$ rpki-client -vvf rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft (raw, json) Hash identifier: Ur+D3G99DaGm71hBEd1DgmWgdEjst9BZPkmEYkBZLxI= Subject key identifier: B7:A9:A7:20:AA:E4:D1:48:72:62:7D:A7:7E:23:6A:AA:AC:E1:AA:84 Authority key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Certificate issuer: /CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Certificate serial: 1FB2E353A19D02977FF8B88A002551F7D6A455F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 09:57:10 +0000 Manifest this update: Thu 23 Jul 2026 09:52:10 +0000 Manifest next update: Fri 24 Jul 2026 12:57:10 +0000 Files and hashes: 1: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl (hash: WyRegTVxOdtz0FLuvZCT42b2Ccu+1Bk64aqs6PaPJBk=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: OmTMu2442b172ucsFf/mMUYIo/5ux22+t2Y1lTl29zM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 12:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:b2:e3:53:a1:9d:02:97:7f:f8:b8:8a:00:25:51:f7:d6:a4:55:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Validity Not Before: Jul 23 09:52:10 2026 GMT Not After : Jul 24 12:57:10 2026 GMT Subject: CN=B7A9A720AAE4D14872627DA77E236AAAACE1AA84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:31:ef:2f:c9:11:df:19:c8:0d:89:40:79:25: a5:4b:5e:26:ce:28:5f:fc:72:89:fb:f3:af:40:bd: 43:26:e2:a6:f8:c8:c9:88:0c:5b:75:d3:4c:fd:5b: 2e:e0:99:33:1a:cb:df:7b:73:a2:38:2b:44:9c:fa: 8c:45:52:0b:3d:66:cd:fa:bb:dc:a7:bd:ba:c1:20: 53:c6:62:1a:58:ba:c8:04:c5:99:97:4f:3d:7a:97: 24:46:5b:1e:a2:82:72:7a:fc:93:31:fb:66:5c:92: 7a:cd:fa:0a:88:cd:e3:cd:50:15:9e:35:21:b9:41: 27:20:b6:46:09:af:8d:b2:36:94:14:24:4e:b4:42: 79:21:a3:11:6e:e7:26:c3:1e:db:84:87:38:6d:38: 43:09:8d:8f:5d:98:dc:17:08:c7:54:d7:97:9e:ca: 75:46:e6:d8:85:e7:fe:77:3e:ec:51:2e:83:7b:4b: ed:59:74:87:e7:6f:3c:b3:c9:9f:36:a9:98:7c:7e: 41:d4:f7:94:26:82:82:20:82:15:ed:da:1d:d8:ab: 12:3a:1d:71:71:c0:52:8d:2e:e9:38:09:da:68:1f: cb:1d:d7:2e:80:7c:4f:19:72:a1:af:ca:47:1f:2e: a8:d9:7e:ba:ca:8b:32:c6:98:89:97:2d:51:ff:15: 07:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A9:A7:20:AA:E4:D1:48:72:62:7D:A7:7E:23:6A:AA:AC:E1:AA:84 X509v3 Authority Key Identifier: keyid:85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:98:1e:64:43:ea:fa:cb:9d:a9:e5:07:e4:00:a1:7d:69:20: 07:4e:2f:3c:9a:2c:38:0b:db:ad:ef:fd:7b:75:cc:8c:f0:20: bb:bd:0c:b8:d3:29:4f:36:3f:5b:af:79:be:f6:17:35:1e:85: d0:f2:c5:7b:4d:4c:49:98:92:b0:60:60:53:cf:ec:73:a2:59: b0:c5:96:86:ac:b1:3b:f2:63:5f:ab:2e:24:d8:ea:6a:f3:9f: 75:55:13:8b:3c:55:a1:88:c0:05:bb:9e:a2:2c:ee:53:58:f1: 52:25:16:c2:0f:d0:46:5f:8c:69:ba:d2:82:23:c3:b9:ac:b7: e3:3e:2d:0b:29:91:13:e9:4c:28:c8:1e:6c:55:7e:e4:a5:c5: 36:95:4b:90:b3:df:8c:08:72:84:fa:9c:c3:df:1f:9b:e7:f1: c1:d4:6a:b7:33:80:e8:60:5c:3b:22:28:d3:6f:b4:77:5c:22: 82:d8:54:03:7f:90:cb:c9:b5:4c:b4:2c:a8:f4:30:fc:c9:d3: 7d:8d:99:ee:09:70:e7:03:5b:10:7e:9d:86:2d:00:f7:cc:c4: 9d:dc:c6:1e:29:48:7a:a7:e9:f5:99:b9:82:7e:b4:1f:2c:19: 72:e1:52:fa:ad:8c:6a:fb:44:9e:fc:e8:4b:0b:bc:fb:44:47: 7e:00:8d:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7LjU6GdApd/+LiKACVR99akVfUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhC Qzc2QUJGMjAeFw0yNjA3MjMwOTUyMTBaFw0yNjA3MjQxMjU3MTBaMDMxMTAvBgNV BAMTKEI3QTlBNzIwQUFFNEQxNDg3MjYyN0RBNzdFMjM2QUFBQUNFMUFBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMe8vyRHfGcgNiUB5JaVLXibO KF/8con7869AvUMm4qb4yMmIDFt100z9Wy7gmTMay997c6I4K0Sc+oxFUgs9Zs36 u9ynvbrBIFPGYhpYusgExZmXTz16lyRGWx6ignJ6/JMx+2ZcknrN+gqIzePNUBWe NSG5QScgtkYJr42yNpQUJE60QnkhoxFu5ybDHtuEhzhtOEMJjY9dmNwXCMdU15ee ynVG5tiF5/53PuxRLoN7S+1ZdIfnbzyzyZ82qZh8fkHU95QmgoIgghXt2h3YqxI6 HXFxwFKNLuk4CdpoH8sd1y6AfE8ZcqGvykcfLqjZfrrKizLGmImXLVH/FQfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6mnIKrk0UhyYn2nfiNqqqzhqoQwHwYDVR0j BBgwFoAUhbmitKTzc5yPwD5RAloraLx2q/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyYjhkMjgtZmY3Yy00NjkyLTkwMTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRB NEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhCQzc2QUJGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUI5QTJCNEE0RjM3MzlDOEZDMDNFNTEwMjVBMkI2OEJDNzZB QkYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJC NjhCQzc2QUJGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGYHmRD6vrLnanlB+QAoX1pIAdOLzyaLDgL 263v/Xt1zIzwILu9DLjTKU82P1uveb72FzUehdDyxXtNTEmYkrBgYFPP7HOiWbDF loassTvyY1+rLiTY6mrzn3VVE4s8VaGIwAW7nqIs7lNY8VIlFsIP0EZfjGm60oIj w7mst+M+LQspkRPpTCjIHmxVfuSlxTaVS5Cz34wIcoT6nMPfH5vn8cHUarczgOhg XDsiKNNvtHdcIoLYVAN/kMvJtUy0LKj0MPzJ032Nme4JcOcDWxB+nYYtAPfMxJ3c xh4pSHqn6fWZuYJ+tB8sGXLhUvqtjGr7RJ786EsLvPtER34Ajf4= -----END CERTIFICATE-----Generated at Fri Jul 24 02:49:02 2026 by rpki-client