$ rpki-client -vvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft File: D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft (raw, json) Hash identifier: lHPHqdPROsZNAbmcRXK58yVQqgg/UioOmx1FXFH8OvA= Subject key identifier: B6:AD:E3:DE:7B:DC:72:42:F1:17:10:00:6C:70:DF:0A:64:3F:5C:C9 Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 27A925DA6C92712B8A6593D702A784CD279B519E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:45:17 +0000 Manifest this update: Thu 23 Jul 2026 20:40:17 +0000 Manifest next update: Fri 24 Jul 2026 21:06:17 +0000 Files and hashes: 1: D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl (hash: 6BHzN3dsZvevoyCQYL+q24XO9j6W4dGbVz2pH4YsGEM=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:06:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:a9:25:da:6c:92:71:2b:8a:65:93:d7:02:a7:84:cd:27:9b:51:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: Jul 23 20:40:17 2026 GMT Not After : Jul 24 21:06:17 2026 GMT Subject: CN=B6ADE3DE7BDC7242F11710006C70DF0A643F5CC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:16:a5:e8:e4:be:64:c4:28:31:5c:78:f2: 92:94:fe:4f:75:42:60:91:38:35:41:06:ac:76:7c: 55:7c:c2:17:f1:65:2d:57:6f:dd:98:f0:21:0e:d3: 8b:c9:19:be:1e:34:85:8e:58:e8:3b:f0:a3:c8:ed: 16:fc:df:bb:02:ed:e4:bb:1a:88:6f:98:98:35:87: 80:aa:44:8c:c0:93:24:3a:78:41:51:77:0e:3b:30: 52:39:d0:37:18:ca:21:0d:ac:25:d5:f8:31:b7:ac: c2:6e:de:00:6e:f3:11:42:a2:1e:b3:26:88:d1:8b: 0a:e2:1d:8c:d9:2a:f2:6a:00:6a:41:dd:89:f4:86: 97:45:5a:9e:70:15:ef:95:33:2c:5f:f1:09:e6:bb: e1:96:27:6a:5a:c8:6c:96:22:c8:75:1a:7e:25:b1: 7f:7c:d7:21:15:dd:4f:ae:44:90:c4:4d:94:67:86: 4e:fa:b4:ab:07:bd:06:3e:52:05:71:b3:20:8e:ef: 5e:1c:2f:bf:f3:d9:80:74:9b:7c:b0:fd:1d:c9:8f: 54:28:54:0c:8e:12:eb:3f:16:26:61:61:d0:4e:dd: 3c:bd:5f:4a:a6:a5:0d:5a:43:9c:19:be:46:9d:fa: 4e:b4:bf:1b:ca:a6:07:aa:3b:b9:87:2d:fe:de:c5: 52:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:AD:E3:DE:7B:DC:72:42:F1:17:10:00:6C:70:DF:0A:64:3F:5C:C9 X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:4a:67:46:db:f5:6a:db:66:14:a8:8e:ea:69:3e:37:f1:a0: 88:6f:29:4d:7d:74:65:68:a0:0b:95:e2:39:c5:99:8f:31:10: 1f:74:b7:61:c5:f6:fa:c7:4c:22:40:a9:fe:6a:f9:6f:47:e8: 50:e0:1c:7c:a4:ea:0f:ef:5a:13:bf:85:58:22:bf:a2:9c:5e: 9f:02:72:c8:55:27:10:9e:a5:0f:70:3d:88:41:c0:60:f9:d9: a1:40:47:14:67:e6:81:6d:4f:7e:d1:4e:d8:64:c9:f2:52:11: 42:25:9f:23:b4:55:a8:24:63:7a:29:bf:a2:99:b6:8b:48:65: cd:99:80:62:df:7a:f0:be:0c:50:4e:21:d9:a2:0f:e4:10:84: b8:de:55:d3:ef:ec:72:dd:ab:a1:4b:fa:2e:ba:f9:85:86:59: e2:ac:08:15:92:17:b6:e2:9c:50:d0:42:fa:be:35:81:83:51: 44:9e:73:c0:48:64:c0:02:88:c8:b0:19:33:89:75:17:81:c8: a8:c2:6f:42:c3:fb:f1:5a:1f:11:f7:81:e8:a0:4f:17:9a:0f: b9:07:ca:b2:74:1c:3d:f2:90:6e:96:08:56:dc:56:3a:01:04: 98:f3:ee:3b:91:08:bf:08:75:9f:29:d7:6d:87:ef:66:24:07: b6:77:05:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ6kl2myScSuKZZPXAqeEzSebUZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjA3MjMyMDQwMTdaFw0yNjA3MjQyMTA2MTdaMDMxMTAvBgNV BAMTKEI2QURFM0RFN0JEQzcyNDJGMTE3MTAwMDZDNzBERjBBNjQzRjVDQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDftxal6OS+ZMQoMVx48pKU/k91 QmCRODVBBqx2fFV8whfxZS1Xb92Y8CEO04vJGb4eNIWOWOg78KPI7Rb837sC7eS7 GohvmJg1h4CqRIzAkyQ6eEFRdw47MFI50DcYyiENrCXV+DG3rMJu3gBu8xFCoh6z JojRiwriHYzZKvJqAGpB3Yn0hpdFWp5wFe+VMyxf8Qnmu+GWJ2payGyWIsh1Gn4l sX981yEV3U+uRJDETZRnhk76tKsHvQY+UgVxsyCO714cL7/z2YB0m3yw/R3Jj1Qo VAyOEus/FiZhYdBO3Ty9X0qmpQ1aQ5wZvkad+k60vxvKpgeqO7mHLf7exVLzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtq3j3nvcckLxFxAAbHDfCmQ/XMkwHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0 NDVDN0QzOERFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1KZ0bb9WrbZhSojuppPjfxoIhvKU19dGVo oAuV4jnFmY8xEB90t2HF9vrHTCJAqf5q+W9H6FDgHHyk6g/vWhO/hVgiv6KcXp8C cshVJxCepQ9wPYhBwGD52aFARxRn5oFtT37RTthkyfJSEUIlnyO0VagkY3opv6KZ totIZc2ZgGLfevC+DFBOIdmiD+QQhLjeVdPv7HLdq6FL+i66+YWGWeKsCBWSF7bi nFDQQvq+NYGDUUSec8BIZMACiMiwGTOJdReByKjCb0LD+/FaHxH3geigTxeaD7kH yrJ0HD3ykG6WCFbcVjoBBJjz7juRCL8IdZ8p122H72YkB7Z3BZE= -----END CERTIFICATE-----Generated at Fri Jul 24 13:08:45 2026 by rpki-client