$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft File: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft (raw, json) Hash identifier: m8lQQ9UECUz24323Djal7wBfJEkT0D/eqcTAAPj3644= Subject key identifier: 21:A3:AB:18:AF:B3:BF:07:DF:B4:77:21:16:36:14:2F:4B:55:2B:B0 Authority key identifier: 40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD Certificate issuer: /CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Certificate serial: 30AB7FF968B149A3E5E9CF50F5D271D792835FCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 23:06:40 +0000 Manifest this update: Wed 02 Sep 2026 23:01:40 +0000 Manifest next update: Fri 04 Sep 2026 01:06:40 +0000 Files and hashes: 1: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl (hash: +yygAdDLW8tjuWI+Bc7RhUGXU83mFYQW0kYJnDazWVM=) 2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: 82pwwteNrzde+AkchimH6q5PxB6j+cy+EeI6Qefnyuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:06:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ab:7f:f9:68:b1:49:a3:e5:e9:cf:50:f5:d2:71:d7:92:83:5f:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Validity Not Before: Sep 2 23:01:40 2026 GMT Not After : Sep 4 01:06:40 2026 GMT Subject: CN=21A3AB18AFB3BF07DFB477211636142F4B552BB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b4:02:80:a0:9e:3d:d2:fd:0b:eb:64:eb:4a: 6c:cd:dc:c1:cd:f7:c6:82:50:45:62:a6:b7:d7:fd: 37:d4:eb:a1:80:93:69:1c:bf:17:80:b3:64:6a:b0: 97:dc:4e:07:e3:1c:f2:2f:7e:18:b5:74:8e:39:b2: ae:46:90:23:f3:1a:2f:a3:08:9d:2e:30:e2:2d:f8: c7:fd:d9:24:6c:51:fd:31:98:a4:41:45:61:64:15: 82:f8:fa:b2:16:84:3e:90:27:0b:01:51:9b:99:bf: b3:4e:c1:d0:6e:ce:a4:e1:d0:76:7d:73:60:d8:70: 0c:3a:ed:7f:f6:da:5b:3b:ad:da:85:26:e4:37:f9: 83:bf:f4:22:e3:21:fc:e3:0d:76:51:c7:cf:be:b1: 4f:b3:3c:d4:b9:bd:ae:3e:a4:bc:32:7d:7a:77:20: 56:73:e5:69:fd:93:52:db:1d:de:cb:96:0d:49:b7: aa:5a:f8:a0:15:8a:5b:ba:ad:6e:03:b2:a2:0b:2d: 95:86:7e:1c:11:ea:f0:4c:c8:2e:63:80:86:03:53: 7e:cd:3b:6d:12:21:e1:77:3f:75:fb:88:55:be:a5: 63:30:4e:e2:0a:3e:ba:cb:1d:4e:5a:23:f2:bd:82: 9a:b4:89:e1:40:05:f6:67:93:84:f3:a4:8b:99:cc: 42:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:A3:AB:18:AF:B3:BF:07:DF:B4:77:21:16:36:14:2F:4B:55:2B:B0 X509v3 Authority Key Identifier: keyid:40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4f:6c:8f:a7:09:73:41:2c:7c:6d:e7:d7:d7:0a:95:9b:5e: 06:d7:55:9f:a0:26:fb:be:b4:17:ff:e9:20:42:8d:cd:ef:77: a3:41:4a:7e:31:57:34:e3:46:2a:2a:e9:0f:16:4e:30:e4:dd: 1f:eb:f2:69:8a:6b:b2:e7:ef:f4:2d:38:eb:e0:22:2f:85:50: 94:fd:e0:6d:48:1f:d2:9a:d7:d4:c4:68:ab:f6:ba:19:e2:32: 92:26:e9:cc:63:b2:cd:45:cb:45:98:47:d5:0b:ce:67:6d:43: 4c:57:4f:3b:61:e9:3b:8d:07:b0:07:1e:35:bb:07:9d:b6:d9: f8:df:21:c1:59:a3:88:39:15:37:4e:70:83:53:10:62:46:62: 1f:30:49:c1:97:00:3e:f6:e1:a8:94:96:b8:ed:5e:6f:1f:bf: e3:a4:9f:d6:8b:0c:a1:54:24:41:4f:07:77:ad:86:18:31:4b: 06:c3:6c:9d:de:83:52:ae:e7:47:c3:b5:69:6f:c9:d2:bd:5b: 0b:82:25:17:9b:c7:bc:08:d3:a6:a7:1e:85:7e:fb:d7:91:38: 4c:62:d5:39:f3:c7:37:4c:a2:1a:53:25:0a:16:98:16:8e:bb: 9f:e7:9e:9c:3c:5b:47:1a:d4:c2:f1:88:2d:2c:8c:d9:cd:bb: 33:6e:53:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKt/+WixSaPl6c9Q9dJx15KDX84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVF MDVFNjNDRDAeFw0yNjA5MDIyMzAxNDBaFw0yNjA5MDQwMTA2NDBaMDMxMTAvBgNV BAMTKDIxQTNBQjE4QUZCM0JGMDdERkI0NzcyMTE2MzYxNDJGNEI1NTJCQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgtAKAoJ490v0L62TrSmzN3MHN 98aCUEViprfX/TfU66GAk2kcvxeAs2RqsJfcTgfjHPIvfhi1dI45sq5GkCPzGi+j CJ0uMOIt+Mf92SRsUf0xmKRBRWFkFYL4+rIWhD6QJwsBUZuZv7NOwdBuzqTh0HZ9 c2DYcAw67X/22ls7rdqFJuQ3+YO/9CLjIfzjDXZRx8++sU+zPNS5va4+pLwyfXp3 IFZz5Wn9k1LbHd7Llg1Jt6pa+KAVilu6rW4DsqILLZWGfhwR6vBMyC5jgIYDU37N O20SIeF3P3X7iFW+pWMwTuIKPrrLHU5aI/K9gpq0ieFABfZnk4TzpIuZzEKzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIaOrGK+zvwfftHchFjYUL0tVK7AwHwYDVR0j BBgwFoAUQORKxEtMOjG/at1qQ+1E/uBeY80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThjNGJhMTItNjNiYi00NTUwLWFjMGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0 QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVFMDVFNjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEU0NEFDNDRCNEMzQTMxQkY2QURENkE0M0VENDRGRUUwNUU2 M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0 RkVFMDVFNjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVPbI+nCXNBLHxt59fXCpWbXgbXVZ+gJvu+ tBf/6SBCjc3vd6NBSn4xVzTjRioq6Q8WTjDk3R/r8mmKa7Ln7/QtOOvgIi+FUJT9 4G1IH9Ka19TEaKv2uhniMpIm6cxjss1Fy0WYR9ULzmdtQ0xXTzth6TuNB7AHHjW7 B5222fjfIcFZo4g5FTdOcINTEGJGYh8wScGXAD724aiUlrjtXm8fv+Okn9aLDKFU JEFPB3ethhgxSwbDbJ3eg1Ku50fDtWlvydK9WwuCJRebx7wI06anHoV++9eROExi 1TnzxzdMohpTJQoWmBaOu5/nnpw8W0ca1MLxiC0sjNnNuzNuU2Q= -----END CERTIFICATE-----Generated at Thu Sep 3 09:48:43 2026 by rpki-client