$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: GCiTEWoKW5njh3J4j9cDFPKEKunYjA2uj9OVzsW+O5M= Subject key identifier: 3D:B9:BA:68:59:9E:4F:36:60:F2:BF:AD:68:2F:F7:5F:72:F7:61:90 Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 5B9A61367B118C2412CC0932472A4BC1EFC5AB61 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:07 +0000 Manifest this update: Tue 12 May 2026 17:17:07 +0000 Manifest next update: Wed 13 May 2026 18:47:07 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 2: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) 3: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 4: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: gaCN8o9/SeTTMNICLLn/xYHK9moQdZQU4RjcU5CK6dg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:9a:61:36:7b:11:8c:24:12:cc:09:32:47:2a:4b:c1:ef:c5:ab:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: May 12 17:17:07 2026 GMT Not After : May 13 18:47:07 2026 GMT Subject: CN=3DB9BA68599E4F3660F2BFAD682FF75F72F76190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:5e:59:c8:8f:65:b2:73:65:c5:ef:6b:f5:3c: 72:e1:4d:59:36:ff:94:11:63:7f:7b:d8:ff:00:77: 26:89:86:25:56:02:82:ae:2c:6f:5c:63:03:56:79: 23:9a:35:a8:35:3e:cb:8f:83:2c:e2:09:a0:09:f4: 4c:73:0a:2d:3a:af:05:c2:f2:03:bc:9f:7c:21:fe: 8c:11:46:82:77:c1:92:55:45:03:6a:d7:e6:1a:56: a1:b0:3a:47:8e:f4:9e:97:46:1c:93:a1:e5:7d:46: a4:18:44:92:7f:2a:f6:13:85:6a:e2:a8:ef:db:f5: 01:12:98:35:42:bd:71:9a:6e:1b:c4:ab:6c:3f:0a: d7:ef:70:0a:a4:21:2d:75:f6:4b:f6:8b:aa:e5:59: 8b:46:e6:d2:eb:25:79:89:59:fb:67:2e:a4:13:e9: 34:49:b6:db:b8:a4:66:22:fa:1a:63:8f:ba:36:f5: e5:e8:d4:ff:9b:66:17:fe:04:78:e2:85:64:44:86: db:1b:6e:fb:b9:54:c1:41:16:26:c5:d5:2a:d3:ca: bd:cd:20:56:85:2a:1e:bd:6b:46:b6:d2:84:94:cd: aa:dc:48:dc:09:74:4c:91:b5:7f:11:00:3d:6e:76: 48:92:3e:13:d4:36:8b:ee:86:a9:e8:24:08:6e:d2: 99:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B9:BA:68:59:9E:4F:36:60:F2:BF:AD:68:2F:F7:5F:72:F7:61:90 X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:20:96:8c:1d:1b:d0:36:d1:a8:21:5b:cd:22:40:0a:73:d0: 1c:97:ae:73:4a:c5:39:d1:73:9b:8a:26:86:8c:51:dc:b4:02: f7:da:7f:0d:23:a0:52:8f:c5:25:82:f5:ec:09:df:6a:81:bc: 8f:43:e9:b9:27:e5:4d:70:38:92:0b:72:35:2a:e6:18:39:0a: 25:06:72:11:15:34:2b:18:39:be:97:2c:3b:46:a4:c5:8b:0a: 91:e9:20:d5:f0:95:4c:d5:94:1c:77:e3:a4:2b:e8:4c:2b:4f: 1a:72:21:74:bb:0c:7b:5f:9d:0a:c2:60:fe:e0:54:fe:6c:c3: d8:2b:cf:40:1c:86:2f:99:fc:82:9b:bd:e8:3e:90:91:ee:53: 40:04:c6:5c:80:82:39:85:9c:26:67:18:cf:1c:ba:2a:76:3c: b3:32:8e:40:06:f1:49:e7:21:05:3c:24:a5:f4:1e:88:0d:bf: 9d:a1:3e:34:39:24:f9:38:ef:fa:8e:c1:e4:92:27:8f:56:47: 00:33:cd:15:89:1c:83:a1:26:3f:d0:4e:96:20:0a:10:1a:92: da:64:87:07:8a:4d:62:27:9a:71:72:51:6f:1b:27:91:99:19: 03:72:6b:13:e4:f6:e3:0f:84:67:7d:0e:70:78:d6:14:30:96: 7a:6d:12:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW5phNnsRjCQSzAkyRypLwe/Fq2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjA1MTIxNzE3MDdaFw0yNjA1MTMxODQ3MDdaMDMxMTAvBgNV BAMTKDNEQjlCQTY4NTk5RTRGMzY2MEYyQkZBRDY4MkZGNzVGNzJGNzYxOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkXlnIj2Wyc2XF72v1PHLhTVk2 /5QRY3972P8AdyaJhiVWAoKuLG9cYwNWeSOaNag1PsuPgyziCaAJ9ExzCi06rwXC 8gO8n3wh/owRRoJ3wZJVRQNq1+YaVqGwOkeO9J6XRhyToeV9RqQYRJJ/KvYThWri qO/b9QESmDVCvXGabhvEq2w/CtfvcAqkIS119kv2i6rlWYtG5tLrJXmJWftnLqQT 6TRJttu4pGYi+hpjj7o29eXo1P+bZhf+BHjihWREhtsbbvu5VMFBFibF1SrTyr3N IFaFKh69a0a20oSUzarcSNwJdEyRtX8RAD1udkiSPhPUNovuhqnoJAhu0plfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbm6aFmeTzZg8r+taC/3X3L3YZAwHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIglowdG9A20aghW80iQApz0ByXrnNKxTnR c5uKJoaMUdy0Avfafw0joFKPxSWC9ewJ32qBvI9D6bkn5U1wOJILcjUq5hg5CiUG chEVNCsYOb6XLDtGpMWLCpHpINXwlUzVlBx346Qr6EwrTxpyIXS7DHtfnQrCYP7g VP5sw9grz0Achi+Z/IKbveg+kJHuU0AExlyAgjmFnCZnGM8cuip2PLMyjkAG8Unn IQU8JKX0HogNv52hPjQ5JPk47/qOweSSJ49WRwAzzRWJHIOhJj/QTpYgChAaktpk hweKTWInmnFyUW8bJ5GZGQNyaxPk9uMPhGd9DnB41hQwlnptEno= -----END CERTIFICATE-----Generated at Wed May 13 01:37:09 2026 by rpki-client