$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: AV5PKB6AAjUzMd7EndLORuCR/eqWyLk2KXpGr8lbppg= Subject key identifier: 6C:DB:BD:7F:36:E0:7C:A8:F8:34:DF:75:E1:84:03:BC:25:AE:41:57 Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 4730E59678531EE1E6DCB804D781FABB58B99528 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 06:33:49 +0000 Manifest this update: Thu 24 Sep 2026 06:28:49 +0000 Manifest next update: Fri 25 Sep 2026 08:11:49 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) 2: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 3: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 4: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: e/ILVQaugxpy6o/PUwE34+NQTbEmqzssotZqESXXiic=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 08:11:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:30:e5:96:78:53:1e:e1:e6:dc:b8:04:d7:81:fa:bb:58:b9:95:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Sep 24 06:28:49 2026 GMT Not After : Sep 25 08:11:49 2026 GMT Subject: CN=6CDBBD7F36E07CA8F834DF75E18403BC25AE4157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:da:64:13:c5:12:44:61:24:8e:cd:03:fc:2b: 28:db:31:9d:ff:47:bc:65:83:e0:e0:c9:df:f7:3f: a7:5a:7f:37:51:ab:00:05:96:36:9c:1d:80:3a:d1: 7c:8b:bb:2c:17:e3:f5:fc:04:d2:12:a9:45:42:ed: e5:3e:87:e6:68:5b:36:98:f3:3e:56:c0:49:7e:88: ee:31:0b:f1:51:3b:3c:82:4a:95:26:98:e4:4f:9f: da:e7:cb:a4:63:3b:ae:a1:b2:fa:e4:f3:56:cb:d2: 45:83:dd:40:56:20:27:68:14:91:a6:dc:a7:27:8f: 00:af:2d:c7:59:fa:cb:4a:0a:30:8e:59:54:75:9c: b7:b7:0e:07:64:1f:a6:61:e1:c8:62:05:50:38:72: cd:df:9a:83:0b:45:1b:0e:03:5d:d9:5a:02:20:90: e4:cc:24:92:4d:98:68:7a:d6:62:32:45:ad:fb:01: 4d:d1:d2:f7:8b:0a:66:50:72:42:5c:1a:75:22:cc: 26:e4:8a:1e:8a:08:2c:5f:7d:e1:6c:ca:8f:bf:0e: 2f:e0:1b:46:38:cc:77:44:74:5a:98:d7:24:17:77: b2:e9:ee:ce:29:8b:1d:79:b2:b6:1d:9c:ea:98:dd: 9a:f1:43:81:ff:c1:1d:d3:51:87:0c:92:07:4a:60: 97:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:DB:BD:7F:36:E0:7C:A8:F8:34:DF:75:E1:84:03:BC:25:AE:41:57 X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d8:ce:6f:bf:c3:04:bb:ea:76:70:60:35:f0:b6:56:67:43: 11:b8:3b:a0:de:e7:91:51:40:ef:79:76:20:18:55:b9:b0:b0: d2:50:a8:b2:b1:5d:b2:2f:e5:9a:a9:ff:22:d5:1a:72:31:5a: 83:7c:63:42:ad:00:e9:d9:4f:20:bd:10:e5:1e:3b:a2:9c:96: 75:f4:18:ba:7c:a0:b5:5b:81:a2:b8:d6:31:c9:f8:65:6d:2f: 3d:54:4c:21:06:e5:b6:04:55:74:18:5d:91:ba:24:48:67:4b: 3e:c9:da:06:3c:e2:4d:e9:78:e1:48:13:e3:cb:ba:c5:ee:f5: 1d:d8:b1:00:01:6a:26:5d:9f:91:10:27:6a:47:0f:d6:86:51: f3:13:1f:a6:1d:c2:d2:4a:ae:5f:a4:f7:50:a2:f6:4a:4c:fd: fe:96:63:d6:2d:d0:11:11:d5:fe:0b:b6:d3:af:c7:b7:7d:c2: 39:7c:1b:d5:7c:71:54:7d:3d:1d:b5:a1:40:b3:e8:77:0a:36: 51:73:0f:cc:9b:6a:dd:3f:34:71:0b:58:cf:13:11:40:6d:fc: 46:3a:0e:62:e7:5d:68:58:72:0f:fd:4b:b0:79:f0:d9:a5:ae: 53:92:31:b4:a0:da:73:58:9e:68:11:38:b6:d1:c5:31:a7:6d: f7:99:6e:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzDllnhTHuHm3LgE14H6u1i5lSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjA5MjQwNjI4NDlaFw0yNjA5MjUwODExNDlaMDMxMTAvBgNV BAMTKDZDREJCRDdGMzZFMDdDQThGODM0REY3NUUxODQwM0JDMjVBRTQxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo2mQTxRJEYSSOzQP8KyjbMZ3/ R7xlg+Dgyd/3P6dafzdRqwAFljacHYA60XyLuywX4/X8BNISqUVC7eU+h+ZoWzaY 8z5WwEl+iO4xC/FROzyCSpUmmORPn9rny6RjO66hsvrk81bL0kWD3UBWICdoFJGm 3KcnjwCvLcdZ+stKCjCOWVR1nLe3DgdkH6Zh4chiBVA4cs3fmoMLRRsOA13ZWgIg kOTMJJJNmGh61mIyRa37AU3R0veLCmZQckJcGnUizCbkih6KCCxffeFsyo+/Di/g G0Y4zHdEdFqY1yQXd7Lp7s4pix15srYdnOqY3ZrxQ4H/wR3TUYcMkgdKYJdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbNu9fzbgfKj4NN914YQDvCWuQVcwHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfYzm+/wwS76nZwYDXwtlZnQxG4O6De55FR QO95diAYVbmwsNJQqLKxXbIv5Zqp/yLVGnIxWoN8Y0KtAOnZTyC9EOUeO6KclnX0 GLp8oLVbgaK41jHJ+GVtLz1UTCEG5bYEVXQYXZG6JEhnSz7J2gY84k3peOFIE+PL usXu9R3YsQABaiZdn5EQJ2pHD9aGUfMTH6YdwtJKrl+k91Ci9kpM/f6WY9Yt0BER 1f4LttOvx7d9wjl8G9V8cVR9PR21oUCz6HcKNlFzD8ybat0/NHELWM8TEUBt/EY6 DmLnXWhYcg/9S7B58NmlrlOSMbSg2nNYnmgROLbRxTGnbfeZblw= -----END CERTIFICATE-----Generated at Thu Sep 24 20:42:39 2026 by rpki-client