$ rpki-client -vvvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: 38oGawsHCojuS/96hWUrmv6//90Tv7f2uXxhnLkVzTU= Subject key identifier: 71:F5:4A:DB:D4:E5:4A:CF:D0:DC:83:68:E6:6B:1C:E8:1F:6F:50:5E Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 6F6C434937ABD6CD4AE927F9E343C073426DFDF1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 20:26:45 +0000 Manifest this update: Mon 21 Sep 2026 20:21:45 +0000 Manifest next update: Wed 23 Sep 2026 00:04:45 +0000 Files and hashes: 1: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: ma2Cu7bDY8Bo8o2gFgITP1ClhwvYARYs2cjLC3Q5dq4=) 2: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:6c:43:49:37:ab:d6:cd:4a:e9:27:f9:e3:43:c0:73:42:6d:fd:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: Sep 21 20:21:45 2026 GMT Not After : Sep 23 00:04:45 2026 GMT Subject: CN=71F54ADBD4E54ACFD0DC8368E66B1CE81F6F505E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:19:1e:1c:e5:17:99:63:00:f1:29:c4:43:3c: d9:a9:1d:06:9c:1f:fa:da:50:30:a2:20:77:77:ca: e9:6b:8d:2a:dd:43:29:be:25:e5:d7:b4:f5:81:06: 49:43:97:64:cc:60:27:11:0b:95:e7:94:e7:48:e7: a1:02:df:ab:9c:a6:53:a8:3d:8b:87:de:31:46:d8: 59:0c:1a:96:cd:d2:a0:7f:0c:27:ea:5c:cc:da:29: 29:96:8f:c9:c2:83:6e:52:c9:ae:93:36:d9:2f:be: 43:e5:0c:f4:67:c3:9e:8d:83:77:59:0f:dd:cc:45: c5:53:58:1b:de:c1:bf:cd:0b:75:34:97:1e:c7:be: 57:f2:f9:01:39:db:34:5a:e9:b0:c4:4a:4f:be:1d: 96:a4:c2:63:03:b3:27:ae:c9:66:4c:54:9c:0e:5c: 2f:4d:dd:77:36:7a:f1:38:a1:bd:01:da:19:df:84: 6e:70:30:97:94:82:af:1b:07:20:89:27:1b:74:0b: 1f:d4:15:8b:36:8a:49:e6:45:eb:2b:f9:bf:a6:ee: 9d:f5:30:98:49:54:81:3a:ac:65:63:6e:d9:e7:ab: 39:04:d8:f4:85:eb:74:d4:3b:00:9f:2a:f8:aa:33: 2a:c7:76:91:90:67:57:ca:d2:ce:a0:f8:ea:ec:fb: 41:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F5:4A:DB:D4:E5:4A:CF:D0:DC:83:68:E6:6B:1C:E8:1F:6F:50:5E X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:8e:d0:a9:84:c4:a6:b7:e7:62:b9:27:32:d9:c7:5b:41:cf: 5c:9e:3a:8f:d3:5a:5d:2e:2c:8f:34:61:41:12:0b:1b:79:e2: 91:7d:ed:1e:44:c7:69:5f:e2:3a:16:df:7f:3a:94:d4:63:23: ed:1a:f2:18:5f:ba:6f:b2:8b:44:48:d4:dc:d4:c2:6a:8e:c2: 2e:23:0a:8c:20:01:a6:52:87:7d:ef:af:b7:17:c2:89:26:c6: 98:99:61:d5:78:32:c0:cc:6e:25:94:22:b0:f6:41:0c:50:8b: eb:62:71:26:83:0c:f3:d0:a2:10:2a:d5:c1:9b:89:94:03:ed: d6:07:07:76:61:d4:89:fa:8a:5b:6b:3a:f2:ea:85:10:23:45: b2:16:b7:d3:e7:58:af:d9:26:d9:78:3f:a9:a6:2e:c7:24:a4: e1:5c:af:aa:13:fe:2a:b5:5a:42:37:4c:bc:c3:ea:12:d0:38: 65:b8:e2:cf:7e:e0:e5:1c:0a:bb:c6:04:c1:51:1e:71:a4:ac: 00:1a:c5:0c:29:01:0f:b0:9d:32:f7:88:69:77:f5:43:d0:f4: 3d:a4:92:15:3d:0b:13:f4:1b:6b:d8:22:8a:94:f8:d5:97:4b: 6d:97:db:e0:76:a4:01:06:82:c7:b9:6a:6a:64:96:16:b4:4e: 7b:6a:6f:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb2xDSTer1s1K6Sf540PAc0Jt/fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjA5MjEyMDIxNDVaFw0yNjA5MjMwMDA0NDVaMDMxMTAvBgNV BAMTKDcxRjU0QURCRDRFNTRBQ0ZEMERDODM2OEU2NkIxQ0U4MUY2RjUwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmGR4c5ReZYwDxKcRDPNmpHQac H/raUDCiIHd3yulrjSrdQym+JeXXtPWBBklDl2TMYCcRC5XnlOdI56EC36ucplOo PYuH3jFG2FkMGpbN0qB/DCfqXMzaKSmWj8nCg25Sya6TNtkvvkPlDPRnw56Ng3dZ D93MRcVTWBvewb/NC3U0lx7Hvlfy+QE52zRa6bDESk++HZakwmMDsyeuyWZMVJwO XC9N3Xc2evE4ob0B2hnfhG5wMJeUgq8bByCJJxt0Cx/UFYs2iknmResr+b+m7p31 MJhJVIE6rGVjbtnnqzkE2PSF63TUOwCfKviqMyrHdpGQZ1fK0s6g+Ors+0HXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfVK29TlSs/Q3INo5msc6B9vUF4wHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKO0KmExKa352K5JzLZx1tBz1yeOo/TWl0u LI80YUESCxt54pF97R5Ex2lf4joW3386lNRjI+0a8hhfum+yi0RI1NzUwmqOwi4j CowgAaZSh33vr7cXwokmxpiZYdV4MsDMbiWUIrD2QQxQi+ticSaDDPPQohAq1cGb iZQD7dYHB3Zh1In6iltrOvLqhRAjRbIWt9PnWK/ZJtl4P6mmLsckpOFcr6oT/iq1 WkI3TLzD6hLQOGW44s9+4OUcCrvGBMFRHnGkrAAaxQwpAQ+wnTL3iGl39UPQ9D2k khU9CxP0G2vYIoqU+NWXS22X2+B2pAEGgse5ampklha0Tntqb04= -----END CERTIFICATE-----Generated at Tue Sep 22 02:27:50 2026 by rpki-client