$ rpki-client -vvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: HUQpJTrhwpFV+66Iwxc/E6kacgPDvvh9BM7YsmWhHmk= Subject key identifier: 79:7D:55:CA:EC:C8:50:F9:0A:CF:B7:72:13:9D:FF:FF:99:AD:0B:93 Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 4148AB319053E330C8A65DDB76034CE34C3D6438 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 05:27:34 +0000 Manifest this update: Tue 21 Jul 2026 05:22:34 +0000 Manifest next update: Wed 22 Jul 2026 07:47:34 +0000 Files and hashes: 1: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: +ZGJcNFR1JGqklU2NfHwrzRrLchZDWD7UBhmLmQvumw=) 2: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) 3: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) 4: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:48:ab:31:90:53:e3:30:c8:a6:5d:db:76:03:4c:e3:4c:3d:64:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Jul 21 05:22:34 2026 GMT Not After : Jul 22 07:47:34 2026 GMT Subject: CN=797D55CAECC850F90ACFB772139DFFFF99AD0B93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:73:83:34:b6:76:55:87:f9:c1:6b:e4:e7:ac: 76:c2:ab:cc:cc:3a:9e:fe:c8:05:4a:d3:a2:de:c5: 7a:ed:f3:86:32:79:81:38:36:a3:c9:ea:b0:f4:0d: b1:54:91:d5:0a:94:92:bd:8f:d3:d7:93:18:3c:b0: 4e:7e:b0:6e:73:b6:c1:9b:79:01:4f:04:f0:f2:5e: d1:95:0d:10:8a:21:78:10:dd:ca:e7:0f:27:e8:94: c3:57:8e:9d:cd:6f:61:0e:3f:3b:ab:c5:96:3d:82: 5e:d5:10:d2:a4:52:bb:68:1e:2b:c7:9a:5b:55:4c: a3:b7:3a:00:ee:b0:90:b6:54:f2:6a:a4:37:c7:e9: b9:5a:25:ea:5c:89:4e:a2:59:ae:c9:38:c4:4d:6e: 75:0f:23:10:28:ee:53:35:25:4c:5a:79:8e:50:2c: ac:2a:62:5e:78:1f:82:54:6b:e0:d5:2d:6a:0e:98: 84:ac:94:8b:28:fa:93:41:e8:c9:67:1d:80:98:21: 88:68:e7:2d:e5:31:4c:ee:80:ac:99:3c:2e:5e:5f: 02:f3:f7:29:1b:f7:1d:96:be:24:3d:16:3b:01:fd: da:d8:5f:cb:b4:37:46:1d:ce:16:df:57:97:60:0f: 6b:3d:e8:58:19:e4:80:e4:7b:25:5c:18:45:0c:66: 91:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:7D:55:CA:EC:C8:50:F9:0A:CF:B7:72:13:9D:FF:FF:99:AD:0B:93 X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:1c:6b:8b:87:02:58:be:63:91:22:44:96:da:1d:f4:0e:63: 03:5a:e3:f0:88:22:d7:f9:1a:c6:4f:2f:b1:aa:3a:16:5c:22: 02:34:3d:77:92:8a:80:f0:b4:a1:ba:3a:6b:c8:74:45:6c:6d: a3:e9:a6:d9:28:be:d2:ee:c6:ce:69:9b:69:6d:cb:79:04:e8: a6:92:a2:a8:c4:57:b6:d4:08:b5:0b:e9:fe:1f:f8:d3:59:ee: b0:8e:c7:83:a7:80:d0:ed:b1:c3:9f:a2:b4:78:0d:bd:e3:22: ce:1d:ea:af:d6:a6:2d:10:9b:b3:75:8d:93:c1:e7:83:e1:1c: e5:d8:96:c8:ab:a1:b4:b5:5c:53:ab:a2:43:69:18:ee:89:b9: 4a:6d:40:9b:9c:01:67:e2:be:81:df:f3:c6:40:02:65:6e:75: 3b:c9:a2:de:e9:07:c5:61:57:98:99:a2:c9:31:6a:c3:54:31: 57:aa:9c:86:03:1f:67:e1:b5:28:24:d7:0c:ff:a1:2b:9e:1d: fd:69:d9:5a:8e:c5:1a:ad:51:2e:4a:6b:72:d7:54:5d:7e:20: 2f:69:21:25:1b:c1:e9:89:65:93:22:9b:1b:45:6f:89:7a:c0: 52:a5:92:4c:5b:7c:7f:bc:5d:bb:ef:3c:3a:77:a3:7d:8f:b5: a2:23:4b:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUirMZBT4zDIpl3bdgNM40w9ZDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjA3MjEwNTIyMzRaFw0yNjA3MjIwNzQ3MzRaMDMxMTAvBgNV BAMTKDc5N0Q1NUNBRUNDODUwRjkwQUNGQjc3MjEzOURGRkZGOTlBRDBCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVc4M0tnZVh/nBa+TnrHbCq8zM Op7+yAVK06LexXrt84YyeYE4NqPJ6rD0DbFUkdUKlJK9j9PXkxg8sE5+sG5ztsGb eQFPBPDyXtGVDRCKIXgQ3crnDyfolMNXjp3Nb2EOPzurxZY9gl7VENKkUrtoHivH mltVTKO3OgDusJC2VPJqpDfH6blaJepciU6iWa7JOMRNbnUPIxAo7lM1JUxaeY5Q LKwqYl54H4JUa+DVLWoOmISslIso+pNB6MlnHYCYIYho5y3lMUzugKyZPC5eXwLz 9ykb9x2WviQ9FjsB/drYX8u0N0YdzhbfV5dgD2s96FgZ5IDkeyVcGEUMZpFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeX1VyuzIUPkKz7dyE53//5mtC5MwHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkca4uHAli+Y5EiRJbaHfQOYwNa4/CIItf5 GsZPL7GqOhZcIgI0PXeSioDwtKG6OmvIdEVsbaPpptkovtLuxs5pm2lty3kE6KaS oqjEV7bUCLUL6f4f+NNZ7rCOx4OngNDtscOforR4Db3jIs4d6q/Wpi0Qm7N1jZPB 54PhHOXYlsirobS1XFOrokNpGO6JuUptQJucAWfivoHf88ZAAmVudTvJot7pB8Vh V5iZoskxasNUMVeqnIYDH2fhtSgk1wz/oSueHf1p2VqOxRqtUS5Ka3LXVF1+IC9p ISUbwemJZZMimxtFb4l6wFKlkkxbfH+8XbvvPDp3o32PtaIjS20= -----END CERTIFICATE-----Generated at Tue Jul 21 06:45:29 2026 by rpki-client