$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: 1Jqlz1RLhVpgDu1uDo/oedmIQtTMBbtIrftW27cofGE= Subject key identifier: 57:E3:B1:C5:8B:17:63:36:CB:32:FD:38:AF:56:4B:C0:A1:85:52:2E Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 7227A3E89BFB034011FFA4EB9FF399C1E6D3B100 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 18:00:55 +0000 Manifest this update: Tue 16 Jun 2026 17:55:55 +0000 Manifest next update: Wed 17 Jun 2026 18:18:55 +0000 Files and hashes: 1: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 3: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) 4: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: nkBaibHM21l+W7skyTSxMp0qgX1ti5VRIU07Onzakak=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:27:a3:e8:9b:fb:03:40:11:ff:a4:eb:9f:f3:99:c1:e6:d3:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Jun 16 17:55:55 2026 GMT Not After : Jun 17 18:18:55 2026 GMT Subject: CN=57E3B1C58B176336CB32FD38AF564BC0A185522E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b0:75:b9:ef:37:ff:c2:3d:05:38:9e:0d:fc: 53:ef:ba:ec:0f:8a:55:c3:da:03:2f:e4:c0:4c:42: a5:52:ad:93:cb:78:7c:0b:02:d8:27:bc:7a:33:b4: ad:1c:a6:60:ec:b9:14:62:49:be:d0:a0:9d:f7:93: 69:ce:b6:4a:58:56:f6:6c:47:1a:47:49:66:15:8f: 85:23:80:8d:ad:0f:1e:94:19:76:a2:67:87:bc:7d: d5:c9:5e:98:f7:7c:19:33:41:f6:ca:2b:36:b2:e4: dd:36:d1:41:33:75:24:c5:b7:7f:f7:48:d2:2c:f1: 18:14:21:bb:81:ae:d7:6a:db:82:e3:2a:79:74:d1: d3:f9:3b:aa:b2:f5:67:1b:46:d7:b3:7b:0f:0a:90: cf:c2:c2:09:ca:fd:4d:66:3b:de:28:53:26:c9:cc: 74:09:b8:20:f0:07:96:92:6d:91:d9:e8:51:50:96: 40:e1:b8:8b:47:6c:27:6f:a5:48:56:0b:6b:d6:60: 5e:8f:23:67:55:58:26:24:5f:5c:ef:27:bc:3f:59: d4:5b:65:25:46:ad:8b:f5:ca:80:58:c6:b7:11:a1: e7:27:e3:12:2a:18:61:72:ce:a9:8e:2c:ff:c3:ec: 07:30:be:9f:0e:15:be:17:9d:1f:0a:1e:17:1b:23: 5d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:E3:B1:C5:8B:17:63:36:CB:32:FD:38:AF:56:4B:C0:A1:85:52:2E X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:36:2f:a7:1d:46:e5:2e:5c:2e:f1:d5:42:40:c9:c8:f0:c8: 72:42:c2:54:76:90:1b:10:57:ae:65:47:f5:7a:94:42:0d:7b: a6:98:a3:c8:d2:dd:db:58:70:24:ad:47:c7:52:98:16:ee:d5: 25:41:3a:fc:65:da:53:fe:ad:8b:d8:23:53:5d:ff:9b:73:55: d9:2b:42:97:3c:bf:fc:58:68:65:94:4e:2a:e3:81:d1:e3:bf: 02:d1:a8:81:b0:3e:95:db:f1:08:15:4c:89:ec:59:28:48:bc: d9:15:12:6a:dc:cc:77:9c:65:0d:01:70:a9:c7:45:2d:95:39: 4f:10:e2:89:08:5f:99:e9:9f:29:5d:59:c3:d8:1f:6e:31:e9: 75:d0:6e:ec:b8:5a:1d:72:35:92:b7:25:c3:71:a4:a0:6b:e6: 0d:91:96:09:be:5c:a5:db:42:55:52:f2:b0:1f:cb:22:23:7c: 36:1f:9c:72:69:30:f1:46:b6:b5:64:18:e6:53:30:22:46:db: 54:1b:69:29:c9:a4:12:0c:c8:a4:64:01:23:ea:39:8f:72:00: 03:2f:67:89:23:0f:f5:fc:46:39:d9:71:06:3f:c0:21:cd:ce: 1f:00:fd:95:6e:0d:99:5e:31:3f:7c:18:6c:8a:6d:7c:75:c3: a3:ea:c3:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciej6Jv7A0AR/6Trn/OZwebTsQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjA2MTYxNzU1NTVaFw0yNjA2MTcxODE4NTVaMDMxMTAvBgNV BAMTKDU3RTNCMUM1OEIxNzYzMzZDQjMyRkQzOEFGNTY0QkMwQTE4NTUyMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYsHW57zf/wj0FOJ4N/FPvuuwP ilXD2gMv5MBMQqVSrZPLeHwLAtgnvHoztK0cpmDsuRRiSb7QoJ33k2nOtkpYVvZs RxpHSWYVj4UjgI2tDx6UGXaiZ4e8fdXJXpj3fBkzQfbKKzay5N020UEzdSTFt3/3 SNIs8RgUIbuBrtdq24LjKnl00dP5O6qy9WcbRtezew8KkM/CwgnK/U1mO94oUybJ zHQJuCDwB5aSbZHZ6FFQlkDhuItHbCdvpUhWC2vWYF6PI2dVWCYkX1zvJ7w/WdRb ZSVGrYv1yoBYxrcRoecn4xIqGGFyzqmOLP/D7Acwvp8OFb4XnR8KHhcbI10TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV+OxxYsXYzbLMv04r1ZLwKGFUi4wHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFg2L6cdRuUuXC7x1UJAycjwyHJCwlR2kBsQ V65lR/V6lEINe6aYo8jS3dtYcCStR8dSmBbu1SVBOvxl2lP+rYvYI1Nd/5tzVdkr Qpc8v/xYaGWUTirjgdHjvwLRqIGwPpXb8QgVTInsWShIvNkVEmrczHecZQ0BcKnH RS2VOU8Q4okIX5npnyldWcPYH24x6XXQbuy4Wh1yNZK3JcNxpKBr5g2Rlgm+XKXb QlVS8rAfyyIjfDYfnHJpMPFGtrVkGOZTMCJG21QbaSnJpBIMyKRkASPqOY9yAAMv Z4kjD/X8RjnZcQY/wCHNzh8A/ZVuDZleMT98GGyKbXx1w6Pqw/g= -----END CERTIFICATE-----Generated at Wed Jun 17 10:53:36 2026 by rpki-client