$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: 0TD+MNl0WaX+i9fJRqKveanjjYRD1ehGvwuRz1Bz0SQ= Subject key identifier: B0:15:8A:EB:4B:19:E8:AA:CA:E9:49:68:C2:0E:FB:67:9E:BF:E8:37 Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 2DB36D45424DC9F81A3C50BE5583D39C88FFEE05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:15:30 +0000 Manifest this update: Wed 16 Sep 2026 17:10:30 +0000 Manifest next update: Thu 17 Sep 2026 20:48:30 +0000 Files and hashes: 1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 2: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: 9Q0RF2JGMCdi+Di04LSKCEZClQjBc51PUKDI6cZ49Mg=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 20:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:b3:6d:45:42:4d:c9:f8:1a:3c:50:be:55:83:d3:9c:88:ff:ee:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Sep 16 17:10:30 2026 GMT Not After : Sep 17 20:48:30 2026 GMT Subject: CN=B0158AEB4B19E8AACAE94968C20EFB679EBFE837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b8:9c:e8:f0:fc:07:84:11:76:5f:fb:87:2b: 6c:5f:2b:8e:1f:10:91:80:b5:67:fa:d2:d2:89:e1: a6:28:8e:84:35:4f:92:24:7d:b0:9a:f0:e3:05:a6: f1:b5:a1:3e:4a:19:f9:7d:28:c4:ca:50:00:5e:79: a1:ff:d8:84:4f:e6:9e:54:d2:6e:15:1b:94:b1:61: f6:4b:5f:e9:1f:7e:0f:73:63:b4:35:c8:b2:7f:db: 9c:53:31:e1:e4:10:64:11:27:11:96:e4:8d:c3:83: 1a:8a:60:03:ad:64:1f:1c:60:f5:36:f0:2f:25:9f: aa:fd:6d:6e:a1:bc:75:fc:08:b7:72:3d:a9:e5:15: d9:7a:8d:1d:9e:56:c2:03:60:9e:7c:7d:e4:a1:9b: 2c:0a:06:e6:9b:17:b7:11:74:f4:c6:36:2e:35:81: 2c:13:a9:f9:38:ee:78:f8:71:f3:e9:c0:aa:42:91: 16:c7:cd:85:58:88:80:7f:67:80:a3:2b:c6:4f:94: d8:a3:92:f4:d5:8b:c8:6f:e2:f5:02:8f:fe:9e:46: 64:48:a7:d9:c7:3b:bd:fd:35:00:d6:23:e6:28:3d: e3:89:55:1f:ac:ef:01:b5:1b:2e:e6:66:cb:cb:a7: 93:37:d3:f0:5f:e7:36:4d:1b:a1:9e:5d:5c:65:9e: c3:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:15:8A:EB:4B:19:E8:AA:CA:E9:49:68:C2:0E:FB:67:9E:BF:E8:37 X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:13:63:94:23:9b:bd:23:d6:e5:bb:c9:71:b9:77:96:0f:e5: bb:3e:72:41:66:72:d1:83:31:0b:6d:33:12:f0:9a:53:78:f0: af:1d:a7:5a:4e:0e:c2:6f:c3:8d:f1:7f:2d:04:16:1c:36:cf: 53:42:e9:64:b4:d2:ae:ef:73:65:a0:49:d3:d7:97:ab:c9:a2: 0a:4c:ae:c2:e0:d7:b7:43:35:20:8c:bb:53:86:7c:ab:c6:94: 9a:98:aa:b9:01:a5:b6:59:23:3f:a0:81:5e:b1:7e:25:72:26: eb:61:d3:6f:6f:11:2b:a1:1d:8d:b9:d1:c6:7a:fb:fb:90:2c: 84:95:38:5b:46:f9:35:0b:68:bf:cf:70:65:36:db:14:31:bb: eb:6c:0c:5c:a2:28:aa:53:64:39:3e:d0:8f:c5:01:92:cf:10: e0:d6:33:c6:87:be:ca:72:07:db:e1:31:68:d8:31:1a:dc:ce: 0f:6f:99:9e:1a:81:cb:9f:f9:09:09:63:92:4f:14:92:b5:fa: bb:3a:5a:2c:47:38:a1:5c:5c:90:32:49:e5:52:a9:99:67:d4: b1:c8:e9:a7:f2:0b:17:e1:bb:29:62:b9:6e:ca:94:f4:4f:52: 7c:e3:60:35:9b:ae:c2:ea:e4:37:3f:cf:16:60:cf:48:78:ae: ed:79:72:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULbNtRUJNyfgaPFC+VYPTnIj/7gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA5MTYxNzEwMzBaFw0yNjA5MTcyMDQ4MzBaMDMxMTAvBgNV BAMTKEIwMTU4QUVCNEIxOUU4QUFDQUU5NDk2OEMyMEVGQjY3OUVCRkU4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVuJzo8PwHhBF2X/uHK2xfK44f EJGAtWf60tKJ4aYojoQ1T5IkfbCa8OMFpvG1oT5KGfl9KMTKUABeeaH/2IRP5p5U 0m4VG5SxYfZLX+kffg9zY7Q1yLJ/25xTMeHkEGQRJxGW5I3DgxqKYAOtZB8cYPU2 8C8ln6r9bW6hvHX8CLdyPanlFdl6jR2eVsIDYJ58feShmywKBuabF7cRdPTGNi41 gSwTqfk47nj4cfPpwKpCkRbHzYVYiIB/Z4CjK8ZPlNijkvTVi8hv4vUCj/6eRmRI p9nHO739NQDWI+YoPeOJVR+s7wG1Gy7mZsvLp5M30/Bf5zZNG6GeXVxlnsMbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBWK60sZ6KrK6Ulowg77Z56/6DcwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcTY5Qjm70j1uW7yXG5d5YP5bs+ckFmctGD MQttMxLwmlN48K8dp1pODsJvw43xfy0EFhw2z1NC6WS00q7vc2WgSdPXl6vJogpM rsLg17dDNSCMu1OGfKvGlJqYqrkBpbZZIz+ggV6xfiVyJuth029vESuhHY250cZ6 +/uQLISVOFtG+TULaL/PcGU22xQxu+tsDFyiKKpTZDk+0I/FAZLPEODWM8aHvspy B9vhMWjYMRrczg9vmZ4agcuf+QkJY5JPFJK1+rs6WixHOKFcXJAySeVSqZln1LHI 6afyCxfhuyliuW7KlPRPUnzjYDWbrsLq5Dc/zxZgz0h4ru15cso= -----END CERTIFICATE-----Generated at Thu Sep 17 13:55:44 2026 by rpki-client