$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft File: B40CD5496E7464C3983177F65AD14F8974DC2A05.mft (raw, json) Hash identifier: yAl0Re6Kps1lFCqc47P3Np0eGyx2dT3k3UFpUiJwj34= Subject key identifier: CE:AA:56:00:5B:41:DC:EB:CE:07:29:CC:14:08:C9:4E:86:D5:6C:56 Authority key identifier: B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 Certificate issuer: /CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Certificate serial: 4F027C6A70A49FBBAA64D9F0B67E26CAA7671F83 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft Manifest number: F2 Signing time: Thu 29 Oct 2026 14:33:37 +0000 Manifest this update: Thu 29 Oct 2026 14:28:37 +0000 Manifest next update: Fri 30 Oct 2026 17:09:37 +0000 Files and hashes: 1: B40CD5496E7464C3983177F65AD14F8974DC2A05.crl (hash: Vyf+/pwg9TuIev4TpxONZ7/SZavn159uw/zp1Mj4Alg=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vEw+yqWgiaF2B5YQkQGDlRaQsJEuUjBPF8vceXJ1lPs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 30 Oct 2026 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:02:7c:6a:70:a4:9f:bb:aa:64:d9:f0:b6:7e:26:ca:a7:67:1f:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B40CD5496E7464C3983177F65AD14F8974DC2A05 Validity Not Before: Oct 29 14:28:37 2026 GMT Not After : Oct 30 17:09:37 2026 GMT Subject: CN=CEAA56005B41DCEBCE0729CC1408C94E86D56C56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:1f:2f:0b:e7:c7:d7:eb:2b:ce:d6:25:d7: ff:86:6d:51:a4:78:0f:d1:18:9f:6a:9f:6e:6b:bc: 30:d4:e2:63:57:81:0c:43:d8:1a:a6:f6:46:77:85: a7:3f:5e:13:e0:71:dc:b5:b8:c1:41:fc:5e:ec:79: fc:59:d8:05:a7:6b:6b:30:11:f4:1e:ca:d6:fc:bf: 03:1f:5b:cb:a0:94:13:b0:cf:ba:90:93:44:d2:1d: 81:f8:73:7b:a9:29:90:71:44:b5:71:45:d9:91:4b: 9b:11:99:1c:ad:86:18:5e:bb:ed:a1:19:e6:3a:71: 6b:da:dd:e0:68:6c:57:08:3f:7a:17:8b:3a:cf:2b: 36:72:47:e8:21:dd:89:01:07:c2:f2:a6:02:45:88: 2c:3c:c9:ce:fd:96:74:84:8a:9b:d2:58:96:bb:9d: 16:15:ba:c6:64:e6:f7:05:2d:47:33:65:d0:19:78: 69:29:3e:2f:4a:9c:76:4a:80:aa:4f:16:a5:94:c2: 59:86:f1:53:69:f7:30:c3:a1:06:94:70:54:e3:0d: ac:72:ec:32:a8:50:05:e6:0c:90:66:a1:5e:29:9f: e4:1a:07:a7:9a:24:d5:24:0e:9b:e0:28:9b:ef:da: 5b:59:d6:ff:a8:67:e8:12:2a:37:e5:d6:e0:5f:7f: 47:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:AA:56:00:5B:41:DC:EB:CE:07:29:CC:14:08:C9:4E:86:D5:6C:56 X509v3 Authority Key Identifier: keyid:B4:0C:D5:49:6E:74:64:C3:98:31:77:F6:5A:D1:4F:89:74:DC:2A:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B40CD5496E7464C3983177F65AD14F8974DC2A05.