$ rpki-client -vvf rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft File: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft (raw, json) Hash identifier: QKIDr/p/x9P5uTnbuuAZ/XgMgjnVJXPiikncwEdikAw= Subject key identifier: C4:79:C1:1B:EE:49:5B:CC:37:D6:70:EE:93:B1:9E:18:B7:0C:E4:5D Authority key identifier: 84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 Certificate issuer: /CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Certificate serial: 0185902F8BEDF04F200500BA592424A00DA2D92E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 16:56:06 +0000 Manifest this update: Fri 19 Jun 2026 16:51:06 +0000 Manifest next update: Sat 20 Jun 2026 17:42:06 +0000 Files and hashes: 1: 3230332e31342e31382e302f32342d3234203d3e20313532303834.roa (hash: 82PgOYyRG3xdn3rHf9P7dEP+kUdz3CbIpSWQ59DST8k=) 2: 848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl (hash: HGRS8q95Q2tnIcnupZhkDX5ZvVTuMzLRzZdl7kFhYbU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:42:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:85:90:2f:8b:ed:f0:4f:20:05:00:ba:59:24:24:a0:0d:a2:d9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0 Validity Not Before: Jun 19 16:51:06 2026 GMT Not After : Jun 20 17:42:06 2026 GMT Subject: CN=C479C11BEE495BCC37D670EE93B19E18B70CE45D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fe:e0:c6:ce:04:82:2d:02:54:5f:93:67:4e: 37:8e:05:c5:b1:db:05:89:9e:aa:60:2e:63:fe:6b: ea:54:a4:1d:ad:3e:17:54:52:cf:32:78:66:a1:29: 20:4a:85:e1:ad:7a:7c:2a:63:09:16:d0:a2:9f:88: 0c:d0:33:f0:30:9f:da:41:b8:10:8b:ed:58:24:82: f9:38:cc:63:a4:c4:10:3e:32:48:cb:c0:4b:e3:81: 2f:3c:86:e7:9e:96:4e:d6:37:f8:1c:63:9a:1f:c3: e4:eb:d1:e3:34:2b:73:30:f6:47:36:4d:ee:1a:7c: 8c:b8:15:3b:c1:51:4e:6b:fa:29:2e:8f:ec:76:08: 7e:b7:ae:61:ca:7e:38:27:a2:7c:85:2a:e4:1e:17: 08:c8:da:12:14:54:d7:37:6b:fc:b3:b3:f2:2c:f5: ba:d2:de:bf:60:60:cc:93:82:38:8d:01:aa:3b:c5: 00:ee:1b:c9:82:a5:6c:01:65:0d:e5:ce:4b:c0:66: 5b:63:3e:c3:dc:f6:ce:fd:4f:96:a3:d7:65:92:ea: 9c:a1:1c:ec:fb:e3:c4:6b:2c:97:63:8d:41:43:66: b1:66:dd:3d:65:be:1d:0b:ae:f3:49:54:ab:25:9f: a1:48:23:c7:1f:ec:13:52:76:cd:71:91:34:76:4a: 48:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:79:C1:1B:EE:49:5B:CC:37:D6:70:EE:93:B1:9E:18:B7:0C:E4:5D X509v3 Authority Key Identifier: keyid:84:8B:00:82:DF:3A:F5:0F:4D:AA:14:26:A7:6E:BB:39:D2:A1:0F:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/953666e1-1e41-42ed-abbc-a8c087f3f339/0/848B0082DF3AF50F4DAA1426A76EBB39D2A10FA0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:1f:a2:53:17:27:58:5f:87:f6:0f:de:57:32:dd:77:3a:f1: