$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: +C+xao+ohTJgaD7EuObyjTA3DOFTbSV28qVDxPEloXs= Subject key identifier: 31:5F:3E:5B:6F:0C:7C:91:53:06:6B:9F:8C:3C:EB:67:F2:D9:44:1F Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 49048E20A645B49BD0D0FBBC732B4B42E3196940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: 93 Signing time: Wed 19 Aug 2026 20:59:15 +0000 Manifest this update: Wed 19 Aug 2026 20:54:15 +0000 Manifest next update: Thu 20 Aug 2026 21:17:15 +0000 Files and hashes: 1: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: nj5kO/54czHMrClWHO65IsBikFp3X8S4LD9ETUtes+s=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 21:17:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:04:8e:20:a6:45:b4:9b:d0:d0:fb:bc:73:2b:4b:42:e3:19:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: Aug 19 20:54:15 2026 GMT Not After : Aug 20 21:17:15 2026 GMT Subject: CN=315F3E5B6F0C7C9153066B9F8C3CEB67F2D9441F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ed:51:6d:7a:7b:73:6c:83:f0:69:f7:34:3b: 3e:a8:20:89:8e:ec:fb:1e:fa:49:f8:50:de:55:90: b5:df:a4:c6:80:78:ee:fc:51:cb:2e:79:db:ec:2e: 50:68:dc:0f:ef:4c:1e:19:21:a3:0e:b1:f4:bc:90: 40:19:92:dd:ca:f7:85:a5:96:a1:80:61:d9:d6:c6: b0:9a:81:b7:68:b3:e9:46:24:eb:b7:d3:5c:e7:1f: ba:99:44:3b:6c:27:d0:d2:8b:56:86:72:70:a7:88: e1:ae:b4:be:db:21:af:13:a5:2e:e5:8a:70:49:5f: a0:f0:49:f3:58:96:b2:4a:bb:45:9a:a0:44:30:17: 08:0b:28:7b:a4:14:35:d7:57:e7:ea:6f:04:7e:5c: de:88:3a:6f:77:64:c6:96:58:c1:1d:7c:30:21:4b: ee:53:e9:d4:40:97:21:40:ef:65:c0:39:29:8e:0b: 55:ac:54:4d:15:3f:05:05:69:18:10:7a:ed:4a:f5: 7d:04:36:7a:ac:8b:3a:7d:95:70:81:7b:ae:00:23: 36:84:12:13:0f:6d:9f:c1:d1:30:51:8f:31:60:e2: a9:17:c4:5a:ec:4f:f1:79:4d:d7:10:9f:a9:cc:0c: a2:8b:46:d9:c4:d5:ad:88:36:1a:a8:d6:a0:3d:42: 28:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:5F:3E:5B:6F:0C:7C:91:53:06:6B:9F:8C:3C:EB:67:F2:D9:44:1F X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:32:38:e2:2f:7a:bd:a2:dd:d0:35:89:cd:09:f4:65:70:67: ce:5d:2d:8a:bc:03:f8:73:38:37:f4:27:7b:26:d4:0d:2f:f5: d5:1c:bd:8d:e6:ca:59:b1:56:1f:04:01:8e:6e:a3:51:3d:11: 77:41:b3:db:64:0d:61:55:6d:42:24:a3:4e:3f:74:f1:92:c6: 3a:cf:3e:2c:b1:ad:93:ba:09:92:5a:4d:64:0a:43:ab:8b:dc: dc:10:ba:7b:6c:11:db:29:da:73:74:9a:a0:64:81:71:f9:04: 72:33:b9:aa:b7:56:59:43:02:56:c5:c4:f9:5e:c6:72:59:eb: 38:04:6f:4d:19:05:c1:a2:dc:21:f7:2c:bf:1d:cf:a4:44:40: 51:bf:43:8f:89:de:e5:ea:a5:18:c7:32:50:a1:8a:07:5d:91: a0:66:a5:0c:b8:dc:a4:f8:50:52:b3:31:7f:d1:60:6a:09:0b: 96:6c:1f:92:a2:eb:69:59:33:16:10:1d:2e:fb:cc:61:ee:7c: 0a:7b:56:8a:27:da:8c:6f:5f:af:64:6c:c4:90:d8:4c:05:36: 0a:96:b8:3e:0d:cb:30:6d:df:bb:e1:87:91:be:e6:aa:61:b4: dd:98:c0:12:06:24:02:51:77:e5:de:cf:9f:2b:47:a8:7c:ec: 10:3d:67:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQSOIKZFtJvQ0Pu8cytLQuMZaUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA4MTkyMDU0MTVaFw0yNjA4MjAyMTE3MTVaMDMxMTAvBgNV BAMTKDMxNUYzRTVCNkYwQzdDOTE1MzA2NkI5RjhDM0NFQjY3RjJEOTQ0MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7VFtentzbIPwafc0Oz6oIImO 7Pse+kn4UN5VkLXfpMaAeO78UcsuedvsLlBo3A/vTB4ZIaMOsfS8kEAZkt3K94Wl lqGAYdnWxrCagbdos+lGJOu301znH7qZRDtsJ9DSi1aGcnCniOGutL7bIa8TpS7l inBJX6DwSfNYlrJKu0WaoEQwFwgLKHukFDXXV+fqbwR+XN6IOm93ZMaWWMEdfDAh S+5T6dRAlyFA72XAOSmOC1WsVE0VPwUFaRgQeu1K9X0ENnqsizp9lXCBe64AIzaE EhMPbZ/B0TBRjzFg4qkXxFrsT/F5TdcQn6nMDKKLRtnE1a2INhqo1qA9QijVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMV8+W28MfJFTBmufjDzrZ/LZRB8wHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAgyOOIver2i3dA1ic0J9GVwZ85dLYq8A/hz ODf0J3sm1A0v9dUcvY3mylmxVh8EAY5uo1E9EXdBs9tkDWFVbUIko04/dPGSxjrP PiyxrZO6CZJaTWQKQ6uL3NwQuntsEdsp2nN0mqBkgXH5BHIzuaq3VllDAlbFxPle xnJZ6zgEb00ZBcGi3CH3LL8dz6REQFG/Q4+J3uXqpRjHMlChigddkaBmpQy43KT4 UFKzMX/RYGoJC5ZsH5Ki62lZMxYQHS77zGHufAp7Voon2oxvX69kbMSQ2EwFNgqW uD4NyzBt37vhh5G+5qphtN2YwBIGJAJRd+Xez58rR6h87BA9Z1A= -----END CERTIFICATE-----Generated at Thu Aug 20 07:05:30 2026 by rpki-client