$ rpki-client -vvf rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft File: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft (raw, json) Hash identifier: Fan63mB2Bqii1T+0qC/GgVk67jfXw7M7MCGTHOnjsTY= Subject key identifier: 3F:8F:F6:85:F6:03:9C:22:0B:B6:7E:12:FD:EB:7D:12:2F:15:05:23 Authority key identifier: 40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD Certificate issuer: /CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Certificate serial: 6A1086D80FF505EF8125FDC58F202D0161343A96 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 03:18:48 +0000 Manifest this update: Sat 20 Jun 2026 03:13:48 +0000 Manifest next update: Sun 21 Jun 2026 03:23:48 +0000 Files and hashes: 1: 3130332e3137332e3133332e302f32342d3234203d3e20313437303834.roa (hash: 82pwwteNrzde+AkchimH6q5PxB6j+cy+EeI6Qefnyuc=) 2: 40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl (hash: alGByRQz+m1Cjoht6AIasJjyYJ11EpvqPejO3csoYHc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 03:23:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:10:86:d8:0f:f5:05:ef:81:25:fd:c5:8f:20:2d:01:61:34:3a:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD Validity Not Before: Jun 20 03:13:48 2026 GMT Not After : Jun 21 03:23:48 2026 GMT Subject: CN=3F8FF685F6039C220BB67E12FDEB7D122F150523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:64:bd:d2:6e:e2:4a:4d:80:e0:03:28:ab:e9: 7d:ee:ec:e9:16:5c:d5:01:fc:0f:b6:00:d1:0d:9b: b9:35:47:3e:36:2a:64:2c:15:73:29:a5:a7:c5:b2: 94:8e:bf:74:04:71:ee:21:9e:53:1b:bb:d8:f3:2a: 03:13:c7:23:cd:76:db:55:e9:87:70:e4:06:c9:d6: 08:14:d5:80:e1:de:13:90:cf:f7:a2:ab:7d:da:8d: 2e:38:8b:73:cd:0a:38:3a:63:fb:31:77:d7:48:63: ee:3a:0a:ce:f1:60:f1:8b:90:2a:d4:ba:53:41:15: ae:e6:3b:c8:5d:d8:f9:ad:0f:17:4f:6e:ca:6b:4e: 2c:b1:75:ce:a0:84:d3:8b:fc:ba:c0:12:7a:3f:64: e9:46:09:35:ff:93:62:35:61:a1:5d:b2:60:2c:5a: f3:98:2e:d8:b4:0c:6d:df:94:12:d5:94:9e:5b:0a: 31:38:0d:de:e6:15:12:17:41:0f:f9:2f:bb:5a:33: 6a:3a:e8:06:f1:1a:cc:29:6c:fc:a5:66:fd:5b:b8: 23:20:36:15:15:3c:8d:32:d7:ef:99:64:68:da:ac: a4:41:68:b3:a3:15:f9:6b:1b:d8:ed:fe:10:16:1d: ed:f5:9c:57:58:05:b6:f2:ca:c0:af:e8:6a:9c:8b: e8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8F:F6:85:F6:03:9C:22:0B:B6:7E:12:FD:EB:7D:12:2F:15:05:23 X509v3 Authority Key Identifier: keyid:40:E4:4A:C4:4B:4C:3A:31:BF:6A:DD:6A:43:ED:44:FE:E0:5E:63:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98c4ba12-63bb-4550-ac0f-53f08c463511/0/40E44AC44B4C3A31BF6ADD6A43ED44FEE05E63CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:53:cb:f1:f2:df:fc:e9:c1:7d:34:96:8d:49:04:3b:0f:54: 