$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft File: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft (raw, json) Hash identifier: q2mIdsJEBVqvDOPnKvbA6xZ8X5T6h4iUtX0BcvzrM7w= Subject key identifier: E1:FD:5E:E1:28:94:D2:CD:28:46:1A:2C:0A:7C:32:F5:6C:95:2E:63 Authority key identifier: 40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD Certificate issuer: /CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Certificate serial: 5FE8511508EE02AD1E57F9AE1B1AC4CF60765089 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft Manifest number: EB Signing time: Sat 24 Oct 2026 13:46:17 +0000 Manifest this update: Sat 24 Oct 2026 13:41:17 +0000 Manifest next update: Sun 25 Oct 2026 14:23:17 +0000 Files and hashes: 1: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl (hash: lsJPHbIlLe6wbS6ZDLByX4wjwB5cKqBZWeaKNoPPDF0=) 2: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: 82pwwteNrzde+AkchimH6q5PxB6j+cy+EeI6Qefnyuc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 14:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:e8:51:15:08:ee:02:ad:1e:57:f9:ae:1b:1a:c4:cf:60:76:50:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Validity Not Before: Oct 24 13:41:17 2026 GMT Not After : Oct 25 14:23:17 2026 GMT Subject: CN=E1FD5EE12894D2CD28461A2C0A7C32F56C952E63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:77:fe:8f:ef:0f:4d:81:76:9f:df:e5:c3:10: 1a:82:f7:e4:f2:9a:c9:c7:d5:38:fa:bf:3b:66:d4: cf:be:00:25:f3:34:46:0b:ba:16:24:0f:5a:39:f5: fa:0e:2f:91:16:2a:99:f0:c7:9c:2f:66:2b:71:9f: 33:c8:c4:de:1a:7f:69:f5:c6:2d:cc:3e:bf:db:09: 4c:d2:b9:73:30:e8:ef:84:90:88:fb:79:09:e7:b4: 0d:63:fc:31:b3:3e:fa:3d:90:e7:10:3f:e0:ba:38: 11:9b:34:b3:62:9a:92:39:dc:72:25:43:47:66:e8: 92:5e:60:ac:63:fd:26:d8:10:ba:d4:a6:58:be:96: d1:43:42:04:01:55:19:4b:22:e9:fe:b3:65:81:75: 15:c7:8d:ba:94:75:c3:e4:df:64:01:66:8d:f1:c1: 1d:24:51:71:07:c6:22:c8:e5:71:7f:e4:43:c2:46: 77:7d:8c:a8:78:82:c0:04:b4:9f:fe:8e:c2:cd:a4: b7:f1:78:8c:02:0d:08:5c:19:ae:ab:1c:e7:d8:19: 57:04:ef:6b:25:14:7a:3d:55:b4:ab:ef:22:b7:bf: 71:e2:c3:5c:53:81:30:61:e0:f2:92:26:0d:d2:89: 1a:dd:c5:2b:3b:eb:65:ba:ca:ec:fb:ab:bc:ae:66: 04:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FD:5E:E1:28:94:D2:CD:28:46:1A:2C:0A:7C:32:F5:6C:95:2E:63 X509v3 Authority Key Identifier: keyid:40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:a7:68:40:cc:12:db:34:35:10:6e:4a:93:de:ae:30:0b:ec: 6b:19:3c:5f:eb:7f:d3:a6:47:26:9c:f7:07:f8:d7:ef:b1:44: ea:49:f0:7c:57:f6:3d:6e:49:70:16:d0:19:8d:e3:ff:b7:74: 8a:61:4b:7d:4b:1f:36:17:3c:9a:36:88:d5:bb:35:e0:e8:63: c6:3a:33:15:8f:a8:32:d9:75:f1:37:42:3e:6a:65:8f:59:99: 78:b2:09:88:1d:41:db:c7:c9:bf:5d:de:1e:36:a3:cc:8b:3e: 97:2d:7c:4d:8f:aa:19:a0:30:e1:8b:1a:48:f8:3b:93:a2:06: 93:06:60:98:cf:46:86:bd:e2:f5:e4:a0:bb:55:b1:ad:82:05: 84:39:a7:1f:e1:35:2f:e6:c3:c7:c6:ab:0a:65:3f:c6:cd:9e: 83:51:ee:23:cc:cb:80:b6:1f:29:ba:39:8c:e2:2f:23:13:6c: f8:1b:6f:fd:48:a4:cf:e3:3f:81:0a:ad:9b:22:3e:c8:09:92: 32:47:85:26:8f:c3:6c:cd:86:f0:47:44:dd:05:d1:d2:d9:0d: c9:c8:be:b1:3a:43:3e:a2:98:22:3c:72:a7:1d:70:66:8e:73: a5:2a:3a:9d:49:65:95:9a:b3:53:a3:84:d0:79:c7:d5:b1:34: 84:44:e0:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX+hRFQjuAq0eV/muGxrEz2B2UIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVF MDVFNjNDRDAeFw0yNjEwMjQxMzQxMTdaFw0yNjEwMjUxNDIzMTdaMDMxMTAvBgNV BAMTKEUxRkQ1RUUxMjg5NEQyQ0QyODQ2MUEyQzBBN0MzMkY1NkM5NTJFNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDId/6P7w9NgXaf3+XDEBqC9+Ty msnH1Tj6vztm1M++ACXzNEYLuhYkD1o59foOL5EWKpnwx5wvZitxnzPIxN4af2n1 xi3MPr/bCUzSuXMw6O+EkIj7eQnntA1j/DGzPvo9kOcQP+C6OBGbNLNimpI53HIl Q0dm6JJeYKxj/SbYELrUpli+ltFDQgQBVRlLIun+s2WBdRXHjbqUdcPk32QBZo3x wR0kUXEHxiLI5XF/5EPCRnd9jKh4gsAEtJ/+jsLNpLfxeIwCDQhcGa6rHOfYGVcE 72slFHo9VbSr7yK3v3Hiw1xTgTBh4PKSJg3SiRrdxSs762W6yuz7q7yuZgRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4f1e4SiU0s0oRhosCnwy9WyVLmMwHwYDVR0j BBgwFoAUQORKxEtMOjG/at1qQ+1E/uBeY80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThjNGJhMTItNjNiYi00NTUwLWFjMGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0 QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVFMDVFNjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEU0NEFDNDRCNEMzQTMxQkY2QURENkE0M0VENDRGRUUwNUU2 M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0 RkVFMDVFNjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmnaEDMEts0NRBuSpPerjAL7GsZPF/rf9Om Ryac9wf41++xROpJ8HxX9j1uSXAW0BmN4/+3dIphS31LHzYXPJo2iNW7NeDoY8Y6 MxWPqDLZdfE3Qj5qZY9ZmXiyCYgdQdvHyb9d3h42o8yLPpctfE2PqhmgMOGLGkj4 O5OiBpMGYJjPRoa94vXkoLtVsa2CBYQ5px/hNS/mw8fGqwplP8bNnoNR7iPMy4C2 Hym6OYziLyMTbPgbb/1IpM/jP4EKrZsiPsgJkjJHhSaPw2zNhvBHRN0F0dLZDcnI vrE6Qz6imCI8cqcdcGaOc6UqOp1JZZWas1OjhNB5x9WxNIRE4HI= -----END CERTIFICATE-----Generated at Sun Oct 25 03:25:56 2026 by rpki-client