c6:64:bc:59:bb:03:f6:ee:22:27:82:d7:be:c0:5d:e5:9a:f0: 36:db:b4:ad:72:9d:4b:9d:10:15:62:ec:26:11:16:c4:09:ef: b0:4b:55:c6:98:1f:15:6c:65:27:86:52:bd:30:6d:d4:a5:9b: 59:fa:12:3b:b8:a5:08:bf:b1:96:9c:0a:d1:9c:87:a8:00:f4: 6e:e3:5f:31:4d:9b:cd:d0:4b:cd:69:97:70:c2:c6:64:2a:f7: 59:f8:fc:38:f5:92:25:e9:6c:f7:c8:c3:2e:09:73:ca:b9:e5: 8c:4f:cd:ac:60:4a:22:23:f9:fe:ab:40:11:59:0f:93:86:35: 58:06:6e:c2:1b:fa:ae:04:40:9b:72:d2:fa:a7:7f:0d:8c:75: ee:ff:21:b0:5e:e0:ca:0a:52:28:c8:bd:c7:8c:42:28:f3:2b: 67:db:3f:07:d0:c7:08:aa:d5:f2:b7:56:7a:2e:d4:84:3c:1e: 33:d8:d9:2e:3a:12:a6:85:fc:19:5c:d6:3f:60:05:3e:63:1c: 37:9c:17:cd:a0:31:f5:ed:a6:15:1a:f7:ab:c8:85:98:75:49: 47:6c:18:8e:39:79:aa:0b:a3:d2:e2:25:38:26:18:e6:c4:51: 6f:42:77:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYWQL4vt8E8gBQC6WSQkoA2i2S4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJCMzlE MkExMEZBMDAeFw0yNjA2MTkxNjUxMDZaFw0yNjA2MjAxNzQyMDZaMDMxMTAvBgNV BAMTKEM0NzlDMTFCRUU0OTVCQ0MzN0Q2NzBFRTkzQjE5RTE4QjcwQ0U0NUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC//uDGzgSCLQJUX5NnTjeOBcWx 2wWJnqpgLmP+a+pUpB2tPhdUUs8yeGahKSBKheGtenwqYwkW0KKfiAzQM/Awn9pB uBCL7Vgkgvk4zGOkxBA+MkjLwEvjgS88hueelk7WN/gcY5ofw+Tr0eM0K3Mw9kc2 Te4afIy4FTvBUU5r+ikuj+x2CH63rmHKfjgnonyFKuQeFwjI2hIUVNc3a/yzs/Is 9brS3r9gYMyTgjiNAao7xQDuG8mCpWwBZQ3lzkvAZltjPsPc9s79T5aj12WS6pyh HOz748RrLJdjjUFDZrFm3T1lvh0LrvNJVKsln6FII8cf7BNSds1xkTR2Skg9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxHnBG+5JW8w31nDuk7GeGLcM5F0wHwYDVR0j BBgwFoAUhIsAgt869Q9NqhQmp267OdKhD6AwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTUzNjY2ZTEtMWU0MS00MmVkLWFiYmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJE RjNBRjUwRjREQUExNDI2QTc2RUJCMzlEMkExMEZBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhCMDA4MkRGM0FGNTBGNERBQTE0MjZBNzZFQkIzOUQyQTEw RkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTUzNjY2ZTEtMWU0MS00MmVkLWFi YmMtYThjMDg3ZjNmMzM5LzAvODQ4QjAwODJERjNBRjUwRjREQUExNDI2QTc2RUJC MzlEMkExMEZBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMfolMXJ1hfh/YP3lcy3Xc68cZkvFm7A/bu IieC177AXeWa8DbbtK1ynUudEBVi7CYRFsQJ77BLVcaYHxVsZSeGUr0wbdSlm1n6 Eju4pQi/sZacCtGch6gA9G7jXzFNm83QS81pl3DCxmQq91n4/Dj1kiXpbPfIwy4J c8q55YxPzaxgSiIj+f6rQBFZD5OGNVgGbsIb+q4EQJty0vqnfw2Mde7/IbBe4MoK UijIvceMQijzK2fbPwfQxwiq1fK3Vnou1IQ8HjPY2S46EqaF/Blc1j9gBT5jHDec F82gMfXtphUa96vIhZh1SUdsGI45eaoLo9LiJTgmGObEUW9CdwM= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:19 2026 by rpki-client