$ rpki-client -vvf rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft File: 40929298F65205185DF4DD6F4BE251452B43C09A.mft (raw, json) Hash identifier: i8o6kCVx1Lm32IG66PxuMn2OZWkmBIYdM8bPb2S/aAM= Subject key identifier: 32:2E:DE:AE:E5:CF:C0:77:1C:26:0C:57:68:8F:64:42:06:ED:7A:DB Authority key identifier: 40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A Certificate issuer: /CN=40929298F65205185DF4DD6F4BE251452B43C09A Certificate serial: 313A6857E543B5C9F214937EEC5BD9F801F8D29A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:44:37 +0000 Manifest this update: Fri 19 Jun 2026 23:39:37 +0000 Manifest next update: Sun 21 Jun 2026 02:58:37 +0000 Files and hashes: 1: 40929298F65205185DF4DD6F4BE251452B43C09A.crl (hash: ePJ39gVb7DkIqoF0Dnc0tyeqxW2TUmlmyEmaq59Na4I=) 2: 3130332e3138392e3230362e302f32342d3234203d3e2039333431.roa (hash: FaKND3k0/W3hoCdXnlN+l2wX86NxXD4PJzdg9/BiXgA=) 3: 3130332e3138392e3230372e302f32342d3234203d3e2039333431.roa (hash: VJ6XHTgP+LYfJ1kWwqo0lBWI8ymcoW5/lJHqRYH+GxY=) 4: 3130332e3138392e3230362e302f32332d3233203d3e2039333431.roa (hash: /Cpp1MQoDAZjHBD8Zezrrpf76FfuIh27guzqvCU4E0o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:58:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:3a:68:57:e5:43:b5:c9:f2:14:93:7e:ec:5b:d9:f8:01:f8:d2:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40929298F65205185DF4DD6F4BE251452B43C09A Validity Not Before: Jun 19 23:39:37 2026 GMT Not After : Jun 21 02:58:37 2026 GMT Subject: CN=322EDEAEE5CFC0771C260C57688F644206ED7ADB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:56:23:c4:74:db:03:23:40:b4:0d:19:5d:90: 29:54:d0:e8:f2:9b:7c:3e:5e:6a:04:13:46:9f:72: bb:c6:11:e8:c5:3d:64:e0:d8:37:03:51:55:4b:c3: 9d:f8:7b:14:33:23:8e:f1:eb:75:e8:d8:cd:8c:7e: fa:47:2d:76:a3:03:9f:f5:e8:10:8f:21:20:bf:50: 85:ea:4b:15:38:d7:93:39:d8:db:39:ee:a9:7c:e8: 18:ae:55:36:3a:b9:00:7b:15:d4:90:f6:bd:85:e9: 19:9d:dc:4c:56:1e:2a:78:79:4d:4c:ae:bd:61:c2: cf:89:37:a2:22:28:64:94:f6:59:71:35:02:fc:4f: 8d:6a:a3:1d:e2:25:3d:12:fb:c1:2a:73:46:32:db: 55:0c:32:7b:0b:9a:3d:f6:e5:63:57:64:40:f1:b4: da:99:01:72:3c:ef:c6:d4:d7:fe:81:c7:e4:ed:23: bf:c9:9d:fa:e1:ff:94:5f:bd:82:78:ec:f7:9c:b6: 70:90:a6:bb:78:7c:6c:99:bf:bc:23:e9:9e:ad:2f: 30:c9:40:b0:e7:f7:ee:32:ed:6c:4b:7a:65:20:eb: a6:f0:10:55:09:95:fb:54:d6:c8:ff:8e:48:5b:dd: 93:d1:85:05:40:19:93:0d:a6:4e:11:40:34:5b:67: a3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:2E:DE:AE:E5:CF:C0:77:1C:26:0C:57:68:8F:64:42:06:ED:7A:DB X509v3 Authority Key Identifier: