$ rpki-client -vvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft File: 40064999DEC3F3BD85C4F883982B58D76246EE84.mft (raw, json) Hash identifier: I3R8jzM3qtQROs+Mjar/HdAt+xHzMUusHbpnxCx46Es= Subject key identifier: 59:68:F7:A3:74:70:37:78:AD:49:4C:F9:98:00:5F:21:E1:68:41:99 Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 5D16F3BFFFF03213CB535A9F763B64BF502561C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 19:20:20 +0000 Manifest this update: Mon 20 Jul 2026 19:15:20 +0000 Manifest next update: Tue 21 Jul 2026 22:10:20 +0000 Files and hashes: 1: 40064999DEC3F3BD85C4F883982B58D76246EE84.crl (hash: 23PfgY8Ml76nXGD4vlVqOcp1pUgzY6FdOUioUEOBExo=) 2: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=) 3: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=) 4: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY=) 5: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=) 6: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: pVbAEY3jNiaOa2/I5+aOrojXUWJy/5MAJ3dSN22Pu3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:16:f3:bf:ff:f0:32:13:cb:53:5a:9f:76:3b:64:bf:50:25:61:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: Jul 20 19:15:20 2026 GMT Not After : Jul 21 22:10:20 2026 GMT Subject: CN=5968F7A374703778AD494CF998005F21E1684199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:74:64:55:da:d3:a0:29:c5:c6:22:49:fc:4f: 71:09:6a:1e:61:94:e0:7d:63:7e:83:35:f9:9c:1e: e1:79:7c:5d:a0:d9:08:4b:4c:ec:ea:b7:1c:f1:28: 21:08:8c:38:99:f6:a5:19:76:50:d4:cb:2b:fe:ec: af:51:7a:0c:0b:6d:f6:93:2c:98:ad:1d:0e:76:cc: 59:31:80:e6:f3:9e:e3:a2:61:7c:11:c1:20:4a:4b: 32:43:1c:46:cd:e9:85:aa:c4:ea:e0:17:35:ea:d2: 6b:2b:5f:3f:c8:0e:29:95:1d:7e:69:e4:a9:a6:79: 0d:aa:0e:35:7e:10:63:a8:a0:95:d1:62:53:9f:cc: 03:79:69:3e:1d:17:b0:1e:29:3f:d6:84:33:c9:28: e9:e7:11:cc:bf:d5:a5:10:bf:f4:6f:2c:48:ae:49: 0d:39:d4:fd:06:7c:c8:e0:01:24:ef:65:c2:d8:51: 14:81:20:71:2a:3a:2d:35:9e:cb:36:fc:0a:db:8b: 6d:54:6d:0e:85:90:ec:ec:9c:ee:68:cf:89:b8:d3: 4c:b4:68:62:e5:8f:82:b1:96:b4:45:59:d6:a0:f8: 19:92:75:73:6b:c6:78:b6:a3:64:f7:c4:e5:48:79: f6:05:af:27:30:60:23:12:48:7a:5c:c3:c9:31:38: f2:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:68:F7:A3:74:70:37:78:AD:49:4C:F9:98:00:5F:21:E1:68:41:99 X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:44:c6:7e:2d:37:7f:2f:3f:63:aa:4d:87:43:2e:dd:c1:4f: ca:84:50:ee:4b:f2:0e:d3:f4:d5:2d:44:83:52:eb:ee:57:55: e7:e6:6c:76:d8:1d:06:06:53:4d:b7:36:65:17:19:7b:2c:13: c4:3a:82:cc:34:40:98:01:1a:60:68:97:c8:78:a0:08:36:d2: 47:fa:ed:45:99:68:f0:c6:1b:9e:08:33:51:a4:ad:b8:7c:b2: bb:2c:36:37:ef:85:85:53:77:88:02:a6:bf:8b:44:c9:7e:89: 43:6c:cc:ba:1f:fb:81:47:36:17:a2:41:fb:e4:7b:dc:d3:d2: b5:cc:c2:96:55:6d:01:54:57:b8:08:a4:d1:37:ec:7a:83:25: 65:35:a4:3a:cc:9a:32:95:23:56:87:ca:e0:4a:f8:9c:b5:65: 3e:87:8b:20:2f:aa:d8:da:03:40:55:fa:a5:af:d6:75:23:0a: 68:91:c1:ab:83:91:61:76:28:f7:17:60:4d:62:3f:e9:c8:84: 6c:ad:e8:de:e5:59:06:a1:04:15:f9:4f:93:8c:4b:38:3c:6d: 74:c4:d0:01:5e:f3:d6:2f:49:00:a2:00:78:d7:80:aa:22:f8: f8:e2:1e:ac:ce:4c:62:2f:22:07:c0:e2:24:1d:17:ac:ba:47: 8c:5f:d4:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXRbzv//wMhPLU1qfdjtkv1AlYcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA3MjAxOTE1MjBaFw0yNjA3MjEyMjEwMjBaMDMxMTAvBgNV BAMTKDU5NjhGN0EzNzQ3MDM3NzhBRDQ5NENGOTk4MDA1RjIxRTE2ODQxOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdGRV2tOgKcXGIkn8T3EJah5h lOB9Y36DNfmcHuF5fF2g2QhLTOzqtxzxKCEIjDiZ9qUZdlDUyyv+7K9RegwLbfaT LJitHQ52zFkxgObznuOiYXwRwSBKSzJDHEbN6YWqxOrgFzXq0msrXz/IDimVHX5p 5KmmeQ2qDjV+EGOooJXRYlOfzAN5aT4dF7AeKT/WhDPJKOnnEcy/1aUQv/RvLEiu SQ051P0GfMjgASTvZcLYURSBIHEqOi01nss2/Arbi21UbQ6FkOzsnO5oz4m400y0 aGLlj4KxlrRFWdag+BmSdXNrxni2o2T3xOVIefYFrycwYCMSSHpcw8kxOPLBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWWj3o3RwN3itSUz5mABfIeFoQZkwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4 RDc2MjQ2RUU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhExn4tN38vP2OqTYdDLt3BT8qEUO5L8g7T 9NUtRINS6+5XVefmbHbYHQYGU023NmUXGXssE8Q6gsw0QJgBGmBol8h4oAg20kf6 7UWZaPDGG54IM1Gkrbh8srssNjfvhYVTd4gCpr+LRMl+iUNszLof+4FHNheiQfvk e9zT0rXMwpZVbQFUV7gIpNE37HqDJWU1pDrMmjKVI1aHyuBK+Jy1ZT6HiyAvqtja A0BV+qWv1nUjCmiRwauDkWF2KPcXYE1iP+nIhGyt6N7lWQahBBX5T5OMSzg8bXTE 0AFe89YvSQCiAHjXgKoi+PjiHqzOTGIvIgfA4iQdF6y6R4xf1Iw= -----END CERTIFICATE-----Generated at Tue Jul 21 06:29:42 2026 by rpki-client