$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft File: 40CAF98483C41DA7BDC759A128942EA7634B575E.mft (raw, json) Hash identifier: Zf6VvLhEfknniBtM1wKBYW68kfO3lwWfIubRX1lNIw8= Subject key identifier: AB:59:F6:7C:87:79:A4:8B:DC:C4:7B:5C:73:A0:2A:AB:70:F7:70:20 Authority key identifier: 40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E Certificate issuer: /CN=40CAF98483C41DA7BDC759A128942EA7634B575E Certificate serial: 1B8A056C0034C236DD06FDEE5805A9443198AF0C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft Manifest number: EA Signing time: Sat 24 Oct 2026 23:59:09 +0000 Manifest this update: Sat 24 Oct 2026 23:54:09 +0000 Manifest next update: Mon 26 Oct 2026 02:49:09 +0000 Files and hashes: 1: 3130332e3138392e3131302e302f32342d3234203d3e20313439373439.roa (hash: XUWyeU0kh6yequAHewJPZ2w5whyQqogEceIV/kyUeMY=) 2: 3130332e3138392e3131312e302f32342d3234203d3e20313439373439.roa (hash: CWqy2Yz1lUV+bgx0wIDq9A3JsKeVTWQekOJKBjnBtxc=) 3: 3130332e3138392e3131302e302f32332d3233203d3e20313439373439.roa (hash: Meb8QhT2vDYvkg9nVv8g0QFyTeOgXHkvo1+qGouJHvs=) 4: 40CAF98483C41DA7BDC759A128942EA7634B575E.crl (hash: YwYfIOyn5fr6P7svAOtJ1jr2fAjFJtnbQutDRoTnCr0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 02:49:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8a:05:6c:00:34:c2:36:dd:06:fd:ee:58:05:a9:44:31:98:af:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40CAF98483C41DA7BDC759A128942EA7634B575E Validity Not Before: Oct 24 23:54:09 2026 GMT Not After : Oct 26 02:49:09 2026 GMT Subject: CN=AB59F67C8779A48BDCC47B5C73A02AAB70F77020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:6a:7b:17:43:c7:ba:75:b4:5a:f3:25:fe:df: 6e:3e:a7:90:ff:5e:c0:4c:22:3a:7f:d7:7f:5d:88: 66:b9:1e:6f:5e:54:3b:80:0b:ea:a9:41:65:c1:d4: b4:cc:49:b9:f8:02:20:88:ab:bd:4b:21:b7:fc:f1: 84:78:bb:d3:a6:cc:49:e3:81:63:f8:7d:a2:84:ca: 93:cf:ff:b1:4e:a5:48:21:d2:7b:82:a4:2e:ea:86: b3:22:0d:8c:e0:35:5a:59:10:21:a0:63:92:c2:75: 90:e3:82:e5:1a:9f:21:65:81:b9:83:44:01:98:14: 42:5e:b9:b6:14:a4:00:8d:04:9f:e1:cb:64:d3:3b: 1c:dd:ae:29:17:cb:4c:16:b8:d7:01:9d:78:43:14: f6:cf:fd:d7:be:be:16:21:78:20:be:5e:29:50:9c: 80:f7:71:7c:0f:35:53:4a:41:9e:4e:e6:2c:c4:30: b1:9f:44:56:ab:3b:52:22:04:4c:c8:64:d2:ea:3f: 92:23:8b:23:5f:9c:e9:71:54:5b:16:f9:30:42:58: ed:c2:58:a1:7c:df:20:25:8d:0c:47:1f:6a:3d:e4: f1:b0:e4:4a:2a:50:f1:65:9f:27:1b:81:55:39:a4: ec:b1:d3:e8:ea:4f:eb:ad:96:98:2f:fe:e4:ef:e9: 22:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:59:F6:7C:87:79:A4:8B:DC:C4:7B:5C:73:A0:2A:AB:70:F7:70:20 X509v3 Authority Key Identifier: