$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft File: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft (raw, json) Hash identifier: 2f1HzrLgPAFiKhToY2plrllhDVqRrVAD9WPuStpM8MM= Subject key identifier: 4E:1C:89:ED:2A:91:A1:4B:88:9B:47:85:B6:A3:76:78:DF:F5:76:6D Authority key identifier: 40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC Certificate issuer: /CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Certificate serial: 7AADB4381E0827D0551F55DFEB140F1A56536005 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft Manifest number: ED Signing time: Tue 27 Oct 2026 17:06:24 +0000 Manifest this update: Tue 27 Oct 2026 17:01:24 +0000 Manifest next update: Wed 28 Oct 2026 21:04:24 +0000 Files and hashes: 1: 3230322e35382e3136302e302f32302d3234203d3e203234353236.roa (hash: V/iHEE2Ii8SNOk9oIk4Wl3p9bTut1waaMc3vv9GaoqA=) 2: 40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl (hash: B3oAM+2a0G7zy/7YH0CK32nk22QumboaMVAPYWMuo9s=) 3: 323430323a646130303a3a2f33322d3438203d3e203234353236.roa (hash: d7g+2p+xoUWV+MwPYY5ADVkErhAIheoIAIDWV+3KQdA=) 4: 3230322e35382e3137362e302f32312d3234203d3e203234353236.roa (hash: tD3lCHzhXlz3IQI/wt9ZY4yLokS7e0eiL2Sj3ZiczNw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 28 Oct 2026 21:04:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ad:b4:38:1e:08:27:d0:55:1f:55:df:eb:14:0f:1a:56:53:60:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40FAE5A8EC712D9E6DB575D52972B69605542EEC Validity Not Before: Oct 27 17:01:24 2026 GMT Not After : Oct 28 21:04:24 2026 GMT Subject: CN=4E1C89ED2A91A14B889B4785B6A37678DFF5766D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:d1:cc:a6:37:8e:98:06:5d:6c:70:5a:a2:3a: 2f:3d:e0:fd:66:d9:99:e9:35:a2:19:79:84:3c:e6: 41:f3:7e:42:5a:43:86:88:7d:dd:90:22:eb:dd:1c: ad:10:95:47:f4:dd:0f:3f:c1:ca:70:4d:74:9f:f5: 9a:d6:d4:39:57:12:79:14:d5:f7:7b:b0:cc:11:61: cb:03:b8:4f:2d:6d:3e:86:6f:cb:90:71:95:b6:d9: 96:ff:d5:d6:4f:8d:f1:55:83:9f:88:65:ff:77:79: 1c:9d:c6:40:3e:14:19:42:42:f7:a3:fe:6a:59:52: d2:c1:77:4b:e1:7f:1e:d1:a3:f4:40:97:dd:5f:6b: eb:98:46:d9:3b:1d:6c:4e:55:65:16:02:08:60:e3: 7a:6a:5f:5c:3d:65:56:e0:38:08:b0:16:ac:22:55: da:0a:af:44:8d:fc:30:74:a5:09:51:83:51:fa:76: d0:6a:58:18:f3:23:01:88:be:75:71:b6:1a:05:8c: 69:fe:16:1a:3c:84:ef:07:31:c5:2b:1f:af:21:2a: 8c:95:fe:7c:2b:9a:96:20:45:5a:bc:4b:86:07:65: 75:5d:93:7a:54:b0:8b:76:b6:bd:77:a8:5b:d4:eb: ad:0d:91:d2:67:e4:e2:66:f1:90:51:ff:c4:92:22: 6b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:1C:89:ED:2A:91:A1:4B:88:9B:47:85:B6:A3:76:78:DF:F5:76:6D X509v3 Authority Key Identifier: