$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft File: 440F6B35B30CFEEB3F2B22851A2658050264D69E.mft (raw, json) Hash identifier: u+Xi5w0z49BRacDOyA1VFUoTN9zxBg8Pf5AD5UjOWdc= Subject key identifier: 2B:67:B5:AF:71:7E:FD:E1:B7:6C:02:14:E0:60:65:3B:E6:52:8A:5D Authority key identifier: 44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E Certificate issuer: /CN=440F6B35B30CFEEB3F2B22851A2658050264D69E Certificate serial: 2B0835D7FB421206781EB0049214326C9A221DF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 23:17:45 +0000 Manifest this update: Wed 16 Sep 2026 23:12:45 +0000 Manifest next update: Thu 17 Sep 2026 23:57:45 +0000 Files and hashes: 1: 440F6B35B30CFEEB3F2B22851A2658050264D69E.crl (hash: Ug6OGyaVtPEwoMhkj3Giu2gSMn9lB43Lj9OGwfiyStU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:08:35:d7:fb:42:12:06:78:1e:b0:04:92:14:32:6c:9a:22:1d:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=440F6B35B30CFEEB3F2B22851A2658050264D69E Validity Not Before: Sep 16 23:12:45 2026 GMT Not After : Sep 17 23:57:45 2026 GMT Subject: CN=2B67B5AF717EFDE1B76C0214E060653BE6528A5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e0:c2:04:24:ef:08:7b:61:5b:83:e3:4c:4f: 0c:4d:4e:da:2a:d1:0a:a9:cf:48:41:8b:1f:75:4e: db:99:5e:cf:93:9d:dc:5a:9d:03:65:1c:ad:11:10: 89:47:22:e5:45:c5:dd:8f:a8:c5:59:8c:a2:d9:69: 19:7c:b6:83:7e:0c:7b:8a:32:b4:b2:26:2d:dd:28: 70:fd:b4:f1:db:ec:2b:92:f2:6f:ad:92:cc:5c:11: 7b:fb:92:77:7a:f7:b5:32:b5:e5:0d:9e:e2:fb:d4: 6f:55:2e:5a:47:4d:86:9c:84:02:cb:58:ae:04:58: 61:2c:a8:ce:16:49:d2:fb:16:41:49:af:25:c6:93: e4:31:bd:59:88:6c:3d:5c:98:6c:d7:0b:ec:c9:0a: ed:5c:f1:af:9f:9d:26:66:5e:a7:36:c4:74:ce:20: 2b:50:2c:95:e2:f5:56:00:58:c6:7c:ab:5c:76:1a: 16:75:04:48:1b:69:5f:5a:aa:54:79:4c:ee:08:22: 3d:d3:af:0a:ce:26:3c:90:a2:c7:45:de:5f:bc:20: 8f:ae:77:5f:90:2e:45:fe:98:3d:e2:59:89:20:d1: de:29:7c:c4:e0:1a:9e:21:d7:6c:2a:d2:a9:26:98: 43:50:c0:69:fa:dc:df:8b:d2:d9:b2:01:82:5b:9e: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:67:B5:AF:71:7E:FD:E1:B7:6C:02:14:E0:60:65:3B:E6:52:8A:5D X509v3 Authority Key Identifier: keyid:44:0F:6B:35:B3:0C:FE:EB:3F:2B:22:85:1A:26:58:05:02:64:D6:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/440F6B35B30CFEEB3F2B22851A2658050264D69E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/440F6B35B30CFEEB3F2B22851A2658050264D69E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:86:4a:2c:d0:01:b9:d2:ef:61:ee:63:97:04:e9:78:5a:3f: