$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft File: D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft (raw, json) Hash identifier: 6gBRlLPHHmqOYB9RqaxyGRY/pb0Efp+P+OyuOozrGqk= Subject key identifier: 89:41:F0:5E:31:EE:DB:EC:EE:3D:F8:36:31:CA:9D:7F:87:A3:AA:B7 Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 57D1D773791B056553A43F34A64908E0328F9355 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 09:33:21 +0000 Manifest this update: Tue 22 Sep 2026 09:28:21 +0000 Manifest next update: Wed 23 Sep 2026 11:29:21 +0000 Files and hashes: 1: D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl (hash: wNDROrUh7V9qh/kWrBUFsWRBmoKEEPYRzu7nQGQvCH0=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:29:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d1:d7:73:79:1b:05:65:53:a4:3f:34:a6:49:08:e0:32:8f:93:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: Sep 22 09:28:21 2026 GMT Not After : Sep 23 11:29:21 2026 GMT Subject: CN=8941F05E31EEDBECEE3DF83631CA9D7F87A3AAB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bd:5d:cb:cd:db:b9:81:61:ed:b6:8d:38:6c: 76:2a:c3:6d:74:33:59:07:4e:1d:6e:10:22:e5:70: 37:16:78:02:d1:1d:5c:c8:d4:77:d9:d7:56:9b:8e: 90:8a:1e:20:76:0f:5b:16:ba:2e:fc:7a:19:92:39: 84:c0:2f:2c:25:d9:97:9e:1f:64:01:b8:c2:b1:5c: 1e:c6:00:d6:6f:71:10:54:8b:42:1b:ee:71:5d:f6: 2c:9a:ff:3c:2d:b9:26:97:2a:85:ae:01:6e:e3:3e: 28:f3:ad:13:5e:2c:8c:df:ed:0f:2f:e4:0a:d8:30: 47:3d:23:1b:8c:c5:fa:7b:eb:6d:05:c3:92:3a:ba: 08:aa:55:e3:e7:f3:74:db:c0:43:49:41:ad:4b:f5: 33:55:1e:4e:6b:94:75:52:55:c4:f2:db:ee:43:77: a8:4f:91:0a:e9:c8:4e:2d:60:5e:a2:28:fe:8e:5d: a6:89:bd:80:e7:f1:1d:91:16:71:ce:ed:7c:42:3c: f1:9b:35:e7:7b:ca:8a:be:b6:ec:1d:f4:8b:45:25: 0b:fd:6b:94:da:55:bb:f8:bd:52:24:0e:30:ad:e0: 3e:39:47:5d:b6:12:a8:97:1d:0d:03:5e:10:00:d0: 1a:83:e4:4a:84:84:e4:6b:24:3c:a7:08:70:af:bd: cb:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:41:F0:5E:31:EE:DB:EC:EE:3D:F8:36:31:CA:9D:7F:87:A3:AA:B7 X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0d:a2:d8:77:62:e5:2c:af:eb:f9:4a:68:e7:cf:14:b1:40: 66:44:2a:81:ee:04:88:1e:d7:16:5d:d6:e2:92:db:48:16:b6: e1:b3:bb:40:53:dc:2a:c3:50:d0:2c:96:90:7a:a5:58:db:4b: 37:ce:33:46:50:16:ab:8c:ab:57:ba:ed:d9:5f:95:9b:fb:5e: ad:a5:d6:fe:48:e7:22:3a:08:76:f0:0a:81:21:ef:8c:58:82: 80:18:c2:ae:67:a0:8e:de:da:7a:c0:19:73:a8:d4:f7:37:e3: 81:d7:64:de:b1:0b:bd:c5:d6:aa:7f:bb:ad:05:3b:87:cd:e1: 13:8c:54:e7:bb:aa:27:5e:23:79:19:42:51:b8:d2:b1:98:b0: 1b:f8:e1:6c:5d:8d:28:e7:7e:f7:7b:ae:89:c8:a8:0b:6c:cf: 83:6b:96:43:4d:35:a1:3e:66:77:0a:6b:54:a9:a5:be:6d:d3: dd:ff:f9:6e:19:19:ed:65:9d:04:2d:31:26:88:da:76:ea:81: f8:4a:98:24:4e:8f:89:de:de:ab:df:24:7e:95:c9:93:9a:1a: ce:44:32:ca:24:ab:ab:dd:6e:65:95:0d:72:89:8d:89:d1:c1: 75:27:e2:45:00:25:2e:bd:c0:58:08:7b:e2:10:84:10:c9:26: dc:e5:cf:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9HXc3kbBWVTpD80pkkI4DKPk1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjA5MjIwOTI4MjFaFw0yNjA5MjMxMTI5MjFaMDMxMTAvBgNV BAMTKDg5NDFGMDVFMzFFRURCRUNFRTNERjgzNjMxQ0E5RDdGODdBM0FBQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyvV3Lzdu5gWHtto04bHYqw210 M1kHTh1uECLlcDcWeALRHVzI1HfZ11abjpCKHiB2D1sWui78ehmSOYTALywl2Zee H2QBuMKxXB7GANZvcRBUi0Ib7nFd9iya/zwtuSaXKoWuAW7jPijzrRNeLIzf7Q8v 5ArYMEc9IxuMxfp7620Fw5I6ugiqVePn83TbwENJQa1L9TNVHk5rlHVSVcTy2+5D d6hPkQrpyE4tYF6iKP6OXaaJvYDn8R2RFnHO7XxCPPGbNed7yoq+tuwd9ItFJQv9 a5TaVbv4vVIkDjCt4D45R122EqiXHQ0DXhAA0BqD5EqEhORrJDynCHCvvcvBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiUHwXjHu2+zuPfg2Mcqdf4ejqrcwHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0 NDVDN0QzOERFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0Noth3YuUsr+v5SmjnzxSxQGZEKoHuBIge 1xZd1uKS20gWtuGzu0BT3CrDUNAslpB6pVjbSzfOM0ZQFquMq1e67dlflZv7Xq2l 1v5I5yI6CHbwCoEh74xYgoAYwq5noI7e2nrAGXOo1Pc344HXZN6xC73F1qp/u60F O4fN4ROMVOe7qideI3kZQlG40rGYsBv44WxdjSjnfvd7ronIqAtsz4NrlkNNNaE+ ZncKa1Sppb5t093/+W4ZGe1lnQQtMSaI2nbqgfhKmCROj4ne3qvfJH6VyZOaGs5E Msokq6vdbmWVDXKJjYnRwXUn4kUAJS69wFgIe+IQhBDJJtzlz+c= -----END CERTIFICATE-----Generated at Tue Sep 22 19:38:00 2026 by rpki-client