$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft File: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft (raw, json) Hash identifier: hPQRxkjGPDN2gheshO7cvLO9LApy8BS52TOpQubmAXk= Subject key identifier: 98:61:DA:97:D7:E3:7B:AF:8D:09:C8:ED:D3:8A:48:3B:79:0B:8F:C3 Authority key identifier: 4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D Certificate issuer: /CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Certificate serial: 19B0A5B2493657B3D017B1807ADC2B97B36D0277 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 10:26:30 +0000 Manifest this update: Thu 17 Sep 2026 10:21:30 +0000 Manifest next update: Fri 18 Sep 2026 10:26:30 +0000 Files and hashes: 1: 4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl (hash: ca5YgnHWZmsqeChbQnilEVAhE+lJTAMxXDJQcDNNlpA=) 2: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: 869cfXhcvOlyh0uB1ikVriiCxFRRijRoXRyS0ETdNZQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:b0:a5:b2:49:36:57:b3:d0:17:b1:80:7a:dc:2b:97:b3:6d:02:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F40BD709D0340B7E88CDF9D80109A935C573D4D Validity Not Before: Sep 17 10:21:30 2026 GMT Not After : Sep 18 10:26:30 2026 GMT Subject: CN=9861DA97D7E37BAF8D09C8EDD38A483B790B8FC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:5c:ca:ff:2a:59:04:65:08:ff:a6:b0:d9:d3: 0a:16:e2:2f:92:ca:1b:da:b9:2e:b5:78:e0:6e:60: b6:6e:b7:63:3e:99:51:f5:21:6a:fc:5d:40:93:b3: 9c:6b:cc:87:af:1e:95:23:35:33:48:1e:5a:e5:13: a4:73:cd:3a:a5:28:dd:a9:72:0e:53:37:cd:4e:db: e9:07:d3:bc:cf:31:e2:4b:25:6e:93:3b:78:5e:c2: c8:bb:4f:c8:12:9b:98:b0:a8:79:33:d9:fa:63:48: f8:23:91:e0:69:4e:bb:42:50:23:11:4a:9d:d2:8c: 89:10:ec:6d:f5:ea:ee:de:da:9b:2b:06:6f:62:ad: e5:76:8c:4c:2f:57:bb:46:05:69:23:74:14:bc:4f: 55:af:36:23:ec:a7:17:e6:55:93:42:2a:a0:81:75: 14:28:17:d9:31:1f:2d:fb:db:ff:c9:bf:ff:92:d4: 19:69:30:ba:63:1a:0a:44:d4:98:a2:6d:fe:f6:0c: bd:84:94:ee:f6:58:c3:89:8a:75:80:18:29:57:73: 19:34:b6:7d:1e:95:cd:dc:1e:5f:94:7e:46:4c:43: 3d:99:ce:76:83:29:f5:37:b3:a4:50:88:73:7f:c7: 92:ae:9a:ec:43:68:79:0a:27:9a:4d:a2:cc:13:30: 7c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:61:DA:97:D7:E3:7B:AF:8D:09:C8:ED:D3:8A:48:3B:79:0B:8F:C3 X509v3 Authority Key Identifier: keyid:4F:40:BD:70:9D:03:40:B7:E8:8C:DF:9D:80:10:9A:93:5C:57:3D:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4F40BD709D0340B7E88CDF9D80109A935C573D4D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/4F40BD709D0340B7E88CDF9D80109A935C573D4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:90:0f:17:a5:b1:66:37:9c:b9:46:97:8e:37:79:d0:fb:e9: 