keyid:40:92:92:98:F6:52:05:18:5D:F4:DD:6F:4B:E2:51:45:2B:43:C0:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40929298F65205185DF4DD6F4BE251452B43C09A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1831eeb4-f357-45a7-9265-428b007a0270/0/40929298F65205185DF4DD6F4BE251452B43C09A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:14:f0:f8:5a:b7:9c:4b:04:84:19:3a:f9:15:db:ac:5c:f8: 9e:35:d8:df:c7:ea:e2:fc:60:b2:dd:a0:6f:2a:16:83:8d:17: b1:4e:41:9b:e4:3c:fe:fd:32:31:6d:46:3b:e7:b9:84:51:1d: 5d:66:7e:59:32:cb:90:1f:42:59:23:d3:3b:d4:5e:bf:bc:fc: 0c:ed:4f:15:48:b3:3b:9a:9f:63:77:2a:f8:97:ab:36:bc:d9: 0f:8d:d0:4e:3c:04:01:00:51:47:a9:18:70:a8:b2:99:31:af: 02:d5:c0:00:e9:74:5f:2f:0a:2f:04:ef:6a:c9:75:4c:62:af: 12:09:58:f6:11:94:59:2d:47:53:bc:03:ad:37:ff:30:66:84: b0:98:dc:9d:be:63:e6:b5:59:2b:f1:7a:e0:11:42:41:fe:66: 4c:97:9c:98:0e:ba:f1:e1:31:7f:4b:0b:8e:3d:bf:7f:9a:b2: 10:51:d0:0c:9a:35:37:d2:a3:ed:39:5c:58:17:00:20:bd:df: 60:28:63:5b:00:7f:1d:1e:59:bb:73:df:d6:cd:41:4b:20:0f: 0d:cc:f5:ab:eb:41:34:a7:70:f9:71:09:34:4f:30:b6:77:17: 4d:8a:61:19:bb:f7:df:b8:48:72:c2:53:9c:4f:a6:27:40:53: a8:74:fb:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMTpoV+VDtcnyFJN+7FvZ+AH40powDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUxNDUy QjQzQzA5QTAeFw0yNjA2MTkyMzM5MzdaFw0yNjA2MjEwMjU4MzdaMDMxMTAvBgNV BAMTKDMyMkVERUFFRTVDRkMwNzcxQzI2MEM1NzY4OEY2NDQyMDZFRDdBREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsViPEdNsDI0C0DRldkClU0Ojy m3w+XmoEE0afcrvGEejFPWTg2DcDUVVLw534exQzI47x63Xo2M2MfvpHLXajA5/1 6BCPISC/UIXqSxU415M52Ns57ql86BiuVTY6uQB7FdSQ9r2F6Rmd3ExWHip4eU1M rr1hws+JN6IiKGSU9llxNQL8T41qox3iJT0S+8Eqc0Yy21UMMnsLmj325WNXZEDx tNqZAXI878bU1/6Bx+TtI7/Jnfrh/5RfvYJ47PectnCQprt4fGyZv7wj6Z6tLzDJ QLDn9+4y7WxLemUg66bwEFUJlftU1sj/jkhb3ZPRhQVAGZMNpk4RQDRbZ6O9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMi7eruXPwHccJgxXaI9kQgbtetswHwYDVR0j BBgwFoAUQJKSmPZSBRhd9N1vS+JRRStDwJowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTgzMWVlYjQtZjM1Ny00NWE3LTkyNjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThG NjUyMDUxODVERjRERDZGNEJFMjUxNDUyQjQzQzA5QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDkyOTI5OEY2NTIwNTE4NURGNERENkY0QkUyNTE0NTJCNDND MDlBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTgzMWVlYjQtZjM1Ny00NWE3LTky NjUtNDI4YjAwN2EwMjcwLzAvNDA5MjkyOThGNjUyMDUxODVERjRERDZGNEJFMjUx NDUyQjQzQzA5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIU8Phat5xLBIQZOvkV26xc+J412N/H6uL8 YLLdoG8qFoONF7FOQZvkPP79MjFtRjvnuYRRHV1mflkyy5AfQlkj0zvUXr+8/Azt TxVIszuan2N3KviXqza82Q+N0E48BAEAUUepGHCospkxrwLVwADpdF8vCi8E72rJ dUxirxIJWPYRlFktR1O8A603/zBmhLCY3J2+Y+a1WSvxeuARQkH+ZkyXnJgOuvHh MX9LC449v3+ashBR0AyaNTfSo+05XFgXACC932AoY1sAfx0eWbtz39bNQUsgDw3M 9avrQTSncPlxCTRPMLZ3F02KYRm799+4SHLCU5xPpidAU6h0+yg= -----END CERTIFICATE-----Generated at Sat Jun 20 11:42:33 2026 by rpki-client