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/B40CD5496E7464C3983177F65AD14F8974DC2A05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:83:ba:8a:9c:85:83:52:d1:70:e0:b1:a3:62:69:f2:58:a4: f1:33:1a:1a:3a:80:ee:c2:a9:51:75:2c:0c:78:87:ed:b7:bb: 67:0b:28:a0:44:53:c4:a6:fd:16:52:0f:9a:38:3e:b7:70:14: bf:c7:93:8a:7c:64:d0:9b:dc:d9:4a:55:45:cb:7a:b8:8f:c4: b3:2a:f8:d8:16:af:b8:41:ca:42:62:7f:9f:e8:8e:e3:ea:43: aa:5f:0e:98:5f:d2:88:98:73:c2:89:27:c7:60:bf:d5:bf:11: 50:6c:c2:f3:36:a9:46:14:2b:ba:07:7c:37:c3:cc:e3:3f:6e: 9c:7b:26:a6:b0:57:78:2d:6b:d7:89:d5:79:ec:aa:6b:16:ee: 3c:a9:58:71:c5:10:a1:24:c1:86:42:f8:58:d8:d3:b8:65:f0: d4:62:2d:18:a9:42:6a:26:c2:1f:69:ab:92:04:85:fd:c6:b0: a9:97:68:1d:2b:ec:1a:42:5c:08:b3:58:f5:d8:4e:f4:53:57: dc:cb:f3:15:1b:92:34:be:5e:5d:c1:f7:c6:44:9e:bc:ba:23: 07:4c:8d:45:9f:44:34:96:22:59:b6:bd:7d:aa:ea:13:6d:e1: 42:58:5d:a8:cc:86:c2:c2:69:2a:7e:d6:59:ba:72:aa:f2:67: 1b:b7:1b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTwJ8anCkn7uqZNnwtn4myqdnH4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3 NERDMkEwNTAeFw0yNjEwMjkxNDI4MzdaFw0yNjEwMzAxNzA5MzdaMDMxMTAvBgNV BAMTKENFQUE1NjAwNUI0MURDRUJDRTA3MjlDQzE0MDhDOTRFODZENTZDNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCHUB8vC+fH1+srztYl1/+GbVGk eA/RGJ9qn25rvDDU4mNXgQxD2Bqm9kZ3hac/XhPgcdy1uMFB/F7sefxZ2AWna2sw EfQeytb8vwMfW8uglBOwz7qQk0TSHYH4c3upKZBxRLVxRdmRS5sRmRythhheu+2h GeY6cWva3eBobFcIP3oXizrPKzZyR+gh3YkBB8LypgJFiCw8yc79lnSEipvSWJa7 nRYVusZk5vcFLUczZdAZeGkpPi9KnHZKgKpPFqWUwlmG8VNp9zDDoQaUcFTjDaxy 7DKoUAXmDJBmoV4pn+QaB6eaJNUkDpvgKJvv2ltZ1v+oZ+gSKjfl1uBff0elAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzqpWAFtB3OvOBynMFAjJTobVbFYwHwYDVR0j BBgwFoAUtAzVSW50ZMOYMXf2WtFPiXTcKgUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2Y2ZWEyMjEtNzdiNy00NzkxLWE4YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2 RTc0NjRDMzk4MzE3N0Y2NUFEMTRGODk3NERDMkEwNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CNDBDRDU0OTZFNzQ2NEMzOTgzMTc3RjY1QUQxNEY4OTc0REMy QTA1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvQjQwQ0Q1NDk2RTc0NjRDMzk4MzE3N0Y2NUFEMTRG ODk3NERDMkEwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiDuoqchYNS0XDgsaNiafJYpPEzGho6gO7C qVF1LAx4h+23u2cLKKBEU8Sm/RZSD5o4PrdwFL/Hk4p8ZNCb3NlKVUXLeriPxLMq +NgWr7hBykJif5/ojuPqQ6pfDphf0oiYc8KJJ8dgv9W/EVBswvM2qUYUK7oHfDfD zOM/bpx7JqawV3gta9eJ1XnsqmsW7jypWHHFEKEkwYZC+FjY07hl8NRiLRipQmom wh9pq5IEhf3GsKmXaB0r7BpCXAizWPXYTvRTV9zL8xUbkjS+Xl3B98ZEnry6IwdM jUWfRDSWIlm2vX2q6hNt4UJYXajMhsLCaSp+1lm6cqryZxu3G1Q= -----END CERTIFICATE-----Generated at Thu Oct 29 18:14:10 2026 by rpki-client