76:e4:3f:d1:aa:ef:cf:9a:00:e4:60:56:9e:73:21:7b:fa:c7: 1c:87:e4:e5:d7:e2:70:00:32:29:da:4a:bc:9f:79:1f:7e:49: 73:d5:3e:6a:74:8d:de:8c:ce:cf:27:a9:ab:36:59:96:9c:9e: 05:f5:e4:5e:09:ba:18:79:5f:8a:16:9f:bc:73:25:6c:06:4d: 9a:f8:cc:02:a6:ac:f8:7b:6c:f0:39:59:c1:04:e5:f1:1d:a7: 3b:c4:c3:ae:b2:68:14:a9:51:88:f5:df:44:d8:96:3a:3f:67: ab:d3:36:38:a9:80:b5:87:e0:5a:48:f6:a0:3c:53:3c:15:5e: 9f:27:db:02:ae:d2:62:70:4a:13:08:4b:80:f1:46:6f:c4:3b: b9:5f:c4:64:8f:c3:81:0a:8c:7f:27:8a:a5:7b:fe:6e:b9:89: 13:ac:aa:dc:93:10:a1:bd:25:00:ec:64:6b:7d:6a:cd:82:22: cb:77:07:71:a1:c8:bc:c8:ef:7e:80:57:57:12:ed:62:df:03: cc:a1:32:c7:1a:ab:ba:7f:59:e3:a6:61:6c:70:6a:17:e9:4a: 8b:b5:f8:3a:83:0d:4c:d2:5f:5b:cb:98:fb:47:91:f9:30:08: 07:be:78:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbClskk2V7PQF7GAetwrl7NtAncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlBOTM1 QzU3M0Q0RDAeFw0yNjA5MTcxMDIxMzBaFw0yNjA5MTgxMDI2MzBaMDMxMTAvBgNV BAMTKDk4NjFEQTk3RDdFMzdCQUY4RDA5QzhFREQzOEE0ODNCNzkwQjhGQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpXMr/KlkEZQj/prDZ0woW4i+S yhvauS61eOBuYLZut2M+mVH1IWr8XUCTs5xrzIevHpUjNTNIHlrlE6RzzTqlKN2p cg5TN81O2+kH07zPMeJLJW6TO3hewsi7T8gSm5iwqHkz2fpjSPgjkeBpTrtCUCMR Sp3SjIkQ7G316u7e2psrBm9ireV2jEwvV7tGBWkjdBS8T1WvNiPspxfmVZNCKqCB dRQoF9kxHy372//Jv/+S1BlpMLpjGgpE1Jiibf72DL2ElO72WMOJinWAGClXcxk0 tn0elc3cHl+UfkZMQz2ZznaDKfU3s6RQiHN/x5KumuxDaHkKJ5pNoswTMHxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmGHal9fje6+NCcjt04pIO3kLj8MwHwYDVR0j BBgwFoAUT0C9cJ0DQLfojN+dgBCak1xXPU0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBmNjIxNzYtZTE2NC00OTJjLThhNzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5 RDAzNDBCN0U4OENERjlEODAxMDlBOTM1QzU3M0Q0RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80RjQwQkQ3MDlEMDM0MEI3RTg4Q0RGOUQ4MDEwOUE5MzVDNTcz RDRELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvNEY0MEJENzA5RDAzNDBCN0U4OENERjlEODAxMDlB OTM1QzU3M0Q0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmQDxelsWY3nLlGl443edD76XbkP9Gq78+a AORgVp5zIXv6xxyH5OXX4nAAMinaSryfeR9+SXPVPmp0jd6Mzs8nqas2WZacngX1 5F4Juhh5X4oWn7xzJWwGTZr4zAKmrPh7bPA5WcEE5fEdpzvEw66yaBSpUYj130TY ljo/Z6vTNjipgLWH4FpI9qA8UzwVXp8n2wKu0mJwShMIS4DxRm/EO7lfxGSPw4EK jH8niqV7/m65iROsqtyTEKG9JQDsZGt9as2CIst3B3GhyLzI736AV1cS7WLfA8yh Mscaq7p/WeOmYWxwahfpSou1+DqDDUzSX1vLmPtHkfkwCAe+eOU= -----END CERTIFICATE-----Generated at Thu Sep 17 13:49:34 2026 by rpki-client