$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: gF/7Hj9CKuwdUDeuQFx/L3FErGGb2RVOgbJoCRhDgGQ= Subject key identifier: 20:FF:0C:D3:27:E0:15:E9:69:71:3D:54:D1:14:C9:E2:E8:21:47:3D Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 03D4E2B5B51027631B5C22390D0797C12BA23F7E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: BC Signing time: Sun 20 Sep 2026 01:54:27 +0000 Manifest this update: Sun 20 Sep 2026 01:49:27 +0000 Manifest next update: Mon 21 Sep 2026 04:59:27 +0000 Files and hashes: 1: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) 2: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 3: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) 4: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 5: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: Q6Xy1+LLeQ+X0DhijanrGL7nH2/CEVBjfj2pzC/1kgg=) 6: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 04:59:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d4:e2:b5:b5:10:27:63:1b:5c:22:39:0d:07:97:c1:2b:a2:3f:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: Sep 20 01:49:27 2026 GMT Not After : Sep 21 04:59:27 2026 GMT Subject: CN=20FF0CD327E015E969713D54D114C9E2E821473D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:5d:1d:94:ee:4f:53:26:72:bc:f8:5e:e5:fd: 19:6b:cf:1e:8b:71:2b:83:00:67:26:c4:22:69:de: dd:cb:e5:22:44:d7:81:30:4b:f2:a7:a8:fd:3e:98: 03:03:d9:95:fd:f5:04:86:f6:c0:29:41:b4:12:f8: c6:5e:df:f7:71:a1:e4:81:8a:80:cc:cc:24:e2:14: 38:47:99:34:bb:5b:b9:32:a0:6b:8f:a2:f3:f3:2b: aa:29:4d:9e:83:39:3c:18:19:e2:50:42:fe:ac:31: 4b:18:9f:52:b4:dc:2f:1f:a1:f7:c9:7b:5e:51:1b: 4a:83:7b:9f:66:9a:2b:91:c1:a0:d1:b3:8f:c3:05: 47:63:b4:7b:fa:f1:21:f6:30:6d:95:ab:58:38:8c: 44:9e:db:4d:34:5c:3e:b7:7f:58:36:80:9f:46:3d: ae:b2:5c:c5:fb:df:0b:21:f1:b9:84:19:07:54:29: f9:09:20:43:8e:80:fd:b9:3d:38:fa:ed:cf:db:09: 34:fd:e9:d2:fc:6a:6d:d7:96:6c:87:c6:2f:22:da: 47:63:66:7e:48:d0:ef:47:ad:da:84:61:d6:ef:0e: b9:34:51:13:ea:1a:10:88:60:f2:7d:55:f6:f6:53: 8a:10:bb:92:ef:5a:e8:53:6a:54:42:f6:3c:ec:c8: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:FF:0C:D3:27:E0:15:E9:69:71:3D:54:D1:14:C9:E2:E8:21:47:3D X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:8e:da:86:b0:a8:bd:36:61:81:3c:cf:5b:d6:0d:cd:77:5b: 84:77:0d:34:18:27:ae:90:b4:98:a2:61:2f:3b:c0:86:51:02: ff:87:6d:c5:81:4e:3d:ce:00:3a:4d:27:57:1d:79:21:f3:ea: 0d:81:c6:ca:35:b8:02:d7:48:ab:7e:87:1f:27:b4:f4:7f:18: 44:68:aa:51:c4:ff:fe:77:07:45:1d:dd:0b:e4:45:4f:a2:64: 26:e1:e9:32:e9:0b:b8:5e:a3:f3:72:3a:05:ac:c6:c3:bb:89: 17:bf:64:cb:47:22:96:49:de:a1:33:fb:1b:5e:72:b7:e1:4b: 20:af:15:1a:c8:28:83:56:e2:5d:1f:b2:dc:5e:7a:4a:91:4f: d5:c5:56:f4:18:12:76:b7:23:32:f9:e9:60:bd:9b:bc:91:eb: f5:c0:d9:f5:ad:af:63:f1:8d:c1:56:0b:7a:3c:0f:67:12:8e: 90:b4:47:bb:75:ff:0b:3d:69:5d:31:11:20:c1:ef:9b:0c:e3: 35:1a:5a:95:ef:fd:e4:08:f8:55:b1:e7:2e:60:b1:f0:5b:4b: 05:a1:6f:de:8b:c0:d9:a4:22:30:c2:db:02:d6:ab:46:23:cd: ff:fc:b3:b3:33:dc:b1:49:64:c1:27:65:c7:8c:a6:8f:93:9c: 62:3f:94:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9TitbUQJ2MbXCI5DQeXwSuiP34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA5MjAwMTQ5MjdaFw0yNjA5MjEwNDU5MjdaMDMxMTAvBgNV BAMTKDIwRkYwQ0QzMjdFMDE1RTk2OTcxM0Q1NEQxMTRDOUUyRTgyMTQ3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUXR2U7k9TJnK8+F7l/Rlrzx6L cSuDAGcmxCJp3t3L5SJE14EwS/KnqP0+mAMD2ZX99QSG9sApQbQS+MZe3/dxoeSB ioDMzCTiFDhHmTS7W7kyoGuPovPzK6opTZ6DOTwYGeJQQv6sMUsYn1K03C8foffJ e15RG0qDe59mmiuRwaDRs4/DBUdjtHv68SH2MG2Vq1g4jESe2000XD63f1g2gJ9G Pa6yXMX73wsh8bmEGQdUKfkJIEOOgP25PTj67c/bCTT96dL8am3XlmyHxi8i2kdj Zn5I0O9HrdqEYdbvDrk0URPqGhCIYPJ9Vfb2U4oQu5LvWuhTalRC9jzsyJLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIP8M0yfgFelpcT1U0RTJ4ughRz0wHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOO2oawqL02YYE8z1vWDc13W4R3DTQYJ66Q tJiiYS87wIZRAv+HbcWBTj3OADpNJ1cdeSHz6g2Bxso1uALXSKt+hx8ntPR/GERo qlHE//53B0Ud3QvkRU+iZCbh6TLpC7heo/NyOgWsxsO7iRe/ZMtHIpZJ3qEz+xte crfhSyCvFRrIKINW4l0fstxeekqRT9XFVvQYEna3IzL56WC9m7yR6/XA2fWtr2Px jcFWC3o8D2cSjpC0R7t1/ws9aV0xESDB75sM4zUaWpXv/eQI+FWx5y5gsfBbSwWh b96LwNmkIjDC2wLWq0Yjzf/8s7Mz3LFJZMEnZceMpo+TnGI/lPk= -----END CERTIFICATE-----Generated at Sun Sep 20 20:13:22 2026 by rpki-client