$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: R3tWB/HzUPSsFWp2yI4iqewrNtO7QF80SCXVIOOZR0U= Subject key identifier: 40:0B:05:41:C8:98:3F:48:4E:66:03:81:94:30:2E:AF:1F:A0:B9:01 Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 0B101A085EA882367BEAAE6C5B864E0AC39C7757 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: EB Signing time: Sun 25 Oct 2026 14:09:12 +0000 Manifest this update: Sun 25 Oct 2026 14:04:12 +0000 Manifest next update: Mon 26 Oct 2026 17:59:12 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 2: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: GPTzNeHX58lslpD5p/th4TKLLmBppE1sZ7ul/Pb3+CE=) 3: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) 4: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:10:1a:08:5e:a8:82:36:7b:ea:ae:6c:5b:86:4e:0a:c3:9c:77:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Oct 25 14:04:12 2026 GMT Not After : Oct 26 17:59:12 2026 GMT Subject: CN=400B0541C8983F484E66038194302EAF1FA0B901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:89:8c:60:5d:65:69:03:0f:35:10:df:0f:f2: 05:0f:79:2c:40:f9:44:96:56:8a:12:b2:4a:70:98: bf:16:2c:ce:25:3c:20:fd:14:6d:6b:fd:bc:ce:1f: 6a:15:67:78:37:df:ea:5b:a7:41:f7:f1:3d:41:b7: 7c:b3:40:34:7e:bc:b0:fd:9f:46:41:98:36:b5:fa: 49:77:6b:fa:de:cb:4c:be:70:f0:86:45:0b:00:ba: 7c:d5:3f:09:b7:0d:ed:e8:74:b3:d9:a1:37:60:ac: a8:49:91:48:43:c3:ab:b0:c1:e4:b1:ca:85:98:ee: e8:cb:e9:e2:9d:9b:fc:57:21:f5:73:6f:b2:3f:b7: 64:c6:1c:74:9a:53:d2:10:35:7e:21:55:b9:77:f7: ac:5d:71:c9:df:51:e8:94:85:11:b9:4c:d2:99:dd: 91:58:ea:21:69:52:7b:a9:66:7d:25:21:7a:90:df: 70:2e:98:0f:70:ad:f8:7e:01:b1:dd:e1:0a:fd:70: 83:cd:31:e2:eb:a8:1d:84:d9:70:b1:ec:8b:c8:c4: fd:b7:c4:8c:f4:f5:07:c4:bc:01:64:bd:bc:20:ff: 25:e6:be:3b:49:c5:3e:30:78:38:8d:c1:c2:c0:3e: 74:86:5b:aa:1c:51:ae:a8:dd:e3:a8:76:91:93:f6: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:0B:05:41:C8:98:3F:48:4E:66:03:81:94:30:2E:AF:1F:A0:B9:01 X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:16:6a:56:6e:32:be:47:0b:ad:9d:6f:18:86:47:4e:a2:12: 25:41:37:0a:35:82:2e:57:eb:15:2d:7c:49:b4:8e:71:1c:db: 2f:ef:ba:2e:7e:39:93:47:54:57:e1:86:cc:72:57:04:b7:22: 74:a3:14:cc:f8:2c:a1:86:45:09:c5:e0:63:02:b9:48:9a:37: af:52:ba:55:37:14:4a:ca:40:bd:cd:2b:b7:fb:12:c9:94:d8: 41:25:e2:d2:32:2b:69:04:fd:5d:6b:80:79:36:81:4f:0b:61: 37:5c:f6:30:a1:35:88:17:80:31:c9:ce:f4:1f:3c:d1:01:51: a9:90:45:bf:70:78:52:2d:56:50:48:63:1e:29:4d:bd:8a:43: 6c:ed:e5:2a:d0:01:b6:7a:48:14:fd:b3:69:01:f8:f4:91:c2: fc:b0:0e:3e:4e:a1:13:15:46:a3:dc:bc:df:92:31:af:ff:7f: 5e:f8:b2:8e:bc:aa:93:17:69:e8:cb:19:c5:6d:b7:1d:bf:86: a1:08:a9:92:f6:e6:90:88:0b:9b:e1:6c:82:be:93:f0:a4:b1: f0:ab:ee:19:d9:93:57:e3:c4:26:c6:9d:d2:26:ab:38:37:aa: 2d:8b:79:ac:31:6d:29:19:06:6e:ba:b0:7e:e0:60:32:53:5e: 79:30:61:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCxAaCF6ogjZ76q5sW4ZOCsOcd1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjEwMjUxNDA0MTJaFw0yNjEwMjYxNzU5MTJaMDMxMTAvBgNV BAMTKDQwMEIwNTQxQzg5ODNGNDg0RTY2MDM4MTk0MzAyRUFGMUZBMEI5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiYxgXWVpAw81EN8P8gUPeSxA +USWVooSskpwmL8WLM4lPCD9FG1r/bzOH2oVZ3g33+pbp0H38T1Bt3yzQDR+vLD9 n0ZBmDa1+kl3a/rey0y+cPCGRQsAunzVPwm3De3odLPZoTdgrKhJkUhDw6uwweSx yoWY7ujL6eKdm/xXIfVzb7I/t2TGHHSaU9IQNX4hVbl396xdccnfUeiUhRG5TNKZ 3ZFY6iFpUnupZn0lIXqQ33AumA9wrfh+AbHd4Qr9cIPNMeLrqB2E2XCx7IvIxP23 xIz09QfEvAFkvbwg/yXmvjtJxT4weDiNwcLAPnSGW6ocUa6o3eOodpGT9r21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQAsFQciYP0hOZgOBlDAurx+guQEwHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsWalZuMr5HC62dbxiGR06iEiVBNwo1gi5X 6xUtfEm0jnEc2y/vui5+OZNHVFfhhsxyVwS3InSjFMz4LKGGRQnF4GMCuUiaN69S ulU3FErKQL3NK7f7EsmU2EEl4tIyK2kE/V1rgHk2gU8LYTdc9jChNYgXgDHJzvQf PNEBUamQRb9weFItVlBIYx4pTb2KQ2zt5SrQAbZ6SBT9s2kB+PSRwvywDj5OoRMV RqPcvN+SMa//f174so68qpMXaejLGcVttx2/hqEIqZL25pCIC5vhbIK+k/CksfCr 7hnZk1fjxCbGndImqzg3qi2LeawxbSkZBm66sH7gYDJTXnkwYSE= -----END CERTIFICATE-----Generated at Mon Oct 26 03:45:56 2026 by rpki-client