keyid:40:CA:F9:84:83:C4:1D:A7:BD:C7:59:A1:28:94:2E:A7:63:4B:57:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40CAF98483C41DA7BDC759A128942EA7634B575E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d05e5a30-0802-4c5c-947e-98ef285f4f6b/0/40CAF98483C41DA7BDC759A128942EA7634B575E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:34:8a:59:bf:1c:cd:56:08:56:df:4a:a4:f4:a6:fc:91:4b: 95:f3:ef:d9:4a:ad:42:16:2a:03:c3:d6:93:af:cf:ab:51:59: ad:65:b8:dd:03:b1:21:70:33:8f:f9:99:70:c5:dd:76:fe:2c: f2:2f:3d:4d:37:4b:21:56:13:d1:82:f0:f4:19:cf:68:84:ac: 69:64:bd:9f:32:e6:7f:cf:60:ff:41:52:f9:00:a6:2f:ed:9b: 90:50:69:62:b0:fb:29:8d:56:ac:ce:d6:7f:a5:04:28:6f:89: c1:4a:49:bc:d6:24:06:f4:24:02:c7:cc:e5:2f:f7:6e:ab:fa: 71:2d:ff:82:a2:f0:53:fe:2f:be:31:03:ef:b6:ed:d9:1a:7c: 05:2a:4a:56:46:a8:86:d7:c9:f2:ba:46:4e:61:ff:ef:5a:b1: 7e:00:5b:dd:d3:21:e5:1d:df:b3:6c:52:dc:11:d5:55:96:2e: 24:83:06:95:c1:ce:90:2a:48:0b:37:a7:ba:bb:f9:9e:29:17: a3:5f:5c:f2:8d:21:c2:84:9d:9c:46:b1:af:15:b6:a5:0e:c3: 26:1e:d1:06:d9:31:60:9b:ab:61:73:af:23:86:0c:76:9e:c7: cb:df:dd:4b:5b:7a:5f:6c:32:0a:3b:dd:da:e2:f9:5c:c9:0c: 06:58:57:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4oFbAA0wjbdBv3uWAWpRDGYrwwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2 MzRCNTc1RTAeFw0yNjEwMjQyMzU0MDlaFw0yNjEwMjYwMjQ5MDlaMDMxMTAvBgNV BAMTKEFCNTlGNjdDODc3OUE0OEJEQ0M0N0I1QzczQTAyQUFCNzBGNzcwMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkansXQ8e6dbRa8yX+324+p5D/ XsBMIjp/139diGa5Hm9eVDuAC+qpQWXB1LTMSbn4AiCIq71LIbf88YR4u9OmzEnj gWP4faKEypPP/7FOpUgh0nuCpC7qhrMiDYzgNVpZECGgY5LCdZDjguUanyFlgbmD RAGYFEJeubYUpACNBJ/hy2TTOxzdrikXy0wWuNcBnXhDFPbP/de+vhYheCC+XilQ nID3cXwPNVNKQZ5O5izEMLGfRFarO1IiBEzIZNLqP5IjiyNfnOlxVFsW+TBCWO3C WKF83yAljQxHH2o95PGw5EoqUPFlnycbgVU5pOyx0+jqT+utlpgv/uTv6SIfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1n2fId5pIvcxHtcc6Aqq3D3cCAwHwYDVR0j BBgwFoAUQMr5hIPEHae9x1mhKJQup2NLV14wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDA1ZTVhMzAtMDgwMi00YzVjLTk0N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4 M0M0MURBN0JEQzc1OUExMjg5NDJFQTc2MzRCNTc1RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MENBRjk4NDgzQzQxREE3QkRDNzU5QTEyODk0MkVBNzYzNEI1 NzVFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDA1ZTVhMzAtMDgwMi00YzVjLTk0 N2UtOThlZjI4NWY0ZjZiLzAvNDBDQUY5ODQ4M0M0MURBN0JEQzc1OUExMjg5NDJF QTc2MzRCNTc1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY0ilm/HM1WCFbfSqT0pvyRS5Xz79lKrUIW KgPD1pOvz6tRWa1luN0DsSFwM4/5mXDF3Xb+LPIvPU03SyFWE9GC8PQZz2iErGlk vZ8y5n/PYP9BUvkApi/tm5BQaWKw+ymNVqzO1n+lBChvicFKSbzWJAb0JALHzOUv 926r+nEt/4Ki8FP+L74xA++27dkafAUqSlZGqIbXyfK6Rk5h/+9asX4AW93TIeUd 37NsUtwR1VWWLiSDBpXBzpAqSAs3p7q7+Z4pF6NfXPKNIcKEnZxGsa8VtqUOwyYe 0QbZMWCbq2FzryOGDHaex8vf3Utbel9sMgo73dri+VzJDAZYV7U= -----END CERTIFICATE-----Generated at Sun Oct 25 16:11:56 2026 by rpki-client