$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: MNkzrl7WuLTyL2Ygde5gXHCuC7lgNEdga3tCrVk5fhQ= Subject key identifier: B1:67:19:37:1F:E1:F0:18:90:8A:D2:A8:B7:67:3F:68:6B:4B:ED:88 Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 7370C62B91EE6B92F85891810E4D54E0CABF9556 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 11:54:39 +0000 Manifest this update: Thu 23 Jul 2026 11:49:39 +0000 Manifest next update: Fri 24 Jul 2026 12:04:39 +0000 Files and hashes: 1: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) 2: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: 0KMI7MAGxJJURTZ2TvDJYmS0XY80uRsFVE8uH7m4QBE=) 3: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) 4: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 5: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 6: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:70:c6:2b:91:ee:6b:92:f8:58:91:81:0e:4d:54:e0:ca:bf:95:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: Jul 23 11:49:39 2026 GMT Not After : Jul 24 12:04:39 2026 GMT Subject: CN=B16719371FE1F018908AD2A8B7673F686B4BED88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:c1:72:42:4e:8f:db:23:c1:75:7b:e4:7e:74: 0e:50:6a:33:f9:71:78:62:04:5b:a4:03:84:d7:2d: 0e:86:6c:39:03:d1:bd:b7:45:9e:45:22:5b:28:1a: cc:7c:95:59:32:4b:d7:3e:0e:cd:b6:19:af:09:cf: b8:c4:79:60:b0:68:4e:39:c8:a2:ce:87:53:36:53: 2b:2d:b2:ad:24:a5:dc:d8:d2:a3:ff:d6:54:72:0b: 5a:17:90:3b:6c:a6:07:6b:5d:33:40:9d:c7:de:81: e4:87:bf:4e:f7:40:75:28:4c:da:6a:1a:a5:e7:4c: d7:d7:87:06:02:ba:dd:9b:bf:6d:6f:81:03:5e:00: 47:77:56:02:94:36:05:40:91:84:20:c1:f2:23:f4: 0e:16:6e:7c:08:01:dd:75:5e:c1:32:2f:b7:d5:f0: 6a:2e:2c:0f:37:0c:8f:57:9f:f0:3d:07:0f:18:d5: 78:6a:31:5d:cf:bb:94:59:c8:e7:c2:23:cc:5e:ab: fc:f3:aa:5f:e4:82:64:ed:3f:8a:be:31:11:48:3f: 29:4e:93:78:82:80:b1:7b:e5:1b:b7:b6:24:dc:48: 20:97:96:fb:ba:9e:33:e5:67:18:4a:b2:2c:b4:e4: 2e:63:cf:bf:39:b4:9d:38:ab:85:93:2c:d8:0e:02: c5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:67:19:37:1F:E1:F0:18:90:8A:D2:A8:B7:67:3F:68:6B:4B:ED:88 X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:34:e2:af:3d:45:7f:ec:0f:83:8d:41:f8:36:75:c1:b7:4e: 59:00:93:14:c6:13:9c:9b:dc:da:69:b2:a8:17:4c:4f:7e:3f: 73:3c:bf:3a:1e:fb:c9:4e:93:8d:e1:90:b1:03:f9:63:cd:90: 8e:7a:54:a4:cc:3d:18:90:9a:25:12:0e:51:b0:d6:e0:4d:05: 29:53:9c:b2:94:90:f9:6d:ac:d1:8b:18:63:31:ef:d3:49:1d: 67:6d:6b:0f:33:de:9a:aa:d9:50:0a:14:6e:be:81:d1:61:2c: 9d:57:38:31:64:ed:30:9f:ab:8b:f2:25:61:aa:0e:ac:76:e7: d7:f4:a2:28:4a:84:b8:18:4a:68:b3:94:47:36:21:7c:f4:53: 1f:39:15:8a:3c:c0:d0:5e:05:d4:3d:85:50:a4:66:3a:18:30: b4:40:0b:6d:12:c5:08:62:4a:ff:4e:e7:dc:c1:15:21:26:56: 11:36:e6:55:7e:7b:ec:20:53:c5:74:be:e3:75:c5:a9:28:fb: 2e:0b:f2:08:f4:1c:34:9c:2d:1c:34:62:14:91:05:1a:9a:ea: 14:12:b0:77:bc:33:50:66:9d:1d:ce:8a:18:de:58:17:5e:02: c7:db:cf:dc:34:30:36:3e:56:7f:a7:18:14:09:ab:bc:d9:34: 8b:aa:a7:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc3DGK5Hua5L4WJGBDk1U4Mq/lVYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA3MjMxMTQ5MzlaFw0yNjA3MjQxMjA0MzlaMDMxMTAvBgNV BAMTKEIxNjcxOTM3MUZFMUYwMTg5MDhBRDJBOEI3NjczRjY4NkI0QkVEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwXJCTo/bI8F1e+R+dA5QajP5 cXhiBFukA4TXLQ6GbDkD0b23RZ5FIlsoGsx8lVkyS9c+Ds22Ga8Jz7jEeWCwaE45 yKLOh1M2Uystsq0kpdzY0qP/1lRyC1oXkDtspgdrXTNAncfegeSHv073QHUoTNpq GqXnTNfXhwYCut2bv21vgQNeAEd3VgKUNgVAkYQgwfIj9A4WbnwIAd11XsEyL7fV 8GouLA83DI9Xn/A9Bw8Y1XhqMV3Pu5RZyOfCI8xeq/zzql/kgmTtP4q+MRFIPylO k3iCgLF75Ru3tiTcSCCXlvu6njPlZxhKsiy05C5jz785tJ04q4WTLNgOAsXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsWcZNx/h8BiQitKot2c/aGtL7YgwHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI004q89RX/sD4ONQfg2dcG3TlkAkxTGE5yb 3NppsqgXTE9+P3M8vzoe+8lOk43hkLED+WPNkI56VKTMPRiQmiUSDlGw1uBNBSlT nLKUkPltrNGLGGMx79NJHWdtaw8z3pqq2VAKFG6+gdFhLJ1XODFk7TCfq4vyJWGq Dqx259f0oihKhLgYSmizlEc2IXz0Ux85FYo8wNBeBdQ9hVCkZjoYMLRAC20SxQhi Sv9O59zBFSEmVhE25lV+e+wgU8V0vuN1xako+y4L8gj0HDScLRw0YhSRBRqa6hQS sHe8M1BmnR3OihjeWBdeAsfbz9w0MDY+Vn+nGBQJq7zZNIuqp0U= -----END CERTIFICATE-----Generated at Fri Jul 24 04:16:41 2026 by rpki-client