$ rpki-client -vvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: YG5h+JCeawuwk1oJ6ybJBgUpW1t/glBD74iZuFy3API= Subject key identifier: 31:1F:0F:A2:59:CB:5F:CA:0C:0F:15:C3:61:F1:A6:86:71:31:48:C4 Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 2D50EF83D7A0B25851D065D73C3EC3047FF0A1F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 14:57:16 +0000 Manifest this update: Tue 16 Jun 2026 14:52:16 +0000 Manifest next update: Wed 17 Jun 2026 16:11:16 +0000 Files and hashes: 1: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: mL6B85VZRFNubKjrks3PDLlNF0FgBIhxgDT1fuZ77aA=) 2: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 16:11:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:50:ef:83:d7:a0:b2:58:51:d0:65:d7:3c:3e:c3:04:7f:f0:a1:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Jun 16 14:52:16 2026 GMT Not After : Jun 17 16:11:16 2026 GMT Subject: CN=311F0FA259CB5FCA0C0F15C361F1A686713148C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:a8:a4:31:5a:36:1c:27:8c:e0:12:7d:61:d2: f2:d2:e6:6b:a2:25:9a:3b:00:5e:c3:0a:90:a4:17: 1c:49:16:5c:ae:60:68:f4:44:de:ac:01:dc:30:06: ad:57:71:62:05:ee:a0:b2:fc:1d:ca:e9:6f:c9:9f: c8:42:63:ef:96:b5:50:05:1d:07:c6:78:8e:5e:9d: 4f:5c:52:6e:f5:2c:c4:a8:ab:56:1f:0e:ee:6e:3b: a1:c9:e3:ae:b4:2b:ec:13:5c:5b:b0:e1:ce:d8:e6: 7f:5d:fa:08:db:42:5c:6d:32:60:a4:aa:a8:dc:5a: 20:83:21:60:f4:67:c8:c1:99:0f:18:a8:ab:27:05: 5e:f2:58:42:80:37:e6:e8:2e:20:a7:bc:d1:4d:14: 6d:1d:56:b6:c5:b7:a1:b0:53:19:76:c7:9b:2b:2b: ca:64:51:80:9f:c1:0b:d8:4b:08:6a:c5:4d:5a:fd: 8d:c0:d6:46:8c:bd:8f:67:b6:5b:3b:75:52:ba:8d: 0d:ab:3d:31:91:21:38:79:a5:84:5c:dd:5a:5f:87: b0:c8:a3:44:91:8a:8a:ee:80:7e:cf:51:a5:45:0f: 33:7d:06:e8:73:06:d6:17:99:9f:24:2a:31:6e:a3: 9b:3c:2e:a1:c5:40:64:82:20:00:93:0b:b1:23:93: 52:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:1F:0F:A2:59:CB:5F:CA:0C:0F:15:C3:61:F1:A6:86:71:31:48:C4 X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:a6:f9:f0:f0:d1:99:70:9e:b7:17:f2:5c:88:96:c5:38:3c: 34:36:ef:83:85:b8:ad:0d:8b:50:a7:4a:fe:46:89:4d:8e:ac: fd:fe:56:40:96:ef:a9:31:b9:e0:3b:b6:29:b1:be:95:c8:2c: 73:0b:91:b3:56:8b:6d:e3:94:d8:b1:3c:63:cb:18:48:ed:47: 74:0d:b2:c1:9b:54:08:9c:a9:75:09:1b:f4:20:ec:0b:f3:17: 46:e2:ca:ab:d8:89:1e:e0:3c:44:78:88:59:2f:3e:fb:1c:0a: 92:cc:df:2d:fc:76:89:03:ba:4c:97:3c:62:9c:16:ac:a1:9d: aa:7f:f8:5f:c2:06:a4:29:55:1d:8a:32:fb:f8:6a:61:80:90: a8:d7:11:db:05:46:2b:5a:5c:ac:7f:fb:ba:09:a0:be:4a:c8: e0:8f:46:59:f4:67:3a:ac:6d:fd:0b:eb:34:e4:aa:04:85:9a: 12:ad:ea:94:3d:51:90:6e:9d:93:10:88:b2:ff:1c:92:8f:44: c9:23:73:6c:2d:9f:43:98:17:e4:9e:e4:9d:7e:d2:26:ab:31: e8:2c:cd:93:fa:82:90:d7:ed:c0:c5:88:a9:82:ea:6a:a9:ed: e4:e9:97:f3:5e:47:dc:3b:de:e2:fc:49:14:0f:7c:90:15:e8: 2a:b9:3d:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULVDvg9egslhR0GXXPD7DBH/wofcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA2MTYxNDUyMTZaFw0yNjA2MTcxNjExMTZaMDMxMTAvBgNV BAMTKDMxMUYwRkEyNTlDQjVGQ0EwQzBGMTVDMzYxRjFBNjg2NzEzMTQ4QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqqKQxWjYcJ4zgEn1h0vLS5mui JZo7AF7DCpCkFxxJFlyuYGj0RN6sAdwwBq1XcWIF7qCy/B3K6W/Jn8hCY++WtVAF HQfGeI5enU9cUm71LMSoq1YfDu5uO6HJ4660K+wTXFuw4c7Y5n9d+gjbQlxtMmCk qqjcWiCDIWD0Z8jBmQ8YqKsnBV7yWEKAN+boLiCnvNFNFG0dVrbFt6GwUxl2x5sr K8pkUYCfwQvYSwhqxU1a/Y3A1kaMvY9ntls7dVK6jQ2rPTGRITh5pYRc3Vpfh7DI o0SRiorugH7PUaVFDzN9BuhzBtYXmZ8kKjFuo5s8LqHFQGSCIACTC7Ejk1I3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMR8PolnLX8oMDxXDYfGmhnExSMQwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqm+fDw0ZlwnrcX8lyIlsU4PDQ274OFuK0N i1CnSv5GiU2OrP3+VkCW76kxueA7timxvpXILHMLkbNWi23jlNixPGPLGEjtR3QN ssGbVAicqXUJG/Qg7AvzF0biyqvYiR7gPER4iFkvPvscCpLM3y38dokDukyXPGKc Fqyhnap/+F/CBqQpVR2KMvv4amGAkKjXEdsFRitaXKx/+7oJoL5KyOCPRln0Zzqs bf0L6zTkqgSFmhKt6pQ9UZBunZMQiLL/HJKPRMkjc2wtn0OYF+Se5J1+0iarMegs zZP6gpDX7cDFiKmC6mqp7eTpl/NeR9w73uL8SRQPfJAV6Cq5PV0= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:23 2026 by rpki-client