$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: RlBwpM1toYuwbgUxLjEhGvYav4P+K/BQXR/djyrWlu4= Subject key identifier: 22:03:BB:7A:03:8C:7D:31:7D:4E:58:8E:F9:76:BB:C7:5F:8F:B9:C2 Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 480EB9E33DE953605F87B5C266A890FFACC9BE42 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 23:32:58 +0000 Manifest this update: Wed 16 Sep 2026 23:27:58 +0000 Manifest next update: Thu 17 Sep 2026 23:51:58 +0000 Files and hashes: 1: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) 2: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: qSVw0Mxi0djWgEn4vALG6TEqpYIi62YaZ3+TC9eUgxw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:51:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:0e:b9:e3:3d:e9:53:60:5f:87:b5:c2:66:a8:90:ff:ac:c9:be:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Sep 16 23:27:58 2026 GMT Not After : Sep 17 23:51:58 2026 GMT Subject: CN=2203BB7A038C7D317D4E588EF976BBC75F8FB9C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:65:91:3e:6b:61:49:b2:28:d9:12:12:e0: a5:a5:be:42:a4:9b:67:a3:e5:b6:65:e6:6c:0f:b7: 88:0b:e0:3b:a2:16:d2:fa:5e:a8:57:fb:74:40:ae: 82:2e:2f:3d:fc:27:4d:bc:5e:7d:de:27:05:4a:cc: f1:25:86:13:5d:ed:96:29:0f:2b:3d:45:11:b8:12: f1:1e:b2:ab:c2:66:ce:74:80:5f:59:ef:ff:b2:fb: aa:ab:26:f5:77:f5:97:5c:0f:2f:8a:70:cb:0d:e6: 7d:7d:2e:b1:a3:0d:ef:de:38:ca:0c:96:95:78:48: 4f:24:a2:c5:b6:ab:09:50:08:84:9a:08:bf:d3:2b: 69:9c:27:52:f2:9c:41:fc:8e:9b:c4:8b:e5:0f:89: fb:18:f5:a1:41:90:c4:6d:35:85:10:74:e5:36:f3: 7e:f7:0b:d2:47:2a:6a:bc:3d:20:3a:78:7e:0d:62: 93:1e:ae:41:e2:57:d4:ad:67:fc:7a:b4:b8:64:7d: 1f:e0:c6:11:ef:3c:c2:9f:68:99:11:db:b4:b6:3c: 75:3a:a8:34:08:87:6e:2a:87:fe:03:f2:a5:30:52: 9d:e0:8d:41:a5:d5:c0:c6:09:4a:eb:27:3e:fe:8e: 77:96:7c:97:7f:d3:a9:d0:1f:13:2a:20:f3:0d:fb: 33:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:03:BB:7A:03:8C:7D:31:7D:4E:58:8E:F9:76:BB:C7:5F:8F:B9:C2 X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:f2:79:50:1d:3f:d7:b6:53:a1:48:56:9f:ce:d2:01:17:cd: ab:0c:2a:ae:9b:4e:b2:a9:e2:68:c7:63:29:54:17:44:f4:11: 59:3a:f4:55:5b:2a:a6:da:5e:d6:c3:f2:26:b8:df:1c:0c:7b: 75:d4:e3:58:b8:f4:e3:af:37:75:86:71:4e:c5:33:06:12:e4: 51:73:b1:a4:e8:b7:58:51:51:0b:36:49:6b:87:06:3d:59:13: 2b:7c:b5:ba:77:0a:f3:a7:a0:64:50:8c:a5:24:2a:c5:1a:a9: 3f:f5:61:54:65:02:de:34:70:15:8f:b8:64:be:18:55:1a:e5: 93:bb:1b:8e:38:cb:9a:d2:95:64:a8:1f:c6:ae:c6:94:5f:c5: 43:7e:da:9f:af:cf:62:75:c2:b0:71:87:8f:48:4a:9e:a7:90: 5a:1b:8b:b1:7d:46:c3:17:3f:fb:4f:11:90:9c:74:83:96:26: ed:18:45:f2:8b:c4:f7:50:63:ec:17:98:3e:d9:6d:bc:80:96: 44:bf:fa:73:1a:93:f8:44:73:0d:55:4d:9b:5d:14:9f:18:37: 79:60:4c:9e:86:2f:43:53:d5:bd:b7:ba:95:ea:7f:6f:e7:a0: 5d:f9:0c:5d:0e:03:d0:31:9a:1b:0b:b5:ff:2c:26:e6:05:6e: 7c:42:a4:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSA654z3pU2Bfh7XCZqiQ/6zJvkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA5MTYyMzI3NThaFw0yNjA5MTcyMzUxNThaMDMxMTAvBgNV BAMTKDIyMDNCQjdBMDM4QzdEMzE3RDRFNTg4RUY5NzZCQkM3NUY4RkI5QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaGWRPmthSbIo2RIS4KWlvkKk m2ej5bZl5mwPt4gL4DuiFtL6XqhX+3RAroIuLz38J028Xn3eJwVKzPElhhNd7ZYp Dys9RRG4EvEesqvCZs50gF9Z7/+y+6qrJvV39ZdcDy+KcMsN5n19LrGjDe/eOMoM lpV4SE8kosW2qwlQCISaCL/TK2mcJ1LynEH8jpvEi+UPifsY9aFBkMRtNYUQdOU2 8373C9JHKmq8PSA6eH4NYpMerkHiV9StZ/x6tLhkfR/gxhHvPMKfaJkR27S2PHU6 qDQIh24qh/4D8qUwUp3gjUGl1cDGCUrrJz7+jneWfJd/06nQHxMqIPMN+zNjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgO7egOMfTF9TliO+Xa7x1+PucIwHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHyeVAdP9e2U6FIVp/O0gEXzasMKq6bTrKp 4mjHYylUF0T0EVk69FVbKqbaXtbD8ia43xwMe3XU41i49OOvN3WGcU7FMwYS5FFz saTot1hRUQs2SWuHBj1ZEyt8tbp3CvOnoGRQjKUkKsUaqT/1YVRlAt40cBWPuGS+ GFUa5ZO7G444y5rSlWSoH8auxpRfxUN+2p+vz2J1wrBxh49ISp6nkFobi7F9RsMX P/tPEZCcdIOWJu0YRfKLxPdQY+wXmD7ZbbyAlkS/+nMak/hEcw1VTZtdFJ8YN3lg TJ6GL0NT1b23upXqf2/noF35DF0OA9AxmhsLtf8sJuYFbnxCpE4= -----END CERTIFICATE-----Generated at Thu Sep 17 10:02:49 2026 by rpki-client