83:70:f6:12:d4:03:11:ba:ce:6a:4c:38:93:b5:04:05:25:2a: 5e:da:4e:45:fe:43:78:ea:db:0d:b8:9c:c1:8b:e2:92:a6:37: 55:5f:d4:3a:a5:ad:39:70:83:df:8d:60:d9:6d:1e:c2:14:32: 49:de:cc:0c:78:1b:45:e0:b3:e7:5f:8e:56:93:b2:7c:21:1b: 94:48:66:55:a7:c8:8c:86:6d:97:d7:af:c2:42:1a:0f:33:a8: dd:31:f5:52:e8:51:98:bf:b9:15:77:d4:32:27:92:68:10:5f: 73:45:22:be:f4:00:c5:e6:21:6f:2e:c9:b2:df:ef:f0:a8:8c: dd:c8:7a:a7:33:3b:c1:94:26:20:b7:17:c2:80:bb:66:fd:51: 63:96:f2:ab:06:8b:e2:5e:68:b0:29:14:8b:46:5d:0a:f7:ef: f0:b0:5f:61:2d:dc:ba:bc:ca:44:c7:fb:e8:91:7e:ca:c9:ff: 0a:99:1b:5b:a3:95:c2:ee:37:10:6a:80:a4:db:4b:f8:af:8b: 4a:b5:08:ac:c5:e4:d4:e1:c6:5d:99:be:47:ed:50:5d:8c:c6: 40:ea:ae:0d:a9:8c:dd:d4:d8:2f:92:0a:e3:ce:c5:e4:f1:b5: ce:03:11:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahCG2A/1Be+BJf3FjyAtAWE0OpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVF MDVFNjNDRDAeFw0yNjA2MjAwMzEzNDhaFw0yNjA2MjEwMzIzNDhaMDMxMTAvBgNV BAMTKDNGOEZGNjg1RjYwMzlDMjIwQkI2N0UxMkZERUI3RDEyMkYxNTA1MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZL3SbuJKTYDgAyir6X3u7OkW XNUB/A+2ANENm7k1Rz42KmQsFXMppafFspSOv3QEce4hnlMbu9jzKgMTxyPNdttV 6Ydw5AbJ1ggU1YDh3hOQz/eiq33ajS44i3PNCjg6Y/sxd9dIY+46Cs7xYPGLkCrU ulNBFa7mO8hd2PmtDxdPbsprTiyxdc6ghNOL/LrAEno/ZOlGCTX/k2I1YaFdsmAs WvOYLti0DG3flBLVlJ5bCjE4Dd7mFRIXQQ/5L7taM2o66AbxGswpbPylZv1buCMg NhUVPI0y1++ZZGjarKRBaLOjFflrG9jt/hAWHe31nFdYBbbyysCv6Gqci+gdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP4/2hfYDnCILtn4S/et9Ei8VBSMwHwYDVR0j BBgwFoAUQORKxEtMOjG/at1qQ+1E/uBeY80wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OThjNGJhMTItNjNiYi00NTUwLWFjMGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0 QjRDM0EzMUJGNkFERDZBNDNFRDQ0RkVFMDVFNjNDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEU0NEFDNDRCNEMzQTMxQkY2QURENkE0M0VENDRGRUUwNUU2 M0NELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOThjNGJhMTItNjNiYi00NTUwLWFj MGYtNTNmMDhjNDYzNTExLzAvNDBFNDRBQzQ0QjRDM0EzMUJGNkFERDZBNDNFRDQ0 RkVFMDVFNjNDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBTy/Hy3/zpwX00lo1JBDsPVINw9hLUAxG6 zmpMOJO1BAUlKl7aTkX+Q3jq2w24nMGL4pKmN1Vf1DqlrTlwg9+NYNltHsIUMkne zAx4G0Xgs+dfjlaTsnwhG5RIZlWnyIyGbZfXr8JCGg8zqN0x9VLoUZi/uRV31DIn kmgQX3NFIr70AMXmIW8uybLf7/CojN3IeqczO8GUJiC3F8KAu2b9UWOW8qsGi+Je aLApFItGXQr37/CwX2Et3Lq8ykTH++iRfsrJ/wqZG1ujlcLuNxBqgKTbS/ivi0q1 CKzF5NThxl2ZvkftUF2MxkDqrg2pjN3U2C+SCuPOxeTxtc4DESM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:03 2026 by rpki-client