$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: tEnLtubSZnEBuT0JKA1+9wYxgmO7125fQcDT02hTLeg= Subject key identifier: 69:8C:A9:6B:5A:3D:C0:6B:69:AC:64:2B:0B:09:64:A2:DB:D9:40:2C Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 7B0AE6C82E93C52468D81CF0EC17392639492A1E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 17:12:16 +0000 Manifest this update: Wed 23 Sep 2026 17:07:16 +0000 Manifest next update: Thu 24 Sep 2026 20:01:16 +0000 Files and hashes: 1: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 2: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) 3: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) 4: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 5: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: WOtCrkNY8ONop6lOnDEwnOtMkBBt4attODuZB/U3EFY=) 6: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:0a:e6:c8:2e:93:c5:24:68:d8:1c:f0:ec:17:39:26:39:49:2a:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: Sep 23 17:07:16 2026 GMT Not After : Sep 24 20:01:16 2026 GMT Subject: CN=698CA96B5A3DC06B69AC642B0B0964A2DBD9402C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:33:73:e4:a5:ed:30:f7:73:48:01:3c:18:48: 25:ef:53:23:9b:31:87:3f:6c:20:2d:85:e3:cb:43: 8c:44:35:85:d0:a6:ff:51:8f:0e:59:dd:33:50:ea: 8d:55:1c:96:0a:7a:33:3d:d6:33:8a:b3:1b:42:8a: ba:10:b3:9d:fa:69:87:8c:fb:e6:cc:e4:5d:bc:30: fe:9b:ee:57:2a:14:49:7b:3b:18:a1:1d:1e:d7:5b: 10:b2:77:22:e9:fa:a4:d1:ba:91:ca:79:89:33:c1: a1:d8:33:bd:2f:50:04:ab:a2:95:cc:83:41:cb:95: 38:07:3b:52:34:30:09:98:63:ed:02:7c:03:dd:b4: bb:6a:b9:bd:0c:fc:46:e1:57:6a:0e:7d:2f:8c:d0: 24:8e:15:9e:bb:c1:c6:ed:eb:f8:d6:d2:c7:83:67: 3b:dd:fd:a5:3a:5b:11:5f:32:56:aa:56:da:0f:d6: 59:09:ee:10:69:3b:d1:5e:23:16:45:71:89:2b:f2: f1:68:75:23:22:6c:0f:86:97:06:54:20:f2:fa:24: 8a:69:9b:fd:1d:5a:f3:df:21:4c:0b:99:b1:51:25: f7:80:3a:7e:2a:68:df:11:2f:3b:74:02:74:19:d5: ce:e4:cf:bb:4b:e7:36:98:88:bd:2a:21:9a:ef:bd: 48:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8C:A9:6B:5A:3D:C0:6B:69:AC:64:2B:0B:09:64:A2:DB:D9:40:2C X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c6:42:6b:a7:27:ee:b7:d3:be:a3:4f:2b:d6:86:8b:d8:26: ad:63:de:a4:2f:47:1d:3b:91:5c:95:a0:82:0b:ba:f0:1e:5f: 53:68:51:95:9d:0b:7f:56:eb:61:21:8a:a6:6c:4c:42:54:b7: 0e:64:9b:59:f3:4c:6e:19:7a:06:78:d3:e6:f4:73:52:15:fd: 53:20:e7:95:89:c1:95:d1:f3:c4:a6:e2:31:e3:77:5c:46:bc: 3f:15:71:e0:91:4c:ae:1c:8c:5d:48:7a:40:86:45:6b:26:36: 6f:c7:aa:7f:cc:1c:4b:c0:ae:cf:9f:e2:49:3f:ef:69:da:18: dd:e1:2b:ba:5b:de:27:98:38:67:e3:fc:f3:c7:4a:79:3e:ff: bf:97:97:8b:91:37:9e:ba:64:8b:a4:b3:0e:49:cd:24:bb:4e: e5:e8:24:fd:54:88:42:cc:e6:a5:f2:63:8b:01:fe:41:65:e1: 32:13:02:db:c2:b4:3e:7f:03:b4:43:ed:35:c4:9c:35:b5:87: 5f:5b:5b:3f:e6:05:33:61:e5:7b:3e:50:cc:09:66:f6:ea:5f: 73:62:3f:5f:b6:38:fe:15:73:ca:7d:76:ac:58:a0:be:f8:16: 2a:6b:d4:61:c3:fa:25:6f:60:b6:a2:70:ca:1c:13:bb:3c:a8: da:7c:4f:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUewrmyC6TxSRo2Bzw7Bc5JjlJKh4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA5MjMxNzA3MTZaFw0yNjA5MjQyMDAxMTZaMDMxMTAvBgNV BAMTKDY5OENBOTZCNUEzREMwNkI2OUFDNjQyQjBCMDk2NEEyREJEOTQwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcM3Pkpe0w93NIATwYSCXvUyOb MYc/bCAthePLQ4xENYXQpv9Rjw5Z3TNQ6o1VHJYKejM91jOKsxtCiroQs536aYeM ++bM5F28MP6b7lcqFEl7OxihHR7XWxCydyLp+qTRupHKeYkzwaHYM70vUASropXM g0HLlTgHO1I0MAmYY+0CfAPdtLtqub0M/EbhV2oOfS+M0CSOFZ67wcbt6/jW0seD Zzvd/aU6WxFfMlaqVtoP1lkJ7hBpO9FeIxZFcYkr8vFodSMibA+GlwZUIPL6JIpp m/0dWvPfIUwLmbFRJfeAOn4qaN8RLzt0AnQZ1c7kz7tL5zaYiL0qIZrvvUh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYypa1o9wGtprGQrCwlkotvZQCwwHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjGQmunJ+63076jTyvWhovYJq1j3qQvRx07 kVyVoIILuvAeX1NoUZWdC39W62EhiqZsTEJUtw5km1nzTG4ZegZ40+b0c1IV/VMg 55WJwZXR88Sm4jHjd1xGvD8VceCRTK4cjF1IekCGRWsmNm/Hqn/MHEvArs+f4kk/ 72naGN3hK7pb3ieYOGfj/PPHSnk+/7+Xl4uRN566ZIuksw5JzSS7TuXoJP1UiELM 5qXyY4sB/kFl4TITAtvCtD5/A7RD7TXEnDW1h19bWz/mBTNh5Xs+UMwJZvbqX3Ni P1+2OP4Vc8p9dqxYoL74Fipr1GHD+iVvYLaicMocE7s8qNp8T9A= -----END CERTIFICATE-----Generated at Thu Sep 24 09:38:02 2026 by rpki-client