$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft File: 40064999DEC3F3BD85C4F883982B58D76246EE84.mft (raw, json) Hash identifier: JhIqBrynAIptVKlE1DamaDnQSmGLaoArrqp5ObekCho= Subject key identifier: 10:6B:76:2A:6C:1E:F7:C9:03:21:FC:ED:E8:0F:C8:FB:83:F8:51:82 Authority key identifier: 40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 Certificate issuer: /CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Certificate serial: 5BC6D63C0C3B1722562779BB1504D41F7234D17B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 07:32:50 +0000 Manifest this update: Thu 17 Sep 2026 07:27:50 +0000 Manifest next update: Fri 18 Sep 2026 09:30:50 +0000 Files and hashes: 1: 3230322e35322e3134362e302f32332d3234203d3e203435333234.roa (hash: 15DFdluo9UaifGQn5fMYNCJmiCD2xxrlbDWmIvigFwY=) 2: 3230332e3136312e3138342e302f32332d3234203d3e203436303530.roa (hash: xfswO543iSh9SG/x27NWXDQKULYEPhHMqzXL1c7JMEI=) 3: 323030313a6466353a643230303a3a2f34382d3438203d3e203436303530.roa (hash: pVbAEY3jNiaOa2/I5+aOrojXUWJy/5MAJ3dSN22Pu3k=) 4: 3130332e33302e3134342e302f32322d3234203d3e203436303530.roa (hash: Ohcd5IRv432594So8px8ggqzCMekQcg85+VPfjz2MNY=) 5: 40064999DEC3F3BD85C4F883982B58D76246EE84.crl (hash: O79aD0PHVHf4VhNhHxGc58Lzp2dfUyxLtoymjwpT6sI=) 6: 3130332e33302e3134372e302f32342d3234203d3e203436303530.roa (hash: DFH3OJkZQ9cFzoKHDc7LTDhy6MoupWNGOe7R0l60x2E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:30:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c6:d6:3c:0c:3b:17:22:56:27:79:bb:15:04:d4:1f:72:34:d1:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=40064999DEC3F3BD85C4F883982B58D76246EE84 Validity Not Before: Sep 17 07:27:50 2026 GMT Not After : Sep 18 09:30:50 2026 GMT Subject: CN=106B762A6C1EF7C90321FCEDE80FC8FB83F85182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:31:5c:4e:88:89:4c:76:29:2a:74:13:74: a4:53:21:1e:a5:86:e5:ef:9b:f2:5d:64:d7:27:a6: ec:fc:d0:92:71:6e:ec:b5:ff:e5:ee:50:4e:6f:0a: 4f:e0:c9:e2:04:e3:b9:06:97:a0:d8:a2:34:0e:d9: 4c:1d:d5:f7:fd:28:e8:c1:bd:1d:aa:88:93:53:d4: 3b:64:d4:f0:a5:ee:5c:9b:02:cc:04:b9:4f:f7:ec: fa:8f:f7:4b:37:c0:5e:8f:42:c1:1c:fc:22:2b:66: ff:27:b1:fc:18:3a:57:d7:bf:1b:ff:7b:90:3c:79: 9b:5b:da:eb:6d:a1:a5:25:15:ff:b0:4c:ed:7a:7b: 2e:1b:4d:dd:17:b1:22:e1:76:92:0e:f9:66:67:73: 1c:13:7c:61:34:fa:14:8d:13:ea:7f:92:16:46:2d: 63:db:d5:8f:80:5a:7c:5b:71:36:ee:2f:c6:3d:e8: e0:16:c5:7a:a6:31:67:2b:06:d7:10:8e:77:a2:ae: 5e:ae:7e:95:68:d5:e0:e8:0b:3e:79:aa:06:da:63: 7a:b4:b7:3c:01:9c:af:f1:78:99:6b:eb:36:0f:49: 2f:d4:b1:f2:5d:78:e1:ab:4b:6e:d6:10:8d:52:57: d7:83:71:32:fe:c9:6c:44:e8:7a:65:05:2e:82:c6: a9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:6B:76:2A:6C:1E:F7:C9:03:21:FC:ED:E8:0F:C8:FB:83:F8:51:82 X509v3 Authority Key Identifier: keyid:40:06:49:99:DE:C3:F3:BD:85:C4:F8:83:98:2B:58:D7:62:46:EE:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/40064999DEC3F3BD85C4F883982B58D76246EE84.