$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft File: 940B100416D69592DEA3CD164FA55B0A94E9BA09.mft (raw, json) Hash identifier: T9S6+T38ZnH2WITkhDcIPrGB+YkR57BXKC6ZxGn+fdk= Subject key identifier: 40:FB:84:0D:98:0D:D7:C2:66:3F:35:25:87:77:DB:9C:A8:EB:10:C7 Authority key identifier: 94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 Certificate issuer: /CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Certificate serial: 6D9757D906459475400F295F354FF1ED0AEBAEF5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft Manifest number: 3E Signing time: Thu 18 Jun 2026 02:24:47 +0000 Manifest this update: Thu 18 Jun 2026 02:19:47 +0000 Manifest next update: Fri 19 Jun 2026 02:56:47 +0000 Files and hashes: 1: 940B100416D69592DEA3CD164FA55B0A94E9BA09.crl (hash: Le4vW2JItceUTGqWHGp4dp2AWd+21HsFDaJ8jCfqeU4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:56:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:97:57:d9:06:45:94:75:40:0f:29:5f:35:4f:f1:ed:0a:eb:ae:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=940B100416D69592DEA3CD164FA55B0A94E9BA09 Validity Not Before: Jun 18 02:19:47 2026 GMT Not After : Jun 19 02:56:47 2026 GMT Subject: CN=40FB840D980DD7C2663F35258777DB9CA8EB10C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:73:77:c9:f4:36:4c:6d:c4:e3:92:43:c7:08: 9c:54:34:e7:50:de:a8:de:dd:3f:6b:0b:7b:c1:78: ab:77:6b:b7:e9:0e:71:24:61:d1:0d:26:86:f0:03: cd:c9:98:ce:26:4b:b3:55:a2:a6:7b:26:9b:8a:23: ee:01:3e:68:cc:b1:bd:24:e7:a7:27:c3:32:da:3f: bc:b9:54:bb:d5:62:5e:8a:68:37:1a:e2:d3:38:67: 74:7e:8b:49:e8:6c:61:2a:2e:6f:10:a5:45:38:e5: 9c:9f:6a:3c:67:29:cc:d7:1e:eb:27:c8:13:17:14: 76:d9:9f:ac:6f:e4:3a:3d:23:10:21:a7:33:35:2b: d5:79:4b:44:69:55:57:44:99:c0:4f:0e:7b:e1:8e: 88:15:06:cd:04:10:e3:83:03:6c:04:20:f5:b7:91: be:aa:7d:da:5f:f3:51:f6:aa:05:ea:d2:0a:ef:61: 3c:a8:b7:cb:2d:61:de:6b:d4:25:d1:1d:d8:ab:f0: ab:fa:15:a2:9d:43:fa:65:89:30:4b:1f:01:92:3a: dd:1f:48:3c:23:39:c9:32:83:74:ef:c5:f3:76:1f: 1d:4a:bd:f5:d1:b7:01:44:51:5b:0f:53:19:36:de: e8:dc:a5:f0:6e:44:cb:81:02:0d:87:a0:5a:4b:f8: 31:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FB:84:0D:98:0D:D7:C2:66:3F:35:25:87:77:DB:9C:A8:EB:10:C7 X509v3 Authority Key Identifier: keyid:94:0B:10:04:16:D6:95:92:DE:A3:CD:16:4F:A5:5B:0A:94:E9:BA:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/940B100416D69592DEA3CD164FA55B0A94E9BA09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:56:90:94:1e:62:65:8b:a4:de:f5:14:d2:51:7a:97:93: 