$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json) Hash identifier: qydkVLHhn9D7YO3VJ5A29XPDZjQGgdqD7+yCIRopv/w= Subject key identifier: 88:24:FA:50:0F:41:C1:06:CA:58:9E:95:CA:43:9A:00:F2:15:C9:E0 Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Certificate serial: 67BF3AB77D8ED4FAC961A86B92F2FC14662B3376 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft Manifest number: C5 Signing time: Sat 26 Sep 2026 13:57:04 +0000 Manifest this update: Sat 26 Sep 2026 13:52:04 +0000 Manifest next update: Sun 27 Sep 2026 14:15:04 +0000 Files and hashes: 1: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=) 2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=) 3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=) 4: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: jdyvx9EoDAxlHcZR2LFCYQWelzb6RaaZZ16CAhV7AAo=) 5: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=) 6: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=) 7: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=) 8: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 12:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:bf:3a:b7:7d:8e:d4:fa:c9:61:a8:6b:92:f2:fc:14:66:2b:33:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Validity Not Before: Sep 26 13:52:04 2026 GMT Not After : Sep 27 14:15:04 2026 GMT Subject: CN=8824FA500F41C106CA589E95CA439A00F215C9E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:25:3c:9e:bf:84:f7:3d:2b:62:67:2b:7d:05: 8a:0a:d0:c3:4c:ab:2c:46:dd:67:4a:91:5b:36:b9: 76:6e:99:f2:25:fa:9d:34:2c:bf:00:67:1b:26:2e: d5:ab:3a:91:e0:b7:37:dd:4e:81:c0:01:77:53:54: d5:f8:c8:08:11:91:0c:ee:bd:ae:d5:54:33:09:14: 75:cd:66:ab:62:fe:39:cb:5a:95:5a:73:35:e0:0e: 35:a8:ed:f4:08:1d:86:da:82:b8:1f:fb:88:40:10: 23:34:12:0a:ee:62:3f:74:cd:7b:3c:68:8c:0a:fa: f6:7e:59:ec:1d:47:cb:cc:01:4d:13:83:12:c3:76: 31:00:7f:c0:7e:04:92:f9:4d:9d:46:91:04:44:5d: 88:a5:29:10:58:63:d2:6d:6c:a1:29:ac:3d:af:ea: c2:21:29:13:ea:d2:e6:cc:78:f2:ed:45:d0:2c:2e: a2:c5:3e:b6:59:a1:c8:1a:8e:86:cc:f6:c1:56:c4: 36:cf:2a:85:07:30:bb:8a:2b:f7:d1:0d:f0:5f:c8: bb:95:8a:a2:b9:20:dc:69:da:d6:92:83:a5:cd:43: 56:86:90:0f:f3:15:24:50:bc:fe:b9:a5:98:33:7a: 6f:b2:02:07:01:e7:02:2d:7d:49:48:49:1f:f1:a1: af:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:24:FA:50:0F:41:C1:06:CA:58:9E:95:CA:43:9A:00:F2:15:C9:E0 X509v3 Authority Key Identifier: keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:a7:6e:54:4e:35:e4:94:31:b7:0e:f3:09:f0:e6:2d:52:80: 92:a9:cb:90:05:60:3f:cb:f1:ee:f4:b4:b1:ff:d1:90:68:bb: 71:86:3e:6f:d5:ae:21:f8:bc:ec:ae:6d:04:5d:87:d6:6f:b0: d4:ac:9a:aa:6e:70:47:14:bf:31:1f:bd:f6:50:00:f6:16:c2: 1d:1d:4f:17:bc:76:eb:92:6c:02:db:1b:4a:08:2d:2d:e5:ae: 60:6b:e3:8e:74:1f:4e:d8:61:8e:2d:14:cc:9f:2d:28:b2:fb: 6a:53:3c:70:a0:02:df:8d:5d:d7:4a:7f:7e:c0:95:3e:d7:53: 76:3a:b6:dd:41:50:07:73:6f:af:36:8c:e9:07:e3:fc:f8:92: a1:b7:4a:0e:52:f1:f9:1b:d0:8b:6b:1c:7c:ae:37:8c:3e:7e: f7:a0:bf:af:bf:21:a7:51:f8:0a:9b:45:a1:58:d0:57:21:25: 26:a2:36:e7:8f:bd:c5:b7:0f:cc:58:1c:7f:23:07:5b:f6:81: 03:2f:85:fe:fe:ca:7e:d8:77:25:59:f2:45:53:e8:00:17:f7: 8e:69:9f:05:d0:98:38:52:91:cc:ff:c3:05:5f:c0:54:bf:31: bf:ff:4e:02:f2:37:a8:83:c3:29:07:c3:77:67:02:b7:24:44: 86:c3:13:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ786t32O1PrJYahrkvL8FGYrM3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5 MzYyRDA2NzAeFw0yNjA5MjYxMzUyMDRaFw0yNjA5MjcxNDE1MDRaMDMxMTAvBgNV BAMTKDg4MjRGQTUwMEY0MUMxMDZDQTU4OUU5NUNBNDM5QTAwRjIxNUM5RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJTyev4T3PStiZyt9BYoK0MNM qyxG3WdKkVs2uXZumfIl+p00LL8AZxsmLtWrOpHgtzfdToHAAXdTVNX4yAgRkQzu va7VVDMJFHXNZqti/jnLWpVaczXgDjWo7fQIHYbagrgf+4hAECM0EgruYj90zXs8 aIwK+vZ+WewdR8vMAU0TgxLDdjEAf8B+BJL5TZ1GkQREXYilKRBYY9JtbKEprD2v 6sIhKRPq0ubMePLtRdAsLqLFPrZZocgajobM9sFWxDbPKoUHMLuKK/fRDfBfyLuV iqK5INxp2taSg6XNQ1aGkA/zFSRQvP65pZgzem+yAgcB5wItfUlISR/xoa/jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiCT6UA9BwQbKWJ6VykOaAPIVyeAwHwYDVR0j BBgwFoAUhQweGAnir0mifD5n8noXmJNi0GcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyNzJmN2ItZDY1Ni00MDU4LWE3YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgw OUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5MzYyRDA2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTBDMUUxODA5RTJBRjQ5QTI3QzNFNjdGMjdBMTc5ODkzNjJE MDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3 OTg5MzYyRDA2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGynblRONeSUMbcO8wnw5i1SgJKpy5AFYD/L 8e70tLH/0ZBou3GGPm/VriH4vOyubQRdh9ZvsNSsmqpucEcUvzEfvfZQAPYWwh0d Txe8duuSbALbG0oILS3lrmBr4450H07YYY4tFMyfLSiy+2pTPHCgAt+NXddKf37A lT7XU3Y6tt1BUAdzb682jOkH4/z4kqG3Sg5S8fkb0ItrHHyuN4w+fvegv6+/IadR +AqbRaFY0FchJSaiNuePvcW3D8xYHH8jB1v2gQMvhf7+yn7YdyVZ8kVT6AAX945p nwXQmDhSkcz/wwVfwFS/Mb//TgLyN6iDwykHw3dnArckRIbDE5k= -----END CERTIFICATE-----Generated at Sun Sep 27 02:44:09 2026 by rpki-client