$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: wwTe2R1sfJK0zaPB+MYR9zs3AtRVIY1FKv+Fc/5FaNo= Subject key identifier: 3D:B2:A0:F0:7B:FD:8E:E2:20:90:06:2E:F2:41:77:23:35:12:8A:B7 Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 734B9265EC53DDEBC223F2A855794C299FBAB5A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: BF Signing time: Mon 21 Sep 2026 09:17:58 +0000 Manifest this update: Mon 21 Sep 2026 09:12:58 +0000 Manifest next update: Tue 22 Sep 2026 11:49:58 +0000 Files and hashes: 1: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: qf2ZXGXlC2KTrt3NukCroMBtpTc305Ns65Va//NUeRQ=) 2: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) 3: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) 4: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4b:92:65:ec:53:dd:eb:c2:23:f2:a8:55:79:4c:29:9f:ba:b5:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Sep 21 09:12:58 2026 GMT Not After : Sep 22 11:49:58 2026 GMT Subject: CN=3DB2A0F07BFD8EE22090062EF241772335128AB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ad:97:ea:29:e8:90:62:ac:f9:0b:c2:3f:88: 97:81:4c:92:e1:3d:70:47:ea:3f:e3:fe:7d:81:e6: f3:eb:9d:53:a5:f9:12:3c:4e:6e:f6:53:83:96:7a: c3:e7:76:a9:c9:5f:85:41:eb:97:2d:11:23:3e:c5: a1:fd:4e:0e:8a:0c:51:32:a9:47:52:35:47:3c:46: b1:1c:bb:d3:58:83:2e:f0:dc:30:a0:6a:a0:c4:8b: f6:94:f0:1a:c8:e1:34:09:8e:43:02:36:0f:d4:bf: db:fe:6f:b8:14:41:4e:c4:d6:0f:0d:06:f2:24:e9: 89:2b:a3:b9:6a:09:42:aa:3d:2f:b8:38:61:69:f0: 34:84:e9:60:6e:61:ea:15:38:c8:f9:74:15:30:93: b7:24:73:f7:37:24:c8:77:59:22:e9:13:fa:c2:8c: 68:ad:18:23:80:2a:00:fb:1b:4d:a8:e0:64:c5:68: 60:ad:e0:dc:d3:63:53:91:9b:70:31:9a:05:a4:19: b5:15:66:2c:d2:df:3b:a2:cb:a2:86:94:fa:96:61: 23:7b:f6:bf:f7:5a:56:35:46:e8:f9:dd:60:d3:34: cd:30:0f:b8:3b:fc:9f:a3:e5:56:f5:36:1f:27:83: 38:93:c0:24:a6:07:aa:04:8d:2a:cf:63:a4:3b:79: d0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:B2:A0:F0:7B:FD:8E:E2:20:90:06:2E:F2:41:77:23:35:12:8A:B7 X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:3e:ef:1e:c4:f0:16:ca:e6:2c:cb:f4:e2:a5:ab:dd:62:3f: aa:82:5d:da:8d:cf:df:5b:9f:2b:78:ac:03:26:53:cb:d0:99: ec:fe:7c:c7:c7:41:02:c5:e8:3f:66:ae:cc:9e:ee:ae:43:7c: 0c:06:58:94:38:0f:3b:8f:3a:8c:de:24:76:69:f3:74:0c:04: cb:86:aa:d4:34:9d:8a:db:7e:6d:e5:2a:d5:0a:da:7c:4f:c9: 71:3f:f2:10:be:c3:57:6e:cd:66:51:5c:c6:78:22:9b:c5:19: fd:cc:9d:d9:84:08:e4:11:cb:e9:a7:46:be:f1:4e:c1:5e:49: 70:2f:70:1c:b1:61:eb:80:ed:7e:fd:f3:2b:db:e6:fc:67:42: da:b6:f0:ee:ef:5a:8c:ad:06:aa:0c:96:b0:74:f4:7f:a6:0f: 46:9a:38:02:91:5b:fb:3c:4c:e7:8f:04:45:dc:68:03:bb:40: 34:2c:eb:de:17:cb:d0:47:a8:c1:1f:8c:f0:c0:4c:7b:a4:6e: 0e:53:f8:70:7c:ba:1c:46:a6:bb:e9:a8:c0:c7:16:3c:17:4a: df:3b:65:34:0e:1f:7c:4f:52:4d:72:87:31:3b:cc:6a:4f:72: 7d:f2:68:b1:34:a6:04:5c:26:9e:61:a2:fe:03:fb:75:c9:77: 70:ef:ab:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0uSZexT3evCI/KoVXlMKZ+6tacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjA5MjEwOTEyNThaFw0yNjA5MjIxMTQ5NThaMDMxMTAvBgNV BAMTKDNEQjJBMEYwN0JGRDhFRTIyMDkwMDYyRUYyNDE3NzIzMzUxMjhBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVrZfqKeiQYqz5C8I/iJeBTJLh PXBH6j/j/n2B5vPrnVOl+RI8Tm72U4OWesPndqnJX4VB65ctESM+xaH9Tg6KDFEy qUdSNUc8RrEcu9NYgy7w3DCgaqDEi/aU8BrI4TQJjkMCNg/Uv9v+b7gUQU7E1g8N BvIk6Ykro7lqCUKqPS+4OGFp8DSE6WBuYeoVOMj5dBUwk7ckc/c3JMh3WSLpE/rC jGitGCOAKgD7G02o4GTFaGCt4NzTY1ORm3AxmgWkGbUVZizS3zuiy6KGlPqWYSN7 9r/3WlY1Ruj53WDTNM0wD7g7/J+j5Vb1Nh8ngziTwCSmB6oEjSrPY6Q7edBjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPbKg8Hv9juIgkAYu8kF3IzUSircwHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAY+7x7E8BbK5izL9OKlq91iP6qCXdqNz99b nyt4rAMmU8vQmez+fMfHQQLF6D9mrsye7q5DfAwGWJQ4DzuPOozeJHZp83QMBMuG qtQ0nYrbfm3lKtUK2nxPyXE/8hC+w1duzWZRXMZ4IpvFGf3MndmECOQRy+mnRr7x TsFeSXAvcByxYeuA7X798yvb5vxnQtq28O7vWoytBqoMlrB09H+mD0aaOAKRW/s8 TOePBEXcaAO7QDQs694Xy9BHqMEfjPDATHukbg5T+HB8uhxGprvpqMDHFjwXSt87 ZTQOH3xPUk1yhzE7zGpPcn3yaLE0pgRcJp5hov4D+3XJd3Dvq9A= -----END CERTIFICATE-----Generated at Mon Sep 21 15:37:23 2026 by rpki-client