$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: 8N/RTgsOuhQId29jw+F+knibv1vqHvZrqHtTlfXGbRc= Subject key identifier: AF:0D:19:07:8B:BB:01:B0:66:49:03:B5:DB:59:40:48:79:C5:B6:59 Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 44D4D915FAD029A8CB63E3C4FDF7D66F3782116F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 03:54:08 +0000 Manifest this update: Fri 24 Jul 2026 03:49:08 +0000 Manifest next update: Sat 25 Jul 2026 06:38:08 +0000 Files and hashes: 1: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: PV8ZXhfXDgUm52ubomx8h2iystNwIrIDAQlSRo9i6Wk=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 3: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 4: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:30:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d4:d9:15:fa:d0:29:a8:cb:63:e3:c4:fd:f7:d6:6f:37:82:11:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Jul 24 03:49:08 2026 GMT Not After : Jul 25 06:38:08 2026 GMT Subject: CN=AF0D19078BBB01B0664903B5DB59404879C5B659 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:cf:00:e9:e0:e3:1f:74:41:4e:8d:ca:c7:d1: 78:33:e9:4a:fa:75:32:dc:80:91:c4:16:c2:54:0a: 35:f8:25:e4:54:af:62:ef:f7:db:74:9b:98:d0:18: a6:af:a0:1b:fc:6a:38:f4:6c:24:2d:43:e8:03:03: d7:9d:1c:32:18:33:42:22:d5:62:10:49:19:e3:72: 69:0e:25:95:e8:b0:17:1e:cf:6f:bf:ef:28:ed:6e: b0:f9:72:d3:2d:80:aa:1f:94:d2:00:8a:f2:f0:6d: b5:37:df:3f:bc:bc:57:89:fe:b9:5c:32:91:fe:fb: cb:72:c5:a0:41:f8:03:83:b4:c7:98:3d:c8:fe:56: 33:ff:6e:a7:4f:fd:db:7c:47:91:58:e8:d5:b0:a7: d6:6e:4e:43:b9:6b:57:b2:29:72:d6:79:68:f5:f4: 98:15:a3:19:62:3a:27:6e:e1:0f:92:1a:fa:b6:46: 93:e9:0d:36:f2:5d:99:a0:85:9a:6f:c0:1d:ca:39: 80:a8:68:df:42:0d:9a:84:d9:1b:8b:46:2c:b9:a0: 9f:d7:b2:09:7c:c9:36:3d:01:f7:63:c5:ee:e9:89: 7b:2a:ba:b4:f8:2a:57:3f:a1:f2:1f:be:02:70:71: 88:f7:fc:6e:03:41:0a:d7:b2:d7:f9:58:10:b0:fd: db:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:0D:19:07:8B:BB:01:B0:66:49:03:B5:DB:59:40:48:79:C5:B6:59 X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ba:b1:77:ba:5f:2c:c0:0b:16:61:56:be:73:fd:87:c9:8b: 1b:0d:88:46:9c:69:8e:53:fc:f8:8e:9d:47:6f:6a:4d:14:8c: 0f:b8:9a:69:8b:cb:5c:05:02:c5:58:aa:94:94:67:3d:31:7b: 7b:83:94:fa:76:85:0c:eb:10:fe:e9:f5:0e:1c:af:d8:e4:77: 77:63:cb:09:8e:18:9c:e5:92:ec:ff:0f:6c:4b:b8:e0:45:ed: 35:93:2d:9f:62:e8:06:03:91:4b:8b:b0:88:5f:ff:bb:bd:0b: 7b:c5:51:eb:51:36:8d:56:ce:ff:2f:4b:91:7f:e2:3e:fe:a9: 5a:45:39:dc:a4:ba:18:a3:91:50:1f:db:af:0c:5c:8f:4a:d8: cf:d4:51:5a:29:d2:3f:e8:4d:9a:a6:9a:18:c4:a9:ca:c3:34: b8:a4:9e:4c:4f:af:08:79:3d:70:37:21:81:2a:5d:45:49:a1: c1:8f:62:73:72:7d:8a:e9:38:4b:da:d1:64:aa:40:59:79:d9: 39:18:06:47:37:b3:18:a7:bd:50:ca:a5:11:8d:9b:fc:28:5d: 9e:b8:54:eb:b4:b9:47:0b:73:b1:24:14:0b:a7:66:de:f4:cd: fe:42:9d:78:e4:d3:80:2a:18:e9:f7:35:08:01:1c:26:d3:9b: aa:7b:6d:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNTZFfrQKajLY+PE/ffWbzeCEW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjA3MjQwMzQ5MDhaFw0yNjA3MjUwNjM4MDhaMDMxMTAvBgNV BAMTKEFGMEQxOTA3OEJCQjAxQjA2NjQ5MDNCNURCNTk0MDQ4NzlDNUI2NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvzwDp4OMfdEFOjcrH0Xgz6Ur6 dTLcgJHEFsJUCjX4JeRUr2Lv99t0m5jQGKavoBv8ajj0bCQtQ+gDA9edHDIYM0Ii 1WIQSRnjcmkOJZXosBcez2+/7yjtbrD5ctMtgKoflNIAivLwbbU33z+8vFeJ/rlc MpH++8tyxaBB+AODtMeYPcj+VjP/bqdP/dt8R5FY6NWwp9ZuTkO5a1eyKXLWeWj1 9JgVoxliOidu4Q+SGvq2RpPpDTbyXZmghZpvwB3KOYCoaN9CDZqE2RuLRiy5oJ/X sgl8yTY9Afdjxe7piXsqurT4Klc/ofIfvgJwcYj3/G4DQQrXstf5WBCw/duTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrw0ZB4u7AbBmSQO121lASHnFtlkwHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB66sXe6XyzACxZhVr5z/YfJixsNiEacaY5T /PiOnUdvak0UjA+4mmmLy1wFAsVYqpSUZz0xe3uDlPp2hQzrEP7p9Q4cr9jkd3dj ywmOGJzlkuz/D2xLuOBF7TWTLZ9i6AYDkUuLsIhf/7u9C3vFUetRNo1Wzv8vS5F/ 4j7+qVpFOdykuhijkVAf268MXI9K2M/UUVop0j/oTZqmmhjEqcrDNLiknkxPrwh5 PXA3IYEqXUVJocGPYnNyfYrpOEva0WSqQFl52TkYBkc3sxinvVDKpRGNm/woXZ64 VOu0uUcLc7EkFAunZt70zf5CnXjk04AqGOn3NQgBHCbTm6p7bQI= -----END CERTIFICATE-----Generated at Fri Jul 24 06:23:01 2026 by rpki-client