$ rpki-client -vvvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: FFUnZGR13Imk3VxYaaiDbKbNMLORDehjDuLUpm9S/Zo= Subject key identifier: 2B:83:66:C1:DD:4B:B6:AB:64:4E:14:3B:6B:48:43:91:39:3F:4E:F7 Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 5146D68A8CAACAE03F0E03777419A43AF21BAEEE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 08:52:09 +0000 Manifest this update: Wed 23 Sep 2026 08:47:09 +0000 Manifest next update: Thu 24 Sep 2026 10:34:09 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) 2: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: /OQ8gHpCBEtWlzqxt4K71Bm3HmSb3pvhGZmU+KsPOSE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 10:34:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:46:d6:8a:8c:aa:ca:e0:3f:0e:03:77:74:19:a4:3a:f2:1b:ae:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: Sep 23 08:47:09 2026 GMT Not After : Sep 24 10:34:09 2026 GMT Subject: CN=2B8366C1DD4BB6AB644E143B6B484391393F4EF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:04:58:07:09:e6:52:e7:a7:9b:f0:0d:88:94: e9:4d:a2:c0:63:38:1b:bd:4b:a6:b4:75:a5:30:a1: bc:42:eb:c9:e5:20:ba:46:5e:41:a2:fd:30:bb:9a: 6b:f6:80:a3:bd:e3:94:85:bb:3e:e1:29:9e:fa:99: 9a:c4:7b:43:35:32:fc:39:31:93:c7:8f:59:a8:5b: bc:62:1f:a5:51:82:44:14:76:4d:ae:08:7f:59:85: 3f:6b:ab:d2:1a:cd:8a:8d:3b:2d:5d:c1:e7:00:f6: 24:7e:04:d6:b9:fe:6c:1b:ad:bb:72:c6:b9:6d:fb: 4b:3a:99:d0:89:3a:60:37:03:5a:72:fc:43:3b:7e: c0:ec:23:f0:f8:c6:fd:7c:91:25:90:ea:f9:bf:fb: 26:aa:72:05:47:de:ae:87:e8:25:24:51:e2:89:4e: 56:b4:6c:d3:62:28:6a:04:a8:a0:d7:ad:3d:fd:31: 93:dc:ea:f9:09:fb:35:a8:22:4f:70:46:49:0f:03: 8e:2f:ad:1c:a6:12:06:aa:41:07:3d:35:99:41:e6: f3:05:ba:72:8d:85:7c:88:66:b3:ea:9c:e4:f2:50: 61:f2:d3:2c:ea:78:42:e2:72:e5:6b:87:2a:aa:09: e9:34:dc:ae:d0:b4:50:ef:f6:38:e5:e8:50:82:ac: 1c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:83:66:C1:DD:4B:B6:AB:64:4E:14:3B:6B:48:43:91:39:3F:4E:F7 X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:ef:88:dd:39:b9:c6:d8:6f:4d:b5:fc:75:d2:f5:25:27:35: fc:f4:5b:3d:8e:b8:03:31:f8:b7:ca:ef:fa:a0:ee:49:5d:00: 89:6f:e8:7d:69:1e:57:9f:b1:1c:94:39:af:06:aa:6b:a3:b5: 36:b6:e2:a5:d6:21:d6:46:f1:65:4c:4b:2c:ee:a5:3d:8c:84: e8:70:40:57:59:39:9e:4d:4d:c9:1d:fc:76:e2:85:82:44:f2: bd:d3:d7:91:b3:5a:8f:5a:c0:62:f1:67:3b:e3:37:85:ec:de: 72:86:bb:b2:12:a3:c6:48:00:6b:4b:37:9d:57:ee:af:e2:e0: 5a:1f:02:92:f5:dc:c5:bf:b8:1b:12:45:c1:19:25:b0:96:45: 9d:70:3a:20:34:a9:3b:97:0a:c6:0a:b9:f7:73:11:b0:f8:5e: 6b:5d:9e:cb:a1:91:21:85:16:84:ad:58:86:ca:ed:32:b1:8c: 84:92:2d:75:09:28:a0:bd:4b:59:d6:d9:a5:5f:11:e1:6a:85: 89:5c:55:a5:06:91:31:82:fd:29:4e:cd:97:eb:96:d8:e4:15: 69:7c:21:c1:93:7f:93:e3:fa:d5:99:53:40:ce:44:05:ff:03: 1c:08:35:8b:21:df:64:3c:cf:80:a6:68:01:5f:19:f9:0f:60: d4:f1:3e:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUUbWioyqyuA/DgN3dBmkOvIbru4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjA5MjMwODQ3MDlaFw0yNjA5MjQxMDM0MDlaMDMxMTAvBgNV BAMTKDJCODM2NkMxREQ0QkI2QUI2NDRFMTQzQjZCNDg0MzkxMzkzRjRFRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQBFgHCeZS56eb8A2IlOlNosBj OBu9S6a0daUwobxC68nlILpGXkGi/TC7mmv2gKO945SFuz7hKZ76mZrEe0M1Mvw5 MZPHj1moW7xiH6VRgkQUdk2uCH9ZhT9rq9IazYqNOy1dwecA9iR+BNa5/mwbrbty xrlt+0s6mdCJOmA3A1py/EM7fsDsI/D4xv18kSWQ6vm/+yaqcgVH3q6H6CUkUeKJ Tla0bNNiKGoEqKDXrT39MZPc6vkJ+zWoIk9wRkkPA44vrRymEgaqQQc9NZlB5vMF unKNhXyIZrPqnOTyUGHy0yzqeELicuVrhyqqCek03K7QtFDv9jjl6FCCrBwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4Nmwd1LtqtkThQ7a0hDkTk/TvcwHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHviN05ucbYb021/HXS9SUnNfz0Wz2OuAMx +LfK7/qg7kldAIlv6H1pHlefsRyUOa8GqmujtTa24qXWIdZG8WVMSyzupT2MhOhw QFdZOZ5NTckd/HbihYJE8r3T15GzWo9awGLxZzvjN4Xs3nKGu7ISo8ZIAGtLN51X 7q/i4FofApL13MW/uBsSRcEZJbCWRZ1wOiA0qTuXCsYKufdzEbD4XmtdnsuhkSGF FoStWIbK7TKxjISSLXUJKKC9S1nW2aVfEeFqhYlcVaUGkTGC/SlOzZfrltjkFWl8 IcGTf5Pj+tWZU0DORAX/AxwINYsh32Q8z4CmaAFfGfkPYNTxPv0= -----END CERTIFICATE-----Generated at Wed Sep 23 20:20:18 2026 by rpki-client