$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: zK4PV9DTtVr/6G4kOIQ+Q1+WeIaDTPIjCEwW+/4302I= Subject key identifier: 92:AF:07:F2:77:92:68:EA:9A:5D:70:4F:BE:EC:9F:7B:62:97:AE:05 Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 0A55BC9BC03E157EB631DE166349DFA65640BCB5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 20:18:03 +0000 Manifest this update: Mon 02 Nov 2026 20:13:03 +0000 Manifest next update: Tue 03 Nov 2026 23:00:03 +0000 Files and hashes: 1: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: +KctMiWGbuRFuqe8JHE2n/I+KiJsjbaHJ1LbZwj2JH0=) 2: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:55:bc:9b:c0:3e:15:7e:b6:31:de:16:63:49:df:a6:56:40:bc:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Nov 2 20:13:03 2026 GMT Not After : Nov 3 23:00:03 2026 GMT Subject: CN=92AF07F2779268EA9A5D704FBEEC9F7B6297AE05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b0:f4:cb:cd:41:c2:7a:ad:dc:e4:3e:7e:51: 32:91:89:48:e7:e9:96:c6:cf:28:81:fa:f4:98:12: 36:3a:29:1d:17:7a:0c:23:35:fe:d6:88:66:a4:a7: ce:46:4a:ce:81:85:1e:8b:b5:fc:23:77:1a:53:34: a5:2a:86:5c:f4:7f:8f:ce:f8:ee:4a:e0:5e:da:f0: 1b:4b:e1:84:c0:95:53:29:02:05:4c:ce:c2:d5:75: 4b:72:07:3c:fa:a3:da:0c:f1:57:56:14:cf:ae:0c: e3:6f:3f:6a:31:bb:6b:92:b3:d4:b5:a4:03:d3:03: 7d:81:15:a4:58:13:04:4b:60:51:5b:6e:76:25:6c: 7f:fd:2f:53:65:50:f2:5a:2c:38:4e:ce:78:c6:b4: 43:e6:02:7b:3b:53:38:00:79:e2:76:0c:a4:eb:b0: e5:52:ad:2f:bb:af:c5:c8:8a:2c:d1:6e:9d:8e:58: e0:0e:a3:4b:47:b9:f9:36:24:79:53:44:68:fc:b8: 77:87:27:9a:49:e3:c7:17:a4:82:fe:6f:55:0d:cf: 9b:59:70:e5:99:d9:53:7e:61:26:55:11:ab:18:37: f5:e9:e2:af:33:da:c6:7a:16:6c:a6:66:f5:cf:66: 08:1c:42:c2:3b:ee:2f:0a:4a:74:a7:6e:84:9b:5d: 26:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AF:07:F2:77:92:68:EA:9A:5D:70:4F:BE:EC:9F:7B:62:97:AE:05 X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:72:77:9d:94:30:2b:8c:07:d8:c3:e6:f7:83:f4:11:bd:91: 0e:70:a8:87:f1:ae:6b:36:81:a7:d6:c3:c9:11:c9:d6:0a:cb: 68:8b:ad:98:70:c8:db:c9:21:ac:5e:a6:68:ce:89:94:64:0a: 97:59:0a:3a:0f:1d:ed:85:7a:30:26:0b:16:fd:73:a2:e6:b9: 1a:f8:23:35:55:37:0a:08:db:f2:04:98:52:0a:3e:63:23:7a: 09:7f:39:97:8a:d5:a5:8d:f8:f4:c9:16:8c:5a:88:ea:14:fd: 17:4d:3c:c3:66:ab:2c:f4:f2:74:61:c2:5a:32:cf:72:5f:12: 24:de:d7:82:75:17:b0:fe:51:72:37:90:5e:b3:ff:e2:9c:9a: 1f:f2:4f:e4:80:91:1c:b0:82:77:da:4a:8f:98:df:83:ac:0e: 6a:5c:4c:1b:b7:23:7a:59:8d:b3:02:09:66:3e:a2:83:d8:4c: 34:3a:fc:11:77:8b:6b:42:b9:68:6f:d6:5b:52:e7:a3:c6:33: d8:b0:5b:32:56:27:ff:a6:5e:d5:24:99:c7:a6:de:95:33:4c: 3e:00:d6:9f:17:d8:e4:98:77:5c:f6:55:72:84:6b:21:c0:39: 61:21:98:b0:ae:8c:5e:f6:ae:0b:72:f1:9d:97:73:c0:0f:7f: 27:59:9e:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUClW8m8A+FX62Md4WY0nfplZAvLUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjExMDIyMDEzMDNaFw0yNjExMDMyMzAwMDNaMDMxMTAvBgNV BAMTKDkyQUYwN0YyNzc5MjY4RUE5QTVENzA0RkJFRUM5RjdCNjI5N0FFMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+sPTLzUHCeq3c5D5+UTKRiUjn 6ZbGzyiB+vSYEjY6KR0XegwjNf7WiGakp85GSs6BhR6LtfwjdxpTNKUqhlz0f4/O +O5K4F7a8BtL4YTAlVMpAgVMzsLVdUtyBzz6o9oM8VdWFM+uDONvP2oxu2uSs9S1 pAPTA32BFaRYEwRLYFFbbnYlbH/9L1NlUPJaLDhOznjGtEPmAns7UzgAeeJ2DKTr sOVSrS+7r8XIiizRbp2OWOAOo0tHufk2JHlTRGj8uHeHJ5pJ48cXpIL+b1UNz5tZ cOWZ2VN+YSZVEasYN/Xp4q8z2sZ6FmymZvXPZggcQsI77i8KSnSnboSbXSaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkq8H8neSaOqaXXBPvuyfe2KXrgUwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZyd52UMCuMB9jD5veD9BG9kQ5wqIfxrms2 gafWw8kRydYKy2iLrZhwyNvJIaxepmjOiZRkCpdZCjoPHe2FejAmCxb9c6LmuRr4 IzVVNwoI2/IEmFIKPmMjegl/OZeK1aWN+PTJFoxaiOoU/RdNPMNmqyz08nRhwloy z3JfEiTe14J1F7D+UXI3kF6z/+Kcmh/yT+SAkRywgnfaSo+Y34OsDmpcTBu3I3pZ jbMCCWY+ooPYTDQ6/BF3i2tCuWhv1ltS56PGM9iwWzJWJ/+mXtUkmcem3pUzTD4A 1p8X2OSYd1z2VXKEayHAOWEhmLCujF72rgty8Z2Xc8APfydZnko= -----END CERTIFICATE-----Generated at Tue Nov 3 13:49:04 2026 by rpki-client