b2:26:63:87:d2:26:00:98:e9:96:5f:1f:d7:74:e9:8b:08:11: 46:99:73:f1:bb:dc:3a:66:9a:9e:69:cf:af:ed:ee:6a:5e:76: 1c:39:26:75:c7:e3:eb:21:5e:e6:9c:8f:e5:97:63:9b:1c:57: c3:2e:1d:bf:3c:ef:60:9e:68:c1:55:84:e3:1c:6d:98:a9:6c: 0e:cb:72:f7:c4:62:fe:27:3b:28:3d:a8:92:7b:15:f7:8c:33: 33:7c:e8:a9:53:67:b1:a3:f2:2a:27:8f:47:b2:c4:a9:22:a3: ba:1d:f8:3d:5c:62:32:5d:e2:3e:d9:fe:c4:14:71:a6:e4:92: 02:f6:d4:ac:22:d4:b5:b9:fa:99:25:1b:af:9c:fc:a2:bc:54: f4:c0:ce:74:9d:01:58:a6:f9:f0:f0:d9:9c:a4:d7:c9:b1:dc: 05:06:09:d3:dd:ec:c1:95:45:79:d8:12:00:3e:95:1d:54:de: 1b:f2:69:5b:c6:2d:be:71:b7:f9:cf:e1:06:a1:2d:09:71:6c: 65:6e:76:5a:7f:7b:2e:47:35:72:d3:b2:aa:42:e4:7f:cb:f0: 59:3e:d4:36:02:41:1d:c6:36:86:82:df:cc:1c:de:97:5a:a4: b6:b7:dd:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwg11/tCEgZ4HrAEkhQybJoiHfEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQwRjZCMzVCMzBDRkVFQjNGMkIyMjg1MUEyNjU4MDUw MjY0RDY5RTAeFw0yNjA5MTYyMzEyNDVaFw0yNjA5MTcyMzU3NDVaMDMxMTAvBgNV BAMTKDJCNjdCNUFGNzE3RUZERTFCNzZDMDIxNEUwNjA2NTNCRTY1MjhBNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ4MIEJO8Ie2Fbg+NMTwxNTtoq 0Qqpz0hBix91TtuZXs+TndxanQNlHK0REIlHIuVFxd2PqMVZjKLZaRl8toN+DHuK MrSyJi3dKHD9tPHb7CuS8m+tksxcEXv7knd697UyteUNnuL71G9VLlpHTYachALL WK4EWGEsqM4WSdL7FkFJryXGk+QxvVmIbD1cmGzXC+zJCu1c8a+fnSZmXqc2xHTO ICtQLJXi9VYAWMZ8q1x2GhZ1BEgbaV9aqlR5TO4IIj3TrwrOJjyQosdF3l+8II+u d1+QLkX+mD3iWYkg0d4pfMTgGp4h12wq0qkmmENQwGn63N+L0tmyAYJbnvXRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK2e1r3F+/eG3bAIU4GBlO+ZSil0wHwYDVR0j BBgwFoAURA9rNbMM/us/KyKFGiZYBQJk1p4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGUwNWExY2UtODQ5Zi00MTdjLWI2NzMtZmRkMzNmMGQ3NDQ3LzAvNDQwRjZCMzVC MzBDRkVFQjNGMkIyMjg1MUEyNjU4MDUwMjY0RDY5RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80NDBGNkIzNUIzMENGRUVCM0YyQjIyODUxQTI2NTgwNTAyNjRE NjlFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGUwNWExY2UtODQ5Zi00MTdjLWI2 NzMtZmRkMzNmMGQ3NDQ3LzAvNDQwRjZCMzVCMzBDRkVFQjNGMkIyMjg1MUEyNjU4 MDUwMjY0RDY5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWGSizQAbnS72HuY5cE6XhaP7ImY4fSJgCY 6ZZfH9d06YsIEUaZc/G73Dpmmp5pz6/t7mpedhw5JnXH4+shXuacj+WXY5scV8Mu Hb8872CeaMFVhOMcbZipbA7LcvfEYv4nOyg9qJJ7FfeMMzN86KlTZ7Gj8ionj0ey xKkio7od+D1cYjJd4j7Z/sQUcabkkgL21Kwi1LW5+pklG6+c/KK8VPTAznSdAVim +fDw2Zyk18mx3AUGCdPd7MGVRXnYEgA+lR1U3hvyaVvGLb5xt/nP4QahLQlxbGVu dlp/ey5HNXLTsqpC5H/L8Fk+1DYCQR3GNoaC38wc3pdapLa33aQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:48:36 2026 by rpki-client