$ rpki-client -vvf rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft File: F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft (raw, json) Hash identifier: zaEyZ0ZQ3Uh8TGqumZKPhpZR/c90yqWyxI9CZrkDo8o= Subject key identifier: BB:6B:19:EF:2F:FB:BA:34:02:CA:EE:F2:95:8A:66:03:F3:78:E3:80 Authority key identifier: F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 Certificate issuer: /CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Certificate serial: 0DF23D0EE0B6A41EEFD3221F0C8C9D41794D0319 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft Manifest number: 92 Signing time: Thu 20 Aug 2026 03:32:07 +0000 Manifest this update: Thu 20 Aug 2026 03:27:07 +0000 Manifest next update: Fri 21 Aug 2026 07:26:07 +0000 Files and hashes: 1: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: aue2+kr7HTRk/tNCSk94pVQ+a17G6VqHTtAotfDji1I=) 2: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: /vHPttEy0S/+L0N0xJZEd760O2VDEp7iklZoHe07g/s=) 3: F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl (hash: JHJ97ixI0/X+Hl2XJapJskXn2omHPwEeMazMc6aqJRM=) 4: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: NyzMvcvP5P8597pti0RlOgOJdexX/ZQfgDt+YCdTIKE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 21 Aug 2026 06:28:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:f2:3d:0e:e0:b6:a4:1e:ef:d3:22:1f:0c:8c:9d:41:79:4d:03:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F840F8B6D332E57EA3DCB867DBB0D85427B24040 Validity Not Before: Aug 20 03:27:07 2026 GMT Not After : Aug 21 07:26:07 2026 GMT Subject: CN=BB6B19EF2FFBBA3402CAEEF2958A6603F378E380 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:75:07:31:09:8e:e5:03:0b:de:af:bd:ba:89: 1b:af:fb:dd:d4:e9:12:82:16:ec:2f:97:2a:cf:c7: d7:bd:8d:31:01:53:a7:cd:8c:2c:5e:09:ad:e4:e8: a0:28:27:b6:3c:da:3e:96:7b:1f:9e:f0:07:3b:15: 64:64:59:b5:b1:ad:48:35:28:26:d2:4e:79:47:ff: 84:98:f4:0d:82:69:c9:d0:74:20:70:36:f1:7a:df: f3:e7:e8:de:9d:88:55:b0:68:e1:bb:57:5b:9e:29: 8c:1c:a1:a6:d9:68:d4:6f:07:d2:9e:a1:74:34:65: a3:b3:c7:56:a0:cb:73:83:78:f1:90:30:d4:eb:2f: 15:5a:9f:60:ce:94:2a:d5:cd:88:bb:be:13:cd:f1: 8f:73:94:b5:ef:38:04:5d:d7:6e:3b:41:8c:58:1b: da:c9:f0:00:b6:8f:f2:a5:9b:8b:fb:68:60:5b:79: 68:1e:5e:76:db:6e:fa:87:77:cb:52:8c:37:de:00: f8:88:e6:ed:01:5e:53:45:fe:d0:90:c8:ea:ce:42: 16:8b:45:2c:b0:78:65:e9:83:39:1c:5c:80:f2:3a: cc:1a:d1:11:53:12:ca:21:c5:56:32:c5:67:c2:e3: e6:81:ce:74:74:8a:8f:b9:1c:db:27:8d:0c:30:33: 17:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:6B:19:EF:2F:FB:BA:34:02:CA:EE:F2:95:8A:66:03:F3:78:E3:80 X509v3 Authority Key Identifier: keyid:F8:40:F8:B6:D3:32:E5:7E:A3:DC:B8:67:DB:B0:D8:54:27:B2:40:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F840F8B6D332E57EA3DCB867DBB0D85427B24040.