$ rpki-client -vvf rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft (raw, json) Hash identifier: tQeqA2pbxqCA4S2EcpTx5DApCBYvn7tk5ZJhwy/EHZk= Subject key identifier: 05:14:63:BE:58:92:9A:6A:F3:7E:2F:1C:6F:5D:8A:1B:AC:15:02:7D Authority key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Certificate issuer: /CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Certificate serial: 0F03D6CA04A7F70EF56BBA61517353FAB0CB0B17 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft Manifest number: 0F Signing time: Tue 12 May 2026 11:32:11 +0000 Manifest this update: Tue 12 May 2026 11:27:11 +0000 Manifest next update: Wed 13 May 2026 12:24:11 +0000 Files and hashes: 1: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl (hash: gLT6dyB64CRqLwe7gqOQ6tZJS6KVl8XN/TNYkMUGUTM=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: OmTMu2442b172ucsFf/mMUYIo/5ux22+t2Y1lTl29zM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:03:d6:ca:04:a7:f7:0e:f5:6b:ba:61:51:73:53:fa:b0:cb:0b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Validity Not Before: May 12 11:27:11 2026 GMT Not After : May 13 12:24:11 2026 GMT Subject: CN=051463BE58929A6AF37E2F1C6F5D8A1BAC15027D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:bf:e1:4d:f0:55:c7:9c:bb:b7:da:cc:e5: c0:dc:3e:cf:24:49:bc:65:25:0e:c3:dd:f3:1a:cf: 9e:74:cf:f2:f2:cd:c5:0e:4a:c7:73:a1:89:16:22: f4:10:ea:54:8f:94:a0:d1:48:b0:6e:d0:fa:ce:e7: 1f:79:4c:73:b3:5e:81:72:87:0a:17:81:7e:48:50: 81:4f:b6:4d:32:bd:00:d2:94:9c:2b:37:b8:01:55: 99:66:d8:39:9a:f4:7a:67:f1:27:bc:56:3f:98:8a: cb:eb:7f:f8:a0:c5:e9:1a:1e:99:ff:0e:1d:e6:9b: a4:06:5b:b0:86:b0:ee:c2:f3:fb:68:95:57:a8:71: b6:cf:e6:d3:cf:85:54:66:69:50:15:2b:f2:19:8f: 59:b3:c8:bd:1d:1b:77:1f:bb:ad:ec:78:29:7c:bf: a0:e8:b8:cb:da:c8:bf:90:3b:05:a9:9f:29:30:05: 8a:43:c2:c3:06:0d:cd:5e:d1:4c:ea:b8:36:9e:e0: 2e:da:6b:c6:11:7b:4d:df:04:22:66:d0:53:9d:2d: ad:bd:6a:38:14:bc:09:7d:dc:9a:b9:f4:83:bb:42: 0b:04:4e:14:d2:15:d3:5a:d7:4f:85:04:19:f6:35: 12:c9:f8:0f:22:34:b5:b5:57:6c:25:5c:2d:83:f3: f1:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:14:63:BE:58:92:9A:6A:F3:7E:2F:1C:6F:5D:8A:1B:AC:15:02:7D X509v3 Authority Key Identifier: keyid:85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:45:8d:66:6a:e6:c8:28:5a:02:52:a7:b3:0d:3a:68:5a:fe: a8:91:00:35:b7:33:df:38:55:ab:1d:a1:95:e9:8a:7c:98:f9: da:bd:8d:dc:95:c9:b7:65:96:df:c3:5d:c5:63:08:59:f0:a7: d0:4b:79:d8:70:7d:ac:42:71:8a:9f:8a:bc:f0:0e:29:a7:2f: 48:9c:7b:dd:00:74:98:d8:29:7c:eb:95:35:06:4a:ae:49:39: 51:c1:56:39:79:4a:e6:63:2b:40:da:68:ca:6a:4f:36:d1:f8: 70:f7:28:7d:14:ef:73:c2:19:03:35:c8:b4:ef:54:03:97:30: 1c:25:1b:59:de:e9:8f:1c:51:24:b9:36:a5:b1:2b:1b:e7:cf: 6a:44:bf:4f:f1:cb:b8:0f:de:26:9b:e4:a1:1a:77:f6:4f:ac: 24:6c:ae:e1:8e:1b:d0:f3:da:a3:dc:3b:8b:30:16:7a:00:d4: 38:e4:d9:68:d8:60:4c:06:8a:07:a0:61:66:d7:8f:57:1b:78: 09:58:08:1d:85:e0:ac:b0:8c:d7:07:3e:0a:df:d4:49:7a:e3: 41:18:e9:2c:97:16:ae:56:10:2b:16:92:0f:9d:69:d3:b9:78: d3:f6:63:38:bc:ae:ed:5b:5a:ba:db:95:be:e3:94:86:9e:30: 9b:0c:58:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwPWygSn9w71a7phUXNT+rDLCxcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhC Qzc2QUJGMjAeFw0yNjA1MTIxMTI3MTFaFw0yNjA1MTMxMjI0MTFaMDMxMTAvBgNV BAMTKDA1MTQ2M0JFNTg5MjlBNkFGMzdFMkYxQzZGNUQ4QTFCQUMxNTAyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYn7/hTfBVx5y7t9rM5cDcPs8k SbxlJQ7D3fMaz550z/LyzcUOSsdzoYkWIvQQ6lSPlKDRSLBu0PrO5x95THOzXoFy hwoXgX5IUIFPtk0yvQDSlJwrN7gBVZlm2Dma9Hpn8Se8Vj+Yisvrf/igxekaHpn/ Dh3mm6QGW7CGsO7C8/tolVeocbbP5tPPhVRmaVAVK/IZj1mzyL0dG3cfu63seCl8 v6DouMvayL+QOwWpnykwBYpDwsMGDc1e0UzquDae4C7aa8YRe03fBCJm0FOdLa29 ajgUvAl93Jq59IO7QgsEThTSFdNa10+FBBn2NRLJ+A8iNLW1V2wlXC2D8/FtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBRRjvliSmmrzfi8cb12KG6wVAn0wHwYDVR0j BBgwFoAUhbmitKTzc5yPwD5RAloraLx2q/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyYjhkMjgtZmY3Yy00NjkyLTkwMTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRB NEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhCQzc2QUJGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUI5QTJCNEE0RjM3MzlDOEZDMDNFNTEwMjVBMkI2OEJDNzZB QkYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJC NjhCQzc2QUJGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJFjWZq5sgoWgJSp7MNOmha/qiRADW3M984 VasdoZXpinyY+dq9jdyVybdllt/DXcVjCFnwp9BLedhwfaxCcYqfirzwDimnL0ic e90AdJjYKXzrlTUGSq5JOVHBVjl5SuZjK0DaaMpqTzbR+HD3KH0U73PCGQM1yLTv VAOXMBwlG1ne6Y8cUSS5NqWxKxvnz2pEv0/xy7gP3iab5KEad/ZPrCRsruGOG9Dz 2qPcO4swFnoA1Djk2WjYYEwGigegYWbXj1cbeAlYCB2F4KywjNcHPgrf1El640EY 6SyXFq5WECsWkg+dadO5eNP2Yzi8ru1bWrrblb7jlIaeMJsMWFU= -----END CERTIFICATE-----Generated at Wed May 13 03:16:44 2026 by rpki-client