$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: fNARdL8ILbTjRl6fQfwDBXvWs3Crtie3WUyEGRTEjAA= Subject key identifier: E0:31:F0:2B:B6:03:35:39:6A:DA:4B:6B:B3:4C:14:E5:6A:F3:5A:94 Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 48B105B8A8842053F3000D31E2C33929919C4B4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 01:42:20 +0000 Manifest this update: Fri 25 Sep 2026 01:37:20 +0000 Manifest next update: Sat 26 Sep 2026 04:23:20 +0000 Files and hashes: 1: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: oWDN/rS5CPaXaPKs3LDRw2wni3OfWMX/i+JmE/KKa1M=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 04:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b1:05:b8:a8:84:20:53:f3:00:0d:31:e2:c3:39:29:91:9c:4b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Sep 25 01:37:20 2026 GMT Not After : Sep 26 04:23:20 2026 GMT Subject: CN=E031F02BB60335396ADA4B6BB34C14E56AF35A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:f1:ca:3f:44:41:55:50:fe:6c:f1:78:e9:2e: 8f:39:89:42:fb:b9:2d:b9:54:97:f8:a4:9d:04:62: 03:37:83:fd:d7:69:6b:7f:0f:8f:99:ed:ca:2d:6a: 51:eb:b1:e5:dc:ac:f4:ab:46:be:40:6d:71:db:c1: 88:36:65:10:68:78:23:08:01:6a:36:0d:8e:a3:c0: e8:e6:9c:68:b0:3d:56:ee:c0:20:96:ca:22:b1:00: 88:75:ad:0d:ee:4c:73:39:7d:ae:5b:70:28:df:41: 59:a2:05:d9:46:9a:71:03:b7:14:1c:a8:f7:9d:f8: 96:4e:ab:b2:85:66:7c:0d:51:d0:65:c7:03:04:ea: f8:22:9b:b7:f9:69:70:03:ec:f4:29:33:19:1a:04: a5:49:86:4b:2c:4b:6f:d6:0e:eb:97:9e:7b:e0:20: 2a:97:2e:f7:7e:af:74:98:cb:f8:43:d3:af:6c:35: 08:a8:2f:f3:e1:bf:a7:7b:54:61:42:7a:d2:2a:46: b4:80:16:a4:78:5d:3c:b9:12:9f:e1:f7:c6:e7:19: f4:c2:39:ee:d0:6f:32:88:7a:f8:fa:b1:81:13:4e: ad:e1:06:47:36:4e:03:2f:6b:33:a5:aa:e4:a8:4d: 32:bd:c9:8b:4e:73:0e:6b:cb:e3:7f:d6:75:36:69: 66:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:31:F0:2B:B6:03:35:39:6A:DA:4B:6B:B3:4C:14:E5:6A:F3:5A:94 X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:3a:87:0a:5b:2f:13:ef:86:6e:33:2d:ec:16:44:eb:aa:25: 52:e3:50:38:83:8c:fd:66:d7:be:e6:c5:8a:2f:e2:be:fc:a7: c2:f0:11:90:db:1c:0f:8f:40:f9:c4:2f:c4:57:ff:e6:c1:50: 69:ee:ec:fe:b7:d9:b5:18:ac:db:f2:2d:35:9f:c9:ca:01:c5: 5a:f5:72:9e:8e:90:f2:dc:cc:c0:7c:b8:74:bc:d2:36:fd:67: a0:ff:80:66:1a:3c:8d:5f:56:45:db:be:3b:04:10:41:99:6a: 65:7b:92:ad:a1:58:00:e3:e8:08:77:7c:6b:24:48:90:19:77: aa:e4:16:f9:ab:e7:bf:4d:e5:4f:06:02:b4:e2:4e:9f:73:e2: 16:be:fa:01:bc:e2:b6:22:2f:de:59:15:ab:78:bd:f7:d3:59: b1:0a:b8:0d:2f:df:c1:68:ce:99:27:6f:d5:5c:63:2f:18:e3: 49:20:f1:be:97:3b:41:b5:9d:f0:81:2a:db:84:86:c2:96:bc: 79:49:c8:7b:4d:a7:7b:66:e0:6d:21:cf:52:4d:f0:35:f5:a8: ed:98:63:a1:dd:7e:fc:32:2b:40:83:95:39:b4:7d:c3:91:98: a7:40:b0:bf:cf:17:61:9c:af:4d:39:86:bb:a8:d0:05:fa:38: 6f:56:52:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLEFuKiEIFPzAA0x4sM5KZGcS00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA5MjUwMTM3MjBaFw0yNjA5MjYwNDIzMjBaMDMxMTAvBgNV BAMTKEUwMzFGMDJCQjYwMzM1Mzk2QURBNEI2QkIzNEMxNEU1NkFGMzVBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn8co/REFVUP5s8XjpLo85iUL7 uS25VJf4pJ0EYgM3g/3XaWt/D4+Z7cotalHrseXcrPSrRr5AbXHbwYg2ZRBoeCMI AWo2DY6jwOjmnGiwPVbuwCCWyiKxAIh1rQ3uTHM5fa5bcCjfQVmiBdlGmnEDtxQc qPed+JZOq7KFZnwNUdBlxwME6vgim7f5aXAD7PQpMxkaBKVJhkssS2/WDuuXnnvg ICqXLvd+r3SYy/hD069sNQioL/Phv6d7VGFCetIqRrSAFqR4XTy5Ep/h98bnGfTC Oe7QbzKIevj6sYETTq3hBkc2TgMvazOlquSoTTK9yYtOcw5ry+N/1nU2aWYNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4DHwK7YDNTlq2ktrs0wU5WrzWpQwHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACA6hwpbLxPvhm4zLewWROuqJVLjUDiDjP1m 177mxYov4r78p8LwEZDbHA+PQPnEL8RX/+bBUGnu7P632bUYrNvyLTWfycoBxVr1 cp6OkPLczMB8uHS80jb9Z6D/gGYaPI1fVkXbvjsEEEGZamV7kq2hWADj6Ah3fGsk SJAZd6rkFvmr579N5U8GArTiTp9z4ha++gG84rYiL95ZFat4vffTWbEKuA0v38Fo zpknb9VcYy8Y40kg8b6XO0G1nfCBKtuEhsKWvHlJyHtNp3tm4G0hz1JN8DX1qO2Y Y6HdfvwyK0CDlTm0fcORmKdAsL/PF2Gcr005hruo0AX6OG9WUuM= -----END CERTIFICATE-----Generated at Fri Sep 25 13:21:34 2026 by rpki-client