$ rpki-client -vvf rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft File: 848CD3643B388F52B8A91CEA8C426741F718DEE6.mft (raw, json) Hash identifier: BfBizVoHfu3qdlRDffPEVi0IF4bAilPjJbrrTkYHn/M= Subject key identifier: 5D:4A:61:07:8E:74:E5:C5:08:F3:73:E1:2A:49:D5:92:8C:CC:94:56 Authority key identifier: 84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 Certificate issuer: /CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Certificate serial: 5D2BAAE04664E7D6F357C8D514D56E6C275A4134 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 16:05:05 +0000 Manifest this update: Fri 19 Jun 2026 16:00:05 +0000 Manifest next update: Sat 20 Jun 2026 18:30:05 +0000 Files and hashes: 1: 3130332e3136382e34372e302f32342d3234203d3e20313432333130.roa (hash: DuvBn6wYfw4bn2hw9ZthVL357j3Sm2Wj8CngAeHPDSQ=) 2: 848CD3643B388F52B8A91CEA8C426741F718DEE6.crl (hash: qTCH9KuT4oysYJLxrM4UEtnSJcJkDj/w0DpbzK4a+FE=) 3: 3130332e3136382e34362e302f32332d3233203d3e20313432333130.roa (hash: XnY6jK2gEUwRMFx70/AxEALWyGk5ejl1ympKR9nQjRE=) 4: 3130332e3136382e34362e302f32342d3234203d3e20313432333130.roa (hash: oIxybdU/PWrfvcWiGn1saU6rmTm7Xbd16tvYQghTMVs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:30:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:2b:aa:e0:46:64:e7:d6:f3:57:c8:d5:14:d5:6e:6c:27:5a:41:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=848CD3643B388F52B8A91CEA8C426741F718DEE6 Validity Not Before: Jun 19 16:00:05 2026 GMT Not After : Jun 20 18:30:05 2026 GMT Subject: CN=5D4A61078E74E5C508F373E12A49D5928CCC9456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:a9:bf:fe:06:c2:a0:e8:96:7b:9b:df:a4: dc:83:0e:2b:e8:22:ad:6c:39:7a:f6:b2:da:73:dd: b3:ca:81:05:38:a8:57:96:fd:3e:bd:a4:f2:9a:ae: c0:60:58:35:5f:d6:b0:9a:21:56:be:09:b9:43:5d: 61:17:43:4e:09:96:f0:17:07:b5:de:d3:45:9d:af: 55:57:56:ab:34:f1:6b:07:bc:e5:a7:8c:59:1c:de: 0b:4f:fd:88:24:6e:ad:cc:f7:19:65:94:e2:8e:aa: 10:05:14:ea:52:7f:05:6e:b3:84:d8:e5:46:29:a9: a0:1a:ce:05:7c:8f:11:86:52:2f:0c:01:41:db:81: 1d:85:39:35:f3:a7:e1:b6:cc:bb:bf:75:86:bb:be: a5:d7:d7:3b:ee:3b:a2:82:78:15:72:2c:d8:8b:be: ba:60:cc:eb:d3:79:54:2b:f1:d4:13:8c:ea:9a:62: 55:7d:8f:85:25:24:04:ac:ae:fa:e3:7b:90:59:b3: f2:88:36:ce:4d:68:d6:ce:7c:ad:97:cf:52:74:71: 42:01:00:47:4b:86:02:b3:f2:11:82:86:32:f0:9c: 79:b1:d3:0e:34:97:f0:c6:67:0e:e6:31:d7:c0:57: 9e:a5:50:fc:97:26:7e:1e:63:48:22:be:11:67:28: a0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:4A:61:07:8E:74:E5:C5:08:F3:73:E1:2A:49:D5:92:8C:CC:94:56 X509v3 Authority Key Identifier: