$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft File: C940C2C66C795EF89DE57AA820616ED8225890BC.mft (raw, json) Hash identifier: RAB0dczUZPgR7aKXYYOEATyfgQJLWrREx3QuEaj7y0A= Subject key identifier: 7D:B6:F2:0A:B3:A8:7B:4C:77:A3:90:A0:98:01:30:7B:02:F3:BD:7A Authority key identifier: C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC Certificate issuer: /CN=C940C2C66C795EF89DE57AA820616ED8225890BC Certificate serial: 157E9AB78AFBA08BF28AC80ACDB0844A1616FAE4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft Manifest number: EA Signing time: Fri 23 Oct 2026 18:21:57 +0000 Manifest this update: Fri 23 Oct 2026 18:16:57 +0000 Manifest next update: Sat 24 Oct 2026 20:56:57 +0000 Files and hashes: 1: 3130332e3138312e3234392e302f32342d3234203d3e20313439343030.roa (hash: vzqFmGBEYlWv2Vkupk5lCGYSaPO908e8n3P9j3Q5sLI=) 2: C940C2C66C795EF89DE57AA820616ED8225890BC.crl (hash: iMb32m3w5k0d6ViWy6cIYLuWWPKMwx8UgaoULnQSdTs=) 3: 3130332e3138312e3234382e302f32332d3234203d3e20313439343030.roa (hash: EIKjtb6bLXexCIbSvIG/auaO1yK9dSi+ewqDx2meiK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 24 Oct 2026 20:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:7e:9a:b7:8a:fb:a0:8b:f2:8a:c8:0a:cd:b0:84:4a:16:16:fa:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C940C2C66C795EF89DE57AA820616ED8225890BC Validity Not Before: Oct 23 18:16:57 2026 GMT Not After : Oct 24 20:56:57 2026 GMT Subject: CN=7DB6F20AB3A87B4C77A390A09801307B02F3BD7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ae:9e:d3:26:99:0d:26:30:e2:7a:7e:a5:2c: af:24:89:3b:c0:ff:28:0c:39:ff:f2:23:b3:a8:8b: c6:63:9e:16:52:29:ed:2c:85:52:79:57:b2:5e:08: fa:28:f9:f2:9c:c9:fd:0e:c9:b7:36:17:81:af:b4: 6c:bb:0b:35:3a:db:74:d0:0c:cb:8a:40:04:4b:0f: 25:42:7a:a7:b9:56:7c:fa:8a:da:c5:67:03:30:c1: 6a:5b:f9:9f:8f:d9:d6:5a:5f:9c:ca:00:ea:a4:68: 0e:89:ac:89:c3:95:5f:ab:23:2d:30:c0:a2:22:ba: 48:a0:80:08:4d:68:37:56:5c:9d:37:8a:80:47:44: 46:80:4a:68:aa:53:c9:6b:03:9b:78:69:66:c7:3a: 8d:fc:2a:c7:cf:6a:6b:4e:3e:ff:22:6e:6c:79:04: d0:e5:d1:89:5c:47:b6:3a:54:99:c3:74:46:00:11: 14:52:ea:a1:cc:47:61:5c:04:f7:c8:e9:44:3d:d1: cd:38:47:46:53:26:4e:0b:96:23:32:98:b3:96:ce: 74:60:a5:9b:51:03:c2:6d:76:d1:e6:d5:ab:03:11: f1:a3:2d:72:f3:4a:e3:b4:21:e3:4b:e8:90:e4:56: 03:73:3d:4f:f2:de:b3:9c:4d:5b:88:8e:ca:08:44: 14:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B6:F2:0A:B3:A8:7B:4C:77:A3:90:A0:98:01:30:7B:02:F3:BD:7A X509v3 Authority Key Identifier: