$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: zez8pKDA1OdX9XQYWuHXqJJeBmm91Gjf+RVVjp+Kzy4= Subject key identifier: 6F:24:F6:23:37:4C:92:23:C1:87:9A:0F:6E:5B:BA:BC:25:6F:9D:6F Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 5840C033F677CDB08B5C6DD4B902F3420F53C7F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:19:45 +0000 Manifest this update: Tue 12 May 2026 08:14:45 +0000 Manifest next update: Wed 13 May 2026 10:08:45 +0000 Files and hashes: 1: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 2: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: cvgDBCc/T6m1dEWoJj7IuXVER+TNmEbeWmw/ompYxyM=) 3: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) 4: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 5: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) 6: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:40:c0:33:f6:77:cd:b0:8b:5c:6d:d4:b9:02:f3:42:0f:53:c7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: May 12 08:14:45 2026 GMT Not After : May 13 10:08:45 2026 GMT Subject: CN=6F24F623374C9223C1879A0F6E5BBABC256F9D6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:85:67:53:c2:88:69:1b:62:32:5e:ae:de:ba: 77:9e:ee:79:e8:2a:c0:59:14:5e:0f:ac:f6:12:14: b9:06:8f:49:80:4c:dc:78:38:ca:c4:d8:68:50:75: d5:d1:59:0f:04:d7:30:5e:9f:28:63:6e:62:27:42: a6:48:12:51:6d:8c:46:70:87:8f:8f:f0:48:99:4c: d7:4b:fb:fd:39:c4:2a:98:31:83:97:4d:4f:fc:65: 96:41:21:5d:4e:cf:12:53:88:ea:f8:ef:2c:12:ba: 68:0b:26:dd:8d:73:02:e6:87:29:10:c1:ad:6d:d0: 08:61:32:32:ca:19:27:2d:45:4b:a5:6b:f3:ba:ab: 75:df:4f:62:cb:32:2d:19:0a:73:18:20:3e:0a:07: 1a:a6:02:da:b4:f5:52:13:f9:53:ba:ff:c1:d0:cc: a0:6d:0d:4a:79:87:00:94:fb:91:8c:87:66:6e:08: ea:84:26:57:0c:74:56:26:09:73:59:cf:9c:eb:46: bb:52:77:03:45:78:cb:39:77:97:3b:d0:7f:16:96: 19:4f:bf:28:26:08:e8:6f:40:2f:78:57:28:13:4b: 2e:1f:d9:09:50:df:1d:01:0a:0d:2c:27:50:90:12: 7d:bb:dc:26:95:36:70:7b:96:16:30:8e:3e:09:15: 11:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:24:F6:23:37:4C:92:23:C1:87:9A:0F:6E:5B:BA:BC:25:6F:9D:6F X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:56:af:af:84:d0:f8:3e:56:32:74:8d:f5:90:95:69:08:4e: 75:53:c4:a9:7d:f4:49:b4:5d:aa:2c:fc:4a:e8:61:df:6e:85: 48:a1:49:60:9f:cb:60:05:fc:97:b4:8a:72:46:47:48:e3:0e: e8:2b:bf:28:65:94:db:45:4b:b7:43:98:f9:72:9a:ae:9e:ff: 03:dd:dc:1e:8c:20:9b:55:b7:d2:34:bd:57:10:30:fb:cb:86: e7:47:ee:9d:15:17:b0:2c:38:e1:f0:a9:e2:d1:fc:b9:31:1c: 9f:e2:d9:f3:a8:e2:e5:2d:cf:59:08:56:e7:7a:c9:b5:89:c4: 92:54:79:b1:3a:ed:03:18:45:1e:72:f5:5c:02:d8:24:b5:c0: 5c:3a:d7:4c:59:38:3c:1a:25:93:e9:63:00:f9:04:3a:42:a7: c3:ef:06:82:44:f1:19:97:75:eb:a3:1e:fd:eb:df:bf:c6:0c: e6:39:3f:5b:7f:36:fc:e6:5e:e9:c1:e0:6b:f3:f7:29:65:cf: e1:8d:7b:b9:93:a8:0d:cc:31:78:d3:ad:c9:d1:b0:f7:7e:e7: ac:91:ec:98:27:9e:0a:91:80:72:8a:32:5b:44:81:45:45:1c: 49:ef:a8:cb:6f:b7:c2:85:ed:5a:b1:57:1f:6a:e2:cb:95:09: 53:cc:cd:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEDAM/Z3zbCLXG3UuQLzQg9Tx/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA1MTIwODE0NDVaFw0yNjA1MTMxMDA4NDVaMDMxMTAvBgNV BAMTKDZGMjRGNjIzMzc0QzkyMjNDMTg3OUEwRjZFNUJCQUJDMjU2RjlENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+hWdTwohpG2IyXq7eunee7nno KsBZFF4PrPYSFLkGj0mATNx4OMrE2GhQddXRWQ8E1zBenyhjbmInQqZIElFtjEZw h4+P8EiZTNdL+/05xCqYMYOXTU/8ZZZBIV1OzxJTiOr47ywSumgLJt2NcwLmhykQ wa1t0AhhMjLKGSctRUula/O6q3XfT2LLMi0ZCnMYID4KBxqmAtq09VIT+VO6/8HQ zKBtDUp5hwCU+5GMh2ZuCOqEJlcMdFYmCXNZz5zrRrtSdwNFeMs5d5c70H8WlhlP vygmCOhvQC94VygTSy4f2QlQ3x0BCg0sJ1CQEn273CaVNnB7lhYwjj4JFRHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbyT2IzdMkiPBh5oPblu6vCVvnW8wHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNWr6+E0Pg+VjJ0jfWQlWkITnVTxKl99Em0 Xaos/EroYd9uhUihSWCfy2AF/Je0inJGR0jjDugrvyhllNtFS7dDmPlymq6e/wPd 3B6MIJtVt9I0vVcQMPvLhudH7p0VF7AsOOHwqeLR/LkxHJ/i2fOo4uUtz1kIVud6 ybWJxJJUebE67QMYRR5y9VwC2CS1wFw610xZODwaJZPpYwD5BDpCp8PvBoJE8RmX deujHv3r37/GDOY5P1t/NvzmXunB4Gvz9yllz+GNe7mTqA3MMXjTrcnRsPd+56yR 7JgnngqRgHKKMltEgUVFHEnvqMtvt8KF7VqxVx9q4suVCVPMzaE= -----END CERTIFICATE-----Generated at Wed May 13 01:45:15 2026 by rpki-client