$ rpki-client -vvf rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft File: 40843A77AEE521660751DBF1A013A810ECDA68CB.mft (raw, json) Hash identifier: f+GpZLWwYpTQLUnt6ja9V9QN0AsdqkHFuHh14Fhmwsk= Subject key identifier: 58:33:B0:63:7E:90:70:FC:F5:5B:1F:09:C3:CC:78:89:D0:2E:33:BC Authority key identifier: 40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB Certificate issuer: /CN=40843A77AEE521660751DBF1A013A810ECDA68CB Certificate serial: 7C8062D3AFEA954BFB7F821126A88C3F4A005038 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 08:12:34 +0000 Manifest this update: Sun 02 Aug 2026 08:07:34 +0000 Manifest next update: Mon 03 Aug 2026 09:10:34 +0000 Files and hashes: 1: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: ZJsLINR6yrZpMV0P3OWS3tNwIUQ4L1mzkeCbn9j9AAk=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: S0T+hyOCAghiRygWu6d42hM+XDbg7JBg+vTQkNSgMn4=) 3: 40843A77AEE521660751DBF1A013A810ECDA68CB.crl (hash: r6cBIqJr2g2QF0Bq3ayogymRFXulOlZcZgRfJQbwbFE=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: UjtgXUBXiX2ZPtfdD6mcZP4pu2sdT+yFrlQ9rDupqgk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 09:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:80:62:d3:af:ea:95:4b:fb:7f:82:11:26:a8:8c:3f:4a:00:50:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40843A77AEE521660751DBF1A013A810ECDA68CB Validity Not Before: Aug 2 08:07:34 2026 GMT Not After : Aug 3 09:10:34 2026 GMT Subject: CN=5833B0637E9070FCF55B1F09C3CC7889D02E33BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:74:ad:cd:1d:fb:a5:aa:8b:2d:f9:8b:32:c2: 33:98:fd:25:e3:65:b5:32:62:3d:63:40:18:ff:ed: 45:5a:f6:d2:48:7a:ca:9c:9d:88:1e:99:ec:74:bb: 02:19:a4:7c:7b:d1:f8:bd:5c:ef:1c:34:9c:78:fe: 0e:96:07:98:2c:bc:e9:5f:1e:c6:74:24:a3:75:95: 0b:47:f7:5e:af:68:dc:0e:0e:74:42:b7:61:4c:e0: e6:5b:9b:56:43:98:07:1e:c7:ec:c4:91:32:f8:38: 89:5e:85:2e:76:17:f5:2e:ae:bf:13:c7:68:0e:94: 50:af:af:ff:1e:fe:a2:7d:15:35:1a:69:11:fc:1f: 97:96:ee:e5:3a:82:8e:1b:4d:65:0b:52:8c:92:e2: f2:80:18:0b:ed:91:af:e0:f6:4d:06:19:3d:c9:6f: b7:c0:91:ff:36:90:3c:e9:e4:8f:63:c7:94:ba:95: d5:77:fa:e2:46:04:f8:34:56:c0:65:01:7e:96:ef: 98:59:5b:a8:93:98:96:81:70:0f:71:34:b6:5a:30: fa:b9:1c:fa:4b:27:23:7b:70:f4:d2:56:c5:61:b1: e5:6a:2a:9e:7b:6c:89:95:7a:81:94:bd:9a:65:eb: f4:fb:65:ce:05:60:5b:1a:2c:64:5f:15:58:4b:e1: 5d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:33:B0:63:7E:90:70:FC:F5:5B:1F:09:C3:CC:78:89:D0:2E:33:BC X509v3 Authority Key Identifier: