$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json) Hash identifier: T277+RtYqL5vyhHA/rI6I7m9hQ2LNE3+5KXnIOeHPxA= Subject key identifier: 33:34:39:2A:5C:2B:78:BF:52:14:44:C9:FB:AF:03:A0:DD:EC:FD:54 Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Certificate serial: 26428AE858B196260E8FE6D818B784E0AEEC84B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 08:25:59 +0000 Manifest this update: Thu 24 Sep 2026 08:20:59 +0000 Manifest next update: Fri 25 Sep 2026 11:57:59 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=) 2: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: Tx/cCBXdW5tns5iPTZxXD8jkSlk8UNj1ZZ8GloCE1IA=) 3: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=) 4: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=) 5: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=) 6: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=) 7: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=) 8: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:42:8a:e8:58:b1:96:26:0e:8f:e6:d8:18:b7:84:e0:ae:ec:84:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Validity Not Before: Sep 24 08:20:59 2026 GMT Not After : Sep 25 11:57:59 2026 GMT Subject: CN=3334392A5C2B78BF521444C9FBAF03A0DDECFD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:46:10:37:d2:df:9d:26:37:cb:2f:d1:3b:57: 60:7d:53:75:bb:dc:dc:14:86:3e:04:68:a4:e8:7e: a9:c2:f3:b6:26:33:d6:db:1b:ea:eb:9e:1c:60:cc: 07:73:15:2a:f8:3e:7d:a5:af:cd:d0:ad:f9:eb:cf: c5:d9:65:88:c6:8d:0b:c9:b7:0c:74:08:53:25:c5: 2d:a9:7d:57:e8:fb:99:70:04:c9:3f:a9:cd:cf:29: 42:f5:4f:41:58:80:20:d9:6c:89:26:e8:ff:f3:c1: 35:3c:e6:27:f2:93:89:72:eb:a0:89:5d:61:f4:fc: f2:24:60:ca:fd:c5:76:10:51:13:72:c3:4f:f8:ec: 7a:c7:aa:45:8f:a5:c0:d4:9d:71:10:60:2a:26:32: 97:44:c7:f1:b5:ae:84:6d:7f:92:80:3c:31:44:fe: 88:74:ee:ec:76:71:f1:65:15:f8:47:9c:8e:11:2c: 7b:fb:ea:11:52:8b:74:8d:dd:1b:c2:d0:3b:e6:30: 05:90:32:b2:18:70:5c:82:d7:8b:fc:b3:a3:ad:5d: fb:e8:0a:b1:ef:b2:5c:ce:d9:28:92:69:07:b0:83: 26:d9:c3:51:c2:ce:e3:17:c4:62:f7:40:e9:43:ba: 53:9f:f8:16:4a:36:c3:e5:d8:a2:83:30:ee:59:a1: fa:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:34:39:2A:5C:2B:78:BF:52:14:44:C9:FB:AF:03:A0:DD:EC:FD:54 X509v3 Authority Key Identifier: keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:aa:ae:2a:af:76:0e:28:a5:05:05:7d:bb:87:31:17:6d:54: 46:4e:b0:e6:6a:ff:f3:e4:0b:54:6e:35:cf:1f:e4:d9:11:04: 11:95:e6:a8:4f:dc:dc:5b:00:16:30:24:5b:ca:4f:b2:78:74: b1:ae:e1:99:29:6c:3d:28:46:35:a0:8b:63:a2:cb:7f:3b:04: 2d:0d:62:1d:c0:cf:76:e2:0d:07:1e:02:40:62:10:e0:0c:4c: bf:93:7c:37:8e:ae:b1:2f:2a:7d:31:20:f9:17:39:f9:71:d9: 36:28:1c:89:ac:c8:bc:0f:d7:5e:3a:35:07:30:72:d6:16:8c: 5c:42:7e:8b:ff:9f:f2:59:70:b5:9f:7a:c6:a9:93:7f:09:c4: 49:66:63:a1:89:9a:ce:7b:27:ea:38:d7:7d:26:f8:80:c5:ec: 03:8e:4b:29:a2:b3:4c:2b:2b:5e:b5:e2:85:5f:2a:eb:30:c0: cc:b5:c8:e4:ed:d2:74:b4:90:8a:f8:79:8b:14:1f:39:c1:8d: e0:d4:1a:29:84:93:e4:73:4c:60:cf:df:80:4f:31:15:80:5b: b0:2d:f4:bf:aa:c8:f7:16:50:a6:50:46:f1:8f:be:6e:6a:cd: 4c:02:6e:14:f8:de:c5:01:a8:b2:0d:62:e5:6b:1c:bf:3e:5d: 02:14:ae:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJkKK6FixliYOj+bYGLeE4K7shLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5 MzYyRDA2NzAeFw0yNjA5MjQwODIwNTlaFw0yNjA5MjUxMTU3NTlaMDMxMTAvBgNV BAMTKDMzMzQzOTJBNUMyQjc4QkY1MjE0NDRDOUZCQUYwM0EwRERFQ0ZENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuRhA30t+dJjfLL9E7V2B9U3W7 3NwUhj4EaKTofqnC87YmM9bbG+rrnhxgzAdzFSr4Pn2lr83Qrfnrz8XZZYjGjQvJ twx0CFMlxS2pfVfo+5lwBMk/qc3PKUL1T0FYgCDZbIkm6P/zwTU85ifyk4ly66CJ XWH0/PIkYMr9xXYQURNyw0/47HrHqkWPpcDUnXEQYComMpdEx/G1roRtf5KAPDFE /oh07ux2cfFlFfhHnI4RLHv76hFSi3SN3RvC0DvmMAWQMrIYcFyC14v8s6OtXfvo CrHvslzO2SiSaQewgybZw1HCzuMXxGL3QOlDulOf+BZKNsPl2KKDMO5ZofpPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzQ5KlwreL9SFETJ+68DoN3s/VQwHwYDVR0j BBgwFoAUhQweGAnir0mifD5n8noXmJNi0GcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyNzJmN2ItZDY1Ni00MDU4LWE3YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgw OUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5MzYyRDA2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTBDMUUxODA5RTJBRjQ5QTI3QzNFNjdGMjdBMTc5ODkzNjJE MDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3 OTg5MzYyRDA2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWqriqvdg4opQUFfbuHMRdtVEZOsOZq//Pk C1RuNc8f5NkRBBGV5qhP3NxbABYwJFvKT7J4dLGu4ZkpbD0oRjWgi2Oiy387BC0N Yh3Az3biDQceAkBiEOAMTL+TfDeOrrEvKn0xIPkXOflx2TYoHImsyLwP1146NQcw ctYWjFxCfov/n/JZcLWfesapk38JxElmY6GJms57J+o4130m+IDF7AOOSymis0wr K1614oVfKuswwMy1yOTt0nS0kIr4eYsUHznBjeDUGimEk+RzTGDP34BPMRWAW7At 9L+qyPcWUKZQRvGPvm5qzUwCbhT43sUBqLINYuVrHL8+XQIUrjg= -----END CERTIFICATE-----Generated at Thu Sep 24 15:28:25 2026 by rpki-client