$ rpki-client -vvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: PP1bCyFhB7ttgzpU01ET7F9XrV5TtyH86+N7jSugE6g= Subject key identifier: 27:A7:7C:5B:6F:E8:9E:51:5D:08:B9:CB:48:65:4C:AB:65:A9:A6:6C Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 44FC64DBF71F81ACF5A830D101EC9B1B266127BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: 0E Signing time: Tue 12 May 2026 04:49:45 +0000 Manifest this update: Tue 12 May 2026 04:44:45 +0000 Manifest next update: Wed 13 May 2026 08:02:45 +0000 Files and hashes: 1: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: 8RcssaNGNQfsN/brMZvCSItPDh779enWOotItosvMtw=) 2: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fc:64:db:f7:1f:81:ac:f5:a8:30:d1:01:ec:9b:1b:26:61:27:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: May 12 04:44:45 2026 GMT Not After : May 13 08:02:45 2026 GMT Subject: CN=27A77C5B6FE89E515D08B9CB48654CAB65A9A66C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ea:e6:58:f5:8f:f3:c7:9c:e4:ed:db:17:6f: ab:fc:d1:a0:5b:45:b0:62:98:ee:22:a4:c6:4b:81: b8:fc:6e:26:09:ca:f5:a2:b9:8a:aa:8a:b8:4a:5f: b7:ce:9d:ba:14:fb:d9:13:87:a3:ff:21:11:67:d9: 1a:97:a2:bd:86:a5:27:58:6c:a4:8e:2b:78:23:01: 46:c0:90:4c:12:61:d9:da:2f:3a:1d:a4:6b:33:42: c2:b4:8f:e9:52:88:38:e6:59:14:29:cb:48:2c:fe: fd:af:34:de:04:c2:57:6a:36:0e:26:0a:20:91:0d: 3d:f5:96:b6:be:07:80:af:41:3c:89:91:45:fe:05: 62:b0:20:6b:9b:da:d5:32:77:0a:41:50:ce:d6:dc: f2:65:67:60:77:dd:5d:e3:e9:3a:95:f1:b3:a7:e9: 81:a0:e8:3b:3f:97:6c:ba:ef:ab:5e:44:4e:82:51: 49:77:49:f7:82:2c:70:c4:0c:a7:4f:e9:6f:4a:99: 53:ff:34:7f:6b:47:e0:38:91:12:a7:f6:c7:b5:05: 5d:84:3c:ba:76:80:ae:0e:61:6d:71:1d:fe:34:6e: 73:3b:9d:25:bf:99:af:92:bc:5e:16:bf:d8:36:5c: 53:e1:db:08:bd:77:f5:70:cd:35:51:97:8b:a5:95: ab:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:A7:7C:5B:6F:E8:9E:51:5D:08:B9:CB:48:65:4C:AB:65:A9:A6:6C X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:d3:91:97:c6:ae:b3:7d:4c:61:c0:1e:fd:02:9a:12:a8:24: 00:22:cc:81:d0:3b:49:5d:34:31:f1:69:53:7a:a7:f9:28:19: f0:09:39:40:9a:a7:ce:48:d4:1f:5b:e9:4b:59:63:ff:af:04: ca:7f:b1:76:67:f0:cf:34:d2:ee:e4:4d:7e:e1:8a:9c:aa:d3: 92:e1:8e:87:b6:c7:9d:3a:c3:86:31:ac:8e:da:00:ce:b2:7d: b5:8e:f3:95:02:4e:33:b8:4d:3e:bc:84:60:85:54:bc:4b:d6: 52:7d:4b:a9:19:61:37:42:c3:7f:16:1a:76:47:b8:9c:8c:84: 46:42:14:e8:ac:5f:c7:02:9f:06:28:92:85:dd:5a:65:d7:19: 73:97:f7:16:e5:3e:8b:c3:35:f3:c2:3f:3a:13:a7:84:c7:69: b0:9f:6e:f4:ad:20:79:07:35:ee:80:ff:9a:e6:30:e4:62:7b: 15:5d:93:b1:29:30:a0:6d:ed:84:7d:57:fe:61:11:fd:65:ae: 5c:fc:21:1a:a0:03:5e:92:a4:83:4b:83:b0:74:88:97:2b:52: 2d:67:3e:b5:87:4b:8f:9e:0f:52:fd:57:b3:7e:6b:41:20:4e: 64:fe:50:11:df:61:0c:a4:6c:0e:63:bf:c8:73:ce:e0:a3:f8: 09:6e:da:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPxk2/cfgaz1qDDRAeybGyZhJ78wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA1MTIwNDQ0NDVaFw0yNjA1MTMwODAyNDVaMDMxMTAvBgNV BAMTKDI3QTc3QzVCNkZFODlFNTE1RDA4QjlDQjQ4NjU0Q0FCNjVBOUE2NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy6uZY9Y/zx5zk7dsXb6v80aBb RbBimO4ipMZLgbj8biYJyvWiuYqqirhKX7fOnboU+9kTh6P/IRFn2RqXor2GpSdY bKSOK3gjAUbAkEwSYdnaLzodpGszQsK0j+lSiDjmWRQpy0gs/v2vNN4EwldqNg4m CiCRDT31lra+B4CvQTyJkUX+BWKwIGub2tUydwpBUM7W3PJlZ2B33V3j6TqV8bOn 6YGg6Ds/l2y676teRE6CUUl3SfeCLHDEDKdP6W9KmVP/NH9rR+A4kRKn9se1BV2E PLp2gK4OYW1xHf40bnM7nSW/ma+SvF4Wv9g2XFPh2wi9d/VwzTVRl4ullavnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ6d8W2/onlFdCLnLSGVMq2WppmwwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTTkZfGrrN9TGHAHv0CmhKoJAAizIHQO0ld NDHxaVN6p/koGfAJOUCap85I1B9b6UtZY/+vBMp/sXZn8M800u7kTX7hipyq05Lh joe2x506w4YxrI7aAM6yfbWO85UCTjO4TT68hGCFVLxL1lJ9S6kZYTdCw38WGnZH uJyMhEZCFOisX8cCnwYokoXdWmXXGXOX9xblPovDNfPCPzoTp4THabCfbvStIHkH Ne6A/5rmMORiexVdk7EpMKBt7YR9V/5hEf1lrlz8IRqgA16SpINLg7B0iJcrUi1n PrWHS4+eD1L9V7N+a0EgTmT+UBHfYQykbA5jv8hzzuCj+Alu2t4= -----END CERTIFICATE-----Generated at Tue May 12 22:52:27 2026 by rpki-client