$ rpki-client -vvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: CeI7tYXINd4tj5hUBGISw4x0jMPzap6hYrk/TaYBEW4= Subject key identifier: 54:80:4C:E3:E3:6E:67:29:E2:E2:FA:CF:23:5F:E8:EB:05:92:48:D8 Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 01157F1F6808EB8C2AF2D5FAFAA5E1FB830ABB33 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 23:50:32 +0000 Manifest this update: Mon 20 Jul 2026 23:45:32 +0000 Manifest next update: Wed 22 Jul 2026 01:09:32 +0000 Files and hashes: 1: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: wMFjnScnFdNXv56xvA0ZPOSbNyP+RMi4yx4x9xIfoFc=) 2: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) 3: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) 4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 01:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:15:7f:1f:68:08:eb:8c:2a:f2:d5:fa:fa:a5:e1:fb:83:0a:bb:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Jul 20 23:45:32 2026 GMT Not After : Jul 22 01:09:32 2026 GMT Subject: CN=54804CE3E36E6729E2E2FACF235FE8EB059248D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:8b:ee:84:61:2b:a1:b2:5e:05:b1:91:25: 46:93:44:1f:5f:09:42:41:f3:4e:70:1f:87:71:dc: 1f:89:4e:0b:d8:7a:1b:31:f2:4a:68:87:09:0d:62: f5:44:b1:ff:de:a7:0d:06:e8:e2:c8:23:19:8c:61: b5:a5:4e:c1:2e:12:41:0f:4f:35:0e:5f:7e:1e:13: 38:d5:8b:35:40:5e:73:01:55:59:0b:c6:72:d0:a7: e7:12:31:3c:7c:fc:e8:0a:3f:fb:2a:f5:e4:ee:e8: 10:43:52:68:35:f5:6d:8a:7a:c6:8e:30:4c:cf:ab: f8:54:ab:a5:d7:e0:aa:fa:e3:94:d3:d9:7e:37:d3: a7:45:7e:dd:de:1a:0d:34:85:6f:70:3c:cf:6f:10: 81:bb:e9:3e:84:6a:e3:93:09:69:c7:4c:fb:76:be: e4:d1:b0:37:ae:43:01:e0:8a:42:6c:e3:e2:5b:c4: c7:c8:78:16:03:5f:50:70:13:c4:88:a6:cf:d1:f3: 77:20:47:16:7b:36:50:d7:8b:01:28:87:73:60:80: fe:b6:bf:0b:f7:24:6d:cb:1e:fc:d0:d6:53:3f:1c: 24:a3:bf:58:b2:01:97:34:10:0d:77:91:68:ab:4d: 4c:3f:4f:fe:01:51:06:7c:f3:91:df:9b:3b:cc:4f: 4d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:80:4C:E3:E3:6E:67:29:E2:E2:FA:CF:23:5F:E8:EB:05:92:48:D8 X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:62:6e:8a:8a:fb:6d:44:64:83:5f:96:c6:a5:7a:fd:31:8a: 57:95:7b:3c:59:74:6f:49:dc:37:d4:ce:74:ed:ae:e7:3b:d0: eb:17:ac:3e:76:6c:a1:ef:85:a3:7b:5a:9b:66:30:cd:de:e5: 64:48:77:8c:99:aa:11:eb:f0:cf:97:08:1c:1b:e0:8c:46:a2: ea:34:a1:0d:90:35:94:b2:64:46:0e:fb:a6:c8:38:0e:00:d9: c7:07:aa:84:95:83:99:ac:6f:6e:0e:58:37:00:77:c7:62:ba: af:e7:60:f6:cc:64:d3:51:c8:ab:dc:44:df:2f:9e:9b:4f:3b: 0b:7e:67:63:29:af:85:97:90:8d:3f:64:52:4b:af:4d:b1:dd: c0:13:fd:e0:61:9f:ac:39:0c:4b:ca:12:9e:f2:d6:1b:a0:ff: 3f:8b:2c:ce:50:ba:6e:8b:01:3e:ed:e9:bc:16:10:84:94:f9: 79:15:7b:64:9f:a9:6c:f4:67:ac:de:d1:41:21:8f:13:d0:eb: 53:58:ee:bd:1f:52:4e:5a:39:5f:c2:71:43:8a:51:47:fa:ab: 8e:db:2a:63:cb:ca:64:fc:2e:3d:a7:7d:6e:4b:c8:e9:36:62: 61:73:ea:1d:fe:ed:c4:74:f0:92:8e:df:c5:2c:9f:9b:e3:80: a3:65:1e:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUARV/H2gI64wq8tX6+qXh+4MKuzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA3MjAyMzQ1MzJaFw0yNjA3MjIwMTA5MzJaMDMxMTAvBgNV BAMTKDU0ODA0Q0UzRTM2RTY3MjlFMkUyRkFDRjIzNUZFOEVCMDU5MjQ4RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeXIvuhGErobJeBbGRJUaTRB9f CUJB805wH4dx3B+JTgvYehsx8kpohwkNYvVEsf/epw0G6OLIIxmMYbWlTsEuEkEP TzUOX34eEzjVizVAXnMBVVkLxnLQp+cSMTx8/OgKP/sq9eTu6BBDUmg19W2KesaO MEzPq/hUq6XX4Kr645TT2X4306dFft3eGg00hW9wPM9vEIG76T6EauOTCWnHTPt2 vuTRsDeuQwHgikJs4+JbxMfIeBYDX1BwE8SIps/R83cgRxZ7NlDXiwEoh3NggP62 vwv3JG3LHvzQ1lM/HCSjv1iyAZc0EA13kWirTUw/T/4BUQZ885HfmzvMT03DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVIBM4+NuZyni4vrPI1/o6wWSSNgwHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBiboqK+21EZINflsalev0xileVezxZdG9J 3DfUznTtruc70OsXrD52bKHvhaN7WptmMM3e5WRId4yZqhHr8M+XCBwb4IxGouo0 oQ2QNZSyZEYO+6bIOA4A2ccHqoSVg5msb24OWDcAd8diuq/nYPbMZNNRyKvcRN8v nptPOwt+Z2Mpr4WXkI0/ZFJLr02x3cAT/eBhn6w5DEvKEp7y1hug/z+LLM5Qum6L AT7t6bwWEISU+XkVe2SfqWz0Z6ze0UEhjxPQ61NY7r0fUk5aOV/CcUOKUUf6q47b KmPLymT8Lj2nfW5LyOk2YmFz6h3+7cR08JKO38Usn5vjgKNlHls= -----END CERTIFICATE-----Generated at Tue Jul 21 08:39:32 2026 by rpki-client