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d0d2d3e3-4c20-4a90-833e-ead43c33991e/0/40064999DEC3F3BD85C4F883982B58D76246EE84.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:95:d8:26:f3:ed:f8:b6:f7:46:b1:33:78:28:ef:08:b6:d2: 76:02:f5:7b:7c:fc:e9:78:65:6a:f0:eb:ba:c5:c2:68:c0:90: f4:94:64:1c:6d:b2:80:c0:21:66:09:80:c9:41:f9:a1:7b:bc: e2:bd:f3:80:1e:ed:4f:05:ba:4b:bb:e9:01:d8:27:1a:52:6c: be:91:11:d1:5e:be:1c:98:5f:30:03:83:e8:07:d6:6f:10:56: d8:aa:e4:53:79:7d:45:e4:ac:f7:89:55:40:11:d1:8d:eb:92: be:16:79:91:98:3d:85:03:dd:95:d1:0f:c4:3a:c4:a3:45:12: 3e:03:c7:21:9b:61:8d:cb:da:88:7f:45:58:e6:99:f7:fa:79: 2d:89:4c:8a:d1:e9:6b:9c:06:98:07:0e:c6:52:11:01:49:ea: 31:63:ca:7d:3e:33:ea:f2:57:05:4f:74:5d:9a:c3:6d:5b:e4: 00:30:bc:7b:77:4e:4f:05:06:a1:21:a2:31:81:f3:06:aa:19: 1d:c9:72:99:fe:a2:2d:58:a0:06:d9:31:ef:e5:b2:a1:ea:8b: b6:50:53:06:7d:62:23:0b:3f:62:ec:c1:d4:5d:f6:b1:98:ad: ce:4c:2b:f3:4c:82:8b:3c:2b:b1:f1:22:77:98:99:f1:a6:e8: 2e:bd:00:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8bWPAw7FyJWJ3m7FQTUH3I00XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2 MjQ2RUU4NDAeFw0yNjA5MTcwNzI3NTBaFw0yNjA5MTgwOTMwNTBaMDMxMTAvBgNV BAMTKDEwNkI3NjJBNkMxRUY3QzkwMzIxRkNFREU4MEZDOEZCODNGODUxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpjFcToiJTHYpKnQTdKRTIR6l huXvm/JdZNcnpuz80JJxbuy1/+XuUE5vCk/gyeIE47kGl6DYojQO2Uwd1ff9KOjB vR2qiJNT1Dtk1PCl7lybAswEuU/37PqP90s3wF6PQsEc/CIrZv8nsfwYOlfXvxv/ e5A8eZtb2uttoaUlFf+wTO16ey4bTd0XsSLhdpIO+WZncxwTfGE0+hSNE+p/khZG LWPb1Y+AWnxbcTbuL8Y96OAWxXqmMWcrBtcQjneirl6ufpVo1eDoCz55qgbaY3q0 tzwBnK/xeJlr6zYPSS/UsfJdeOGrS27WEI1SV9eDcTL+yWxE6HplBS6CxqnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEGt2Kmwe98kDIfzt6A/I+4P4UYIwHwYDVR0j BBgwFoAUQAZJmd7D872FxPiDmCtY12JG7oQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDBkMmQzZTMtNGMyMC00YTkwLTgzM2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlE RUMzRjNCRDg1QzRGODgzOTgyQjU4RDc2MjQ2RUU4NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80MDA2NDk5OURFQzNGM0JEODVDNEY4ODM5ODJCNThENzYyNDZF RTg0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDBkMmQzZTMtNGMyMC00YTkwLTgz M2UtZWFkNDNjMzM5OTFlLzAvNDAwNjQ5OTlERUMzRjNCRDg1QzRGODgzOTgyQjU4 RDc2MjQ2RUU4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG2V2Cbz7fi290axM3go7wi20nYC9Xt8/Ol4 ZWrw67rFwmjAkPSUZBxtsoDAIWYJgMlB+aF7vOK984Ae7U8Fuku76QHYJxpSbL6R EdFevhyYXzADg+gH1m8QVtiq5FN5fUXkrPeJVUAR0Y3rkr4WeZGYPYUD3ZXRD8Q6 xKNFEj4DxyGbYY3L2oh/RVjmmff6eS2JTIrR6WucBpgHDsZSEQFJ6jFjyn0+M+ry VwVPdF2aw21b5AAwvHt3Tk8FBqEhojGB8waqGR3Jcpn+oi1YoAbZMe/lsqHqi7ZQ UwZ9YiMLP2LswdRd9rGYrc5MK/NMgos8K7HxIneYmfGm6C69AKo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:46:52 2026 by rpki-client