$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: AMBXLs3uvpRZx4deOFXgXhIpZvO30W88ZRuWfZDHl7g= Subject key identifier: 35:4F:2E:3A:B6:63:3E:B5:13:A2:BE:E5:3C:AF:CE:12:13:D3:19:68 Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 6F51EE23F06CB9C6967CD38D9A21F0881B612D05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: FF Signing time: Mon 09 Nov 2026 00:05:26 +0000 Manifest this update: Mon 09 Nov 2026 00:00:26 +0000 Manifest next update: Tue 10 Nov 2026 02:46:26 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: GR5qTg6ClByudHOLHTO/CLc8+SNbz/4DTvSbqW+N4fQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 02:46:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:51:ee:23:f0:6c:b9:c6:96:7c:d3:8d:9a:21:f0:88:1b:61:2d:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Nov 9 00:00:26 2026 GMT Not After : Nov 10 02:46:26 2026 GMT Subject: CN=354F2E3AB6633EB513A2BEE53CAFCE1213D31968 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:d6:1f:3b:45:be:26:01:36:28:c8:2f:93: fc:97:69:a8:86:31:47:19:37:a9:10:46:3c:ac:87: 89:81:a8:16:85:81:7d:5a:b9:e3:b7:36:af:73:56: 04:b3:d2:8a:13:a4:79:41:4a:73:46:f4:d9:32:46: a9:ae:72:20:5f:c7:69:35:c3:b0:a5:27:c5:0a:cd: 18:c2:05:44:e9:86:42:b7:c9:a7:c9:42:45:28:07: f0:1b:45:25:91:73:ac:bc:01:59:29:e8:d6:20:81: ca:35:39:81:32:0d:06:91:76:a9:eb:b9:d2:95:14: 99:26:09:2b:42:39:1c:31:94:09:3a:8d:5d:65:40: ef:05:41:02:46:73:c8:92:13:35:6f:d1:7f:01:bd: 5a:0c:5d:f1:34:8f:b2:87:f1:99:e5:bc:a9:17:3c: 94:79:86:f6:28:73:92:44:39:45:25:42:85:e9:50: 7a:2d:ab:62:45:a9:ac:83:d6:33:5f:12:99:06:7a: 1d:c1:70:d4:37:8c:2d:cc:3c:41:00:65:0f:fb:8b: 64:ba:9d:96:41:83:63:c1:d2:72:c1:18:cd:4c:e2: 0c:cb:64:01:2a:2d:ce:5a:69:48:0d:f3:e3:6c:c6: ee:21:36:6b:5f:4d:44:51:d2:22:af:83:fc:f2:27: ff:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:4F:2E:3A:B6:63:3E:B5:13:A2:BE:E5:3C:AF:CE:12:13:D3:19:68 X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:fb:d0:71:16:a9:cb:ba:ea:75:d5:0b:12:77:d8:a7:cd:2f: 13:7f:4a:b1:59:94:bb:c6:ec:d4:6d:d5:d3:c2:d9:14:7a:a7: 67:b1:01:be:47:40:b9:6f:92:69:3a:bb:f8:5c:63:6a:b6:e1: fe:38:f7:c1:8c:94:57:c4:38:2c:1d:83:66:3a:b1:69:38:10: 2b:d7:a1:27:03:48:5b:24:31:83:b1:7b:cf:82:7c:80:39:16: ce:19:fd:b6:36:65:a3:40:a4:3e:55:7b:ae:de:cf:8c:9a:24: 03:45:1d:4d:23:0e:f0:32:8e:77:ee:6e:1a:b9:9e:ed:0d:db: ab:b6:cb:57:66:6a:b0:e4:ef:72:cf:6f:83:9f:69:cd:8c:2d: 46:3c:77:ea:9d:4f:08:3a:d5:6d:47:6a:8b:1a:08:4d:c0:d5: f8:4a:36:2d:9a:84:1d:7e:ea:1b:59:07:b6:10:2e:f8:26:16: e0:29:90:86:c2:fb:0f:38:02:3d:8b:ca:df:0c:e5:b1:5f:4f: e3:68:07:f7:0d:10:f0:29:cd:d4:9a:09:3b:de:87:ae:1b:a8: e9:b8:41:85:2f:37:b3:8b:bc:fc:8b:4a:93:3c:ee:e2:d0:3b: ad:55:fc:2d:23:89:c1:14:f2:41:dc:ee:8a:9c:47:65:75:28: 0c:da:66:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1HuI/BsucaWfNONmiHwiBthLQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjExMDkwMDAwMjZaFw0yNjExMTAwMjQ2MjZaMDMxMTAvBgNV BAMTKDM1NEYyRTNBQjY2MzNFQjUxM0EyQkVFNTNDQUZDRTEyMTNEMzE5NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaF9YfO0W+JgE2KMgvk/yXaaiG MUcZN6kQRjysh4mBqBaFgX1aueO3Nq9zVgSz0ooTpHlBSnNG9NkyRqmuciBfx2k1 w7ClJ8UKzRjCBUTphkK3yafJQkUoB/AbRSWRc6y8AVkp6NYggco1OYEyDQaRdqnr udKVFJkmCStCORwxlAk6jV1lQO8FQQJGc8iSEzVv0X8BvVoMXfE0j7KH8ZnlvKkX PJR5hvYoc5JEOUUlQoXpUHotq2JFqayD1jNfEpkGeh3BcNQ3jC3MPEEAZQ/7i2S6 nZZBg2PB0nLBGM1M4gzLZAEqLc5aaUgN8+Nsxu4hNmtfTURR0iKvg/zyJ/+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNU8uOrZjPrUTor7lPK/OEhPTGWgwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJH70HEWqcu66nXVCxJ32KfNLxN/SrFZlLvG 7NRt1dPC2RR6p2exAb5HQLlvkmk6u/hcY2q24f4498GMlFfEOCwdg2Y6sWk4ECvX oScDSFskMYOxe8+CfIA5Fs4Z/bY2ZaNApD5Ve67ez4yaJANFHU0jDvAyjnfubhq5 nu0N26u2y1dmarDk73LPb4Ofac2MLUY8d+qdTwg61W1HaosaCE3A1fhKNi2ahB1+ 6htZB7YQLvgmFuApkIbC+w84Aj2Lyt8M5bFfT+NoB/cNEPApzdSaCTveh64bqOm4 QYUvN7OLvPyLSpM87uLQO61V/C0jicEU8kHc7oqcR2V1KAzaZsY= -----END CERTIFICATE-----Generated at Mon Nov 9 09:01:41 2026 by rpki-client