Wed 03 Jun 2026 16:29:02 +0000 Files and hashes: 1: 3130332e3138312e3138332e302f32342d3234203d3e20313439333931.roa (hash: W1ZI9X2oghXvGxbarDeAIc621rfW9JDG8TX4CfBV+SQ=) 2: 40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl (hash: mE4PJ5jgaBo1NVUgJYRwDLw6EHy+hJk7rDxVBNCkLNo=) 3: 3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (hash: IlPGoiq77rExETzeJ2b9fJmfRlPoosBqvKveXh32rgs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0d:35:cc:34:aa:9e:4a:13:94:fc:0f:5c:4f:85:1b:8e:34:db:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40B1F45D3051CA03B1AF0BA1D7CD44501651C505 Validity Not Before: Jun 2 15:34:02 2026 GMT Not After : Jun 3 16:29:02 2026 GMT Subject: CN=80DB85201A63A105F6F837BBAC0C58321F59A18E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bf:6b:27:be:48:67:02:f1:24:6e:54:8b:ff: e9:09:0f:c2:dc:48:5b:97:6c:fc:f6:40:34:44:fb: c5:78:7d:d2:70:8b:97:4d:43:1e:d5:51:f2:be:d3: 91:20:0d:4e:9f:d0:95:3e:99:06:f2:f8:e3:41:b9: 00:86:7c:9e:58:96:15:12:cb:51:bc:9f:04:1c:f8: c6:8d:87:3d:47:c9:ee:bc:c3:2d:e8:78:cc:32:61: 6d:ae:6b:32:6b:28:f0:ea:ef:6d:2e:47:a7:04:3c: 86:48:6c:97:69:b1:9e:e2:6b:28:a4:3a:87:11:34: 09:94:9f:10:eb:54:5d:14:25:9e:96:48:a9:96:40: b2:88:a9:f8:3f:a3:2f:b8:cd:47:7c:95:c7:91:57: d9:29:4a:32:c0:ef:e9:9f:da:24:86:7a:5c:d8:3b: 82:7e:eb:0b:49:76:c0:9c:13:74:87:4c:2e:1f:81: ab:74:21:6e:03:8f:b1:c2:5c:e9:99:1d:c7:33:0a: 43:3b:9d:66:da:63:f5:ea:e9:73:13:48:7e:c9:00: ac:4b:71:93:74:eb:02:41:03:ea:95:7d:50:6f:ef: a9:8f:ef:79:f3:6e:6a:fe:45:07:6f:85:0a:a6:38: f2:b1:e1:8e:38:79:11:de:15:75:15:c0:3e:d4:f5: 5f:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:DB:85:20:1A:63:A1:05:F6:F8:37:BB:AC:0C:58:32:1F:59:A1:8E X509v3 Authority Key Identifier: keyid:40:B1:F4:5D:30:51:CA:03:B1:AF:0B:A1:D7:CD:44:50:16:51:C5:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/40B1F45D3051CA03B1AF0BA1D7CD44501651C505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:6c:fb:67:d0:3f:39:e8:ad:b6:31:5c:c1:a6:f2:5e:2f:2d: 52:32:d1:58:18:12:41:da:10:18:85:6f:d1:2a:35:7d:03:31: a4:bb:f3:c8:4b:6e:be:81:53:60:ea:d0:11:9c:2a:de:82:e1: 72:c8:0f:7b:e7:a4:be:df:57:9e:ed:b7:18:53:f0:db:1d:b3: 4c:84:ab:aa:06:35:9c:b1:07:e6:3a:73:5a:27:01:9f:be:08: 9a:79:d7:c1:36:a0:b6:01:02:07:f5:7e:15:52:38:98:73:b5: 78:df:78:56:dd:a6:bc:8d:a9:cd:b9:8f:99:ec:c4:6b:a7:bd: 55:db:d7:1f:0c:90:2e:75:31:3d:e6:74:83:15:5d:c6:2a:99: 92:95:ea:c2:1c:cf:12:c9:8f:e3:0a:ac:58:17:b4:aa:87:e4: 81:d5:2d:e4:71:fa:be:29:5a:bf:1c:c0:58:da:1d:cc:8e:78: 21:8a:1c:6c:5f:55:63:33:7c:fc:42:de:7b:aa:a4:2c:b8:18: b6:76:3e:87:71:25:25:47:95:b0:57:0b:55:92:2d:ad:8a:2e: bf:8a:47:23:43:1a:27:41:60:ba:95:6b:67:82:7f:20:be:b5: 08:63:c5:22:5c:1b:84:8c:9e:57:bf:5f:4b:a2:f5:0c:f2:ec: 22:42:d4:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQ01zDSqnkoTlPwPXE+FG440254wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAx NjUxQzUwNTAeFw0yNjA2MDIxNTM0MDJaFw0yNjA2MDMxNjI5MDJaMDMxMTAvBgNV BAMTKDgwREI4NTIwMUE2M0ExMDVGNkY4MzdCQkFDMEM1ODMyMUY1OUExOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+v2snvkhnAvEkblSL/+kJD8Lc SFuXbPz2QDRE+8V4fdJwi5dNQx7VUfK+05EgDU6f0JU+mQby+ONBuQCGfJ5YlhUS y1G8nwQc+MaNhz1Hye68wy3oeMwyYW2uazJrKPDq720uR6cEPIZIbJdpsZ7iayik OocRNAmUnxDrVF0UJZ6WSKmWQLKIqfg/oy+4zUd8lceRV9kpSjLA7+mf2iSGelzY O4J+6wtJdsCcE3SHTC4fgat0IW4Dj7HCXOmZHcczCkM7nWbaY/Xq6XMTSH7JAKxL cZN06wJBA+qVfVBv76mP73nzbmr+RQdvhQqmOPKx4Y44eRHeFXUVwD7U9V+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgNuFIBpjoQX2+De7rAxYMh9ZoY4wHwYDVR0j BBgwFoAUQLH0XTBRygOxrwuh181EUBZRxQUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODJjMmY0OGQtNTE4NS00MWY5LWI2ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQz MDUxQ0EwM0IxQUYwQkExRDdDRDQ0NTAxNjUxQzUwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEIxRjQ1RDMwNTFDQTAzQjFBRjBCQTFEN0NENDQ1MDE2NTFD NTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODJjMmY0OGQtNTE4NS00MWY5LWI2 ZDItMjI4ZmJjYWM0ZTI5LzAvNDBCMUY0NUQzMDUxQ0EwM0IxQUYwQkExRDdDRDQ0 NTAxNjUxQzUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAds+2fQPznorbYxXMGm8l4vLVIy0VgYEkHa EBiFb9EqNX0DMaS788hLbr6BU2Dq0BGcKt6C4XLID3vnpL7fV57ttxhT8Nsds0yE q6oGNZyxB+Y6c1onAZ++CJp518E2oLYBAgf1fhVSOJhztXjfeFbdpryNqc25j5ns xGunvVXb1x8MkC51MT3mdIMVXcYqmZKV6sIczxLJj+MKrFgXtKqH5IHVLeRx+r4p Wr8cwFjaHcyOeCGKHGxfVWMzfPxC3nuqpCy4GLZ2PodxJSVHlbBXC1WSLa2KLr+K RyNDGidBYLqVa2eCfyC+tQhjxSJcG4SMnle/X0ui9Qzy7CJC1O0= -----END CERTIFICATE-----Generated at Wed Jun 3 04:00:41 2026 by rpki-client