$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: D/zLoWhmmOLZ2o3kxOqzrRNFrEm9PUYgIHHWH10D+NI= Subject key identifier: D8:43:5B:F7:9B:E6:A4:4A:09:CA:AE:68:97:F2:BE:14:BC:E4:C3:7D Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 7DDD80E3114D328AD37715A6C475854C82483CB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 21:21:04 +0000 Manifest this update: Thu 23 Jul 2026 21:16:04 +0000 Manifest next update: Sat 25 Jul 2026 00:43:04 +0000 Files and hashes: 1: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) 2: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: YMX1tU62hIP+plJGqRlxBj80m5g89Ox1U4O58Aplo/Q=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:43:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:dd:80:e3:11:4d:32:8a:d3:77:15:a6:c4:75:85:4c:82:48:3c:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Jul 23 21:16:04 2026 GMT Not After : Jul 25 00:43:04 2026 GMT Subject: CN=D8435BF79BE6A44A09CAAE6897F2BE14BCE4C37D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:32:02:2f:7a:57:30:83:48:0c:0a:9f:b6:7c: 1c:69:2a:23:9c:ca:e9:5c:76:2a:46:62:9e:8e:27: f6:a3:e9:79:df:04:53:df:0e:64:81:ff:b3:e1:ce: b9:a8:47:21:68:27:ad:d2:d3:d7:c8:00:0b:d0:e8: b2:64:e0:b6:21:e7:74:93:8c:5c:59:66:7b:dc:92: 05:00:cd:48:9c:cf:78:fd:b2:35:d8:2d:b2:66:79: 26:ba:b2:61:56:7d:1a:53:6e:80:f1:8a:6f:89:14: 10:f1:57:49:12:b3:a1:50:73:de:4b:7b:65:76:d3: f8:c6:00:1e:9b:d1:03:57:e6:01:8f:7f:98:8f:94: a6:cf:e4:20:98:16:30:39:0a:75:76:81:d4:ee:11: 8f:8d:14:a3:fd:04:9e:66:7d:b7:69:8c:92:52:4f: 55:92:f3:5c:9f:2f:ba:c3:a7:91:fc:b4:3b:94:8a: a3:cf:a2:f2:1b:a7:0d:f1:50:2e:de:61:88:f3:21: 7c:9b:96:69:6b:c9:d7:9c:d9:74:c1:95:88:c3:d7: f3:2b:a2:6c:e7:f2:77:bc:aa:fd:be:bb:3b:ed:6d: 4b:7a:fb:a1:61:a3:bc:36:5a:a1:49:87:c4:2d:e1: 77:19:06:4f:51:ed:26:fb:b4:c2:6b:18:6e:11:77: d1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:43:5B:F7:9B:E6:A4:4A:09:CA:AE:68:97:F2:BE:14:BC:E4:C3:7D X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:40:d7:eb:12:df:e2:cf:61:7d:df:ef:c3:c6:4b:89:58:5e: ba:4f:5e:cb:c8:77:23:26:a0:28:a6:7b:9d:66:02:81:bf:db: 01:17:e7:44:16:f4:ba:37:4d:eb:b7:ce:60:e5:c1:37:55:55: c7:eb:5a:bb:57:65:d9:43:73:ff:cd:80:5f:61:ce:4f:69:fb: 76:0f:2b:fc:5a:49:fd:43:dd:7d:35:98:3b:74:0a:81:3e:29: 63:ba:fe:2c:c5:bd:6c:c6:73:0c:20:e9:11:b3:41:d3:aa:a8: 10:f9:5a:f6:fc:2c:b0:0a:04:32:7c:fa:ef:55:0b:f9:17:92: a3:9a:f0:06:71:97:56:46:ef:49:d1:16:60:a4:68:3c:82:de: e4:54:73:0d:55:8c:68:f2:84:38:e4:57:9c:7d:db:57:b8:3b: c8:fd:ba:40:17:ce:96:2e:de:67:04:ac:a1:70:15:9b:1c:5c: dd:c8:73:34:66:46:92:8d:a2:28:00:f4:7c:af:b7:bb:dd:d6: 13:ba:a5:00:b8:79:be:3a:4d:15:ba:ad:79:98:6b:a8:09:88: cf:1c:0d:29:80:8e:da:6e:48:35:31:37:50:42:05:07:ac:5f: 00:85:55:56:29:48:43:36:1e:a9:af:ba:0d:47:79:f9:3a:7b: 9d:41:50:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfd2A4xFNMorTdxWmxHWFTIJIPLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjA3MjMyMTE2MDRaFw0yNjA3MjUwMDQzMDRaMDMxMTAvBgNV BAMTKEQ4NDM1QkY3OUJFNkE0NEEwOUNBQUU2ODk3RjJCRTE0QkNFNEMzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4MgIvelcwg0gMCp+2fBxpKiOc yulcdipGYp6OJ/aj6XnfBFPfDmSB/7PhzrmoRyFoJ63S09fIAAvQ6LJk4LYh53ST jFxZZnvckgUAzUicz3j9sjXYLbJmeSa6smFWfRpTboDxim+JFBDxV0kSs6FQc95L e2V20/jGAB6b0QNX5gGPf5iPlKbP5CCYFjA5CnV2gdTuEY+NFKP9BJ5mfbdpjJJS T1WS81yfL7rDp5H8tDuUiqPPovIbpw3xUC7eYYjzIXyblmlrydec2XTBlYjD1/Mr omzn8ne8qv2+uzvtbUt6+6Fho7w2WqFJh8Qt4XcZBk9R7Sb7tMJrGG4Rd9FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ENb95vmpEoJyq5ol/K+FLzkw30wHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALRA1+sS3+LPYX3f78PGS4lYXrpPXsvIdyMm oCime51mAoG/2wEX50QW9Lo3Teu3zmDlwTdVVcfrWrtXZdlDc//NgF9hzk9p+3YP K/xaSf1D3X01mDt0CoE+KWO6/izFvWzGcwwg6RGzQdOqqBD5Wvb8LLAKBDJ8+u9V C/kXkqOa8AZxl1ZG70nRFmCkaDyC3uRUcw1VjGjyhDjkV5x921e4O8j9ukAXzpYu 3mcErKFwFZscXN3IczRmRpKNoigA9Hyvt7vd1hO6pQC4eb46TRW6rXmYa6gJiM8c DSmAjtpuSDUxN1BCBQesXwCFVVYpSEM2Hqmvug1Hefk6e51BUDM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:34:48 2026 by rpki-client