$ rpki-client -vvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: U2x3xMZgU//6xIhFCowD8szoWzTqKp0ZkDBDzJxHmBI= Subject key identifier: 7D:4A:72:F6:27:71:4A:8C:C1:7B:64:10:17:6C:B8:C7:0B:D4:90:9B Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 1AC1DE7C987FFA5BDD6552262B9ACB8ED6544DAA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 14:27:35 +0000 Manifest this update: Thu 23 Jul 2026 14:22:35 +0000 Manifest next update: Fri 24 Jul 2026 17:07:35 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) 2: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: FVDsj0AuaNlfX0pjLSrosTHLLeW3SDnGJvMOdFYzhTk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 17:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:c1:de:7c:98:7f:fa:5b:dd:65:52:26:2b:9a:cb:8e:d6:54:4d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: Jul 23 14:22:35 2026 GMT Not After : Jul 24 17:07:35 2026 GMT Subject: CN=7D4A72F627714A8CC17B6410176CB8C70BD4909B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:85:53:2a:08:36:ad:59:45:34:ff:d6:ff:d8: 00:f5:b6:9e:aa:a5:9d:b3:c6:be:a7:33:b3:e4:b0: 07:b8:f4:35:df:cd:1c:ea:79:56:a8:de:91:a1:87: 96:18:2d:29:75:64:c4:c7:b7:c8:c8:10:65:31:ac: fb:fb:12:17:b0:77:6f:2b:42:75:51:ac:48:26:f6: eb:b2:72:c9:f1:79:59:67:53:50:2a:04:83:22:92: 90:01:0d:ec:c0:df:f5:95:80:6e:5a:df:66:8e:a5: b7:97:b1:a9:7e:cc:ac:75:be:24:01:c1:13:39:73: e2:7b:d0:27:92:8c:47:7e:b7:3d:bb:58:05:8a:a0: af:a6:d4:6f:61:c8:02:5a:88:f6:df:7b:e4:ba:e4: 21:25:3b:a2:35:8c:37:ce:b7:9d:d4:0c:e9:c2:ef: 26:28:4f:f9:55:2c:f3:fe:de:fb:9d:e4:ea:da:46: 6d:4d:57:06:12:84:1e:3d:89:9f:40:cc:e7:36:87: da:65:e8:1a:41:05:9b:66:a0:f4:bb:02:f9:3e:35: 3a:f0:d5:ac:43:89:dd:c1:ac:77:4c:b8:03:da:74: f1:4f:c4:8e:7e:15:c8:c2:d3:71:47:6b:46:06:9d: 0c:66:f5:91:06:e6:24:1c:22:17:a8:3f:9b:29:ad: d2:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:4A:72:F6:27:71:4A:8C:C1:7B:64:10:17:6C:B8:C7:0B:D4:90:9B X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:1c:bb:fd:85:c2:36:14:10:d4:55:37:4e:a5:ff:f0:a0:6a: 2c:c4:69:e2:2a:c3:9c:12:c4:fc:be:b9:c3:18:ff:ef:7a:46: 7f:b8:93:15:09:d0:71:a5:48:a7:5b:71:43:d7:3d:8f:e0:5f: 39:3b:4e:cd:f9:28:c0:00:f7:3b:3f:94:2c:f9:13:50:b6:e2: ab:29:ba:c2:c5:ee:89:76:53:c7:40:d8:d9:ac:86:7a:3f:f8: ee:4d:e8:bd:7b:e5:e5:ae:f0:3b:c2:22:75:b4:af:7f:62:c3: 41:e6:67:2c:d5:a2:8e:9d:83:14:41:9b:bd:89:95:d4:5d:76: 7c:9b:73:36:2a:e5:8e:52:ab:99:c5:7f:eb:f2:13:36:51:b7: b2:6d:5e:60:3a:61:9c:0b:1b:46:47:4e:60:8b:f2:16:61:0c: 4d:4c:81:f8:96:a4:f1:03:bc:70:13:e2:d3:cc:f9:02:e6:68: 24:3f:e4:78:92:cf:92:8a:05:06:cd:89:e7:8e:7e:9a:31:48: 60:33:63:5d:cb:9a:f2:8c:b1:9c:c5:3f:cf:c2:78:14:db:fc: 0d:6b:58:12:74:20:eb:d3:af:fe:36:e4:48:79:54:e4:26:7b: 36:bf:25:4c:90:29:00:27:f7:88:5c:29:0e:95:59:01:99:c2: bc:8d:a7:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGsHefJh/+lvdZVImK5rLjtZUTaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjA3MjMxNDIyMzVaFw0yNjA3MjQxNzA3MzVaMDMxMTAvBgNV BAMTKDdENEE3MkY2Mjc3MTRBOENDMTdCNjQxMDE3NkNCOEM3MEJENDkwOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hVMqCDatWUU0/9b/2AD1tp6q pZ2zxr6nM7PksAe49DXfzRzqeVao3pGhh5YYLSl1ZMTHt8jIEGUxrPv7Ehewd28r QnVRrEgm9uuycsnxeVlnU1AqBIMikpABDezA3/WVgG5a32aOpbeXsal+zKx1viQB wRM5c+J70CeSjEd+tz27WAWKoK+m1G9hyAJaiPbfe+S65CElO6I1jDfOt53UDOnC 7yYoT/lVLPP+3vud5OraRm1NVwYShB49iZ9AzOc2h9pl6BpBBZtmoPS7Avk+NTrw 1axDid3BrHdMuAPadPFPxI5+FcjC03FHa0YGnQxm9ZEG5iQcIheoP5sprdKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfUpy9idxSozBe2QQF2y4xwvUkJswHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0cu/2FwjYUENRVN06l//CgaizEaeIqw5wS xPy+ucMY/+96Rn+4kxUJ0HGlSKdbcUPXPY/gXzk7Ts35KMAA9zs/lCz5E1C24qsp usLF7ol2U8dA2Nmshno/+O5N6L175eWu8DvCInW0r39iw0HmZyzVoo6dgxRBm72J ldRddnybczYq5Y5Sq5nFf+vyEzZRt7JtXmA6YZwLG0ZHTmCL8hZhDE1MgfiWpPED vHAT4tPM+QLmaCQ/5HiSz5KKBQbNieeOfpoxSGAzY13LmvKMsZzFP8/CeBTb/A1r WBJ0IOvTr/425Eh5VOQmeza/JUyQKQAn94hcKQ6VWQGZwryNp7M= -----END CERTIFICATE-----Generated at Fri Jul 24 02:44:47 2026 by rpki-client