$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft File: D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft (raw, json) Hash identifier: rUG3LyoB81TpdECm47pxUSXLJi5c5CwLYDKursCkSSc= Subject key identifier: 09:CA:E6:11:46:D6:72:33:2B:7A:19:B2:D2:93:62:BA:82:E4:95:7B Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 17896430E051198531D23EF75C0C93ADDC3DAB89 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:56:55 +0000 Manifest this update: Tue 16 Jun 2026 22:51:55 +0000 Manifest next update: Thu 18 Jun 2026 02:34:55 +0000 Files and hashes: 1: D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl (hash: QFt8ZJAty4hlrMuh0nS0ifRv2YP1Zg1AwZFe1YOymXM=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:89:64:30:e0:51:19:85:31:d2:3e:f7:5c:0c:93:ad:dc:3d:ab:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: Jun 16 22:51:55 2026 GMT Not After : Jun 18 02:34:55 2026 GMT Subject: CN=09CAE61146D672332B7A19B2D29362BA82E4957B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:d2:e8:c5:a2:73:5c:e6:2d:31:95:b9:e0:d0: 5e:22:07:ba:2c:84:69:db:75:7c:ce:e2:60:2f:62: 99:92:56:c5:c2:85:dd:23:dc:b6:92:06:00:7f:02: 43:10:ac:4f:8a:7a:18:67:57:d6:b4:14:f1:1d:ff: d1:9c:1a:a2:a2:8b:e3:64:3c:08:77:1b:6d:41:60: 60:39:aa:29:2b:34:18:70:15:05:b4:6f:49:0c:9d: 3b:cc:82:44:14:bf:7d:bf:3f:37:7b:59:a0:28:79: bd:cc:c4:43:dd:d2:e5:ea:6e:61:ae:57:14:72:ea: c2:cb:8a:29:d4:53:5f:03:82:28:13:64:2a:da:19: 10:ec:a2:e2:e5:9c:73:a3:51:2d:29:0d:5d:6d:e1: a4:74:42:83:19:6d:7f:93:e7:54:59:c2:a9:13:2c: 2a:c0:30:7e:b1:3a:c8:6f:56:d2:59:ae:de:be:e5: fa:27:e3:76:22:e5:c9:e2:59:a9:b6:fd:22:90:d6: 0e:4d:d2:ee:ac:85:04:ed:dd:c3:e5:87:b6:cb:33: e4:30:2a:88:97:a7:a3:72:92:be:53:87:ef:22:42: 08:b5:d6:9e:77:00:8f:08:8d:08:cc:0e:de:86:97: a1:4d:54:67:55:70:2f:c4:d8:05:c4:71:c3:4b:28: 8c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:CA:E6:11:46:D6:72:33:2B:7A:19:B2:D2:93:62:BA:82:E4:95:7B X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:14:2c:83:b2:a8:de:d8:5e:71:1e:ab:da:55:80:a3:3a:12: 38:84:4e:ba:ad:92:7c:f5:1c:22:7d:ef:0b:85:37:f5:26:56: 5d:63:ea:dd:75:63:a6:79:db:72:5c:ab:ce:5a:c5:15:fd:4a: 1b:f0:cf:af:63:e2:08:36:81:8e:1b:4e:a4:5d:6d:41:2f:64: 60:af:8b:24:4e:63:c9:a7:b4:90:0d:9a:27:d0:00:7f:28:1e: 2a:c5:b6:74:17:6a:9d:18:cd:f7:b6:87:d0:30:63:27:cd:bf: 08:85:f0:af:73:ce:dc:b2:c7:f2:f2:8a:2d:51:22:b0:4f:f2: 2c:7c:51:de:53:dd:9a:21:4b:9c:ff:f3:a6:0f:a7:e8:c6:a7: 8d:02:52:7e:c2:c4:d2:cb:d0:98:9c:e5:ac:f1:da:ba:cb:3f: 67:f7:b7:6d:97:90:e2:93:54:27:de:ff:e8:c2:03:28:d4:3f: f8:52:a7:1a:11:e0:18:fe:44:a3:26:aa:58:ef:0a:45:fb:58: a1:d3:10:61:62:bd:f1:61:ef:c6:c4:f6:37:a1:6e:fc:10:4d: 4c:15:e9:8e:2d:96:66:f2:7b:44:ac:38:f0:1b:1e:7c:5e:1f: b2:92:b6:f3:79:eb:5a:6f:e3:d2:b2:68:2c:ec:b2:c8:e1:8f: 24:2b:d1:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF4lkMOBRGYUx0j73XAyTrdw9q4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjA2MTYyMjUxNTVaFw0yNjA2MTgwMjM0NTVaMDMxMTAvBgNV BAMTKDA5Q0FFNjExNDZENjcyMzMyQjdBMTlCMkQyOTM2MkJBODJFNDk1N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY0ujFonNc5i0xlbng0F4iB7os hGnbdXzO4mAvYpmSVsXChd0j3LaSBgB/AkMQrE+KehhnV9a0FPEd/9GcGqKii+Nk PAh3G21BYGA5qikrNBhwFQW0b0kMnTvMgkQUv32/Pzd7WaAoeb3MxEPd0uXqbmGu VxRy6sLLiinUU18DgigTZCraGRDsouLlnHOjUS0pDV1t4aR0QoMZbX+T51RZwqkT LCrAMH6xOshvVtJZrt6+5fon43Yi5cniWam2/SKQ1g5N0u6shQTt3cPlh7bLM+Qw KoiXp6Nykr5Th+8iQgi11p53AI8IjQjMDt6Gl6FNVGdVcC/E2AXEccNLKIwLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcrmEUbWcjMrehmy0pNiuoLklXswHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0 NDVDN0QzOERFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAULIOyqN7YXnEeq9pVgKM6EjiETrqtknz1 HCJ97wuFN/UmVl1j6t11Y6Z523Jcq85axRX9Shvwz69j4gg2gY4bTqRdbUEvZGCv iyROY8mntJANmifQAH8oHirFtnQXap0Yzfe2h9AwYyfNvwiF8K9zztyyx/Lyii1R IrBP8ix8Ud5T3ZohS5z/86YPp+jGp40CUn7CxNLL0Jic5azx2rrLP2f3t22XkOKT VCfe/+jCAyjUP/hSpxoR4Bj+RKMmqljvCkX7WKHTEGFivfFh78bE9jehbvwQTUwV 6Y4tlmbye0SsOPAbHnxeH7KStvN561pv49KyaCzsssjhjyQr0ag= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:58 2026 by rpki-client