keyid:40:FA:E5:A8:EC:71:2D:9E:6D:B5:75:D5:29:72:B6:96:05:54:2E:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40FAE5A8EC712D9E6DB575D52972B69605542EEC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b35129e4-2328-43d2-a458-9d3829614815/0/40FAE5A8EC712D9E6DB575D52972B69605542EEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:f7:ba:94:fd:e8:0a:b9:b1:79:33:85:79:ca:52:94:62:f1: 03:3b:fd:75:8d:a5:65:19:1c:a3:c0:fc:87:cb:e0:2b:27:6c: 96:63:0f:98:f7:b4:ed:77:27:97:49:2a:0c:a4:b2:b5:ae:94: d6:9e:db:52:8b:6d:58:79:b1:c8:df:81:c1:a9:fc:56:5e:dd: eb:e3:f5:51:d6:b8:e8:27:cb:07:b2:cf:3c:be:cc:19:5b:4b: 6a:24:3f:b2:32:78:6e:58:85:e9:a6:f9:12:e5:4d:e9:7d:ca: 9c:31:72:7a:f5:2a:1e:cc:c8:98:11:ca:84:68:5d:e9:34:96: 66:a9:db:d6:96:b5:c7:6c:02:46:9a:a2:1d:f7:fc:7a:84:45: 67:27:91:93:23:77:27:5f:98:37:13:a3:0c:a2:f6:a1:8d:3d: 50:49:dc:e2:d2:75:cb:97:5f:68:9d:03:c3:f2:41:90:7e:3f: a4:9b:62:c5:28:e4:ee:d0:d3:9c:e8:9c:f7:8d:d9:f2:e6:65: 4d:56:82:66:9d:9b:07:26:56:ca:78:59:12:40:5c:6d:8d:ff: 73:51:e1:ad:10:d7:3d:b4:ea:65:c2:10:f1:6e:ee:51:bd:81: 7c:6c:d1:22:08:c2:69:9a:a1:a6:cd:71:3d:3b:e2:4c:d2:a4: b5:26:14:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeq20OB4IJ9BVH1Xf6xQPGlZTYAUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYw NTU0MkVFQzAeFw0yNjEwMjcxNzAxMjRaFw0yNjEwMjgyMTA0MjRaMDMxMTAvBgNV BAMTKDRFMUM4OUVEMkE5MUExNEI4ODlCNDc4NUI2QTM3Njc4REZGNTc2NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0cymN46YBl1scFqiOi894P1m 2ZnpNaIZeYQ85kHzfkJaQ4aIfd2QIuvdHK0QlUf03Q8/wcpwTXSf9ZrW1DlXEnkU 1fd7sMwRYcsDuE8tbT6Gb8uQcZW22Zb/1dZPjfFVg5+IZf93eRydxkA+FBlCQvej /mpZUtLBd0vhfx7Ro/RAl91fa+uYRtk7HWxOVWUWAghg43pqX1w9ZVbgOAiwFqwi VdoKr0SN/DB0pQlRg1H6dtBqWBjzIwGIvnVxthoFjGn+Fho8hO8HMcUrH68hKoyV /nwrmpYgRVq8S4YHZXVdk3pUsIt2tr13qFvU660NkdJn5OJm8ZBR/8SSImtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUThyJ7SqRoUuIm0eFtqN2eN/1dm0wHwYDVR0j BBgwFoAUQPrlqOxxLZ5ttXXVKXK2lgVULuwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM1MTI5ZTQtMjMyOC00M2QyLWE0NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThF QzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2OTYwNTU0MkVFQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MEZBRTVBOEVDNzEyRDlFNkRCNTc1RDUyOTcyQjY5NjA1NTQy RUVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM1MTI5ZTQtMjMyOC00M2QyLWE0 NTgtOWQzODI5NjE0ODE1LzAvNDBGQUU1QThFQzcxMkQ5RTZEQjU3NUQ1Mjk3MkI2 OTYwNTU0MkVFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMP3upT96Aq5sXkzhXnKUpRi8QM7/XWNpWUZ HKPA/IfL4CsnbJZjD5j3tO13J5dJKgyksrWulNae21KLbVh5scjfgcGp/FZe3evj 9VHWuOgnyweyzzy+zBlbS2okP7IyeG5Yhemm+RLlTel9ypwxcnr1Kh7MyJgRyoRo Xek0lmap29aWtcdsAkaaoh33/HqERWcnkZMjdydfmDcTowyi9qGNPVBJ3OLSdcuX X2idA8PyQZB+P6SbYsUo5O7Q05zonPeN2fLmZU1WgmadmwcmVsp4WRJAXG2N/3NR 4a0Q1z206mXCEPFu7lG9gXxs0SIIwmmaoabNcT074kzSpLUmFNw= -----END CERTIFICATE-----Generated at Wed Oct 28 07:22:25 2026 by rpki-client