$ rpki-client -vvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: MxMH7q6PhZ12tobr8FvGzAA/2czRes1241Bc78pIl6M= Subject key identifier: D0:CA:D3:92:48:00:B4:83:C1:92:5C:CD:E7:30:89:5E:28:9F:D1:BF Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 50CB2C6FE643B979F989ED0EFDE49D0DDA0B0464 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: 0F Signing time: Tue 12 May 2026 14:19:07 +0000 Manifest this update: Tue 12 May 2026 14:14:07 +0000 Manifest next update: Wed 13 May 2026 16:10:07 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) 2: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: 9Nra5lfucRVzVu/D8Y9wfb0bHBay3on/xGdzSUQ0Eos=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:cb:2c:6f:e6:43:b9:79:f9:89:ed:0e:fd:e4:9d:0d:da:0b:04:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: May 12 14:14:07 2026 GMT Not After : May 13 16:10:07 2026 GMT Subject: CN=D0CAD3924800B483C1925CCDE730895E289FD1BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e8:ab:3e:0e:df:b4:50:01:2f:64:80:e0:ff: 8b:37:88:50:d0:ba:8f:de:2c:49:a4:83:50:cb:d8: ec:03:29:db:61:1b:ab:48:ec:bf:09:e5:7e:05:1a: 73:1a:b3:92:f0:c9:9d:de:ef:85:d5:ca:b1:07:70: 10:d8:b9:59:d7:a1:d2:d9:0b:94:a5:09:f0:9b:5b: b0:70:16:aa:87:8d:67:d0:23:66:b5:1b:ab:ea:c8: ad:8f:36:08:f5:c6:09:95:f7:10:2c:60:60:27:8a: c0:58:f3:a9:e3:a2:60:ac:b8:a4:10:2a:19:06:41: ef:a1:84:f3:5a:c7:c0:fe:84:45:c6:cf:55:3d:cc: 4b:61:aa:02:0c:d0:19:9f:ad:03:85:1c:65:3f:72: ce:8b:be:fe:87:ce:0a:29:ca:df:5e:f9:30:67:b0: 54:82:f9:bc:e2:f4:73:bf:04:c7:93:50:c1:cb:31: a3:39:08:02:55:8a:18:cc:57:c5:f9:cb:84:e8:a6: 93:37:a0:6b:1a:e1:78:25:ec:74:e2:ad:99:11:53: 89:ed:f0:d6:d5:04:d6:84:d8:04:d4:dd:4a:8c:2b: 5f:ae:85:64:84:be:5e:b4:25:16:ec:28:8f:8c:f3: 26:49:ff:c4:02:56:54:20:a5:d0:d5:5c:4a:5f:aa: 89:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:CA:D3:92:48:00:B4:83:C1:92:5C:CD:E7:30:89:5E:28:9F:D1:BF X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:3b:23:6d:3d:c9:86:d0:a0:04:51:a4:e6:32:ca:2d:a5:b3: 00:68:37:07:45:f7:d9:ae:38:7e:06:a0:ee:8f:7e:fe:7e:39: 10:7e:d9:f2:76:21:28:bb:ec:39:e0:37:02:d5:7c:64:c9:cc: 25:7d:a7:29:70:70:56:ed:fc:59:27:09:fc:b5:37:d9:d0:ba: 4e:8d:06:95:38:8c:f6:ab:9b:86:60:fb:aa:a4:49:e7:01:c9: dd:1e:bd:e4:5b:f9:0e:b5:bf:d7:b7:8c:dc:71:5c:45:9b:6a: 1a:f7:b4:d4:08:ca:82:41:df:76:13:e1:5c:22:4a:e2:34:11: 6f:dd:c7:8f:4f:d7:30:81:5d:1a:80:09:2a:84:6e:e0:ba:21: 2f:e0:5c:2d:06:7f:c2:1d:54:6e:a2:6e:c9:db:46:fd:af:1e: ed:db:4d:de:1f:f0:56:57:42:0e:f9:89:23:5d:0a:21:a1:59: c6:22:8a:b0:b6:cb:0d:3b:6c:ba:bd:4c:cb:07:b7:9f:80:03: 69:a0:46:22:e4:66:ca:0e:4a:ad:bf:37:87:38:9f:3f:d7:98: 76:87:b5:2f:ab:3f:8d:9a:3d:14:44:4d:1d:cf:90:30:27:df: 84:6f:a7:f3:fd:e2:74:4b:63:f5:c5:66:b2:c4:2c:7f:39:05: bc:75:72:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMssb+ZDuXn5ie0O/eSdDdoLBGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjA1MTIxNDE0MDdaFw0yNjA1MTMxNjEwMDdaMDMxMTAvBgNV BAMTKEQwQ0FEMzkyNDgwMEI0ODNDMTkyNUNDREU3MzA4OTVFMjg5RkQxQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ6Ks+Dt+0UAEvZIDg/4s3iFDQ uo/eLEmkg1DL2OwDKdthG6tI7L8J5X4FGnMas5LwyZ3e74XVyrEHcBDYuVnXodLZ C5SlCfCbW7BwFqqHjWfQI2a1G6vqyK2PNgj1xgmV9xAsYGAnisBY86njomCsuKQQ KhkGQe+hhPNax8D+hEXGz1U9zEthqgIM0BmfrQOFHGU/cs6Lvv6Hzgopyt9e+TBn sFSC+bzi9HO/BMeTUMHLMaM5CAJVihjMV8X5y4ToppM3oGsa4Xgl7HTirZkRU4nt 8NbVBNaE2ATU3UqMK1+uhWSEvl60JRbsKI+M8yZJ/8QCVlQgpdDVXEpfqokdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0MrTkkgAtIPBklzN5zCJXiif0b8wHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAk7I209yYbQoARRpOYyyi2lswBoNwdF99mu OH4GoO6Pfv5+ORB+2fJ2ISi77DngNwLVfGTJzCV9pylwcFbt/FknCfy1N9nQuk6N BpU4jParm4Zg+6qkSecByd0eveRb+Q61v9e3jNxxXEWbahr3tNQIyoJB33YT4Vwi SuI0EW/dx49P1zCBXRqACSqEbuC6IS/gXC0Gf8IdVG6ibsnbRv2vHu3bTd4f8FZX Qg75iSNdCiGhWcYiirC2yw07bLq9TMsHt5+AA2mgRiLkZsoOSq2/N4c4nz/XmHaH tS+rP42aPRRETR3PkDAn34Rvp/P94nRLY/XFZrLELH85Bbx1cgM= -----END CERTIFICATE-----Generated at Wed May 13 00:54:20 2026 by rpki-client