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/F840F8B6D332E57EA3DCB867DBB0D85427B24040.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:09:8a:8f:09:20:b4:cb:70:0a:99:11:09:e0:fa:a0:b0:42: 9e:10:ad:8b:31:92:d2:91:5a:a6:82:3e:1e:58:a7:54:a9:c0: a5:ab:81:60:b8:63:23:85:6c:da:35:93:4f:52:8e:b1:a5:8f: 4f:62:ce:33:ad:61:8a:a3:78:4a:f0:c0:92:e0:eb:05:40:a0: 57:f0:e6:a0:36:c3:14:45:b8:91:6c:80:d3:61:f2:2c:b1:10: a9:a3:e4:8d:47:ba:49:67:c4:b3:67:86:a7:27:f3:56:17:52: 97:d2:b2:54:c1:1a:6c:e0:57:81:48:21:b4:71:c0:71:1c:6b: 9c:fe:0b:c2:41:29:a9:9e:c3:bf:18:b4:3c:63:33:79:d0:09: eb:8c:51:83:fb:96:98:c7:af:1d:00:fc:14:6b:e7:a1:9d:4a: b5:a9:f9:a3:44:fa:8e:24:02:62:e4:1a:d6:11:43:70:77:d1: 4b:af:9c:33:7a:2f:92:95:a1:4b:a2:ae:3e:6c:e3:18:24:9f: de:e8:bc:40:ae:a2:01:a2:b8:5f:46:53:91:70:32:bf:07:bc: 19:69:14:dc:32:ed:13:0f:0e:c7:bf:1d:1e:86:7d:67:28:8f: 77:a1:78:43:a9:25:2e:25:ca:bb:c3:46:3a:ef:51:4a:9e:c2: e9:dc:e4:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDfI9DuC2pB7v0yIfDIydQXlNAxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4NTQy N0IyNDA0MDAeFw0yNjA4MjAwMzI3MDdaFw0yNjA4MjEwNzI2MDdaMDMxMTAvBgNV BAMTKEJCNkIxOUVGMkZGQkJBMzQwMkNBRUVGMjk1OEE2NjAzRjM3OEUzODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1dQcxCY7lAwver726iRuv+93U 6RKCFuwvlyrPx9e9jTEBU6fNjCxeCa3k6KAoJ7Y82j6Wex+e8Ac7FWRkWbWxrUg1 KCbSTnlH/4SY9A2CacnQdCBwNvF63/Pn6N6diFWwaOG7V1ueKYwcoabZaNRvB9Ke oXQ0ZaOzx1agy3ODePGQMNTrLxVan2DOlCrVzYi7vhPN8Y9zlLXvOARd1247QYxY G9rJ8AC2j/Klm4v7aGBbeWgeXnbbbvqHd8tSjDfeAPiI5u0BXlNF/tCQyOrOQhaL RSyweGXpgzkcXIDyOswa0RFTEsohxVYyxWfC4+aBznR0io+5HNsnjQwwMxdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu2sZ7y/7ujQCyu7ylYpmA/N444AwHwYDVR0j BBgwFoAU+ED4ttMy5X6j3Lhn27DYVCeyQEAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA0M2E4ODktYzg2MS00ZDI5LTlkNzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZE MzMyRTU3RUEzRENCODY3REJCMEQ4NTQyN0IyNDA0MC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GODQwRjhCNkQzMzJFNTdFQTNEQ0I4NjdEQkIwRDg1NDI3QjI0 MDQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvRjg0MEY4QjZEMzMyRTU3RUEzRENCODY3REJCMEQ4 NTQyN0IyNDA0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcJio8JILTLcAqZEQng+qCwQp4QrYsxktKR WqaCPh5Yp1SpwKWrgWC4YyOFbNo1k09SjrGlj09izjOtYYqjeErwwJLg6wVAoFfw 5qA2wxRFuJFsgNNh8iyxEKmj5I1HuklnxLNnhqcn81YXUpfSslTBGmzgV4FIIbRx wHEca5z+C8JBKamew78YtDxjM3nQCeuMUYP7lpjHrx0A/BRr56GdSrWp+aNE+o4k AmLkGtYRQ3B30UuvnDN6L5KVoUuirj5s4xgkn97ovECuogGiuF9GU5FwMr8HvBlp FNwy7RMPDse/HR6GfWcoj3eheEOpJS4lyrvDRjrvUUqewunc5N0= -----END CERTIFICATE-----Generated at Thu Aug 20 07:04:39 2026 by rpki-client