$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft File: C940C2C66C795EF89DE57AA820616ED8225890BC.mft (raw, json) Hash identifier: FzIIuKTxenS9FTwPRrV5zFgZZF7bYkDa+9tLUUi1a84= Subject key identifier: 28:69:2F:AB:64:DA:47:AD:59:51:4A:A3:83:89:5D:90:08:C4:79:BA Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC Certificate issuer: /CN=C940C2C66C795EF89DE57AA820616ED8225890BC Certificate serial: 5E399F6BE41B339A3D8FFD1AD14CEEE74391D37E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 03:32:08 +0000 Manifest this update: Thu 03 Sep 2026 03:27:08 +0000 Manifest next update: Fri 04 Sep 2026 05:48:08 +0000 Files and hashes: 1: C940C2C66C795EF89DE57AA820616ED8225890BC.crl (hash: RetoSz41jAn+Km5zS+hrNwDhLxu7tO1BSjYWtSrrz3Q=) 2: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 05:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:39:9f:6b:e4:1b:33:9a:3d:8f:fd:1a:d1:4c:ee:e7:43:91:d3:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC Validity Not Before: Sep 3 03:27:08 2026 GMT Not After : Sep 4 05:48:08 2026 GMT Subject: CN=28692FAB64DA47AD59514AA383895D9008C479BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:eb:30:e5:65:5d:0d:08:5e:b4:86:d6:d3:fb: 14:57:b9:88:a9:ee:ec:ba:f3:92:cc:8c:e7:b3:4d: 17:7d:4d:32:a3:0e:4e:dd:c1:bf:35:73:81:0c:ac: 31:ac:5a:cd:4d:8a:ec:f8:32:e3:ad:d8:ea:74:44: 0d:06:51:3e:f2:59:32:85:8a:d6:51:21:23:a6:66: a4:b3:4c:86:db:af:ae:24:4b:33:59:ed:58:d8:49: 89:62:f5:98:ce:8f:ad:05:15:4d:a4:26:d1:98:30: 05:4e:2d:97:fe:71:fa:62:fd:14:2c:10:60:d8:c5: 47:e2:d6:18:0e:70:c4:99:1d:b4:00:4d:c0:e4:96: 11:fd:8b:3b:01:1b:7d:42:7c:28:bc:98:8c:a1:89: 93:b8:ff:b7:01:54:84:e9:fb:45:66:1b:17:7f:a9: b6:1e:8d:69:8a:f0:be:45:bb:5d:1f:05:6c:68:bc: 5e:7a:16:fa:5f:8c:c6:56:e1:5f:a1:f1:b8:b1:ec: 68:d8:d9:29:c4:fb:65:71:bf:26:60:6e:1b:48:fd: 06:e7:85:11:67:6a:b2:1e:4d:7b:a4:a3:26:1e:a0: 06:89:a4:2d:e4:22:1f:4a:dd:aa:db:ad:4b:f0:a8: 7b:be:6a:9d:59:b8:15:69:0d:cc:3d:9c:0e:c8:27: 17:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:69:2F:AB:64:DA:47:AD:59:51:4A:A3:83:89:5D:90:08:C4:79:BA X509v3 Authority Key Identifier: keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:4b:c2:e5:df:68:59:05:8d:87:1f:67:c5:ec:96:03:aa:8a: 3c:6f:71:ac:8f:23:31:1e:54:49:b3:f4:85:71:f1:3c:d7:2f: 7b:0b:e6:61:a4:92:cc:1a:b7:7a:98:72:14:e5:4a:99:c0:e8: 6c:97:0a:b6:5f:26:dd:55:96:36:e7:e7:4e:7d:21:9e:ad:44: 5b:63:02:04:37:d0:09:89:2a:25:2c:98:26:09:3a:ce:3e:6c: b0:fc:e8:a1:8e:b5:ec:fa:9f:d4:d1:29:57:11:c3:75:b0:59: bf:5c:64:25:70:57:43:07:09:e5:78:08:a8:4f:f7:1d:ee:e5: c5:b4:22:40:81:44:ef:5f:16:03:ab:05:b0:42:c4:d8:fa:09: ee:b4:87:db:28:0a:87:48:b1:11:69:f3:3f:b9:35:fd:2b:22: b0:44:f0:7a:4a:19:5a:a7:50:a1:18:11:6c:91:21:6f:f5:5d: df:aa:59:d8:68:9e:26:f4:5a:99:75:76:ca:bc:8f:52:74:f9: cc:aa:6a:37:1a:e8:ed:f2:3f:ad:b9:cb:51:72:96:ad:4b:6f: b7:d8:c2:11:8d:fe:82:16:92:cc:0f:1c:d4:9b:2c:16:39:ff: ce:82:67:08:a8:f0:32:9c:c5:f7:83:9a:ba:0e:83:a3:bf:df: ad:38:bc:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXjmfa+QbM5o9j/0a0Uzu50OR034wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgy MjU4OTBCQzAeFw0yNjA5MDMwMzI3MDhaFw0yNjA5MDQwNTQ4MDhaMDMxMTAvBgNV BAMTKDI4NjkyRkFCNjREQTQ3QUQ1OTUxNEFBMzgzODk1RDkwMDhDNDc5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ6zDlZV0NCF60htbT+xRXuYip 7uy685LMjOezTRd9TTKjDk7dwb81c4EMrDGsWs1Niuz4MuOt2Op0RA0GUT7yWTKF itZRISOmZqSzTIbbr64kSzNZ7VjYSYli9ZjOj60FFU2kJtGYMAVOLZf+cfpi/RQs EGDYxUfi1hgOcMSZHbQATcDklhH9izsBG31CfCi8mIyhiZO4/7cBVITp+0VmGxd/ qbYejWmK8L5Fu10fBWxovF56FvpfjMZW4V+h8bix7GjY2SnE+2VxvyZgbhtI/Qbn hRFnarIeTXukoyYeoAaJpC3kIh9K3arbrUvwqHu+ap1ZuBVpDcw9nA7IJxeFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGkvq2TaR61ZUUqjg4ldkAjEebowHwYDVR0j BBgwFoAUyUDCxmx5Xvid5XqoIGFu2CJYkLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U0ZTEwM2UtM2Q3OC00YWUwLTliYTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2 Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgyMjU4OTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVEODIyNTg5 MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U0ZTEwM2UtM2Q3OC00YWUwLTli YTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZF RDgyMjU4OTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJLwuXfaFkFjYcfZ8XslgOqijxvcayPIzEe VEmz9IVx8TzXL3sL5mGkkswat3qYchTlSpnA6GyXCrZfJt1Vljbn5059IZ6tRFtj AgQ30AmJKiUsmCYJOs4+bLD86KGOtez6n9TRKVcRw3WwWb9cZCVwV0MHCeV4CKhP 9x3u5cW0IkCBRO9fFgOrBbBCxNj6Ce60h9soCodIsRFp8z+5Nf0rIrBE8HpKGVqn UKEYEWyRIW/1Xd+qWdhonib0Wpl1dsq8j1J0+cyqajca6O3yP625y1Fylq1Lb7fY whGN/oIWkswPHNSbLBY5/86CZwio8DKcxfeDmroOg6O/3604vEs= -----END CERTIFICATE-----Generated at Thu Sep 3 16:19:34 2026 by rpki-client