$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: ySfPtFXC747/FdKr02EWQ1G/exRIAXHayWbFPE/9sSw= Subject key identifier: 0E:2B:64:A1:74:AE:34:88:7C:20:1D:DC:FC:40:C3:86:BD:FA:88:EB Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 1BFE38FC6949826A9A471604BB0D91FD70209F44 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 21:59:53 +0000 Manifest this update: Wed 02 Sep 2026 21:54:53 +0000 Manifest next update: Fri 04 Sep 2026 00:02:53 +0000 Files and hashes: 1: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: NAzE577H5OqSGMN2BVH38//RVVKlJVFsrhM7gDd//e0=) 2: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 3: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 4: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:fe:38:fc:69:49:82:6a:9a:47:16:04:bb:0d:91:fd:70:20:9f:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Sep 2 21:54:53 2026 GMT Not After : Sep 4 00:02:53 2026 GMT Subject: CN=0E2B64A174AE34887C201DDCFC40C386BDFA88EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:fd:1f:3b:2c:3a:2d:9b:fc:57:8e:69:28: db:aa:ba:30:de:d0:a8:5f:b4:8b:ca:69:a9:10:95: c2:ac:30:77:21:f0:2d:be:f0:7b:fb:fe:b0:64:d9: 9e:4e:cb:5e:f7:c0:3f:10:55:ed:4d:6d:ac:df:2c: 7f:42:c6:e1:f9:ce:8c:70:3d:bf:f3:0d:18:5d:44: ed:98:39:97:0e:6f:b4:ca:4a:51:5a:9e:4e:2d:35: 82:5e:a4:55:2d:09:48:28:7b:49:8f:24:2f:9e:6d: 81:8b:c1:53:41:77:6a:c9:8e:6a:02:50:fc:75:76: 33:33:c9:28:d9:18:fd:c1:b1:47:a3:3f:ec:37:63: 97:a9:fc:ec:3f:5b:1e:8a:61:3b:e8:09:ff:5c:62: a8:37:81:d5:9f:82:e6:28:4a:03:66:10:47:d7:5b: 83:24:b3:ff:76:b2:65:4e:04:62:6c:ca:ec:bd:de: 5f:69:ca:10:bd:49:c3:ff:9c:2e:e9:93:a3:49:3a: b5:3e:48:69:71:da:d2:dd:1c:99:b1:e0:69:3c:75: 66:db:90:ef:fe:9c:d0:07:4f:ee:5a:5e:2a:57:4b: ae:1b:d7:13:45:f5:c8:84:fb:4e:8a:6b:98:f9:91: 0f:24:9b:50:c6:37:ec:72:5c:df:fa:23:8c:cd:9d: 03:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:2B:64:A1:74:AE:34:88:7C:20:1D:DC:FC:40:C3:86:BD:FA:88:EB X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:16:6b:bf:38:9a:00:9e:c9:a0:6d:c8:28:f9:a7:d9:7a:54: e3:64:0e:99:9c:83:04:3e:7b:46:d1:84:94:0f:c2:16:5f:ff: ff:e9:f4:d6:63:7c:53:9a:54:75:7c:ec:c2:56:9c:44:94:39: 47:78:ff:15:22:86:35:c4:d3:53:81:3f:c2:11:6e:72:c1:98: 9a:a5:d4:bc:cb:7d:a5:a8:92:b5:69:8f:cf:02:a8:cc:67:6d: d1:e8:6e:36:30:45:56:86:8b:72:66:34:1e:c2:3b:e1:96:2c: cd:d0:57:d6:f0:6b:4c:63:ea:52:43:91:d3:73:f6:f6:d2:1a: 40:47:7f:80:3f:f6:bc:57:ee:9f:68:97:2f:da:6e:1d:a6:ef: e6:c7:89:28:05:d9:fc:fd:88:c5:d9:b6:09:5c:33:0b:5e:c8: eb:db:fa:14:62:76:2a:7b:1a:83:c2:29:41:5f:ff:79:5c:97: 7f:f1:66:bc:4a:34:fa:e1:45:34:27:fb:92:3c:5b:8d:2c:f4: 22:62:1d:90:2e:ac:8e:1f:d4:68:12:99:ca:19:9b:ec:09:c7: ce:cb:b9:cd:41:ac:55:70:9b:bf:77:5a:f1:a5:fb:22:aa:03: 91:32:86:f7:dd:67:82:db:62:77:f2:25:57:ec:e5:a0:1c:7b: c0:c9:75:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG/44/GlJgmqaRxYEuw2R/XAgn0QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjA5MDIyMTU0NTNaFw0yNjA5MDQwMDAyNTNaMDMxMTAvBgNV BAMTKDBFMkI2NEExNzRBRTM0ODg3QzIwMUREQ0ZDNDBDMzg2QkRGQTg4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA/0fOyw6LZv8V45pKNuqujDe 0KhftIvKaakQlcKsMHch8C2+8Hv7/rBk2Z5Oy173wD8QVe1NbazfLH9CxuH5zoxw Pb/zDRhdRO2YOZcOb7TKSlFank4tNYJepFUtCUgoe0mPJC+ebYGLwVNBd2rJjmoC UPx1djMzySjZGP3BsUejP+w3Y5ep/Ow/Wx6KYTvoCf9cYqg3gdWfguYoSgNmEEfX W4Mks/92smVOBGJsyuy93l9pyhC9ScP/nC7pk6NJOrU+SGlx2tLdHJmx4Gk8dWbb kO/+nNAHT+5aXipXS64b1xNF9ciE+06Ka5j5kQ8km1DGN+xyXN/6I4zNnQNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDitkoXSuNIh8IB3c/EDDhr36iOswHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAWa784mgCeyaBtyCj5p9l6VONkDpmcgwQ+ e0bRhJQPwhZf///p9NZjfFOaVHV87MJWnESUOUd4/xUihjXE01OBP8IRbnLBmJql 1LzLfaWokrVpj88CqMxnbdHobjYwRVaGi3JmNB7CO+GWLM3QV9bwa0xj6lJDkdNz 9vbSGkBHf4A/9rxX7p9oly/abh2m7+bHiSgF2fz9iMXZtglcMwteyOvb+hRidip7 GoPCKUFf/3lcl3/xZrxKNPrhRTQn+5I8W40s9CJiHZAurI4f1GgSmcoZm+wJx87L uc1BrFVwm793WvGl+yKqA5EyhvfdZ4LbYnfyJVfs5aAce8DJdVI= -----END CERTIFICATE-----Generated at Thu Sep 3 05:57:04 2026 by rpki-client