$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: 4wi+Kq5zYaGDDG7R+bDful1J8NYpMxLQPr6+DkBF8ss= Subject key identifier: 61:8E:52:F1:29:4F:75:99:EF:54:F8:30:31:5E:85:7F:11:9A:61:4C Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 0490688B282969E6947C7F43B54841ADE2A49812 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:52:50 +0000 Manifest this update: Fri 24 Jul 2026 02:47:50 +0000 Manifest next update: Sat 25 Jul 2026 05:35:50 +0000 Files and hashes: 1: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: Q35hxwo2KMsnjJvZA60vko3PMfVTXtUHXnkXWbNQDNU=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 05:35:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:90:68:8b:28:29:69:e6:94:7c:7f:43:b5:48:41:ad:e2:a4:98:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Jul 24 02:47:50 2026 GMT Not After : Jul 25 05:35:50 2026 GMT Subject: CN=618E52F1294F7599EF54F830315E857F119A614C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:c0:11:a8:56:c4:58:d0:61:9a:a3:c0:5c: 19:66:89:64:43:54:b9:76:20:86:67:e8:59:44:32: a5:d2:fe:e4:8d:c2:ae:83:3d:6c:4d:a9:5c:02:71: 99:3d:2b:20:fc:1f:c7:97:f6:be:a0:a8:d8:6f:57: c0:8d:d6:79:a5:10:fe:cb:93:8a:42:17:84:f1:d8: b1:d5:b9:8d:c2:b7:98:c1:8e:ef:fc:e2:58:e7:f4: 68:50:af:d5:40:1b:57:49:44:21:37:5f:85:c2:48: 3c:60:82:fe:84:75:33:77:a5:64:f8:66:aa:ca:e9: 2a:7f:5f:c4:89:23:f1:ef:a1:b2:ca:7b:56:d5:cd: 6e:04:c7:db:6e:32:be:21:5f:2b:55:02:91:75:52: 6d:f1:57:c4:1c:76:52:35:2f:1e:77:87:4f:50:49: 96:ba:7b:3f:18:bc:b0:dc:61:4d:fc:00:f7:7c:a8: 84:41:1e:a0:06:b2:a9:51:a1:65:93:3a:92:85:1f: a0:90:45:d3:40:63:8e:ba:54:83:17:03:cc:9b:16: 2d:54:3c:49:6d:fd:f0:78:12:36:07:da:14:69:00: 22:4e:40:72:e2:e0:dc:84:6c:c9:5e:1e:7b:e3:8a: ba:90:da:a9:1a:14:ae:9f:56:90:74:99:14:15:43: 3d:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8E:52:F1:29:4F:75:99:EF:54:F8:30:31:5E:85:7F:11:9A:61:4C X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cb:a9:d5:d4:bd:0c:59:be:63:48:a8:05:51:18:e3:95:3d: 9f:be:85:86:7d:e9:8b:7d:ca:d8:c4:a1:4c:a1:76:ce:ec:84: e0:5e:bb:4a:90:85:df:01:66:d3:e6:3e:98:ed:be:fc:ef:25: c6:17:9b:d8:e4:63:31:87:e4:fe:27:43:3b:af:22:f9:01:17: 11:31:e2:1a:4e:8c:63:4c:d9:93:d0:fb:a0:01:04:43:7d:2d: 74:87:2e:f4:6b:7d:f5:1a:82:d2:92:9f:ac:97:9c:8e:6a:32: 0c:d2:c2:7e:00:51:f0:29:cb:40:92:0b:02:16:92:24:5a:af: 28:6d:e7:fe:46:4f:12:89:86:2a:c6:34:6d:55:af:79:d3:3b: 4a:40:fd:13:5e:b1:b5:59:16:c1:75:b2:a2:42:88:04:b0:58: 6b:fc:dc:55:e1:c9:c2:8e:f8:b3:d3:52:8e:5c:9e:3f:90:18: f5:d4:6d:73:77:1f:4a:20:de:8d:2f:17:57:9f:b5:49:e2:8f: a8:8b:46:db:75:2f:99:25:bc:b7:e6:a4:d4:08:c9:74:fc:83: 20:62:e5:4c:7c:2c:97:f7:d6:86:ff:22:80:e6:95:17:b0:74: a9:54:c7:38:75:c2:5d:bb:a5:2c:24:d1:0e:18:fd:8f:5c:1b: 08:b6:62:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBJBoiygpaeaUfH9DtUhBreKkmBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA3MjQwMjQ3NTBaFw0yNjA3MjUwNTM1NTBaMDMxMTAvBgNV BAMTKDYxOEU1MkYxMjk0Rjc1OTlFRjU0RjgzMDMxNUU4NTdGMTE5QTYxNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XsARqFbEWNBhmqPAXBlmiWRD VLl2IIZn6FlEMqXS/uSNwq6DPWxNqVwCcZk9KyD8H8eX9r6gqNhvV8CN1nmlEP7L k4pCF4Tx2LHVuY3Ct5jBju/84ljn9GhQr9VAG1dJRCE3X4XCSDxggv6EdTN3pWT4 ZqrK6Sp/X8SJI/HvobLKe1bVzW4Ex9tuMr4hXytVApF1Um3xV8QcdlI1Lx53h09Q SZa6ez8YvLDcYU38APd8qIRBHqAGsqlRoWWTOpKFH6CQRdNAY466VIMXA8ybFi1U PElt/fB4EjYH2hRpACJOQHLi4NyEbMleHnvjirqQ2qkaFK6fVpB0mRQVQz0jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYY5S8SlPdZnvVPgwMV6FfxGaYUwwHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHLqdXUvQxZvmNIqAVRGOOVPZ++hYZ96Yt9 ytjEoUyhds7shOBeu0qQhd8BZtPmPpjtvvzvJcYXm9jkYzGH5P4nQzuvIvkBFxEx 4hpOjGNM2ZPQ+6ABBEN9LXSHLvRrffUagtKSn6yXnI5qMgzSwn4AUfApy0CSCwIW kiRaryht5/5GTxKJhirGNG1Vr3nTO0pA/RNesbVZFsF1sqJCiASwWGv83FXhycKO +LPTUo5cnj+QGPXUbXN3H0og3o0vF1eftUnij6iLRtt1L5klvLfmpNQIyXT8gyBi 5Ux8LJf31ob/IoDmlRewdKlUxzh1wl27pSwk0Q4Y/Y9cGwi2YiM= -----END CERTIFICATE-----Generated at Fri Jul 24 10:00:20 2026 by rpki-client