$ rpki-client -vvvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: Jx86KWFkW7SCkOm+RCBthOKH3kE+8MmFV2rW2c80FOs= Subject key identifier: AA:73:53:15:97:CC:1B:46:AB:2A:AE:C5:A0:7B:DC:CB:1E:82:1C:BE Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 727F31382159EF7B2293CA8C09B61DE3067EED20 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: EB Signing time: Sat 24 Oct 2026 04:04:09 +0000 Manifest this update: Sat 24 Oct 2026 03:59:09 +0000 Manifest next update: Sun 25 Oct 2026 06:32:09 +0000 Files and hashes: 1: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: p6fOputj7RL8cDGzTj+lJvmXC4IrFlZJqFAeUMHcPZI=) 2: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 03:03:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:31:38:21:59:ef:7b:22:93:ca:8c:09:b6:1d:e3:06:7e:ed:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: Oct 24 03:59:09 2026 GMT Not After : Oct 25 06:32:09 2026 GMT Subject: CN=AA73531597CC1B46AB2AAEC5A07BDCCB1E821CBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:dc:76:40:0f:f3:cb:6d:71:9a:f3:cd:2d: 2d:7a:19:80:3d:c0:00:82:54:a5:68:f9:27:a7:93: 07:4f:54:ae:92:b0:ac:49:1b:2f:ff:63:4e:6c:ad: 76:9c:ac:c9:31:cb:29:1f:e8:c4:fc:eb:d5:e8:8b: 1c:5f:1b:3d:ec:38:bd:66:ab:cc:80:b1:33:ac:aa: e3:1c:c7:d8:d3:47:56:9c:6f:eb:77:5c:85:44:3c: 01:a0:77:6f:3e:94:2e:fb:5c:e6:fa:c4:81:c7:80: f5:ac:bc:45:75:da:22:8e:49:c1:97:b2:a5:00:35: a4:c1:b7:06:56:a0:4a:c0:48:1b:57:9d:fd:f7:9c: dd:e1:77:63:ce:5a:e1:98:4e:15:e3:9a:ac:62:43: c0:b1:b7:81:1f:52:cf:9e:fb:bb:52:cc:49:51:d4: fc:40:b4:ab:29:6b:64:a5:be:5a:ce:cf:af:69:12: 74:da:2e:0d:86:ea:37:f3:73:e1:56:50:03:f8:86: 60:69:2b:2c:0a:b4:e2:eb:a9:74:88:28:d3:0f:de: 16:a4:96:65:c6:00:fb:a4:c6:14:8c:56:dd:1d:8d: 89:b7:89:e6:99:3a:94:b5:4c:9c:fe:c0:4b:9a:91: 99:94:c9:97:39:78:c1:2c:7c:8c:78:ff:eb:b9:f5: 41:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:73:53:15:97:CC:1B:46:AB:2A:AE:C5:A0:7B:DC:CB:1E:82:1C:BE X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:86:b5:e2:e0:14:d5:03:7f:a9:11:d0:b8:69:32:58:cf:6a: b4:68:3c:fe:09:10:7d:50:d8:04:f0:bf:7f:46:f1:3b:7e:40: 47:6c:48:cb:38:1a:67:7e:5b:f2:8f:3e:ec:89:a5:ec:00:14: 82:a2:50:d6:c5:e5:48:3f:22:ad:91:ae:1d:df:76:4d:1b:eb: 87:af:f8:17:ba:59:94:6f:14:ba:ec:70:75:b3:63:4d:0f:49: 02:92:ea:d1:07:a1:c2:0f:e7:2f:86:98:9a:1d:48:aa:6a:f3: 2e:48:64:8d:09:03:b7:8a:61:34:87:52:d2:67:6d:74:4b:4e: 8d:18:07:37:e3:d4:a5:0a:74:f3:57:84:f0:7e:67:63:be:0f: f7:0a:ae:a6:29:16:1a:c4:99:4a:18:d4:ce:45:f2:49:b6:8a: 92:66:6c:e1:8f:2f:09:cd:a1:b4:41:0d:c7:78:d8:02:a3:b9: 25:41:00:ab:f7:51:ca:04:44:f0:61:4b:8a:fa:db:c9:ec:65: 91:56:8b:ee:b7:46:7c:3d:b8:d5:2d:05:7c:20:7b:83:bf:fe: 3c:89:56:30:eb:e2:49:6c:37:89:8d:db:51:fd:13:c6:51:b3: fe:84:bc:74:19:0a:a5:73:4d:38:9d:a2:d3:b4:eb:c8:9b:02: 7a:bb:ce:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcn8xOCFZ73sik8qMCbYd4wZ+7SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjEwMjQwMzU5MDlaFw0yNjEwMjUwNjMyMDlaMDMxMTAvBgNV BAMTKEFBNzM1MzE1OTdDQzFCNDZBQjJBQUVDNUEwN0JEQ0NCMUU4MjFDQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChntx2QA/zy21xmvPNLS16GYA9 wACCVKVo+SenkwdPVK6SsKxJGy//Y05srXacrMkxyykf6MT869XoixxfGz3sOL1m q8yAsTOsquMcx9jTR1acb+t3XIVEPAGgd28+lC77XOb6xIHHgPWsvEV12iKOScGX sqUANaTBtwZWoErASBtXnf33nN3hd2POWuGYThXjmqxiQ8Cxt4EfUs+e+7tSzElR 1PxAtKspa2SlvlrOz69pEnTaLg2G6jfzc+FWUAP4hmBpKywKtOLrqXSIKNMP3hak lmXGAPukxhSMVt0djYm3ieaZOpS1TJz+wEuakZmUyZc5eMEsfIx4/+u59UHnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqnNTFZfMG0arKq7FoHvcyx6CHL4wHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWGteLgFNUDf6kR0LhpMljParRoPP4JEH1Q 2ATwv39G8Tt+QEdsSMs4Gmd+W/KPPuyJpewAFIKiUNbF5Ug/Iq2Rrh3fdk0b64ev +Be6WZRvFLrscHWzY00PSQKS6tEHocIP5y+GmJodSKpq8y5IZI0JA7eKYTSHUtJn bXRLTo0YBzfj1KUKdPNXhPB+Z2O+D/cKrqYpFhrEmUoY1M5F8km2ipJmbOGPLwnN obRBDcd42AKjuSVBAKv3UcoERPBhS4r628nsZZFWi+63Rnw9uNUtBXwge4O//jyJ VjDr4klsN4mN21H9E8ZRs/6EvHQZCqVzTTidotO068ibAnq7zkA= -----END CERTIFICATE-----Generated at Sat Oct 24 10:13:56 2026 by rpki-client