$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: 3UjmyYIFWrnhmVXPdKaVn383NvjN7/hLpaG/PzqlqNU= Subject key identifier: 08:23:A5:60:BE:05:AE:C9:F0:88:25:9C:CC:ED:C2:BC:68:B3:1D:17 Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 334226A8D3F575D0FAA76FEA545FA37796FD4267 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 03:24:54 +0000 Manifest this update: Thu 24 Sep 2026 03:19:54 +0000 Manifest next update: Fri 25 Sep 2026 05:13:54 +0000 Files and hashes: 1: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: DaDYaimzaU1ybU0O3B/u6nMx9UJ94mp2f1ErdLLp4Oo=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:13:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:42:26:a8:d3:f5:75:d0:fa:a7:6f:ea:54:5f:a3:77:96:fd:42:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Sep 24 03:19:54 2026 GMT Not After : Sep 25 05:13:54 2026 GMT Subject: CN=0823A560BE05AEC9F088259CCCEDC2BC68B31D17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:85:d3:c4:76:74:42:ec:06:fc:c5:f7:5a:c7: 79:f5:e6:68:65:2e:eb:fc:85:40:b1:03:b3:0a:72: b7:e4:ad:36:3d:c6:60:3c:cd:75:3a:05:63:7b:1b: f9:77:78:62:2d:a2:bc:b7:a5:6d:a2:43:c8:a6:8b: 4a:2a:de:c3:84:ea:74:a0:72:eb:9d:f9:71:56:9c: c8:75:86:75:ef:e1:a5:02:17:f9:f9:f3:1f:41:96: ba:29:45:47:8a:cc:bf:81:80:48:86:8a:ce:41:1e: 1d:8a:c2:7d:91:12:8a:39:d1:6a:5f:4c:95:22:6d: e3:88:f8:a3:0c:27:2c:25:3e:af:e9:d3:7e:9b:82: 99:fc:9b:3d:3f:04:11:bf:c1:c7:0a:3c:9f:cf:46: c2:19:07:59:87:d3:3f:41:73:7b:bd:5a:d1:ab:dc: 85:54:ab:73:e5:3e:b5:09:8b:98:b2:3a:00:a8:ae: 24:7f:80:7b:de:e3:fa:8a:26:92:1c:f1:ab:d7:35: 95:06:27:99:1d:af:fc:4c:8f:1d:c6:f0:d5:22:1c: 33:54:54:68:d9:d2:7c:b8:29:0b:3e:33:7b:a2:ba: aa:cb:90:ce:ac:55:ee:7f:95:6f:6a:36:ec:eb:01: 6a:b3:57:16:f9:ca:20:13:8d:0c:56:fa:32:c9:be: 6b:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:23:A5:60:BE:05:AE:C9:F0:88:25:9C:CC:ED:C2:BC:68:B3:1D:17 X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:57:b2:1a:48:6f:14:26:35:fa:5e:fd:39:9b:7c:7c:29:b4: 5e:a5:f4:ee:95:17:92:98:66:5b:c4:3b:f2:1e:0f:ae:4a:50: a0:ea:78:ed:21:b3:3f:d2:bc:88:55:29:31:c1:f1:14:e0:d6: d8:9d:6a:99:4b:52:a8:ad:bd:a4:ed:0a:ea:f7:33:ef:f8:54: 90:79:f6:5a:9f:1e:ab:9f:a8:9d:75:e3:e2:63:69:b5:a6:b9: b4:ac:8c:bf:d5:14:f1:31:5c:e8:2b:77:45:5d:71:74:9d:71: be:46:e1:1d:0b:37:93:56:ba:ac:45:64:f9:17:ed:68:a3:bc: 68:5d:bd:2b:27:ae:a8:cf:db:5f:11:42:3a:26:8b:d2:84:0a: 4c:c2:18:ab:8b:69:a4:f4:5a:f7:a3:81:76:f3:45:d0:32:97: 74:9e:e9:fb:27:9e:1b:e1:7e:f6:03:f7:ab:78:b1:4a:eb:05: 6d:db:c8:1d:71:9c:d6:0a:c5:70:08:fb:d5:e3:d7:16:61:a4: 58:54:ba:0c:4b:e1:ef:17:ed:ca:9b:90:07:ea:cf:e7:14:b3: b2:f1:3b:d9:dc:7b:b4:82:fe:df:1e:77:a9:cf:b5:81:41:b3: 24:c9:cf:8a:ca:db:05:73:61:ef:b0:d2:1f:30:51:f8:16:3c: 1e:bf:c3:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0ImqNP1ddD6p2/qVF+jd5b9QmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA5MjQwMzE5NTRaFw0yNjA5MjUwNTEzNTRaMDMxMTAvBgNV BAMTKDA4MjNBNTYwQkUwNUFFQzlGMDg4MjU5Q0NDRURDMkJDNjhCMzFEMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLhdPEdnRC7Ab8xfdax3n15mhl Luv8hUCxA7MKcrfkrTY9xmA8zXU6BWN7G/l3eGItory3pW2iQ8imi0oq3sOE6nSg cuud+XFWnMh1hnXv4aUCF/n58x9BlropRUeKzL+BgEiGis5BHh2Kwn2REoo50Wpf TJUibeOI+KMMJywlPq/p036bgpn8mz0/BBG/wccKPJ/PRsIZB1mH0z9Bc3u9WtGr 3IVUq3PlPrUJi5iyOgCoriR/gHve4/qKJpIc8avXNZUGJ5kdr/xMjx3G8NUiHDNU VGjZ0ny4KQs+M3uiuqrLkM6sVe5/lW9qNuzrAWqzVxb5yiATjQxW+jLJvmslAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCCOlYL4FrsnwiCWczO3CvGizHRcwHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxXshpIbxQmNfpe/TmbfHwptF6l9O6VF5KY ZlvEO/IeD65KUKDqeO0hsz/SvIhVKTHB8RTg1tidaplLUqitvaTtCur3M+/4VJB5 9lqfHqufqJ114+JjabWmubSsjL/VFPExXOgrd0VdcXSdcb5G4R0LN5NWuqxFZPkX 7WijvGhdvSsnrqjP218RQjomi9KECkzCGKuLaaT0WvejgXbzRdAyl3Se6fsnnhvh fvYD96t4sUrrBW3byB1xnNYKxXAI+9Xj1xZhpFhUugxL4e8X7cqbkAfqz+cUs7Lx O9nce7SC/t8ed6nPtYFBsyTJz4rK2wVzYe+w0h8wUfgWPB6/wxc= -----END CERTIFICATE-----Generated at Thu Sep 24 09:49:22 2026 by rpki-client