$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: Wk3+urnfNXOI+ZhpqiJMd4FBTqjAWoTjjEDEl0OnZI0= Subject key identifier: 3A:6D:5D:9B:DA:9E:8F:C6:2F:59:7B:A8:BB:C0:C7:C6:DD:E2:93:41 Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 17297A266499DE8FC96C047A134E4F5C63A955F9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: BD Signing time: Sun 20 Sep 2026 18:55:09 +0000 Manifest this update: Sun 20 Sep 2026 18:50:09 +0000 Manifest next update: Mon 21 Sep 2026 20:03:09 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: yxfUecbpQzKePqjS5dy/yifMM83zvfW2B3B95f5lrbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 14:21:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:29:7a:26:64:99:de:8f:c9:6c:04:7a:13:4e:4f:5c:63:a9:55:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Sep 20 18:50:09 2026 GMT Not After : Sep 21 20:03:09 2026 GMT Subject: CN=3A6D5D9BDA9E8FC62F597BA8BBC0C7C6DDE29341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:8f:7a:6d:3b:95:97:26:d3:3e:df:92:3a:f2: 04:7f:9a:b6:6e:02:00:0c:33:cc:b7:03:e2:69:4a: 4e:cb:bd:40:58:0a:5e:59:d4:2c:a2:d4:99:59:03: 2c:7b:fc:cd:e8:62:e8:f7:db:55:e3:3e:ef:2e:2b: 32:fc:7e:8f:a2:e1:5f:d4:52:64:b6:23:17:13:16: ed:72:8a:5e:8f:ac:f2:7c:f8:c9:20:3d:bf:83:0b: 50:d6:04:5e:db:6b:a9:96:7b:27:ed:27:e5:c9:fa: 22:51:a1:fd:ee:b5:db:89:34:d7:3c:32:39:f8:26: 0c:9a:e7:a4:7d:e5:c2:fe:fc:06:67:7d:3b:5e:aa: 9a:54:2a:0c:a9:c8:86:68:0e:25:2b:23:d0:34:8a: d7:74:fe:da:8e:70:e4:45:bc:2c:61:75:52:e9:af: ae:1a:53:d9:94:66:4c:14:57:4c:a4:ce:08:a6:9f: 06:ed:86:38:5d:30:04:10:df:4b:88:cf:7a:20:af: 74:71:56:a1:95:81:5e:0b:3d:3e:ad:b0:c7:38:d6: 16:ca:10:9b:b1:4f:0b:12:86:6e:eb:66:57:62:ee: e5:d8:0e:bc:e7:ff:eb:e9:d4:a5:9c:93:c5:a3:d9: 34:9d:25:42:aa:09:2a:75:0d:e8:dd:b2:63:44:37: df:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:6D:5D:9B:DA:9E:8F:C6:2F:59:7B:A8:BB:C0:C7:C6:DD:E2:93:41 X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3c:cf:0b:77:43:31:76:5f:b0:c3:b6:79:14:c4:da:99:46: 1c:9f:62:ac:67:26:7d:f6:90:be:ec:8b:a3:fc:97:6c:c3:12: 1c:bc:1a:18:c9:a0:1e:34:68:93:6f:7f:25:5d:5a:8b:bf:ed: 7e:d7:75:2c:30:14:7c:a7:54:34:be:73:b7:ee:ae:ce:c8:6f: 93:63:35:75:e3:ae:21:fa:b5:ed:b1:95:4b:b1:07:f0:bc:ea: 3b:f1:f5:83:08:5a:55:d4:ca:70:06:fe:1e:4d:8b:f8:d2:68: 93:91:83:a0:ef:2b:bd:ad:1a:15:c9:5b:06:39:5c:7e:c5:8d: c9:05:8c:07:ac:17:78:49:44:49:50:eb:96:e0:07:c7:9e:a9: 5d:dc:74:ca:5e:a8:24:35:d6:3f:4c:23:30:1a:e2:a2:37:f2: 15:10:af:8f:62:60:ec:21:0b:c0:0e:19:7b:33:c3:94:f7:8d: 84:8b:95:a4:9b:96:6b:75:a6:0e:4b:0d:19:5b:62:9f:7d:af: 85:28:f9:81:bd:fc:a4:52:68:c0:63:72:6b:45:2a:dc:f7:ac: ac:08:3f:d3:12:88:d8:8e:25:79:cf:0f:91:3e:fb:05:f2:8d: 38:d0:63:0b:fd:2b:1a:dc:12:43:44:a9:7d:12:25:b8:a1:5a: ed:44:16:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFyl6JmSZ3o/JbAR6E05PXGOpVfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA5MjAxODUwMDlaFw0yNjA5MjEyMDAzMDlaMDMxMTAvBgNV BAMTKDNBNkQ1RDlCREE5RThGQzYyRjU5N0JBOEJCQzBDN0M2RERFMjkzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbj3ptO5WXJtM+35I68gR/mrZu AgAMM8y3A+JpSk7LvUBYCl5Z1Cyi1JlZAyx7/M3oYuj321XjPu8uKzL8fo+i4V/U UmS2IxcTFu1yil6PrPJ8+MkgPb+DC1DWBF7ba6mWeyftJ+XJ+iJRof3utduJNNc8 Mjn4Jgya56R95cL+/AZnfTteqppUKgypyIZoDiUrI9A0itd0/tqOcORFvCxhdVLp r64aU9mUZkwUV0ykzgimnwbthjhdMAQQ30uIz3ogr3RxVqGVgV4LPT6tsMc41hbK EJuxTwsShm7rZldi7uXYDrzn/+vp1KWck8Wj2TSdJUKqCSp1DejdsmNEN9/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOm1dm9qej8YvWXuou8DHxt3ik0EwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw8zwt3QzF2X7DDtnkUxNqZRhyfYqxnJn32 kL7si6P8l2zDEhy8GhjJoB40aJNvfyVdWou/7X7XdSwwFHynVDS+c7furs7Ib5Nj NXXjriH6te2xlUuxB/C86jvx9YMIWlXUynAG/h5Ni/jSaJORg6DvK72tGhXJWwY5 XH7FjckFjAesF3hJRElQ65bgB8eeqV3cdMpeqCQ11j9MIzAa4qI38hUQr49iYOwh C8AOGXszw5T3jYSLlaSblmt1pg5LDRlbYp99r4Uo+YG9/KRSaMBjcmtFKtz3rKwI P9MSiNiOJXnPD5E++wXyjTjQYwv9KxrcEkNEqX0SJbihWu1EFi8= -----END CERTIFICATE-----Generated at Mon Sep 21 01:33:54 2026 by rpki-client