$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: OAQUSCWuEBz1OZ9d9PmefiJfIgBAjSwmHrskMIJ0/mQ= Subject key identifier: C9:9B:3C:28:76:1B:01:45:F1:54:22:32:AE:BC:A8:2E:EB:13:C2:6B Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 0E59B1298D999C15A15802D8A5383A97C3AA07 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: FE Signing time: Mon 09 Nov 2026 19:24:56 +0000 Manifest this update: Mon 09 Nov 2026 19:19:56 +0000 Manifest next update: Tue 10 Nov 2026 19:24:56 +0000 Files and hashes: 1: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) 2: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: ZjacFYZk93q6qOd4C5qyiiitcjYLyHCfVYDHPuTAqgI=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:59:b1:29:8d:99:9c:15:a1:58:02:d8:a5:38:3a:97:c3:aa:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Nov 9 19:19:56 2026 GMT Not After : Nov 10 19:24:56 2026 GMT Subject: CN=C99B3C28761B0145F1542232AEBCA82EEB13C26B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:fb:2b:d6:da:c2:e9:a7:79:d7:4e:f0:cb:4b: 43:23:04:50:7b:cb:90:b9:10:29:3d:59:ea:3a:f7: ed:e6:82:78:a1:74:c3:43:ba:14:69:1c:60:97:68: 30:2b:38:3e:8f:35:8b:1e:1e:5a:25:55:11:be:c0: 00:29:5c:ef:9b:af:ae:5b:3c:5d:f7:35:0b:fe:a3: 70:15:2e:21:94:c5:8f:70:54:19:aa:30:88:5f:70: 51:5b:62:39:f6:57:68:cb:7f:f1:77:c2:5e:f1:4a: 69:63:df:cf:69:7d:d6:41:8b:a8:0b:1b:f2:85:fb: 01:82:6b:f5:2e:ce:b4:30:5b:27:2c:cb:b9:fa:64: b6:d4:b5:83:bd:f4:66:0c:0c:8b:42:f2:d8:03:39: 45:49:12:75:12:28:9c:b7:46:75:bb:b3:8d:e0:2b: e3:a9:5b:85:0b:93:66:55:4a:a1:6b:63:43:a2:9b: 02:41:83:b8:dc:82:ec:f0:d8:70:a0:2d:52:41:28: 32:77:d0:9b:ed:26:28:a9:0c:21:69:24:ee:c4:87: f5:10:14:a2:3a:21:68:66:2a:24:c0:6c:72:03:ef: b0:5a:6a:54:35:d0:55:8b:54:94:5a:9d:a2:da:ab: 59:ca:00:25:0f:bc:76:75:65:b1:a6:1b:6f:2f:f2: 36:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:9B:3C:28:76:1B:01:45:F1:54:22:32:AE:BC:A8:2E:EB:13:C2:6B X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:56:85:e2:b1:1b:25:c5:8d:a7:e3:ea:b3:b2:78:39:b4:b1: 68:25:97:69:47:f3:91:cc:1c:d7:a5:da:6f:0d:fc:7b:5f:07: 71:0c:87:db:02:ed:b0:36:fb:f3:54:d9:89:16:9f:d9:a1:86: 76:0b:8b:8f:42:46:49:af:51:a1:d4:a9:0a:06:dc:c5:90:93: 98:87:d0:00:16:a3:60:29:87:10:3e:1a:21:56:92:3d:7d:42: 71:d0:3d:18:3d:6c:00:92:34:57:bd:19:5c:4c:bf:3f:9c:a8: cc:04:3e:c6:d8:db:70:3d:a8:89:a7:63:95:b0:68:9a:c4:d5: b1:ed:b7:26:70:12:4b:52:0d:1d:6f:a5:eb:6d:9d:45:f8:87: a8:9d:ae:1e:af:8f:83:a4:d2:5c:28:0e:78:13:10:5b:b1:f6: fb:17:1c:98:af:61:92:7d:06:bc:f0:ae:73:c1:e2:6e:8f:0a: e4:39:d5:9b:dd:12:7d:fe:c7:51:83:9b:a7:8a:af:62:55:6a: 68:f1:21:4f:26:d3:89:af:46:ed:27:36:86:a0:c8:5c:1d:07: 85:67:62:69:38:f0:53:1e:28:e3:45:d0:8f:b4:71:01:37:3f: 27:ff:c5:0c:f5:64:c6:5c:24:15:14:52:48:eb:a1:c3:37:20: f2:6e:8b:b9 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITDlmxKY2ZnBWhWALYpTg6l8OqBzANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4 OUZDM0M3MB4XDTI2MTEwOTE5MTk1NloXDTI2MTExMDE5MjQ1NlowMzExMC8GA1UE AxMoQzk5QjNDMjg3NjFCMDE0NUYxNTQyMjMyQUVCQ0E4MkVFQjEzQzI2QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKP7K9bawumneddO8MtLQyMEUHvL kLkQKT1Z6jr37eaCeKF0w0O6FGkcYJdoMCs4Po81ix4eWiVVEb7AAClc75uvrls8 Xfc1C/6jcBUuIZTFj3BUGaowiF9wUVtiOfZXaMt/8XfCXvFKaWPfz2l91kGLqAsb 8oX7AYJr9S7OtDBbJyzLufpkttS1g730ZgwMi0Ly2AM5RUkSdRIonLdGdbuzjeAr 46lbhQuTZlVKoWtjQ6KbAkGDuNyC7PDYcKAtUkEoMnfQm+0mKKkMIWkk7sSH9RAU ojohaGYqJMBscgPvsFpqVDXQVYtUlFqdotqrWcoAJQ+8dnVlsaYbby/yNrUCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTJmzwodhsBRfFUIjKuvKgu6xPCazAfBgNVHSME GDAWgBSFZy/0YH46/Zys2XyE4PJHqJ/DxzAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85 YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0Yi0xNzFmZjhkMWU1N2YvMC84NTY3MkZGNDYw N0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZDM0M3LmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzg1NjcyRkY0NjA3RTNBRkQ5Q0FDRDk3Qzg0RTBGMjQ3QTg5RkMz QzcuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby85YjZhZTJhMi1kOTNmLTQ5Y2EtYmE0 Yi0xNzFmZjhkMWU1N2YvMC84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0 N0E4OUZDM0M3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAe1aF4rEbJcWNp+Pqs7J4ObSxaCWXaUfzkcwc 16Xabw38e18HcQyH2wLtsDb781TZiRaf2aGGdguLj0JGSa9RodSpCgbcxZCTmIfQ ABajYCmHED4aIVaSPX1CcdA9GD1sAJI0V70ZXEy/P5yozAQ+xtjbcD2oiadjlbBo msTVse23JnASS1INHW+l622dRfiHqJ2uHq+Pg6TSXCgOeBMQW7H2+xccmK9hkn0G vPCuc8Hibo8K5DnVm90Sff7HUYObp4qvYlVqaPEhTybTia9G7Sc2hqDIXB0HhWdi aTjwUx4o40XQj7RxATc/J//FDPVkxlwkFRRSSOuhwzcg8m6LuQ== -----END CERTIFICATE-----Generated at Tue Nov 10 00:43:47 2026 by rpki-client