$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: BfLuLRNenHoMiOtzYxm2FxNqctHLDx4DYQ0eS9VusUQ= Subject key identifier: 03:27:41:84:53:05:05:30:AA:61:EC:15:CE:A4:55:E8:77:2B:7B:6D Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 75D37C48593FC75AB6891CA0FDC72BD0E30B2293 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 02:17:01 +0000 Manifest this update: Sun 15 Nov 2026 02:12:01 +0000 Manifest next update: Mon 16 Nov 2026 05:24:01 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 2: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 3: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: xV+MHOAZtaJc2z+XegmB12eFDUnhEdqx+c7Q+DqviB0=) 4: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 05:24:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d3:7c:48:59:3f:c7:5a:b6:89:1c:a0:fd:c7:2b:d0:e3:0b:22:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Nov 15 02:12:01 2026 GMT Not After : Nov 16 05:24:01 2026 GMT Subject: CN=0327418453050530AA61EC15CEA455E8772B7B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:27:b6:6a:d4:a7:55:6a:fe:8a:ab:25:94:ff: b0:3c:af:2c:2e:18:d7:f2:cb:db:f2:39:ed:4c:b5: 09:26:c9:8c:09:c1:f2:cc:2b:60:4c:97:99:3a:de: c9:3b:4e:02:57:4d:5f:31:bd:cd:71:4b:20:a5:d3: 91:74:75:9a:77:e8:32:b2:03:d7:fa:8d:e9:3e:95: 2a:fc:80:fc:ec:13:58:f3:ff:8c:91:d4:e4:01:0d: 3c:54:d1:0c:d7:92:41:1b:b7:8c:f5:ae:9c:f7:97: 2c:2e:5b:f8:9d:55:bb:3b:d5:12:0c:68:dc:66:ae: cd:49:01:60:37:70:12:d7:06:45:af:98:99:71:79: 53:4e:0f:35:9c:35:98:f0:ca:c5:1a:db:14:66:25: d2:5e:f3:99:8c:aa:13:b9:e8:ec:e6:08:68:31:e8: bf:5b:8e:67:27:0a:5e:aa:e1:2a:b3:b0:d4:2b:33: 75:48:2f:79:0e:5a:6f:7d:18:11:d0:e8:5d:ec:6a: 65:95:42:dd:0d:fd:e6:e2:10:3a:e8:9d:ce:13:3c: 8f:08:59:28:c0:1d:de:33:6a:cf:f1:95:5b:51:cc: e2:06:c5:91:7e:74:38:69:5c:61:b6:2a:ea:5c:3c: 0d:b5:13:3d:76:c0:0b:57:85:17:58:77:ec:49:2b: b5:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:27:41:84:53:05:05:30:AA:61:EC:15:CE:A4:55:E8:77:2B:7B:6D X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:e1:d0:41:eb:1b:12:68:1e:04:16:01:14:1d:08:79:5a:03: ea:f2:96:9b:1b:c2:63:ea:0e:8a:ff:9b:24:75:9d:25:35:d6: 0a:7c:6a:66:98:80:5f:74:ea:34:81:c9:91:17:3b:16:0b:fb: 97:dc:f3:c0:c7:87:fc:93:f9:64:03:94:c9:0c:97:a5:56:e1: 0a:d7:a2:5e:78:a3:04:a3:83:1b:78:f1:d4:82:1d:90:e2:ee: c6:c1:db:8a:22:33:90:c1:5a:74:5f:c3:74:46:bb:b7:1c:a4: 26:88:03:8e:82:ab:1f:09:33:d0:5e:19:af:c2:b3:cd:c1:5e: 59:3c:02:0a:ed:f4:07:4f:b2:f0:b2:2f:18:8b:1d:ba:5a:b6: d3:05:3c:63:65:07:4f:8a:79:3f:ca:1a:8e:eb:5c:34:68:1e: f0:75:31:04:31:d7:b9:a7:9c:06:61:e7:c1:b1:eb:6d:0b:ca: 6a:e4:86:26:d0:21:59:c6:f8:f8:4c:86:9d:14:50:b7:5f:4d: a1:dd:e4:65:67:d8:2c:dc:1f:68:c2:1c:ee:2b:fe:cb:de:84: c0:cf:d8:e1:d4:49:20:8f:0d:b6:25:81:18:6b:5b:9c:c2:07: 92:14:89:cc:74:ec:83:88:9e:39:94:82:2d:8a:cb:16:f0:2b: 22:76:ff:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddN8SFk/x1q2iRyg/ccr0OMLIpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjExMTUwMjEyMDFaFw0yNjExMTYwNTI0MDFaMDMxMTAvBgNV BAMTKDAzMjc0MTg0NTMwNTA1MzBBQTYxRUMxNUNFQTQ1NUU4NzcyQjdCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJ7Zq1KdVav6KqyWU/7A8rywu GNfyy9vyOe1MtQkmyYwJwfLMK2BMl5k63sk7TgJXTV8xvc1xSyCl05F0dZp36DKy A9f6jek+lSr8gPzsE1jz/4yR1OQBDTxU0QzXkkEbt4z1rpz3lywuW/idVbs71RIM aNxmrs1JAWA3cBLXBkWvmJlxeVNODzWcNZjwysUa2xRmJdJe85mMqhO56OzmCGgx 6L9bjmcnCl6q4SqzsNQrM3VIL3kOWm99GBHQ6F3samWVQt0N/ebiEDronc4TPI8I WSjAHd4zas/xlVtRzOIGxZF+dDhpXGG2KupcPA21Ez12wAtXhRdYd+xJK7WBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAydBhFMFBTCqYewVzqRV6Hcre20wHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjh0EHrGxJoHgQWARQdCHlaA+rylpsbwmPq Dor/myR1nSU11gp8amaYgF906jSByZEXOxYL+5fc88DHh/yT+WQDlMkMl6VW4QrX ol54owSjgxt48dSCHZDi7sbB24oiM5DBWnRfw3RGu7ccpCaIA46Cqx8JM9BeGa/C s83BXlk8Agrt9AdPsvCyLxiLHbpattMFPGNlB0+KeT/KGo7rXDRoHvB1MQQx17mn nAZh58Gx620LymrkhibQIVnG+PhMhp0UULdfTaHd5GVn2CzcH2jCHO4r/svehMDP 2OHUSSCPDbYlgRhrW5zCB5IUicx07IOInjmUgi2KyxbwKyJ2//4= -----END CERTIFICATE-----Generated at Sun Nov 15 13:31:11 2026 by rpki-client