$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json) Hash identifier: VHfS7pHV1AdHASBDtrBudH8xUrorN+geOtWjjRVi5Xs= Subject key identifier: BF:8F:CE:70:78:90:BF:A7:78:6B:4D:D0:DB:AC:A6:39:CC:ED:5A:E5 Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Certificate serial: 65DF46F5D7C42E53AA795BF7AE51C4E4A9FDA710 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft Manifest number: B1 Signing time: Fri 11 Sep 2026 03:40:36 +0000 Manifest this update: Fri 11 Sep 2026 03:35:36 +0000 Manifest next update: Sat 12 Sep 2026 06:51:36 +0000 Files and hashes: 1: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: FakLoeHJ6/bgI7a/ZAREtRwTpetDOiVesjM7phHY+II=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 06:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:df:46:f5:d7:c4:2e:53:aa:79:5b:f7:ae:51:c4:e4:a9:fd:a7:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Validity Not Before: Sep 11 03:35:36 2026 GMT Not After : Sep 12 06:51:36 2026 GMT Subject: CN=BF8FCE707890BFA7786B4DD0DBACA639CCED5AE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:51:7c:f3:37:41:4a:91:e1:ab:49:57:2d:7f: f0:aa:27:8c:98:1f:44:87:2a:1f:d2:f4:42:ce:98: 18:01:51:3a:35:4c:06:e8:bf:94:3b:db:f9:66:28: 63:28:2d:94:cf:dd:42:f3:aa:c5:43:4c:3f:93:e6: 7e:bf:09:fd:32:df:b1:c6:95:e7:bb:95:0d:df:d1: d3:32:59:e0:3a:6b:e3:8d:43:8d:4d:54:e9:90:58: 6c:b3:d8:ab:5c:4f:10:36:61:2b:fd:d9:52:d3:2e: 55:1e:c8:19:3f:30:fb:a1:98:4e:47:31:bb:65:29: b8:04:68:7c:c0:57:cb:d7:42:87:b1:1d:09:2b:de: f6:ef:b8:66:77:97:c5:a2:e7:cf:05:cc:fc:7b:c3: e4:11:f7:23:fc:58:32:e6:f1:0c:bc:4e:1d:a5:0b: 9a:da:ea:12:2f:71:de:28:d1:e7:7b:c3:3d:5b:53: 48:60:38:ea:f4:65:12:2a:f1:44:37:4d:82:72:eb: cf:1d:af:6e:42:e8:7b:19:d7:0e:79:ac:08:6b:af: 48:7b:66:d4:c3:cb:ae:2f:b0:09:8e:0a:8b:fe:a8: 07:06:31:09:a4:c4:2e:68:d1:f5:8c:6e:94:4d:22: ff:aa:99:25:bc:cf:67:a0:e7:35:ff:ff:14:8d:09: 9d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:8F:CE:70:78:90:BF:A7:78:6B:4D:D0:DB:AC:A6:39:CC:ED:5A:E5 X509v3 Authority Key Identifier: keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:a2:8b:78:36:08:12:3f:1d:39:18:d0:61:55:59:c1:92:cd: ae:6d:31:9f:59:52:2f:be:79:bc:67:cd:20:eb:ba:2f:83:43: 6d:84:b6:92:5c:83:3f:a1:0d:40:87:c5:cd:5b:ea:ca:03:fc: 54:70:74:ed:a1:8f:5d:ce:77:99:fe:19:2a:72:da:b2:48:b1: b2:b4:05:5d:47:84:cc:03:9a:d1:80:cb:bc:9b:b4:4f:d4:00: ec:ac:b4:84:8f:f0:03:b6:2f:f8:a4:20:9e:1a:f6:a9:5b:1f: 47:41:68:8f:5e:30:e2:89:7b:c6:26:8a:aa:a1:72:34:ed:eb: ba:1a:65:e0:46:24:8e:ed:26:a2:15:2f:87:a4:fd:7c:42:ba: 37:b6:bb:ae:51:1b:65:c6:e4:82:0e:74:7e:9a:d0:f5:e9:62: 06:39:85:41:22:16:b7:35:09:e7:ef:1b:39:10:7f:dc:e8:80: d8:b7:73:9b:ac:07:eb:c5:ea:fa:be:53:a1:58:d3:88:0a:d8: ee:1b:dc:e5:fc:df:5f:5f:dd:1a:9b:c7:af:96:70:c2:c0:42: 17:8a:e8:87:ab:c9:e5:d2:dd:40:91:77:c2:99:41:68:c4:7b: f0:c5:ce:ec:5d:4d:e9:b0:3d:6e:03:f7:f2:c6:b0:65:52:08: 50:fb:b2:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZd9G9dfELlOqeVv3rlHE5Kn9pxAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3 NERDMkEwNTAeFw0yNjA5MTEwMzM1MzZaFw0yNjA5MTIwNjUxMzZaMDMxMTAvBgNV BAMTKEJGOEZDRTcwNzg5MEJGQTc3ODZCNEREMERCQUNBNjM5Q0NFRDVBRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4UXzzN0FKkeGrSVctf/CqJ4yY H0SHKh/S9ELOmBgBUTo1TAbov5Q72/lmKGMoLZTP3ULzqsVDTD+T5n6/Cf0y37HG lee7lQ3f0dMyWeA6a+ONQ41NVOmQWGyz2KtcTxA2YSv92VLTLlUeyBk/MPuhmE5H MbtlKbgEaHzAV8vXQoexHQkr3vbvuGZ3l8Wi588FzPx7w+QR9yP8WDLm8Qy8Th2l C5ra6hIvcd4o0ed7wz1bU0hgOOr0ZRIq8UQ3TYJy688dr25C6HsZ1w55rAhrr0h7 ZtTDy64vsAmOCov+qAcGMQmkxC5o0fWMbpRNIv+qmSW8z2eg5zX//xSNCZ2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4/OcHiQv6d4a03Q26ymOcztWuUwHwYDVR0j BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2 RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+ii3g2CBI/HTkY0GFVWcGSza5tMZ9ZUi++ ebxnzSDrui+DQ22EtpJcgz+hDUCHxc1b6soD/FRwdO2hj13Od5n+GSpy2rJIsbK0 BV1HhMwDmtGAy7ybtE/UAOystISP8AO2L/ikIJ4a9qlbH0dBaI9eMOKJe8Ymiqqh cjTt67oaZeBGJI7tJqIVL4ek/XxCuje2u65RG2XG5IIOdH6a0PXpYgY5hUEiFrc1 CefvGzkQf9zogNi3c5usB+vF6vq+U6FY04gK2O4b3OX8319f3Rqbx6+WcMLAQheK 6IeryeXS3UCRd8KZQWjEe/DFzuxdTemwPW4D9/LGsGVSCFD7slA= -----END CERTIFICATE-----Generated at Fri Sep 11 15:42:00 2026 by rpki-client