$ rpki-client -vvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: g4z6Aw8SMgYoxvnFLZfDTIhXHu2mzqcMTFv4O3yKcQs= Subject key identifier: 4D:D1:DF:F7:BB:34:14:68:7B:46:77:B5:B0:68:F6:86:60:32:84:AE Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 261A56CB7B08AEF6C2677EFD3A369CA21C964675 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 02:04:19 +0000 Manifest this update: Thu 18 Jun 2026 01:59:19 +0000 Manifest next update: Fri 19 Jun 2026 02:13:19 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: aRDtyQY08PbPbO2ptwsrakdaEx5pIUY8AASoZGkIQEA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 02:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1a:56:cb:7b:08:ae:f6:c2:67:7e:fd:3a:36:9c:a2:1c:96:46:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Jun 18 01:59:19 2026 GMT Not After : Jun 19 02:13:19 2026 GMT Subject: CN=4DD1DFF7BB3414687B4677B5B068F686603284AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:bc:ec:d3:fa:6d:08:6e:c5:e0:57:41:c9:47: 9d:e2:73:50:55:1e:ab:b6:5a:69:c2:f7:fa:2f:96: 02:38:31:4a:64:6a:81:3f:d2:15:df:85:1d:7d:1e: bd:13:72:3c:42:5c:7a:74:c8:00:65:c2:29:b0:ab: cf:f8:5b:14:f0:53:e7:31:0a:03:33:58:4f:c8:41: 68:f5:fc:07:17:fc:4b:ad:a3:be:ca:0e:66:ab:50: 7e:a6:b4:66:12:1d:3e:55:60:4c:fe:f4:5d:2a:be: ca:05:d1:9f:cd:3a:42:a3:52:1b:b7:af:09:c2:a3: ff:c1:98:9d:d9:bc:69:10:75:6e:2b:8f:9c:ff:38: 95:1d:de:f5:e9:c7:91:c5:28:59:c7:d4:50:84:6c: 72:07:82:be:f9:ec:6c:c1:0f:19:9a:5d:d0:7d:57: c0:b4:01:68:44:26:bb:ce:8d:5f:b9:4c:f9:35:73: 50:c1:af:d8:0b:ce:73:c4:34:c5:d0:e3:9e:2b:09: da:44:53:49:00:41:3d:47:6c:9d:e1:f5:40:fd:d3: 33:bd:5a:b7:a1:19:45:8d:22:01:d2:b1:c7:5c:f5: 18:87:2f:bf:58:7c:3f:3a:47:81:90:df:7f:c0:31: 67:3b:d7:6d:24:64:30:29:00:3b:a8:61:a2:74:15: c6:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:D1:DF:F7:BB:34:14:68:7B:46:77:B5:B0:68:F6:86:60:32:84:AE X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:c8:11:01:62:8e:35:e9:f2:e3:b3:0a:f2:31:fc:83:37:8f: 5b:df:fb:c2:08:e9:2f:b8:ff:dc:4d:39:0c:8c:66:24:21:f4: 89:9e:aa:33:46:d0:e4:5f:01:62:46:86:56:48:00:36:26:37: 80:6d:1b:85:f3:fc:c9:00:f5:ac:b1:67:6d:dd:68:7d:b6:bf: f6:80:eb:7c:03:70:9b:81:fe:09:b7:1c:b1:d9:48:6d:40:4c: 0e:68:18:a1:60:fd:53:52:b0:f1:d1:bc:dd:cd:0d:e8:66:21: 69:4d:a5:f2:fd:b8:4e:3f:42:0f:b9:3c:d2:db:e7:d4:c8:44: 53:4b:bd:c9:e8:b4:a3:91:18:2c:34:2d:b7:11:6e:e0:f1:49: 1a:5e:dd:d8:0e:46:73:4f:f9:d8:7e:3c:b0:e9:76:02:3e:72: bf:44:b0:0c:1e:39:ef:c1:b4:65:25:c2:80:b9:c6:0b:63:38: ba:cd:aa:d1:60:81:7d:ea:b8:36:75:08:fa:9f:9a:58:b1:d4: e3:c6:c3:75:20:1c:1a:a7:d4:41:3b:33:8c:8e:d2:f1:f7:14: 2b:ca:4d:6f:b2:7f:fd:64:a3:69:e2:12:d3:1d:a4:36:23:51: c2:0c:95:40:d9:33:95:d2:ac:f2:c3:2e:cc:6e:b0:4b:1c:9f: f5:d4:3b:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhpWy3sIrvbCZ379OjacohyWRnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA2MTgwMTU5MTlaFw0yNjA2MTkwMjEzMTlaMDMxMTAvBgNV BAMTKDRERDFERkY3QkIzNDE0Njg3QjQ2NzdCNUIwNjhGNjg2NjAzMjg0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvOzT+m0IbsXgV0HJR53ic1BV Hqu2WmnC9/ovlgI4MUpkaoE/0hXfhR19Hr0TcjxCXHp0yABlwimwq8/4WxTwU+cx CgMzWE/IQWj1/AcX/Euto77KDmarUH6mtGYSHT5VYEz+9F0qvsoF0Z/NOkKjUhu3 rwnCo//BmJ3ZvGkQdW4rj5z/OJUd3vXpx5HFKFnH1FCEbHIHgr757GzBDxmaXdB9 V8C0AWhEJrvOjV+5TPk1c1DBr9gLznPENMXQ454rCdpEU0kAQT1HbJ3h9UD90zO9 WrehGUWNIgHSscdc9RiHL79YfD86R4GQ33/AMWc7120kZDApADuoYaJ0FcY1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTdHf97s0FGh7Rne1sGj2hmAyhK4wHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXIEQFijjXp8uOzCvIx/IM3j1vf+8II6S+4 /9xNOQyMZiQh9ImeqjNG0ORfAWJGhlZIADYmN4BtG4Xz/MkA9ayxZ23daH22v/aA 63wDcJuB/gm3HLHZSG1ATA5oGKFg/VNSsPHRvN3NDehmIWlNpfL9uE4/Qg+5PNLb 59TIRFNLvcnotKORGCw0LbcRbuDxSRpe3dgORnNP+dh+PLDpdgI+cr9EsAweOe/B tGUlwoC5xgtjOLrNqtFggX3quDZ1CPqfmlix1OPGw3UgHBqn1EE7M4yO0vH3FCvK TW+yf/1ko2niEtMdpDYjUcIMlUDZM5XSrPLDLsxusEscn/XUO04= -----END CERTIFICATE-----Generated at Thu Jun 18 17:12:11 2026 by rpki-client