$ rpki-client -vvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: +VCK0RNToQLNT05cCM4H7AKOxH/kwid7m9AnuWJG0pE= Subject key identifier: 0D:D4:33:E3:43:EB:1E:70:C6:5E:97:A8:7D:6B:D6:87:E6:F3:7B:CF Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 5A22D01FABF150A9A5D7DA015B1D01D1F7A34B6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 19:13:13 +0000 Manifest this update: Tue 02 Jun 2026 19:08:13 +0000 Manifest next update: Wed 03 Jun 2026 21:38:13 +0000 Files and hashes: 1: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: aAFaaFJ6PCC9WXFzsW/L3Q4LbZ0+CLaz7U60dZyPpOM=) 2: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) 3: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) 4: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:22:d0:1f:ab:f1:50:a9:a5:d7:da:01:5b:1d:01:d1:f7:a3:4b:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Jun 2 19:08:13 2026 GMT Not After : Jun 3 21:38:13 2026 GMT Subject: CN=0DD433E343EB1E70C65E97A87D6BD687E6F37BCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ce:88:2a:4f:c7:2d:4a:7e:58:39:5e:ef:c1: bd:da:df:e0:42:04:fa:e8:3d:37:16:c0:a5:e3:ed: f1:2f:3d:ad:11:a1:ae:db:ed:8d:d8:6d:68:c4:21: f1:b0:51:e5:aa:c5:6c:30:8a:25:eb:6a:e2:e0:7b: 7c:cc:3c:4c:2f:4d:9d:06:2b:58:bf:4d:23:7e:ac: 35:a7:2e:2f:ba:49:c5:fe:04:7d:c2:7c:00:93:e6: 4b:3a:88:23:93:d6:e3:8a:e5:c1:3b:13:e4:70:0a: 51:af:11:45:d6:9f:21:a5:76:1c:18:44:d5:3c:09: 20:41:d6:e3:30:ed:40:4e:23:f2:05:42:67:56:00: d9:96:1d:f6:49:4d:ba:cc:9a:f7:d1:61:50:35:dc: 2a:9d:e2:07:6d:51:53:b9:ad:b3:b4:0c:c4:fc:e4: 32:3b:71:0e:2e:2f:b5:16:00:c5:1d:c7:68:58:f7: 02:c6:38:d9:23:3f:1e:cd:2b:83:8b:94:29:0c:f6: f0:e9:17:50:08:28:84:1f:97:d7:40:6b:9b:b4:40: e1:2c:1b:bf:d5:ff:28:66:d4:4e:e2:4a:ec:4a:f2: f3:47:6a:dd:38:6e:50:3f:11:c6:3c:e4:09:cb:74: 05:ba:65:d9:6e:69:04:56:61:89:12:86:40:ac:42: 1e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:D4:33:E3:43:EB:1E:70:C6:5E:97:A8:7D:6B:D6:87:E6:F3:7B:CF X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:80:6e:8c:f3:62:e5:5b:e3:55:03:14:1c:29:a9:46:54:1a: 13:df:1d:4e:d8:df:f4:7f:a7:85:fa:56:98:85:e3:9d:5f:34: c0:5a:be:e9:23:fd:c5:2c:76:3f:dd:59:fe:7e:dd:4d:79:0b: 6e:85:4c:0c:f6:96:68:1e:2b:26:4d:5c:e4:c5:c3:c2:ee:79: b4:52:63:24:93:8b:5c:e0:44:93:f9:36:d9:96:b3:fb:f4:65: 39:86:65:88:6f:be:87:59:5c:8b:5f:c3:97:f3:a6:ce:a4:db: e4:68:c6:55:c2:64:fe:1e:bb:02:4e:b7:b2:76:89:f8:29:01: d0:e5:20:91:e8:63:aa:46:1e:00:40:a0:bd:b6:1d:8e:5e:a0: a1:d0:13:28:77:d7:36:70:c7:8c:e9:7f:33:38:6c:d9:7c:20: 33:71:e8:92:19:8c:f4:3f:71:97:fc:a2:97:e9:7a:5a:b2:fe: 83:b2:2f:c9:17:d7:4e:36:28:fe:d5:ab:db:29:d3:1a:e8:fc: 35:2d:47:dc:1b:82:bf:35:1f:6d:53:d4:cd:87:18:1d:2c:c1: 13:cd:d5:d7:1a:c5:17:65:27:12:54:4b:af:75:d8:7b:97:af: 49:f7:db:94:76:4d:fc:ac:78:d4:2c:38:79:4c:72:1e:81:25: 22:62:66:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWiLQH6vxUKml19oBWx0B0fejS24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjA2MDIxOTA4MTNaFw0yNjA2MDMyMTM4MTNaMDMxMTAvBgNV BAMTKDBERDQzM0UzNDNFQjFFNzBDNjVFOTdBODdENkJENjg3RTZGMzdCQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzogqT8ctSn5YOV7vwb3a3+BC BProPTcWwKXj7fEvPa0Roa7b7Y3YbWjEIfGwUeWqxWwwiiXrauLge3zMPEwvTZ0G K1i/TSN+rDWnLi+6ScX+BH3CfACT5ks6iCOT1uOK5cE7E+RwClGvEUXWnyGldhwY RNU8CSBB1uMw7UBOI/IFQmdWANmWHfZJTbrMmvfRYVA13Cqd4gdtUVO5rbO0DMT8 5DI7cQ4uL7UWAMUdx2hY9wLGONkjPx7NK4OLlCkM9vDpF1AIKIQfl9dAa5u0QOEs G7/V/yhm1E7iSuxK8vNHat04blA/EcY85AnLdAW6ZdluaQRWYYkShkCsQh4ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdQz40PrHnDGXpeofWvWh+bze88wHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyAbozzYuVb41UDFBwpqUZUGhPfHU7Y3/R/ p4X6VpiF451fNMBavukj/cUsdj/dWf5+3U15C26FTAz2lmgeKyZNXOTFw8LuebRS YySTi1zgRJP5NtmWs/v0ZTmGZYhvvodZXItfw5fzps6k2+RoxlXCZP4euwJOt7J2 ifgpAdDlIJHoY6pGHgBAoL22HY5eoKHQEyh31zZwx4zpfzM4bNl8IDNx6JIZjPQ/ cZf8opfpelqy/oOyL8kX1042KP7Vq9sp0xro/DUtR9wbgr81H21T1M2HGB0swRPN 1dcaxRdlJxJUS6912HuXr0n325R2TfyseNQsOHlMch6BJSJiZjQ= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:42 2026 by rpki-client