$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: p0WR1Wauyu8ZhX3WkbqYQDecYPtnH0s47PAY/Qnq0W8= Subject key identifier: 2E:CB:82:73:5E:A8:31:A1:60:20:5A:57:E4:10:1C:2F:24:63:C7:17 Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 62793E3BFEE7CFF5B5A434906EBA3FE35C0DD268 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: BB Signing time: Sun 20 Sep 2026 06:55:42 +0000 Manifest this update: Sun 20 Sep 2026 06:50:42 +0000 Manifest next update: Mon 21 Sep 2026 08:44:42 +0000 Files and hashes: 1: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: epFExCeAwmlNKQgYuf8bXs6O4m1AlFe8rB+Y0oG1jvU=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 08:44:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:79:3e:3b:fe:e7:cf:f5:b5:a4:34:90:6e:ba:3f:e3:5c:0d:d2:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Sep 20 06:50:42 2026 GMT Not After : Sep 21 08:44:42 2026 GMT Subject: CN=2ECB82735EA831A160205A57E4101C2F2463C717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0c:74:81:60:e9:a7:90:ba:fb:b2:40:32:66: 14:20:40:4a:f6:4a:66:c3:11:e2:a6:13:f9:5b:5d: ac:7c:20:68:f6:f8:a7:2d:dd:c2:5a:da:c9:bc:74: 34:d2:47:20:60:fc:4f:67:aa:66:14:06:0c:b3:fd: 97:86:8a:71:73:a5:6d:c3:97:a4:50:e8:99:e5:83: 32:b7:8e:3d:f6:cd:75:c3:25:93:cf:7b:f5:05:71: f2:9a:f1:a6:d6:2b:b6:94:29:b7:bd:ca:85:e0:be: 3a:d4:87:13:13:7a:3c:4e:61:dd:48:58:47:60:9a: 21:90:28:85:b4:00:49:45:aa:90:34:15:2b:ca:89: 19:cf:02:a7:20:ba:94:8f:34:17:9c:35:e5:2b:5c: fd:5a:5d:39:56:f0:c5:a3:28:ee:92:54:5d:7d:42: d0:71:41:7e:93:c1:d2:4d:d5:5f:1a:4f:c4:15:7e: 7d:d6:da:c1:97:c7:88:b6:a6:e5:22:ff:a4:6a:96: 51:b3:86:aa:6e:48:01:3f:9f:cd:78:a2:a4:bd:a4: de:a6:6d:40:12:e5:2a:8b:5a:38:92:00:1c:53:80: 80:8b:c4:26:90:6d:51:55:63:02:3a:7a:65:25:9f: 91:3d:da:a9:c9:bb:ef:c9:91:d6:bb:53:97:72:eb: 08:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:CB:82:73:5E:A8:31:A1:60:20:5A:57:E4:10:1C:2F:24:63:C7:17 X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:5e:2c:b6:83:ad:5a:10:24:2d:51:84:34:a3:29:0b:11:22: 77:e1:02:88:94:b4:96:73:d0:71:f9:dd:98:ab:3d:9d:8a:14: 79:b8:d2:51:22:62:a0:38:15:3c:c7:6c:a2:4b:fc:1a:6e:72: cd:fc:a2:70:eb:93:c1:8c:84:20:26:b7:46:29:20:c6:21:07: fc:51:17:bf:a7:86:4f:93:32:e2:f1:05:d5:67:3b:48:72:1a: 7d:51:99:1a:18:46:70:b6:5e:75:a7:db:58:d6:7b:82:1b:8d: f1:75:ce:c5:21:b0:26:13:a7:4c:c5:1a:7b:fc:fa:79:9b:9b: b4:d5:8b:35:12:f0:72:bb:bf:b9:ef:33:aa:e7:cd:07:8d:38: 55:72:b4:02:0c:af:ab:84:f1:de:2a:ca:77:3d:2a:e8:45:6e: 63:18:af:4f:f7:0f:f0:b1:61:8f:fd:10:85:4c:7d:ea:e2:9b: 24:7c:33:88:f6:36:a1:2d:f2:03:d8:fe:41:24:f2:5d:fc:a2: a2:93:4c:d9:cd:80:2f:65:31:ad:b7:f9:34:7b:2c:10:3e:52: 03:18:80:6a:b9:68:68:7e:6c:6e:72:b3:4b:5a:65:e0:88:e8: 8a:96:c7:e6:bb:97:ea:2f:a5:82:53:06:10:f8:3e:53:1c:28: fd:ba:d0:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnk+O/7nz/W1pDSQbro/41wN0mgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjA5MjAwNjUwNDJaFw0yNjA5MjEwODQ0NDJaMDMxMTAvBgNV BAMTKDJFQ0I4MjczNUVBODMxQTE2MDIwNUE1N0U0MTAxQzJGMjQ2M0M3MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxDHSBYOmnkLr7skAyZhQgQEr2 SmbDEeKmE/lbXax8IGj2+Kct3cJa2sm8dDTSRyBg/E9nqmYUBgyz/ZeGinFzpW3D l6RQ6JnlgzK3jj32zXXDJZPPe/UFcfKa8abWK7aUKbe9yoXgvjrUhxMTejxOYd1I WEdgmiGQKIW0AElFqpA0FSvKiRnPAqcgupSPNBecNeUrXP1aXTlW8MWjKO6SVF19 QtBxQX6TwdJN1V8aT8QVfn3W2sGXx4i2puUi/6RqllGzhqpuSAE/n814oqS9pN6m bUAS5SqLWjiSABxTgICLxCaQbVFVYwI6emUln5E92qnJu+/Jkda7U5dy6wjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULsuCc16oMaFgIFpX5BAcLyRjxxcwHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKxeLLaDrVoQJC1RhDSjKQsRInfhAoiUtJZz 0HH53ZirPZ2KFHm40lEiYqA4FTzHbKJL/Bpucs38onDrk8GMhCAmt0YpIMYhB/xR F7+nhk+TMuLxBdVnO0hyGn1RmRoYRnC2XnWn21jWe4IbjfF1zsUhsCYTp0zFGnv8 +nmbm7TVizUS8HK7v7nvM6rnzQeNOFVytAIMr6uE8d4qync9KuhFbmMYr0/3D/Cx YY/9EIVMferimyR8M4j2NqEt8gPY/kEk8l38oqKTTNnNgC9lMa23+TR7LBA+UgMY gGq5aGh+bG5ys0taZeCI6IqWx+a7l+ovpYJTBhD4PlMcKP260OA= -----END CERTIFICATE-----Generated at Mon Sep 21 01:30:52 2026 by rpki-client