keyid:C9:40:C2:C6:6C:79:5E:F8:9D:E5:7A:A8:20:61:6E:D8:22:58:90:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C940C2C66C795EF89DE57AA820616ED8225890BC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce4e103e-3d78-4ae0-9ba4-d1792ffa04ac/0/C940C2C66C795EF89DE57AA820616ED8225890BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c6:6e:2b:96:e1:69:c1:dc:06:d9:30:72:4d:b9:61:90:41: 4a:94:1c:31:c8:68:3c:cb:ec:35:ec:45:68:2b:43:5e:af:30: 1e:c1:56:92:87:30:3b:db:77:c9:ca:2d:7b:64:fb:a8:b2:90: 0f:eb:fd:b1:3f:49:bc:57:81:5b:fd:84:7f:a8:aa:14:d8:35: a8:8c:54:33:dd:e1:7b:9a:48:00:b1:97:83:a4:d1:4c:df:70: 61:94:76:28:6d:6d:7b:f1:59:2a:c8:50:b5:58:37:a0:b3:1e: a1:14:d7:01:55:bc:da:76:fc:01:aa:0b:12:81:0d:d6:54:2e: d3:2a:83:c5:6a:1c:a3:9a:e7:03:22:8b:f0:68:b4:db:f9:1e: 05:25:86:9e:ce:21:38:3b:17:47:47:8f:68:13:5f:01:f1:03: 85:b3:5e:32:2e:84:37:c1:21:6a:09:52:f3:9c:ea:bb:93:6a: 3b:a8:43:7a:1e:b4:e6:db:75:7b:ee:1c:26:97:49:78:59:11: b2:86:fa:ee:af:3a:24:aa:01:a4:5d:3b:dd:58:ff:b0:26:23: f2:90:c3:40:d8:ba:4a:87:ed:3b:a4:ce:c6:83:f5:c3:63:f1: c8:39:e5:29:12:a9:bb:3b:12:58:6b:f4:9b:59:f8:9f:66:cc: fc:6e:82:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFX6at4r7oIvyisgKzbCEShYW+uQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgy MjU4OTBCQzAeFw0yNjEwMjMxODE2NTdaFw0yNjEwMjQyMDU2NTdaMDMxMTAvBgNV BAMTKDdEQjZGMjBBQjNBODdCNEM3N0EzOTBBMDk4MDEzMDdCMDJGM0JEN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdrp7TJpkNJjDien6lLK8kiTvA /ygMOf/yI7Ooi8ZjnhZSKe0shVJ5V7JeCPoo+fKcyf0Oybc2F4GvtGy7CzU623TQ DMuKQARLDyVCeqe5Vnz6itrFZwMwwWpb+Z+P2dZaX5zKAOqkaA6JrInDlV+rIy0w wKIiukiggAhNaDdWXJ03ioBHREaASmiqU8lrA5t4aWbHOo38KsfPamtOPv8ibmx5 BNDl0YlcR7Y6VJnDdEYAERRS6qHMR2FcBPfI6UQ90c04R0ZTJk4LliMymLOWznRg pZtRA8JtdtHm1asDEfGjLXLzSuO0IeNL6JDkVgNzPU/y3rOcTVuIjsoIRBQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbbyCrOoe0x3o5CgmAEwewLzvXowHwYDVR0j BBgwFoAUyUDCxmx5Xvid5XqoIGFu2CJYkLwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U0ZTEwM2UtM2Q3OC00YWUwLTliYTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2 Qzc5NUVGODlERTU3QUE4MjA2MTZFRDgyMjU4OTBCQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DOTQwQzJDNjZDNzk1RUY4OURFNTdBQTgyMDYxNkVEODIyNTg5 MEJDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U0ZTEwM2UtM2Q3OC00YWUwLTli YTQtZDE3OTJmZmEwNGFjLzAvQzk0MEMyQzY2Qzc5NUVGODlERTU3QUE4MjA2MTZF RDgyMjU4OTBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnGbiuW4WnB3AbZMHJNuWGQQUqUHDHIaDzL 7DXsRWgrQ16vMB7BVpKHMDvbd8nKLXtk+6iykA/r/bE/SbxXgVv9hH+oqhTYNaiM VDPd4XuaSACxl4Ok0UzfcGGUdihtbXvxWSrIULVYN6CzHqEU1wFVvNp2/AGqCxKB DdZULtMqg8VqHKOa5wMii/BotNv5HgUlhp7OITg7F0dHj2gTXwHxA4WzXjIuhDfB IWoJUvOc6ruTajuoQ3oetObbdXvuHCaXSXhZEbKG+u6vOiSqAaRdO91Y/7AmI/KQ w0DYukqH7TukzsaD9cNj8cg55SkSqbs7Elhr9JtZ+J9mzPxugsw= -----END CERTIFICATE-----Generated at Sat Oct 24 09:07:08 2026 by rpki-client