$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: ITuYwra99BafegDofdnHHb/b+K+aCqkE3Mhvw2AAWuw= Subject key identifier: DC:44:D3:B5:33:4D:A7:8C:82:AD:AA:A7:E2:C7:85:3D:E3:6C:06:56 Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 53147C71070D18717EEFF55B84AE82498F08B7D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 23:45:53 +0000 Manifest this update: Tue 22 Sep 2026 23:40:53 +0000 Manifest next update: Thu 24 Sep 2026 03:43:53 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: KfbvTeGl4rI6d9WnkafPpOVI2WCHw95ZrQ9wcYESh8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 03:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:14:7c:71:07:0d:18:71:7e:ef:f5:5b:84:ae:82:49:8f:08:b7:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Sep 22 23:40:53 2026 GMT Not After : Sep 24 03:43:53 2026 GMT Subject: CN=DC44D3B5334DA78C82ADAAA7E2C7853DE36C0656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5b:df:13:f0:17:1d:4c:32:f6:87:22:d8:a3: 57:45:f9:ec:b3:32:d7:cc:80:06:0e:0e:49:4a:e2: 9d:a2:c8:7c:69:c6:1d:9e:b3:ce:f3:ae:a4:45:2e: f9:b5:c7:31:dc:15:7c:76:da:33:ed:d2:31:e1:af: 78:c3:f4:cc:fe:ba:59:00:af:bb:3e:0a:b0:18:56: cd:cb:d1:5e:f2:b7:89:73:f9:e1:84:9a:09:3c:b7: 7a:f2:bc:a3:3b:e7:27:9c:77:c2:4e:f7:b8:bf:38: 45:b0:52:be:95:48:85:d9:df:15:ca:94:44:89:c5: 57:eb:5d:2c:76:9a:39:79:d4:40:b1:92:91:da:61: f0:96:6d:cb:8c:5b:e3:49:9f:8d:a3:15:ff:8c:d9: c2:21:78:ab:c7:90:86:b9:3c:32:10:b8:e8:ef:cc: d6:2a:88:80:9d:c7:4f:b2:e9:be:2f:c5:61:47:27: 63:9e:5a:de:15:ed:b4:12:7f:03:4a:93:68:02:76: 3c:4c:23:de:57:32:05:41:4b:0f:ab:67:bc:e9:44: a7:b9:f4:40:09:37:d4:ee:df:d7:35:0a:b9:3f:d8: 32:55:ac:44:d7:a1:a3:7d:29:d4:59:78:aa:c6:9c: 00:99:b5:b3:9a:1f:9a:6e:3a:1a:f5:f1:2d:7e:6a: 2a:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:44:D3:B5:33:4D:A7:8C:82:AD:AA:A7:E2:C7:85:3D:E3:6C:06:56 X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:e3:09:ee:68:8d:dd:7e:2a:cd:96:bb:04:8f:b2:97:27:86: bf:7c:d7:63:38:54:b0:c7:7d:f9:d6:16:db:d1:7c:e2:51:b8: 0c:ce:47:dc:e7:67:44:5f:fc:a5:33:5a:f6:93:39:d0:63:96: 86:0a:37:2b:77:40:25:48:96:e8:42:b4:4a:84:73:b0:1f:ba: ec:a6:ef:cd:48:3e:4a:a1:28:15:f2:20:44:07:7d:e1:3a:34: ce:ec:7f:92:d3:99:8a:14:d4:bd:13:bc:8b:f6:50:b1:d0:04: d4:cd:72:a3:4b:3d:4f:5c:5f:ab:a5:34:a7:eb:d0:1f:68:ae: eb:6b:17:19:2e:48:92:ea:de:57:ac:41:43:b2:67:5c:f0:05: 89:12:19:6a:e3:5a:32:2a:85:ff:5b:16:45:34:18:0c:c5:a4: 41:bc:0c:4b:a9:85:5b:b4:a4:df:3e:68:13:7d:c3:cc:7b:7e: a2:c6:de:57:66:c0:ef:ce:3e:77:0e:eb:fb:ad:d4:8e:8a:89: cf:82:bf:c5:36:89:66:c0:83:8d:c6:6a:9d:5c:37:21:8f:b1: 63:fd:5f:19:89:c0:0c:05:69:a8:11:4c:f4:4e:ba:bf:d0:8f: f1:4f:82:ef:1c:eb:28:75:1f:e1:46:71:e1:6f:46:06:09:40: 21:07:d0:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUxR8cQcNGHF+7/VbhK6CSY8It9kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA5MjIyMzQwNTNaFw0yNjA5MjQwMzQzNTNaMDMxMTAvBgNV BAMTKERDNDREM0I1MzM0REE3OEM4MkFEQUFBN0UyQzc4NTNERTM2QzA2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQW98T8BcdTDL2hyLYo1dF+eyz MtfMgAYODklK4p2iyHxpxh2es87zrqRFLvm1xzHcFXx22jPt0jHhr3jD9Mz+ulkA r7s+CrAYVs3L0V7yt4lz+eGEmgk8t3ryvKM75yecd8JO97i/OEWwUr6VSIXZ3xXK lESJxVfrXSx2mjl51ECxkpHaYfCWbcuMW+NJn42jFf+M2cIheKvHkIa5PDIQuOjv zNYqiICdx0+y6b4vxWFHJ2OeWt4V7bQSfwNKk2gCdjxMI95XMgVBSw+rZ7zpRKe5 9EAJN9Tu39c1Crk/2DJVrETXoaN9KdRZeKrGnACZtbOaH5puOhr18S1+airfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ETTtTNNp4yCraqn4seFPeNsBlYwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvjCe5ojd1+Ks2WuwSPspcnhr9812M4VLDH ffnWFtvRfOJRuAzOR9znZ0Rf/KUzWvaTOdBjloYKNyt3QCVIluhCtEqEc7Afuuym 781IPkqhKBXyIEQHfeE6NM7sf5LTmYoU1L0TvIv2ULHQBNTNcqNLPU9cX6ulNKfr 0B9orutrFxkuSJLq3lesQUOyZ1zwBYkSGWrjWjIqhf9bFkU0GAzFpEG8DEuphVu0 pN8+aBN9w8x7fqLG3ldmwO/OPncO6/ut1I6Kic+Cv8U2iWbAg43Gap1cNyGPsWP9 XxmJwAwFaagRTPROur/Qj/FPgu8c6yh1H+FGceFvRgYJQCEH0OU= -----END CERTIFICATE-----Generated at Wed Sep 23 18:55:48 2026 by rpki-client