$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: klhfTx625TVPD16CEKQPjuxk2ZUfsDp+XQa4DkYqSSM= Subject key identifier: FB:4E:BA:74:70:79:84:D9:31:38:E0:72:63:E7:50:0E:BA:67:E9:36 Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 6D3CA13A7DC07881F3B6FF5F8821C5DB34AF06D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: 05 Signing time: Tue 05 May 2026 09:06:54 +0000 Manifest this update: Tue 05 May 2026 09:01:54 +0000 Manifest next update: Wed 06 May 2026 11:03:54 +0000 Files and hashes: 1: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) 2: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: BvVulBowBksRmnC/TBEEJE5rpSs5idSbzbDlFXY6dho=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) 4: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:3c:a1:3a:7d:c0:78:81:f3:b6:ff:5f:88:21:c5:db:34:af:06:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: May 5 09:01:54 2026 GMT Not After : May 6 11:03:54 2026 GMT Subject: CN=FB4EBA74707984D93138E07263E7500EBA67E936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:22:84:15:d6:8d:95:00:03:47:b9:65:95:c4: d5:71:44:d4:92:7b:bf:ef:b3:f2:24:d1:78:1b:a8: 21:21:d2:0b:5c:5d:31:df:3c:a8:d4:69:57:ad:19: a4:22:45:77:b4:1a:4d:42:ed:d8:da:59:1d:4d:3d: c5:c3:97:7f:ac:44:d1:9d:20:67:71:ac:ce:75:b0: 42:8a:a7:2d:c2:71:4b:5c:ba:1a:41:95:6e:0b:5b: f1:bf:0d:ef:9f:d2:6d:ac:6f:2a:f5:c9:66:47:c9: 84:88:6a:2e:55:dd:ba:f1:dd:32:27:cf:ca:e0:9e: c4:c4:d5:5f:16:52:d9:86:68:56:2a:31:d0:17:4f: 8d:9c:ef:f0:28:d2:07:eb:7b:d7:d0:d3:2c:d0:f7: 1b:f2:40:89:dd:e8:d8:81:f6:6f:3e:df:61:3b:ad: 1c:55:72:38:48:56:ad:01:ea:8e:ef:cd:35:f4:36: 34:d1:f0:9e:8d:30:cf:a7:05:62:78:25:a7:40:61: a5:81:7a:82:b8:b7:c2:ba:2e:4e:cc:c9:1e:56:4c: 83:2c:9f:ef:0d:14:4d:12:2c:d0:0c:13:c7:b4:9e: 69:b0:5f:5f:ad:56:01:0a:6c:e9:4d:2b:93:f6:de: 57:77:0f:04:44:e5:d5:30:08:36:25:5c:d8:07:ea: 6a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4E:BA:74:70:79:84:D9:31:38:E0:72:63:E7:50:0E:BA:67:E9:36 X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:10:8c:d7:38:0f:5e:10:fb:33:bd:55:07:9b:db:f8:dd:9a: 53:16:eb:c4:87:b9:60:53:8f:d7:b6:0d:db:af:ba:1f:c1:06: 5a:56:de:e6:57:1a:1c:77:42:e9:17:77:96:ba:0c:ce:e7:03: 83:61:b4:2e:65:88:b9:97:52:c5:87:0d:ca:02:80:1f:2f:ff: 62:20:c2:7f:e5:e2:29:d5:3c:0a:75:d7:21:58:7f:07:89:67: 9f:f3:ed:60:20:75:f8:b4:99:66:cf:69:db:74:39:c0:f7:64: cf:2f:a5:45:54:cb:e3:0f:47:51:f4:d8:f0:0f:61:25:4c:4c: d6:21:bd:5d:e8:83:bf:d5:c0:f6:f6:0a:ae:b1:c1:fc:ea:42: 8c:1a:30:ae:e3:12:e7:8c:c6:61:8f:10:aa:79:32:07:6c:f1: 82:c6:d8:98:54:f0:e4:a9:e2:4b:47:d0:cb:8a:cc:5c:a3:ed: 9a:73:9d:01:9a:47:02:4f:90:89:d7:1c:e4:fb:c7:3c:d7:ce: c4:a3:b0:ba:7f:67:8f:da:a4:c1:72:2d:cd:f3:09:53:5c:40: 62:29:94:20:ec:27:e1:e8:d9:0e:88:4b:87:c9:01:d8:c9:7f: fd:c8:58:8f:b7:f5:03:e2:9c:b9:88:71:71:ba:a1:ea:83:17: 27:76:9e:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTyhOn3AeIHztv9fiCHF2zSvBtEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA1MDUwOTAxNTRaFw0yNjA1MDYxMTAzNTRaMDMxMTAvBgNV BAMTKEZCNEVCQTc0NzA3OTg0RDkzMTM4RTA3MjYzRTc1MDBFQkE2N0U5MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZIoQV1o2VAANHuWWVxNVxRNSS e7/vs/Ik0XgbqCEh0gtcXTHfPKjUaVetGaQiRXe0Gk1C7djaWR1NPcXDl3+sRNGd IGdxrM51sEKKpy3CcUtcuhpBlW4LW/G/De+f0m2sbyr1yWZHyYSIai5V3brx3TIn z8rgnsTE1V8WUtmGaFYqMdAXT42c7/Ao0gfre9fQ0yzQ9xvyQInd6NiB9m8+32E7 rRxVcjhIVq0B6o7vzTX0NjTR8J6NMM+nBWJ4JadAYaWBeoK4t8K6Lk7MyR5WTIMs n+8NFE0SLNAME8e0nmmwX1+tVgEKbOlNK5P23ld3DwRE5dUwCDYlXNgH6mp/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+066dHB5hNkxOOByY+dQDrpn6TYwHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEQjNc4D14Q+zO9VQeb2/jdmlMW68SHuWBT j9e2Dduvuh/BBlpW3uZXGhx3QukXd5a6DM7nA4NhtC5liLmXUsWHDcoCgB8v/2Ig wn/l4inVPAp11yFYfweJZ5/z7WAgdfi0mWbPadt0OcD3ZM8vpUVUy+MPR1H02PAP YSVMTNYhvV3og7/VwPb2Cq6xwfzqQowaMK7jEueMxmGPEKp5Mgds8YLG2JhU8OSp 4ktH0MuKzFyj7ZpznQGaRwJPkInXHOT7xzzXzsSjsLp/Z4/apMFyLc3zCVNcQGIp lCDsJ+Ho2Q6IS4fJAdjJf/3IWI+39QPinLmIcXG6oeqDFyd2nvk= -----END CERTIFICATE-----Generated at Tue May 5 14:20:14 2026 by rpki-client