$ rpki-client -vvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: zrof0D4xh6JguFAfh9ChQAelKhCmUx2URubaKPlQ7wg= Subject key identifier: B2:08:16:E4:F2:47:C9:B7:C3:BB:8A:94:CE:1C:2E:88:87:80:0C:AF Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 2340E79B43476A8C731C04B7DA78A2A469D3A700 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 10:32:56 +0000 Manifest this update: Thu 23 Jul 2026 10:27:56 +0000 Manifest next update: Fri 24 Jul 2026 11:15:56 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: 05J9+QBu9xTEO4cFdOm3yIkqtW4RPxFNLHSGPR6rlFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:40:e7:9b:43:47:6a:8c:73:1c:04:b7:da:78:a2:a4:69:d3:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Jul 23 10:27:56 2026 GMT Not After : Jul 24 11:15:56 2026 GMT Subject: CN=B20816E4F247C9B7C3BB8A94CE1C2E8887800CAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:46:ab:7a:73:2b:7a:0a:1b:20:7e:14:d7: 14:6d:1f:b7:a8:a9:aa:f9:c8:f2:bd:f4:96:56:17: 6c:c1:0e:ba:2e:7b:c8:64:39:8f:e6:0a:89:ea:79: 37:f9:52:ae:60:27:9e:b8:7d:d1:8b:f9:fe:6d:4c: e9:b4:f6:59:e9:6d:83:7b:0c:d3:96:44:16:3b:50: 94:d7:23:dd:2c:71:17:ad:7a:83:59:dc:98:6f:12: 2b:22:6f:0c:e2:be:ca:9e:63:50:e4:30:9b:b1:1b: 11:a2:80:b9:23:54:de:4b:b0:4b:dd:85:4d:1c:2e: 74:f1:15:2f:eb:21:06:93:66:a7:bf:4c:50:13:cf: b5:95:41:e0:f3:b8:63:6b:22:de:69:9e:31:98:bc: 37:2a:2a:17:4d:3c:59:24:f8:da:98:a1:3e:1b:4d: a8:de:22:52:4b:9d:8f:55:8d:d1:e6:85:2e:6f:fb: b4:26:f9:66:11:80:51:12:7e:bf:4b:2a:7c:74:9d: 33:2e:05:ab:f5:4e:59:8d:24:82:31:b2:52:9f:45: 5c:63:d4:d7:8f:07:b0:d5:fe:99:e5:91:d7:f6:82: e9:3d:81:6e:38:e7:84:aa:35:f3:de:fd:0a:ea:ba: 37:79:4c:20:a9:81:42:39:32:90:3f:09:5f:40:81: 0c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:08:16:E4:F2:47:C9:B7:C3:BB:8A:94:CE:1C:2E:88:87:80:0C:AF X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:5b:37:2e:19:9a:5f:81:04:bd:ac:91:73:47:06:f0:d6:19: c0:c1:fc:66:63:8e:51:51:bf:59:ed:42:06:76:81:e9:32:d8: bb:ae:0c:7c:a4:67:43:71:40:a3:a2:e9:3f:8d:83:9c:4d:e6: 08:d2:52:57:01:12:a7:06:5b:1c:7d:fe:21:4d:3e:44:4b:6a: c7:3a:5e:da:bc:11:71:ac:a0:94:08:82:de:27:15:49:fb:09: f6:f6:ca:58:56:5f:db:46:47:2c:44:25:de:1c:21:4e:13:a3: 2d:32:53:12:97:61:37:6f:7d:48:a2:ab:7e:62:44:79:a5:15: c5:b4:8b:6c:2e:d4:fc:ec:10:64:d3:df:af:15:53:34:35:47: df:e3:69:27:43:08:59:cb:91:32:07:df:c0:2d:99:cc:61:e5: d8:49:33:88:12:74:27:1b:1e:87:47:1e:ed:57:12:b3:7d:6f: b0:78:89:ed:25:5a:97:7c:4e:cd:55:73:26:ae:64:cc:b6:13: 46:8a:0e:96:b7:e8:0b:cb:99:f1:9b:85:51:08:fe:0d:82:9f: 3b:cb:ef:50:23:cc:63:ef:84:c5:e7:e5:80:a2:87:b6:1c:8c: e7:34:a4:00:96:af:82:c8:15:36:79:cc:d9:8e:09:da:e8:80: 17:05:30:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI0Dnm0NHaoxzHAS32niipGnTpwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA3MjMxMDI3NTZaFw0yNjA3MjQxMTE1NTZaMDMxMTAvBgNV BAMTKEIyMDgxNkU0RjI0N0M5QjdDM0JCOEE5NENFMUMyRTg4ODc4MDBDQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtmkarenMregobIH4U1xRtH7eo qar5yPK99JZWF2zBDroue8hkOY/mConqeTf5Uq5gJ564fdGL+f5tTOm09lnpbYN7 DNOWRBY7UJTXI90scReteoNZ3JhvEisibwzivsqeY1DkMJuxGxGigLkjVN5LsEvd hU0cLnTxFS/rIQaTZqe/TFATz7WVQeDzuGNrIt5pnjGYvDcqKhdNPFkk+NqYoT4b TajeIlJLnY9VjdHmhS5v+7Qm+WYRgFESfr9LKnx0nTMuBav1TlmNJIIxslKfRVxj 1NePB7DV/pnlkdf2guk9gW4454SqNfPe/Qrqujd5TCCpgUI5MpA/CV9AgQwxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsggW5PJHybfDu4qUzhwuiIeADK8wHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFxbNy4Zml+BBL2skXNHBvDWGcDB/GZjjlFR v1ntQgZ2geky2LuuDHykZ0NxQKOi6T+Ng5xN5gjSUlcBEqcGWxx9/iFNPkRLasc6 Xtq8EXGsoJQIgt4nFUn7Cfb2ylhWX9tGRyxEJd4cIU4Toy0yUxKXYTdvfUiiq35i RHmlFcW0i2wu1PzsEGTT368VUzQ1R9/jaSdDCFnLkTIH38Atmcxh5dhJM4gSdCcb HodHHu1XErN9b7B4ie0lWpd8Ts1VcyauZMy2E0aKDpa36AvLmfGbhVEI/g2CnzvL 71AjzGPvhMXn5YCih7YcjOc0pACWr4LIFTZ5zNmOCdrogBcFMLY= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:55 2026 by rpki-client