keyid:40:84:3A:77:AE:E5:21:66:07:51:DB:F1:A0:13:A8:10:EC:DA:68:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/40843A77AEE521660751DBF1A013A810ECDA68CB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/40843A77AEE521660751DBF1A013A810ECDA68CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8a:5a:1a:ef:07:76:e0:07:71:5e:0c:46:b1:51:48:06:9f: 98:1b:2d:e1:c3:d3:65:57:ba:04:a5:cc:4e:f9:f6:80:3b:d7: 2d:db:c7:f1:4e:22:8c:fc:00:30:db:ba:26:ea:da:52:e8:c5: 29:cd:f2:d2:f1:5e:2b:3f:ec:0b:f0:bb:f7:4a:89:4b:d4:a4: c1:17:7e:a3:9b:9d:48:8a:5b:8c:72:0b:93:76:a1:22:e7:d8: be:a8:c1:bb:e7:a5:07:c4:87:43:03:0e:b9:da:52:6a:fa:73: 9a:33:bc:81:b8:77:ec:7c:a0:35:99:7b:9c:90:63:c6:f1:2e: 9a:f5:a8:54:57:44:8c:3e:e7:05:88:25:d0:df:ba:fa:66:47: c7:9e:b3:c8:ed:7c:cd:6d:60:6d:62:6d:ac:bb:0b:e7:04:08: d3:50:55:48:ae:a5:72:1c:35:43:c0:46:fd:8f:8b:9e:92:73: 6f:d3:da:02:cd:0f:d7:1d:8d:7c:ae:6e:67:bf:b4:52:e3:0a: 47:76:34:0a:a7:8a:1a:2f:b6:6d:da:25:d3:fb:b5:75:ec:38: 68:f4:ee:81:a4:39:09:21:20:b2:5e:65:13:ae:ce:fb:6b:4e: c6:a9:fa:e3:0d:28:b5:f1:e6:79:64:dc:52:03:bd:8d:ab:3f: 47:34:fb:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfIBi06/qlUv7f4IRJqiMP0oAUDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBF Q0RBNjhDQjAeFw0yNjA4MDIwODA3MzRaFw0yNjA4MDMwOTEwMzRaMDMxMTAvBgNV BAMTKDU4MzNCMDYzN0U5MDcwRkNGNTVCMUYwOUMzQ0M3ODg5RDAyRTMzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCOdK3NHfulqost+YsywjOY/SXj ZbUyYj1jQBj/7UVa9tJIesqcnYgemex0uwIZpHx70fi9XO8cNJx4/g6WB5gsvOlf HsZ0JKN1lQtH916vaNwODnRCt2FM4OZbm1ZDmAcex+zEkTL4OIlehS52F/Uurr8T x2gOlFCvr/8e/qJ9FTUaaRH8H5eW7uU6go4bTWULUoyS4vKAGAvtka/g9k0GGT3J b7fAkf82kDzp5I9jx5S6ldV3+uJGBPg0VsBlAX6W75hZW6iTmJaBcA9xNLZaMPq5 HPpLJyN7cPTSVsVhseVqKp57bImVeoGUvZpl6/T7Zc4FYFsaLGRfFVhL4V0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWDOwY36QcPz1Wx8Jw8x4idAuM7wwHwYDVR0j BBgwFoAUQIQ6d67lIWYHUdvxoBOoEOzaaMswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWJkY2UzOTEtYTVkMy00MTFiLWE5N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdB RUU1MjE2NjA3NTFEQkYxQTAxM0E4MTBFQ0RBNjhDQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC80MDg0M0E3N0FFRTUyMTY2MDc1MURCRjFBMDEzQTgxMEVDREE2 OENCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvNDA4NDNBNzdBRUU1MjE2NjA3NTFEQkYxQTAxM0E4 MTBFQ0RBNjhDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2KWhrvB3bgB3FeDEaxUUgGn5gbLeHD02VX ugSlzE759oA71y3bx/FOIoz8ADDbuibq2lLoxSnN8tLxXis/7Avwu/dKiUvUpMEX fqObnUiKW4xyC5N2oSLn2L6owbvnpQfEh0MDDrnaUmr6c5ozvIG4d+x8oDWZe5yQ Y8bxLpr1qFRXRIw+5wWIJdDfuvpmR8ees8jtfM1tYG1ibay7C+cECNNQVUiupXIc NUPARv2Pi56Sc2/T2gLND9cdjXyubme/tFLjCkd2NAqnihovtm3aJdP7tXXsOGj0 7oGkOQkhILJeZROuzvtrTsap+uMNKLXx5nlk3FIDvY2rP0c0+5o= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:27 2026 by rpki-client