$ rpki-client -vvvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: E7hJwm/bD1BPOEB6ZrY1Sk+TmHJu54C8cIfLdYQcoz4= Subject key identifier: D1:8E:4C:41:32:98:14:79:C3:9F:13:BE:71:61:35:22:36:62:B1:53 Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 176F819C13FC5568D9CD00B7E93EE10D04731E79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: A7 Signing time: Wed 02 Sep 2026 20:02:19 +0000 Manifest this update: Wed 02 Sep 2026 19:57:19 +0000 Manifest next update: Fri 04 Sep 2026 00:00:19 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) 2: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: 94CikumfOJ+nOLGH+IvvrmTTwo+YAHn8ddzmFKBKazY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 00:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:6f:81:9c:13:fc:55:68:d9:cd:00:b7:e9:3e:e1:0d:04:73:1e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: Sep 2 19:57:19 2026 GMT Not After : Sep 4 00:00:19 2026 GMT Subject: CN=D18E4C4132981479C39F13BE716135223662B153 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c3:39:e3:0c:61:93:5e:58:c0:af:bb:91:f3: 1a:bd:73:46:ca:1f:0a:c7:a0:1d:cb:10:9d:74:d8: 0c:61:8e:24:f8:a6:fe:e9:fe:c7:09:c7:2e:22:25: 57:52:8c:df:34:43:48:22:ce:68:55:f6:aa:b9:d2: b5:f8:50:f1:2a:a2:43:54:2b:e1:71:4e:43:7f:29: 31:16:c4:e3:7b:57:a7:87:d2:aa:9a:a8:67:97:c3: b6:61:3a:5f:81:ed:02:b1:a9:b5:b4:3f:84:8b:3d: a2:d0:b5:68:09:4f:b4:eb:5e:de:de:86:c6:e1:f6: c4:7b:3f:f9:e3:38:d2:9a:0c:0b:de:45:69:e5:d5: eb:fe:85:6e:88:0a:90:03:b0:d4:01:f8:67:81:ed: 31:a9:93:35:e8:e9:34:48:4b:26:55:8e:f4:50:c4: 06:35:a3:86:e7:0d:33:0a:89:c8:19:59:10:66:b1: 40:72:18:06:04:ac:37:6a:cd:96:fa:66:20:b5:47: 36:ef:86:56:26:88:e3:67:f8:07:26:56:f8:9c:37: 9f:b9:02:c0:a5:9b:e9:8e:8a:da:62:21:6f:0f:5c: 73:96:f8:b0:78:88:ec:04:6e:e4:0e:31:f1:49:5d: 14:50:a7:13:66:8f:8a:ac:d0:9f:00:63:c2:9a:b1: a0:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:8E:4C:41:32:98:14:79:C3:9F:13:BE:71:61:35:22:36:62:B1:53 X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:9b:7a:71:fc:d6:bf:33:fb:50:24:fd:3d:a3:d8:c8:6a:9d: b3:9d:c2:c0:6e:f9:31:f8:8d:a1:71:e5:e3:06:a4:f1:96:0e: af:d2:51:98:6e:35:6a:88:89:a7:a4:6b:b5:67:fd:23:bf:ce: a1:a4:09:80:d3:15:ea:b9:d0:e0:79:40:1c:0b:d1:f0:a3:22: 15:47:af:e2:cb:b8:ed:a1:96:fb:49:82:25:a5:f3:42:b6:94: 5f:8e:cb:cd:87:43:43:95:c5:94:20:33:cd:2c:50:7f:74:f6: 25:b6:78:40:5f:7e:bf:7b:ae:28:82:24:54:de:5a:54:38:36: fc:98:31:14:1f:fe:20:16:66:20:b4:9f:31:7a:ff:0d:c8:d1: b7:93:15:67:a7:ff:69:f7:d2:20:4c:7d:f2:75:2c:8f:b4:e6: b6:38:06:26:0a:79:40:c9:07:4a:97:61:83:26:68:58:0d:10: cc:8a:e2:80:43:77:35:e9:97:f3:9c:f9:03:24:4e:81:93:c9: 2c:c1:65:90:8f:ef:39:b9:77:06:30:3d:6f:8f:4e:bb:f2:48: 05:33:b7:52:10:bc:cd:c1:57:01:f1:86:f1:0a:40:81:a5:1e: 87:b2:16:c9:0d:c8:0f:29:73:0a:5b:37:84:07:de:bf:1e:01: b2:13:5b:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2+BnBP8VWjZzQC36T7hDQRzHnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjA5MDIxOTU3MTlaFw0yNjA5MDQwMDAwMTlaMDMxMTAvBgNV BAMTKEQxOEU0QzQxMzI5ODE0NzlDMzlGMTNCRTcxNjEzNTIyMzY2MkIxNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwznjDGGTXljAr7uR8xq9c0bK HwrHoB3LEJ102AxhjiT4pv7p/scJxy4iJVdSjN80Q0gizmhV9qq50rX4UPEqokNU K+FxTkN/KTEWxON7V6eH0qqaqGeXw7ZhOl+B7QKxqbW0P4SLPaLQtWgJT7TrXt7e hsbh9sR7P/njONKaDAveRWnl1ev+hW6ICpADsNQB+GeB7TGpkzXo6TRISyZVjvRQ xAY1o4bnDTMKicgZWRBmsUByGAYErDdqzZb6ZiC1RzbvhlYmiONn+AcmVvicN5+5 AsClm+mOitpiIW8PXHOW+LB4iOwEbuQOMfFJXRRQpxNmj4qs0J8AY8KasaDjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Y5MQTKYFHnDnxO+cWE1IjZisVMwHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADibenH81r8z+1Ak/T2j2MhqnbOdwsBu+TH4 jaFx5eMGpPGWDq/SUZhuNWqIiaeka7Vn/SO/zqGkCYDTFeq50OB5QBwL0fCjIhVH r+LLuO2hlvtJgiWl80K2lF+Oy82HQ0OVxZQgM80sUH909iW2eEBffr97riiCJFTe WlQ4NvyYMRQf/iAWZiC0nzF6/w3I0beTFWen/2n30iBMffJ1LI+05rY4BiYKeUDJ B0qXYYMmaFgNEMyK4oBDdzXpl/Oc+QMkToGTySzBZZCP7zm5dwYwPW+PTrvySAUz t1IQvM3BVwHxhvEKQIGlHoeyFskNyA8pcwpbN4QH3r8eAbITWws= -----END CERTIFICATE-----Generated at Thu Sep 3 15:20:39 2026 by rpki-client