$ rpki-client -vvf rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft File: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft (raw, json) Hash identifier: iY1blQ9ECdjS2NRpVzWTOpNWue8wkYS9uY2qiJ7T9ZI= Subject key identifier: 29:03:C6:C1:E4:06:FF:E6:DD:08:F6:52:C9:C0:7D:AB:78:A8:FD:2F Authority key identifier: B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 Certificate issuer: /CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Certificate serial: 0D08A4C5FD8BB8B214295E82617167071B8C034C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 18:55:20 +0000 Manifest this update: Sun 02 Aug 2026 18:50:20 +0000 Manifest next update: Mon 03 Aug 2026 20:41:20 +0000 Files and hashes: 1: B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl (hash: 3IYGPQy4eYjaec0E3Jj0SCAGFa7Le6w1ON5HDDP/BDk=) 2: 3136302e32352e3135322e302f32342d3234203d3e20313533313031.roa (hash: AzEesec/wW/jUzz4Ncr2O6WcaEHSrbHmG+60SsLvoz8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:08:a4:c5:fd:8b:b8:b2:14:29:5e:82:61:71:67:07:1b:8c:03:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B848BDBDF9F9967C010EDF6D8A365737C16E07E5 Validity Not Before: Aug 2 18:50:20 2026 GMT Not After : Aug 3 20:41:20 2026 GMT Subject: CN=2903C6C1E406FFE6DD08F652C9C07DAB78A8FD2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:8e:40:9f:2b:46:90:22:8f:8d:6b:77:f5:52: e5:c9:52:41:d4:de:d4:71:cd:6b:15:5c:f2:21:57: 68:06:e4:22:50:1a:97:d8:f1:2d:91:00:fb:f4:4b: 46:56:9d:a8:1e:b4:61:dd:af:43:c1:a7:a4:94:52: af:39:38:bf:1b:cf:88:52:d3:32:93:4e:42:3b:8f: 64:49:4d:93:b4:19:49:a9:0f:7b:d0:b5:b9:46:8e: 34:f0:20:59:07:ae:37:42:cf:90:17:95:58:5e:86: a3:c9:5a:c0:77:83:50:3f:36:e6:88:1c:5c:5c:80: 58:73:eb:29:35:72:b7:31:aa:f1:60:b0:b8:02:76: f8:d7:58:c4:29:5a:8b:52:0c:20:10:c7:ae:b3:9c: b8:fc:d1:70:b5:73:76:c6:3b:0c:c9:06:57:4e:6f: b2:49:07:76:f9:45:26:f7:a0:f8:0a:bb:52:65:30: a1:50:ff:47:e7:bb:c7:22:64:76:f3:8c:d3:64:95: 5c:8d:2a:cf:5c:08:58:ce:cf:46:1d:3b:e9:d4:05: b2:8f:ab:0f:9c:4b:86:1b:7a:d9:bf:b8:d5:70:dc: 53:d7:cc:50:33:a2:e0:97:b3:f4:de:1e:13:3f:a4: f1:4e:c2:c5:5e:e1:8c:7f:ab:ce:ef:86:61:72:63: 82:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:03:C6:C1:E4:06:FF:E6:DD:08:F6:52:C9:C0:7D:AB:78:A8:FD:2F X509v3 Authority Key Identifier: keyid:B8:48:BD:BD:F9:F9:96:7C:01:0E:DF:6D:8A:36:57:37:C1:6E:07:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96cd0325-31af-4ffe-8beb-e77997e6c3e1/0/B848BDBDF9F9967C010EDF6D8A365737C16E07E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:9a:06:1a:eb:13:b5:92:08:bd:38:30:40:b0:b0:f3:8f:90: ad:41:0a:7d:b7:d4:2f:42:78:34:01:45:07:8e:ff:20:99:cf: a9:76:43:44:f6:02:c6:e7:f8:c1:c1:74:12:85:6f:93:e4:9a: 73:24:a0:b9:1c:fc:b3:bd:dc:0a:9c:01:59:34:b5:9e:4c:6f: 22:8a:83:0d:de:e4:e2:ab:dd:cf:52:b0:c4:a6:72:f9:a5:8b: c1:bb:76:45:f4:d1:64:22:b4:87:0a:30:c4:98:2f:51:8e:50: aa:e6:61:5b:78:95:cc:09:80:b6:7c:ff:5f:ea:98:95:2f:35: 95:ac:c5:37:1d:50:cb:8d:1a:86:b6:50:92:62:a7:26:5b:0a: e5:a3:c8:33:67:82:16:04:81:28:77:9f:0b:57:b3:fd:ab:1a: 80:a3:a0:5a:45:5f:b2:a7:02:47:86:a3:b5:dd:45:e0:33:0e: 8d:ed:63:14:66:ec:28:32:b9:a4:5c:af:2e:3e:06:08:94:fb: ed:28:20:de:68:ef:25:9f:b6:21:e0:97:ed:cb:68:63:76:77: 53:61:b0:1a:e1:c6:01:68:b5:31:e8:dc:ba:93:b8:e0:85:f8: 6c:94:df:d1:7a:a1:ba:18:c6:e4:10:9f:43:b2:0c:f6:17:22: a6:d5:d9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQikxf2LuLIUKV6CYXFnBxuMA0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3MzdD MTZFMDdFNTAeFw0yNjA4MDIxODUwMjBaFw0yNjA4MDMyMDQxMjBaMDMxMTAvBgNV BAMTKDI5MDNDNkMxRTQwNkZGRTZERDA4RjY1MkM5QzA3REFCNzhBOEZEMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIjkCfK0aQIo+Na3f1UuXJUkHU 3tRxzWsVXPIhV2gG5CJQGpfY8S2RAPv0S0ZWnagetGHdr0PBp6SUUq85OL8bz4hS 0zKTTkI7j2RJTZO0GUmpD3vQtblGjjTwIFkHrjdCz5AXlVhehqPJWsB3g1A/NuaI HFxcgFhz6yk1crcxqvFgsLgCdvjXWMQpWotSDCAQx66znLj80XC1c3bGOwzJBldO b7JJB3b5RSb3oPgKu1JlMKFQ/0fnu8ciZHbzjNNklVyNKs9cCFjOz0YdO+nUBbKP qw+cS4Ybetm/uNVw3FPXzFAzouCXs/TeHhM/pPFOwsVe4Yx/q87vhmFyY4ItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQPGweQG/+bdCPZSycB9q3io/S8wHwYDVR0j BBgwFoAUuEi9vfn5lnwBDt9tijZXN8FuB+UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZjZDAzMjUtMzFhZi00ZmZlLThiZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRG OUY5OTY3QzAxMEVERjZEOEEzNjU3MzdDMTZFMDdFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CODQ4QkRCREY5Rjk5NjdDMDEwRURGNkQ4QTM2NTczN0MxNkUw N0U1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZjZDAzMjUtMzFhZi00ZmZlLThi ZWItZTc3OTk3ZTZjM2UxLzAvQjg0OEJEQkRGOUY5OTY3QzAxMEVERjZEOEEzNjU3 MzdDMTZFMDdFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABCaBhrrE7WSCL04MECwsPOPkK1BCn231C9C eDQBRQeO/yCZz6l2Q0T2Asbn+MHBdBKFb5PkmnMkoLkc/LO93AqcAVk0tZ5MbyKK gw3e5OKr3c9SsMSmcvmli8G7dkX00WQitIcKMMSYL1GOUKrmYVt4lcwJgLZ8/1/q mJUvNZWsxTcdUMuNGoa2UJJipyZbCuWjyDNnghYEgSh3nwtXs/2rGoCjoFpFX7Kn AkeGo7XdReAzDo3tYxRm7CgyuaRcry4+BgiU++0oIN5o7yWftiHgl+3LaGN2d1Nh sBrhxgFotTHo3LqTuOCF+GyU39F6oboYxuQQn0OyDPYXIqbV2eA= -----END CERTIFICATE-----Generated at Sun Aug 2 20:34:48 2026 by rpki-client