2c:ba:cd:6a:58:a5:d1:26:1c:c4:40:41:05:68:0b:74:0e:a8: 08:bf:8b:ea:3e:73:89:16:96:72:55:30:13:e4:40:c3:35:b0: e2:2e:7d:33:9b:e5:ef:ca:01:ff:0e:2b:ed:35:6a:03:2f:c8: 6c:99:24:2a:33:92:c6:73:0b:9a:bb:7a:da:12:79:22:e5:93: 78:08:f1:38:11:15:d9:48:77:e1:74:a8:0c:b5:15:d5:9b:67: b9:a0:4e:da:0c:f9:98:8f:72:12:60:d2:14:b0:ed:c9:95:6a: 36:99:19:02:9a:d4:3b:bf:04:68:99:5e:1c:66:0a:d4:e5:3e: e1:37:1b:02:cb:9b:37:7a:75:05:c8:43:88:58:10:13:8a:72: 28:56:cf:66:65:f9:18:23:cf:74:5e:d1:c8:52:b1:15:29:51: d1:93:90:10:9d:7d:ba:12:93:45:7b:81:96:1a:ad:a9:19:fe: 71:25:ec:28:3a:31:58:db:51:94:c7:b1:c5:05:de:62:4d:fc: 90:08:5e:68:8a:4a:29:ec:b7:50:9f:92:57:ef:40:b1:48:aa: 37:59:15:68:c8:19:f1:4e:a4:42:39:c2:4c:ff:32:4c:69:ae: e4:90:b0:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbZdX2QZFlHVADylfNU/x7QrrrvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5 NEU5QkEwOTAeFw0yNjA2MTgwMjE5NDdaFw0yNjA2MTkwMjU2NDdaMDMxMTAvBgNV BAMTKDQwRkI4NDBEOTgwREQ3QzI2NjNGMzUyNTg3NzdEQjlDQThFQjEwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClc3fJ9DZMbcTjkkPHCJxUNOdQ 3qje3T9rC3vBeKt3a7fpDnEkYdENJobwA83JmM4mS7NVoqZ7JpuKI+4BPmjMsb0k 56cnwzLaP7y5VLvVYl6KaDca4tM4Z3R+i0nobGEqLm8QpUU45ZyfajxnKczXHusn yBMXFHbZn6xv5Do9IxAhpzM1K9V5S0RpVVdEmcBPDnvhjogVBs0EEOODA2wEIPW3 kb6qfdpf81H2qgXq0grvYTyot8stYd5r1CXRHdir8Kv6FaKdQ/pliTBLHwGSOt0f SDwjOckyg3TvxfN2Hx1KvfXRtwFEUVsPUxk23ujcpfBuRMuBAg2HoFpL+DE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQPuEDZgN18JmPzUlh3fbnKjrEMcwHwYDVR0j BBgwFoAUlAsQBBbWlZLeo80WT6VbCpTpugkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5YWY0ZGItY2Y2Zi00OWIzLWEwNWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQx NkQ2OTU5MkRFQTNDRDE2NEZBNTVCMEE5NEU5QkEwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC85NDBCMTAwNDE2RDY5NTkyREVBM0NEMTY0RkE1NUIwQTk0RTlC QTA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvOTQwQjEwMDQxNkQ2OTU5MkRFQTNDRDE2NEZBNTVC MEE5NEU5QkEwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0nVpCUHmJli6Te9RTSUXqXkyy6zWpYpdEm HMRAQQVoC3QOqAi/i+o+c4kWlnJVMBPkQMM1sOIufTOb5e/KAf8OK+01agMvyGyZ JCozksZzC5q7etoSeSLlk3gI8TgRFdlId+F0qAy1FdWbZ7mgTtoM+ZiPchJg0hSw 7cmVajaZGQKa1Du/BGiZXhxmCtTlPuE3GwLLmzd6dQXIQ4hYEBOKcihWz2Zl+Rgj z3Re0chSsRUpUdGTkBCdfboSk0V7gZYarakZ/nEl7Cg6MVjbUZTHscUF3mJN/JAI XmiKSinst1CfklfvQLFIqjdZFWjIGfFOpEI5wkz/MkxpruSQsF8= -----END CERTIFICATE-----Generated at Thu Jun 18 17:13:43 2026 by rpki-client