$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: QaAgE0M57l7reVJ0qWI8OzMVVjwDICaHKFhFa7qXUn8= Subject key identifier: FB:DB:12:DC:5E:7C:03:C2:3E:01:11:EB:32:8C:FC:FA:AC:41:54:04 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 9BD0510862244B738577AECA22D6A51ADD4BFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:46:26 +0000 Manifest this update: Thu 18 Jun 2026 03:41:26 +0000 Manifest next update: Fri 19 Jun 2026 04:21:26 +0000 Files and hashes: 1: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) 4: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: 4Td17GNit4EbXaQ2CZ5Cq4k9iqLagh3pF6fjodi8rPo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 04:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9b:d0:51:08:62:24:4b:73:85:77:ae:ca:22:d6:a5:1a:dd:4b:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Jun 18 03:41:26 2026 GMT Not After : Jun 19 04:21:26 2026 GMT Subject: CN=FBDB12DC5E7C03C23E0111EB328CFCFAAC415404 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:06:39:d6:79:4f:23:83:94:f9:fe:5f:7f:29: 7b:f2:e0:40:ed:71:34:9e:3f:27:b0:50:c5:38:a8: d1:69:5b:26:4a:9c:ae:e5:20:64:68:93:d6:84:83: aa:0c:52:98:87:9a:8e:2f:0d:8c:5b:72:51:34:18: 22:16:2f:b3:2c:be:88:52:4e:89:73:be:f2:8a:8e: a1:10:b5:3c:2d:7e:e5:a8:f7:5d:e6:64:55:e3:19: df:68:2b:02:05:75:f4:8f:1b:1d:7c:2d:bb:e7:a7: 2e:e5:1c:d3:7a:fe:4b:a7:6e:9f:36:85:d1:be:51: d5:41:1c:cf:f6:02:1d:21:42:8c:8a:5b:99:d8:f1: 9f:4f:f5:0b:a9:34:0c:18:e4:38:49:40:18:f2:d9: 2b:ef:c0:2d:81:4f:10:7a:57:92:11:1b:eb:b9:9a: 65:39:e9:91:58:a3:72:98:31:63:f5:ff:de:64:91: e7:bd:52:5d:65:4e:42:15:b2:32:8e:96:de:11:63: 71:79:5b:a6:40:cc:44:50:ef:e6:c3:78:cc:ef:22: f1:95:7e:2d:0b:3b:08:16:d1:48:2e:78:61:4a:7c: 79:16:b6:40:9c:c3:25:a8:a6:5d:d3:50:b3:61:04: f2:57:8c:dc:2c:7a:ce:8b:14:0c:29:fd:6a:07:a2: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:DB:12:DC:5E:7C:03:C2:3E:01:11:EB:32:8C:FC:FA:AC:41:54:04 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:40:ef:06:16:5a:f8:a5:84:ac:55:18:c3:c3:cc:8f:69:23: f2:81:df:38:fe:e8:a9:26:68:3e:a3:bb:31:83:8e:65:8e:85: f2:78:71:11:6b:f8:cf:c4:88:00:64:d3:d6:d0:58:7a:76:e9: f0:82:d1:3b:37:7b:a3:8b:2b:a1:a6:49:dc:92:0f:76:b1:ba: 77:95:63:7c:57:9b:02:5d:55:25:43:b3:4e:be:16:11:d4:6c: c1:6b:a4:02:50:07:bd:1f:51:7d:f8:9c:5f:ae:f8:fd:02:2a: 11:b6:22:f9:5f:ba:41:84:6a:4f:aa:95:28:22:bd:21:8d:ea: 10:f7:28:43:22:8c:99:b1:55:37:40:1d:73:a9:0d:25:8c:6d: 3f:38:48:52:18:fa:97:63:0d:2a:e9:88:72:ac:cb:f1:ed:be: 6d:bb:7a:c8:bb:20:ff:c9:4a:7e:e6:7b:e6:af:6d:35:38:f2: c9:bb:21:51:cc:da:e9:79:d7:6b:d1:6e:8c:48:94:75:00:02: cc:a3:eb:4b:34:e0:cc:5f:69:bb:a8:36:bc:0b:8f:39:62:d7: 75:f0:36:f8:95:a1:ed:05:88:36:5c:57:07:9f:e9:7b:54:ba: bf:18:18:5d:49:73:9a:db:ed:e8:a1:52:92:70:ef:f0:f5:8b: 3e:bb:d8:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAJvQUQhiJEtzhXeuyiLWpRrdS/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA2MTgwMzQxMjZaFw0yNjA2MTkwNDIxMjZaMDMxMTAvBgNV BAMTKEZCREIxMkRDNUU3QzAzQzIzRTAxMTFFQjMyOENGQ0ZBQUM0MTU0MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCGBjnWeU8jg5T5/l9/KXvy4EDt cTSePyewUMU4qNFpWyZKnK7lIGRok9aEg6oMUpiHmo4vDYxbclE0GCIWL7MsvohS TolzvvKKjqEQtTwtfuWo913mZFXjGd9oKwIFdfSPGx18Lbvnpy7lHNN6/kunbp82 hdG+UdVBHM/2Ah0hQoyKW5nY8Z9P9QupNAwY5DhJQBjy2SvvwC2BTxB6V5IRG+u5 mmU56ZFYo3KYMWP1/95kkee9Ul1lTkIVsjKOlt4RY3F5W6ZAzERQ7+bDeMzvIvGV fi0LOwgW0UgueGFKfHkWtkCcwyWopl3TULNhBPJXjNwses6LFAwp/WoHovFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+9sS3F58A8I+ARHrMoz8+qxBVAQwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlA7wYWWvilhKxVGMPDzI9pI/KB3zj+6Kkm aD6juzGDjmWOhfJ4cRFr+M/EiABk09bQWHp26fCC0Ts3e6OLK6GmSdySD3axuneV Y3xXmwJdVSVDs06+FhHUbMFrpAJQB70fUX34nF+u+P0CKhG2IvlfukGEak+qlSgi vSGN6hD3KEMijJmxVTdAHXOpDSWMbT84SFIY+pdjDSrpiHKsy/Htvm27esi7IP/J Sn7me+avbTU48sm7IVHM2ul512vRboxIlHUAAsyj60s04MxfabuoNrwLjzli13Xw NviVoe0FiDZcVwef6XtUur8YGF1Jc5rb7eihUpJw7/D1iz672AI= -----END CERTIFICATE-----Generated at Thu Jun 18 17:07:54 2026 by rpki-client