$ rpki-client -vvvf rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft (raw, json) Hash identifier: l6aZO/bQDp7rzvAJYoPgHxwdcvtlS6i4mslC8xsvwD8= Subject key identifier: AD:E6:C2:B5:18:CF:78:FA:A3:D5:AE:3B:DD:BF:FD:99:44:87:D0:6A Authority key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Certificate issuer: /CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Certificate serial: 4A90682BAFA3B75FE76EB91CEED3DE1D18999FF3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 09:42:38 +0000 Manifest this update: Thu 24 Sep 2026 09:37:38 +0000 Manifest next update: Fri 25 Sep 2026 11:53:38 +0000 Files and hashes: 1: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: OmTMu2442b172ucsFf/mMUYIo/5ux22+t2Y1lTl29zM=) 2: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl (hash: 4E31QFHLb1f7WBNGd4CXUORX7SyNJUvY3p/sTSgNpqI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:90:68:2b:af:a3:b7:5f:e7:6e:b9:1c:ee:d3:de:1d:18:99:9f:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Validity Not Before: Sep 24 09:37:38 2026 GMT Not After : Sep 25 11:53:38 2026 GMT Subject: CN=ADE6C2B518CF78FAA3D5AE3BDDBFFD994487D06A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:34:1d:f9:d6:af:4c:99:cd:52:10:03:0e:93: 66:b1:3d:e2:b2:05:d9:c9:d0:0c:e6:07:64:13:c0: 18:af:f3:d2:92:0e:53:84:61:e3:ce:fc:f5:2c:ff: 9f:c5:07:d3:11:70:c2:7f:07:ab:bf:8a:ac:a0:51: e7:ab:14:87:59:da:7e:9e:5e:5b:ea:b6:ff:88:df: c7:c7:a5:6d:c6:79:2d:4b:1e:dc:7c:3a:e6:9d:0c: 33:4e:de:0d:88:79:8c:4a:9b:5a:9d:2a:81:44:6b: 76:bf:f0:c9:0c:31:91:b6:e7:15:7e:49:68:05:2f: 11:cb:a3:65:ba:3d:58:d6:ca:91:5f:6a:7e:50:1c: b5:c6:3b:1b:81:bd:ef:e3:94:67:29:5a:53:f5:7a: 48:41:46:87:8d:9b:f0:b7:58:73:a0:6e:f9:78:96: 10:0d:24:78:20:5d:10:ec:37:b7:d2:3f:8e:9e:06: ae:e1:91:0c:ab:ca:7d:c8:4a:49:4e:86:6b:77:9f: 07:b1:c0:c9:e4:ec:c0:96:93:15:d3:87:70:78:b4: be:18:a7:66:40:68:d8:d3:a4:00:80:a3:76:38:b7: 42:25:06:25:0c:74:07:73:41:6d:5e:42:90:96:5a: 35:90:97:14:11:8a:6f:55:a5:a2:c8:c6:de:0a:5c: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:E6:C2:B5:18:CF:78:FA:A3:D5:AE:3B:DD:BF:FD:99:44:87:D0:6A X509v3 Authority Key Identifier: keyid:85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4f:11:bb:7d:f4:d7:29:9e:02:57:43:5e:9f:49:fe:64:d7: cf:89:77:f8:a5:da:cb:bc:9e:d7:a0:43:f9:5a:35:61:2a:f6: 61:f0:ad:00:03:36:19:c2:e3:56:93:62:a1:a7:2f:25:ff:4c: 37:60:f5:c3:1e:a2:89:7a:c7:52:08:9c:df:18:5d:0a:9a:de: 4d:82:f1:f9:3f:f2:df:a5:b8:03:d8:35:30:ac:39:db:30:2f: 34:7c:63:38:30:e1:da:e1:c3:a1:8d:b0:d6:2e:2f:00:20:40: f3:08:56:57:c4:40:f7:15:88:43:f9:06:bd:0b:6b:db:4e:dc: 1f:a1:69:fe:26:7d:b4:19:b2:f3:48:a1:d9:93:3e:ab:3e:19: 85:1c:c1:ee:87:c1:3c:a7:f2:cd:33:9d:4b:b9:09:ca:b4:c3: d7:91:a4:4d:c9:f1:fc:34:4a:cc:c4:6c:f7:2f:3c:69:da:72: c8:4c:d9:ba:0b:f2:1b:2d:b9:e9:23:8c:b0:48:28:c6:2d:33: ed:6d:51:e4:a6:8f:36:84:da:da:1e:fc:ac:4d:14:c7:55:c3: bb:4f:3c:b5:c4:9d:cb:91:2e:74:bb:09:48:1d:c9:22:bd:76: 5f:6e:68:30:3d:1b:4d:94:83:8f:68:3d:d6:70:f7:6a:c5:f6: 2d:b1:ef:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpBoK6+jt1/nbrkc7tPeHRiZn/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhC Qzc2QUJGMjAeFw0yNjA5MjQwOTM3MzhaFw0yNjA5MjUxMTUzMzhaMDMxMTAvBgNV BAMTKEFERTZDMkI1MThDRjc4RkFBM0Q1QUUzQkREQkZGRDk5NDQ4N0QwNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNB351q9Mmc1SEAMOk2axPeKy BdnJ0AzmB2QTwBiv89KSDlOEYePO/PUs/5/FB9MRcMJ/B6u/iqygUeerFIdZ2n6e Xlvqtv+I38fHpW3GeS1LHtx8OuadDDNO3g2IeYxKm1qdKoFEa3a/8MkMMZG25xV+ SWgFLxHLo2W6PVjWypFfan5QHLXGOxuBve/jlGcpWlP1ekhBRoeNm/C3WHOgbvl4 lhANJHggXRDsN7fSP46eBq7hkQyryn3ISklOhmt3nwexwMnk7MCWkxXTh3B4tL4Y p2ZAaNjTpACAo3Y4t0IlBiUMdAdzQW1eQpCWWjWQlxQRim9VpaLIxt4KXJQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrebCtRjPePqj1a473b/9mUSH0GowHwYDVR0j BBgwFoAUhbmitKTzc5yPwD5RAloraLx2q/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyYjhkMjgtZmY3Yy00NjkyLTkwMTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRB NEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhCQzc2QUJGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUI5QTJCNEE0RjM3MzlDOEZDMDNFNTEwMjVBMkI2OEJDNzZB QkYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJC NjhCQzc2QUJGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxPEbt99NcpngJXQ16fSf5k18+Jd/il2su8 ntegQ/laNWEq9mHwrQADNhnC41aTYqGnLyX/TDdg9cMeool6x1IInN8YXQqa3k2C 8fk/8t+luAPYNTCsOdswLzR8Yzgw4drhw6GNsNYuLwAgQPMIVlfEQPcViEP5Br0L a9tO3B+haf4mfbQZsvNIodmTPqs+GYUcwe6HwTyn8s0znUu5Ccq0w9eRpE3J8fw0 SszEbPcvPGnacshM2boL8hstuekjjLBIKMYtM+1tUeSmjzaE2toe/KxNFMdVw7tP PLXEncuRLnS7CUgdySK9dl9uaDA9G02Ug49oPdZw92rF9i2x70o= -----END CERTIFICATE-----Generated at Thu Sep 24 23:35:42 2026 by rpki-client