$ rpki-client -vvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: b06iE+9pqnahijhpCn0ACKNmAS+FRh7UxE2wTZN/KiA= Subject key identifier: 8E:80:61:27:09:14:EE:C2:FD:D7:F4:47:FC:CD:BE:6B:7D:64:B4:13 Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 429FA0AC824401CAAF671928BC47A1B53A75C46D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:14:50 +0000 Manifest this update: Thu 23 Jul 2026 20:09:50 +0000 Manifest next update: Fri 24 Jul 2026 23:21:50 +0000 Files and hashes: 1: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: kbvhNiimBsAkZL/rgY+oB8i2XlBmg4nTbQQuwCC7T8c=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:9f:a0:ac:82:44:01:ca:af:67:19:28:bc:47:a1:b5:3a:75:c4:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Jul 23 20:09:50 2026 GMT Not After : Jul 24 23:21:50 2026 GMT Subject: CN=8E8061270914EEC2FDD7F447FCCDBE6B7D64B413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a4:e9:8c:20:14:da:a1:6d:c0:40:3f:dd:ce: b7:46:2a:a2:81:ac:38:48:59:34:c5:1b:d4:e8:d9: 25:a7:2c:da:90:87:d7:56:20:9c:c9:9b:f9:34:4c: 02:7c:e6:0c:40:3d:c7:f8:1c:05:f4:4f:af:b7:71: d8:94:a9:86:82:45:c2:28:bd:6e:ff:86:83:c5:45: 18:e4:37:70:85:6f:f9:b8:15:e4:4e:88:01:92:74: e4:e1:8a:1c:47:ac:73:8c:ee:68:33:46:e1:27:30: 06:a2:95:a7:85:a3:c8:6a:82:d6:42:c4:31:b3:40: e5:87:27:4f:73:15:61:60:ad:a3:1c:ee:7a:4d:92: 13:ce:e8:ef:0c:f5:b7:62:2f:39:bb:cd:ef:59:df: 68:6c:3d:83:0a:14:49:07:d9:ef:8b:ee:5b:ba:22: 77:5e:72:2c:25:73:4b:86:ee:e0:ef:9a:f5:77:b2: 7a:1f:99:8d:8a:94:e8:df:78:71:97:d5:a6:e7:81: 22:44:fb:09:58:94:85:da:8e:07:42:6e:a2:2f:5e: 6b:0d:83:64:c0:76:3b:c8:18:54:b4:28:21:3d:36: ae:a7:41:0f:13:12:52:99:ed:6b:4f:c0:9c:d4:9c: e4:a4:56:65:9b:0a:2a:16:b8:bb:9b:e6:a1:db:51: 95:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:80:61:27:09:14:EE:C2:FD:D7:F4:47:FC:CD:BE:6B:7D:64:B4:13 X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:01:b3:90:c3:50:e3:32:05:86:90:f2:8f:2d:32:8a:12:bd: f4:4d:49:5f:c5:27:f7:99:a9:50:ed:70:f5:52:ea:6f:67:dd: bd:07:43:dc:95:aa:d5:79:06:f1:f9:12:92:5b:71:89:e2:f4: 72:76:4d:7c:df:35:6b:47:a8:27:62:29:96:34:cb:cb:d6:d9: f8:3b:8c:0b:25:e7:53:75:a3:6f:6c:05:64:28:39:57:94:26: eb:b7:ef:ca:7d:1a:4e:78:39:1a:47:b6:67:b8:58:6a:57:74: 09:e8:b5:45:fe:55:e7:f6:d4:a5:99:9e:d5:6c:98:64:70:c6: a7:1b:fe:ec:2a:64:f1:10:c4:61:76:b8:21:be:78:af:bb:88: 73:57:4a:4a:71:d8:99:50:0d:4f:c8:8d:80:f6:45:d4:d2:a1: 31:eb:1d:0e:c4:8b:f7:e4:83:2b:f8:99:f9:c6:3d:1f:42:72: 78:2f:0c:1d:66:f9:7a:d3:ac:c8:5f:e1:8c:1a:be:ea:b0:d5: eb:ff:28:70:da:ae:5a:13:b3:c1:89:fc:01:d5:98:3a:7d:75: cb:b5:cb:82:c0:d3:9f:68:39:9c:fe:72:df:bb:88:f4:28:d3: 4c:ac:78:7d:83:92:ef:3c:e6:01:44:a1:11:c9:3c:16:8f:54: 18:1b:3f:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQp+grIJEAcqvZxkovEehtTp1xG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA3MjMyMDA5NTBaFw0yNjA3MjQyMzIxNTBaMDMxMTAvBgNV BAMTKDhFODA2MTI3MDkxNEVFQzJGREQ3RjQ0N0ZDQ0RCRTZCN0Q2NEI0MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYpOmMIBTaoW3AQD/dzrdGKqKB rDhIWTTFG9To2SWnLNqQh9dWIJzJm/k0TAJ85gxAPcf4HAX0T6+3cdiUqYaCRcIo vW7/hoPFRRjkN3CFb/m4FeROiAGSdOThihxHrHOM7mgzRuEnMAailaeFo8hqgtZC xDGzQOWHJ09zFWFgraMc7npNkhPO6O8M9bdiLzm7ze9Z32hsPYMKFEkH2e+L7lu6 Indeciwlc0uG7uDvmvV3snofmY2KlOjfeHGX1abngSJE+wlYlIXajgdCbqIvXmsN g2TAdjvIGFS0KCE9Nq6nQQ8TElKZ7WtPwJzUnOSkVmWbCioWuLub5qHbUZWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjoBhJwkU7sL91/RH/M2+a31ktBMwHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUBs5DDUOMyBYaQ8o8tMooSvfRNSV/FJ/eZ qVDtcPVS6m9n3b0HQ9yVqtV5BvH5EpJbcYni9HJ2TXzfNWtHqCdiKZY0y8vW2fg7 jAsl51N1o29sBWQoOVeUJuu378p9Gk54ORpHtme4WGpXdAnotUX+Vef21KWZntVs mGRwxqcb/uwqZPEQxGF2uCG+eK+7iHNXSkpx2JlQDU/IjYD2RdTSoTHrHQ7Ei/fk gyv4mfnGPR9CcngvDB1m+XrTrMhf4Ywavuqw1ev/KHDarloTs8GJ/AHVmDp9dcu1 y4LA059oOZz+ct+7iPQo00yseH2Dku885gFEoRHJPBaPVBgbPwM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:49:15 2026 by rpki-client