$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: 6lwdy8G8/DsmOZ2nKC//r6EyMuMLshxlDXb+jkwxn54= Subject key identifier: 74:B2:06:E4:76:34:5C:12:26:2E:F6:B8:B2:66:F5:48:3E:60:2D:1B Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 188EDC35E6F4EDF8601FA45629A3F2C7E95B542E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 10:37:52 +0000 Manifest this update: Sat 14 Nov 2026 10:32:52 +0000 Manifest next update: Sun 15 Nov 2026 13:52:52 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: CKLm6AI7dbrdORug1Y+bkz5Gk1yCoD3CDePi/HJqvL4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 13:52:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8e:dc:35:e6:f4:ed:f8:60:1f:a4:56:29:a3:f2:c7:e9:5b:54:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Nov 14 10:32:52 2026 GMT Not After : Nov 15 13:52:52 2026 GMT Subject: CN=74B206E476345C12262EF6B8B266F5483E602D1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:8c:8f:d0:47:9b:51:50:c1:62:04:01:54:bb: 71:c3:18:32:a1:91:16:85:c3:11:ae:5f:58:52:70: 32:10:aa:68:0f:a3:92:63:97:f4:78:8f:bc:1f:05: 23:d9:13:3a:60:47:1a:fd:91:31:3c:43:1d:8e:e3: e6:0f:84:85:fb:2d:8a:e5:c8:db:72:61:73:c5:f9: 5a:a9:17:7d:36:92:3d:0f:a3:80:ab:c2:44:49:0b: 86:9c:85:14:7b:96:ec:2b:8d:3b:cb:e1:07:f2:94: e4:eb:4f:90:de:0a:a8:41:3e:64:4c:b2:dd:89:0c: 5c:a7:92:74:7e:3a:bc:8b:74:8e:dd:b5:1c:f2:ee: a5:74:3a:0d:04:66:a7:65:d0:54:37:a0:72:16:22: 77:21:10:a0:b5:a2:22:2b:88:8e:e9:66:2a:c2:b7: d1:11:3f:f4:13:f9:70:7a:62:2d:5a:53:b7:c1:ec: 4e:5d:cd:d7:ae:d7:ee:f7:0b:0e:3a:45:33:9a:62: 83:48:b9:09:2d:5d:f8:d0:ca:f1:b8:24:79:67:f3: cb:66:65:46:9c:eb:6d:ef:39:be:ef:56:27:c3:e2: 9f:53:eb:f3:df:86:43:b6:83:20:36:5f:6a:95:0f: d2:bf:d4:51:98:3a:a6:75:cd:10:13:02:9d:82:eb: 90:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B2:06:E4:76:34:5C:12:26:2E:F6:B8:B2:66:F5:48:3E:60:2D:1B X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:a2:ef:5e:43:05:5b:30:cb:c3:ce:f7:4c:e1:86:ea:28:af: 8b:87:90:af:26:76:c5:de:64:6e:60:b6:84:ca:af:f9:6c:9b: 22:03:97:b9:76:f7:25:dc:9c:ee:d6:fc:b5:22:ae:7e:c2:8b: 57:31:c7:af:1d:47:58:07:49:ad:c4:f9:73:e6:a9:9c:20:73: 10:b1:f8:70:cd:34:46:71:d7:32:29:f8:3f:bc:3d:59:ad:0d: 06:73:0b:92:99:76:91:e6:0c:0c:53:76:3c:99:be:38:be:5f: 50:87:e7:69:ce:57:b9:ac:e1:cd:88:87:cd:9a:be:5c:2f:9a: ad:f1:42:04:bb:f2:ee:66:f0:f9:40:31:a4:41:9a:6b:47:a3: 79:17:34:2d:4d:af:47:70:cc:fb:2e:48:56:e3:7b:52:77:9f: b7:27:98:a5:f1:31:4d:7e:78:ad:b0:68:a4:c2:c2:d7:57:e6: 30:ed:b0:94:ec:44:97:db:cd:52:51:f9:c4:18:86:03:cd:8d: 59:a8:7f:da:4f:ab:3f:0f:65:33:30:de:8d:ed:fa:9a:d2:28: 0b:66:6c:d3:80:32:02:95:8e:06:9b:c3:75:43:a9:5f:e3:77: 92:05:54:84:49:90:2a:b3:a6:7b:ba:43:9a:bc:73:e0:17:54: 0d:1c:e5:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGI7cNeb07fhgH6RWKaPyx+lbVC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjExMTQxMDMyNTJaFw0yNjExMTUxMzUyNTJaMDMxMTAvBgNV BAMTKDc0QjIwNkU0NzYzNDVDMTIyNjJFRjZCOEIyNjZGNTQ4M0U2MDJEMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWjI/QR5tRUMFiBAFUu3HDGDKh kRaFwxGuX1hScDIQqmgPo5Jjl/R4j7wfBSPZEzpgRxr9kTE8Qx2O4+YPhIX7LYrl yNtyYXPF+VqpF302kj0Po4CrwkRJC4achRR7luwrjTvL4QfylOTrT5DeCqhBPmRM st2JDFynknR+OryLdI7dtRzy7qV0Og0EZqdl0FQ3oHIWInchEKC1oiIriI7pZirC t9ERP/QT+XB6Yi1aU7fB7E5dzdeu1+73Cw46RTOaYoNIuQktXfjQyvG4JHln88tm ZUac623vOb7vVifD4p9T6/PfhkO2gyA2X2qVD9K/1FGYOqZ1zRATAp2C65D5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdLIG5HY0XBImLva4smb1SD5gLRswHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFSi715DBVswy8PO90zhhuoor4uHkK8mdsXe ZG5gtoTKr/lsmyIDl7l29yXcnO7W/LUirn7Ci1cxx68dR1gHSa3E+XPmqZwgcxCx +HDNNEZx1zIp+D+8PVmtDQZzC5KZdpHmDAxTdjyZvji+X1CH52nOV7ms4c2Ih82a vlwvmq3xQgS78u5m8PlAMaRBmmtHo3kXNC1Nr0dwzPsuSFbje1J3n7cnmKXxMU1+ eK2waKTCwtdX5jDtsJTsRJfbzVJR+cQYhgPNjVmof9pPqz8PZTMw3o3t+prSKAtm bNOAMgKVjgabw3VDqV/jd5IFVIRJkCqzpnu6Q5q8c+AXVA0c5UY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:32:27 2026 by rpki-client