$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: F7oDhaFOS06c1l0fxbuvWC4kQiuOhAtLTRlml5UYRqs= Subject key identifier: 3D:78:24:55:EC:82:6B:90:55:FF:92:32:CB:C4:CD:5D:06:BA:1D:E3 Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 1B9F4BF24DDA4FFA696D7CE16168E775E4DB4273 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: BF Signing time: Wed 23 Sep 2026 07:04:50 +0000 Manifest this update: Wed 23 Sep 2026 06:59:50 +0000 Manifest next update: Thu 24 Sep 2026 08:50:50 +0000 Files and hashes: 1: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: ML5jpbZ+ED8CuoX2q4T9Oz9csktDBbsHtPMYu5v18mY=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 08:50:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:9f:4b:f2:4d:da:4f:fa:69:6d:7c:e1:61:68:e7:75:e4:db:42:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Sep 23 06:59:50 2026 GMT Not After : Sep 24 08:50:50 2026 GMT Subject: CN=3D782455EC826B9055FF9232CBC4CD5D06BA1DE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a0:a7:98:74:5a:15:6f:c4:d4:54:ba:49:12: 80:3b:b3:93:5e:d9:eb:e9:07:30:60:ac:a3:53:ea: 3d:32:90:ee:1e:31:ca:e4:1e:fc:f4:2f:98:b7:9a: 25:e2:80:17:86:23:1e:f2:3c:78:38:31:cb:51:58: 02:f9:a4:08:8d:7e:27:36:95:15:1c:67:ea:50:0d: 9a:2e:7b:ce:93:13:67:35:d4:ac:f2:bb:6b:da:b3: c6:c1:0a:ba:41:3d:35:ee:8f:90:26:ba:ac:bd:4d: 58:1a:2e:3d:8f:ab:fa:4e:ea:26:c2:7e:27:f5:34: ab:4b:09:fe:9b:33:5d:6c:73:28:0c:8e:69:36:eb: 55:24:ae:46:df:98:ab:cb:5c:ae:63:20:23:d3:aa: 8a:94:dc:02:13:58:43:b5:44:e2:d1:f3:f5:c1:83: 3a:bb:24:89:2c:5e:09:9b:88:a8:4d:c4:73:ef:da: ec:2b:c5:16:54:99:22:6b:6d:5f:46:a9:2c:1f:a4: 9f:12:49:fb:09:bb:94:5c:a8:25:9b:f7:53:9a:b2: f6:2c:df:9c:12:c2:68:9a:57:30:5f:84:f7:db:0a: 16:d7:8e:b5:dd:92:0c:17:11:0f:eb:a7:51:9a:ab: eb:eb:74:18:a3:d2:94:7f:2c:c1:09:45:49:af:33: c8:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:78:24:55:EC:82:6B:90:55:FF:92:32:CB:C4:CD:5D:06:BA:1D:E3 X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:64:03:ec:05:d6:6f:5a:82:16:46:3a:74:b8:ea:ea:1d:eb: c7:ce:a5:cc:d8:91:ab:e9:d5:e1:f7:06:0f:20:98:d3:a0:53: a9:2f:86:33:c9:21:df:15:de:de:3f:c9:e1:af:8a:a5:fb:bc: 32:78:f9:59:61:4d:cb:a6:e3:c3:d4:37:e7:8a:b7:28:46:39: cc:6b:8a:58:12:d1:f5:90:56:83:f2:c3:2d:f5:8e:f5:da:13: 6c:50:62:76:0c:ab:6c:b1:3f:a0:70:7b:b1:b8:61:af:63:7d: 89:f7:3c:dd:c8:fc:de:af:03:eb:39:1e:6c:8a:88:18:e1:53: 04:b0:62:8c:24:ef:06:42:b9:8b:77:36:f3:95:5c:1b:bf:20: 50:70:41:62:ba:4b:97:e6:77:e7:f3:01:90:93:3e:f4:0a:3b: b4:da:69:42:4e:ac:82:81:e0:ac:72:94:e5:90:75:de:9b:86: 16:4a:2c:e0:1e:e2:b1:cd:d9:06:97:a6:1b:4c:8b:80:be:c6: c7:54:86:e9:61:c7:76:96:8c:e8:94:cf:36:64:93:8d:59:38: a0:a7:f4:8c:c5:8e:47:00:09:ff:eb:8c:ba:e6:9f:1f:59:97: d2:99:02:fc:da:44:e1:1b:bb:8c:af:5e:38:6d:48:a0:e8:5c: 0f:bd:ac:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG59L8k3aT/ppbXzhYWjndeTbQnMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjA5MjMwNjU5NTBaFw0yNjA5MjQwODUwNTBaMDMxMTAvBgNV BAMTKDNENzgyNDU1RUM4MjZCOTA1NUZGOTIzMkNCQzRDRDVEMDZCQTFERTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRoKeYdFoVb8TUVLpJEoA7s5Ne 2evpBzBgrKNT6j0ykO4eMcrkHvz0L5i3miXigBeGIx7yPHg4MctRWAL5pAiNfic2 lRUcZ+pQDZoue86TE2c11Kzyu2vas8bBCrpBPTXuj5Amuqy9TVgaLj2Pq/pO6ibC fif1NKtLCf6bM11scygMjmk261UkrkbfmKvLXK5jICPTqoqU3AITWEO1ROLR8/XB gzq7JIksXgmbiKhNxHPv2uwrxRZUmSJrbV9GqSwfpJ8SSfsJu5RcqCWb91OasvYs 35wSwmiaVzBfhPfbChbXjrXdkgwXEQ/rp1Gaq+vrdBij0pR/LMEJRUmvM8hxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPXgkVeyCa5BV/5Iyy8TNXQa6HeMwHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFkA+wF1m9aghZGOnS46uod68fOpczYkavp 1eH3Bg8gmNOgU6kvhjPJId8V3t4/yeGviqX7vDJ4+VlhTcum48PUN+eKtyhGOcxr ilgS0fWQVoPywy31jvXaE2xQYnYMq2yxP6Bwe7G4Ya9jfYn3PN3I/N6vA+s5HmyK iBjhUwSwYowk7wZCuYt3NvOVXBu/IFBwQWK6S5fmd+fzAZCTPvQKO7TaaUJOrIKB 4KxylOWQdd6bhhZKLOAe4rHN2QaXphtMi4C+xsdUhulhx3aWjOiUzzZkk41ZOKCn 9IzFjkcACf/rjLrmnx9Zl9KZAvzaROEbu4yvXjhtSKDoXA+9rKo= -----END CERTIFICATE-----Generated at Thu Sep 24 00:21:11 2026 by rpki-client