keyid:84:8C:D3:64:3B:38:8F:52:B8:A9:1C:EA:8C:42:67:41:F7:18:DE:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/848CD3643B388F52B8A91CEA8C426741F718DEE6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f4293c64-ea00-413f-9090-2b190b1a45af/0/848CD3643B388F52B8A91CEA8C426741F718DEE6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:01:78:ed:90:f0:49:81:6a:85:74:92:51:5d:da:80:f4:5a: 7b:7a:7d:65:f9:91:98:8b:5a:3a:40:d3:b5:da:1c:df:25:6a: 28:22:4c:a1:ff:66:a4:58:2e:93:60:5f:c9:f5:b8:cc:f7:a9: 5c:1a:bc:a9:b6:9e:8d:86:63:be:6d:62:c6:16:e1:7b:ac:ef: ed:4c:d1:59:e4:1b:3f:0e:2f:73:b8:2e:35:73:46:84:27:cf: 7e:42:43:0f:b7:5b:4d:e1:b9:2a:4d:fa:0b:62:36:60:d1:18: 6f:d0:5e:cf:c5:dc:77:43:3c:29:54:8c:6d:4c:fd:25:8c:87: 24:d7:be:6b:93:54:f9:90:4c:02:ee:c5:cc:9b:9c:ee:65:1f: 6a:68:c7:5e:cb:ac:bf:49:cd:da:53:55:03:4a:c7:f8:4e:ca: 45:a7:11:ed:a1:6c:fe:22:ed:de:52:29:05:6e:91:5d:a9:59: 3e:eb:9f:18:fb:ad:ba:27:59:80:14:2d:73:e3:cc:9f:5e:54: 7a:09:f2:b4:a5:68:72:af:5c:79:29:28:5d:62:db:93:18:1a: cf:c6:89:85:64:e8:0f:dc:97:84:bd:3f:7c:ff:24:e5:ed:d9: 5d:3b:c1:ed:ba:a8:08:10:8e:60:73:10:38:11:5f:42:09:5f: 53:93:57:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXSuq4EZk59bzV8jVFNVubCdaQTQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFG NzE4REVFNjAeFw0yNjA2MTkxNjAwMDVaFw0yNjA2MjAxODMwMDVaMDMxMTAvBgNV BAMTKDVENEE2MTA3OEU3NEU1QzUwOEYzNzNFMTJBNDlENTkyOENDQzk0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoK6m//gbCoOiWe5vfpNyDDivo Iq1sOXr2stpz3bPKgQU4qFeW/T69pPKarsBgWDVf1rCaIVa+CblDXWEXQ04JlvAX B7Xe00Wdr1VXVqs08WsHvOWnjFkc3gtP/Ygkbq3M9xlllOKOqhAFFOpSfwVus4TY 5UYpqaAazgV8jxGGUi8MAUHbgR2FOTXzp+G2zLu/dYa7vqXX1zvuO6KCeBVyLNiL vrpgzOvTeVQr8dQTjOqaYlV9j4UlJASsrvrje5BZs/KINs5NaNbOfK2Xz1J0cUIB AEdLhgKz8hGChjLwnHmx0w40l/DGZw7mMdfAV56lUPyXJn4eY0givhFnKKAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXUphB4505cUI83PhKknVkozMlFYwHwYDVR0j BBgwFoAUhIzTZDs4j1K4qRzqjEJnQfcY3uYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjQyOTNjNjQtZWEwMC00MTNmLTkwOTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQz QjM4OEY1MkI4QTkxQ0VBOEM0MjY3NDFGNzE4REVFNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NDhDRDM2NDNCMzg4RjUyQjhBOTFDRUE4QzQyNjc0MUY3MThE RUU2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjQyOTNjNjQtZWEwMC00MTNmLTkw OTAtMmIxOTBiMWE0NWFmLzAvODQ4Q0QzNjQzQjM4OEY1MkI4QTkxQ0VBOEM0MjY3 NDFGNzE4REVFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgBeO2Q8EmBaoV0klFd2oD0Wnt6fWX5kZiL WjpA07XaHN8laigiTKH/ZqRYLpNgX8n1uMz3qVwavKm2no2GY75tYsYW4Xus7+1M 0VnkGz8OL3O4LjVzRoQnz35CQw+3W03huSpN+gtiNmDRGG/QXs/F3HdDPClUjG1M /SWMhyTXvmuTVPmQTALuxcybnO5lH2pox17LrL9JzdpTVQNKx/hOykWnEe2hbP4i 7d5SKQVukV2pWT7rnxj7rbonWYAULXPjzJ9eVHoJ8rSlaHKvXHkpKF1i25MYGs/G iYVk6A/cl4S9P3z/JOXt2V07we26qAgQjmBzEDgRX0IJX1OTV90= -----END CERTIFICATE-----Generated at Sat Jun 20 09:17:44 2026 by rpki-client