$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: G6kqfYAg7Ybem5v4mS9RPZMBm5ezArsRzPvXqUIrnYc= Subject key identifier: C9:06:D9:90:13:90:71:A7:CE:D8:5A:E2:90:B4:44:9B:34:EB:9D:24 Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 3201A0C3777F4723280B9A2A146CFDC5AA7076A3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: BD Signing time: Mon 21 Sep 2026 02:50:02 +0000 Manifest this update: Mon 21 Sep 2026 02:45:02 +0000 Manifest next update: Tue 22 Sep 2026 06:06:02 +0000 Files and hashes: 1: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: iJf0fr46vZdykYqcV1sQKypbjz5xR+htYncuiEdprAc=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:01:a0:c3:77:7f:47:23:28:0b:9a:2a:14:6c:fd:c5:aa:70:76:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Sep 21 02:45:02 2026 GMT Not After : Sep 22 06:06:02 2026 GMT Subject: CN=C906D990139071A7CED85AE290B4449B34EB9D24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:47:00:79:d5:9f:31:ad:9f:d6:99:23:b4:ce: 46:04:e1:3b:76:6d:df:70:da:b0:ef:2f:b0:7c:4d: 6e:03:56:71:f5:26:f5:a7:15:f8:37:5d:42:ce:3f: 5f:d6:4e:9e:b9:b0:45:88:46:76:dd:ad:df:c3:b3: c2:39:fe:3b:fb:9b:0f:2d:ce:38:e9:e3:f4:4d:20: ba:c2:89:ab:27:af:3b:7a:1c:41:19:9e:be:a7:90: 39:32:a1:45:1f:01:a9:fa:9d:d5:86:67:dc:ef:bf: 99:05:b2:09:31:53:3c:8f:ac:17:bd:37:6d:0d:8f: a7:4d:75:32:d1:98:0a:c1:06:f8:f8:71:6c:9d:da: 38:2b:ce:01:84:c7:85:4c:e8:83:99:dd:ea:aa:69: 1d:f8:5c:5f:f7:4b:09:22:0d:95:04:47:0b:3e:eb: 68:6b:c6:10:90:ec:a2:e9:70:e4:04:f8:5c:a4:51: cf:a4:f2:26:c8:7a:82:bc:7e:0d:3b:0d:d3:35:ba: de:0b:a6:12:35:10:65:2f:aa:a8:2d:b2:f5:93:d1: 2a:94:e2:88:16:8c:35:d6:8d:65:32:d2:ab:98:e1: 79:6b:df:a1:76:9f:b9:a9:e1:a2:26:cc:6b:30:3a: e8:3f:d7:e5:70:eb:f2:28:d2:78:3b:72:ba:4c:e6: ea:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:06:D9:90:13:90:71:A7:CE:D8:5A:E2:90:B4:44:9B:34:EB:9D:24 X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:81:06:0a:df:07:5a:00:9e:13:14:b8:93:78:a8:0b:cd:46: d9:54:0f:46:b0:2d:8f:cf:ef:d0:0e:4f:12:f6:f4:a8:8e:4b: 99:e0:17:d6:ff:84:3b:61:37:d9:27:ad:9c:f0:fe:8c:da:5f: 30:2d:81:96:dc:4a:e6:83:fa:9f:33:cd:69:53:b3:82:42:46: 85:90:96:6f:e7:f2:ac:16:12:33:d4:aa:87:33:6b:33:65:b4: b7:b7:8c:a1:0f:86:6d:00:6b:95:c8:be:cd:18:e5:4f:8f:50: f8:b7:7f:dd:34:ca:d6:d8:98:0f:97:52:08:6b:47:07:68:0b: c4:a2:86:12:49:8e:e0:c8:56:4f:0d:a5:d8:82:93:14:51:21: 36:26:b1:9e:bf:25:0d:99:ab:2f:55:7b:4b:fa:f1:3b:df:26: 2c:de:71:3e:e8:eb:7c:2f:bb:96:d1:ee:76:91:cd:1a:cd:48: 1a:d0:5b:99:1b:08:ac:88:a8:45:78:94:a6:dc:1d:94:01:da: cb:da:21:d5:36:cf:c7:4d:a5:02:3c:34:80:e7:f8:ef:7e:ae: dd:6c:0a:d6:f4:e9:31:20:dd:71:cc:c0:c5:74:a6:3b:5d:db: 54:28:81:29:44:db:8c:dc:b7:7e:7f:38:49:fb:f0:bf:19:d2: fc:43:8f:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgGgw3d/RyMoC5oqFGz9xapwdqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA5MjEwMjQ1MDJaFw0yNjA5MjIwNjA2MDJaMDMxMTAvBgNV BAMTKEM5MDZEOTkwMTM5MDcxQTdDRUQ4NUFFMjkwQjQ0NDlCMzRFQjlEMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTRwB51Z8xrZ/WmSO0zkYE4Tt2 bd9w2rDvL7B8TW4DVnH1JvWnFfg3XULOP1/WTp65sEWIRnbdrd/Ds8I5/jv7mw8t zjjp4/RNILrCiasnrzt6HEEZnr6nkDkyoUUfAan6ndWGZ9zvv5kFsgkxUzyPrBe9 N20Nj6dNdTLRmArBBvj4cWyd2jgrzgGEx4VM6IOZ3eqqaR34XF/3SwkiDZUERws+ 62hrxhCQ7KLpcOQE+FykUc+k8ibIeoK8fg07DdM1ut4LphI1EGUvqqgtsvWT0SqU 4ogWjDXWjWUy0quY4Xlr36F2n7mp4aImzGswOug/1+Vw6/Io0ng7crpM5uqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQbZkBOQcafO2FrikLREmzTrnSQwHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGBBgrfB1oAnhMUuJN4qAvNRtlUD0awLY/P 79AOTxL29KiOS5ngF9b/hDthN9knrZzw/ozaXzAtgZbcSuaD+p8zzWlTs4JCRoWQ lm/n8qwWEjPUqoczazNltLe3jKEPhm0Aa5XIvs0Y5U+PUPi3f900ytbYmA+XUghr RwdoC8SihhJJjuDIVk8NpdiCkxRRITYmsZ6/JQ2Zqy9Ve0v68TvfJizecT7o63wv u5bR7naRzRrNSBrQW5kbCKyIqEV4lKbcHZQB2svaIdU2z8dNpQI8NIDn+O9+rt1s Ctb06TEg3XHMwMV0pjtd21QogSlE24zct35/OEn78L8Z0vxDj00= -----END CERTIFICATE-----Generated at Mon Sep 21 21:35:24 2026 by rpki-client