$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: CZvmNTgLmXRce8vS+e1I3k4MmkfE1rObES/dQdqic5Q= Subject key identifier: 50:97:6D:05:E4:76:00:1D:C2:66:38:4E:BC:E3:69:A9:1C:B1:FF:B2 Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 28E996E9D0FA32AD67721E4D6958609767F2C5DF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: A8 Signing time: Fri 04 Sep 2026 03:46:12 +0000 Manifest this update: Fri 04 Sep 2026 03:41:12 +0000 Manifest next update: Sat 05 Sep 2026 04:07:12 +0000 Files and hashes: 1: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) 2: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) 3: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) 4: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: +zmyP8oTJAN30hXOemcmb93vYvF9fKWJnb1N8x9EON0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Sep 2026 04:07:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:e9:96:e9:d0:fa:32:ad:67:72:1e:4d:69:58:60:97:67:f2:c5:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Sep 4 03:41:12 2026 GMT Not After : Sep 5 04:07:12 2026 GMT Subject: CN=50976D05E476001DC266384EBCE369A91CB1FFB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b2:b5:b7:bf:89:f8:62:ab:e1:a6:71:59:ce: 4a:59:aa:c2:9e:53:00:04:f7:8d:13:d2:18:04:4e: de:29:a0:98:d1:f3:b8:da:ea:9c:d8:44:f4:de:ab: 44:f0:61:87:8d:ac:f3:20:ce:b3:39:24:b3:95:50: 98:7a:f0:dc:c6:a3:6c:43:7c:8c:08:46:b8:bc:6a: 00:31:a0:2d:a0:4f:ed:3f:73:5e:b7:5d:cf:8e:a1: f1:57:c8:9d:76:cb:43:7f:1d:91:71:e6:85:de:d6: 08:a2:15:e1:38:6f:7e:a2:21:77:cd:70:da:32:5f: cb:0e:c0:b1:c4:5b:0a:94:38:a5:61:58:b1:c9:5e: a0:a0:dd:1c:84:c2:6f:26:6f:fc:0e:e8:26:1d:50: b1:df:fb:7a:b1:2d:e7:cd:0f:4c:ba:68:3e:66:42: 41:8b:4a:d9:22:37:5f:b9:a8:2d:69:4f:de:aa:db: 0e:f8:66:f8:c6:9c:69:fb:d5:02:7a:90:aa:a7:cc: 33:67:8e:79:a0:9c:39:95:32:4e:af:8d:40:79:bf: 6d:ae:d9:59:44:dd:f7:90:5f:87:c4:b9:f2:c0:34: c0:3c:37:2e:26:f3:25:3d:ed:65:ae:e0:f4:f3:5b: e1:cf:3e:a1:9f:9d:33:3e:ab:a0:9f:8a:29:aa:27: 19:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:97:6D:05:E4:76:00:1D:C2:66:38:4E:BC:E3:69:A9:1C:B1:FF:B2 X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:88:af:f6:e0:15:b6:9b:47:a4:00:e1:50:8b:92:39:e8:d8: 05:06:80:3b:8d:04:3a:f8:0b:27:12:0e:8b:9f:1b:2c:5a:87: 6d:31:eb:f2:f9:8f:19:23:03:82:f9:cf:e3:3b:75:62:68:c3: 41:db:33:ae:80:91:0c:b6:13:7f:9e:9b:61:ef:5e:4e:9d:c9: 2d:00:ea:e2:0d:38:4c:f5:22:a2:ab:2f:c4:a4:8f:c9:6c:1f: f0:f8:ef:88:48:91:6b:36:c0:08:19:89:68:c9:74:d1:db:56: 49:55:e4:6c:0f:d3:a1:f3:bb:f6:4e:52:47:f3:c4:9a:1d:d8: 13:05:2a:06:56:7a:3c:33:a9:5c:76:74:0a:65:5d:de:9b:eb: 8e:8e:80:41:59:61:b2:e6:5c:70:00:d2:ae:1a:e7:a3:13:90: bd:a4:26:2d:aa:80:ec:71:5c:b1:a0:be:be:d2:b3:b5:56:9e: 63:7e:05:45:a0:64:22:4b:3f:ed:f5:67:e9:56:8d:83:10:ba: 61:9d:d9:57:c1:ec:65:5f:da:70:70:d3:11:7b:29:5b:f0:b7: a0:8b:83:8e:88:e8:10:6b:71:9c:99:a3:70:ff:7b:5b:24:00: 6a:c5:3c:b9:dd:64:15:1c:90:e6:6f:02:f1:d4:ba:d2:13:e9: 9b:f3:18:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKOmW6dD6Mq1nch5NaVhgl2fyxd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjA5MDQwMzQxMTJaFw0yNjA5MDUwNDA3MTJaMDMxMTAvBgNV BAMTKDUwOTc2RDA1RTQ3NjAwMURDMjY2Mzg0RUJDRTM2OUE5MUNCMUZGQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesrW3v4n4YqvhpnFZzkpZqsKe UwAE940T0hgETt4poJjR87ja6pzYRPTeq0TwYYeNrPMgzrM5JLOVUJh68NzGo2xD fIwIRri8agAxoC2gT+0/c163Xc+OofFXyJ12y0N/HZFx5oXe1giiFeE4b36iIXfN cNoyX8sOwLHEWwqUOKVhWLHJXqCg3RyEwm8mb/wO6CYdULHf+3qxLefND0y6aD5m QkGLStkiN1+5qC1pT96q2w74ZvjGnGn71QJ6kKqnzDNnjnmgnDmVMk6vjUB5v22u 2VlE3feQX4fEufLANMA8Ny4m8yU97WWu4PTzW+HPPqGfnTM+q6CfiimqJxnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUJdtBeR2AB3CZjhOvONpqRyx/7IwHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+Ir/bgFbabR6QA4VCLkjno2AUGgDuNBDr4 CycSDoufGyxah20x6/L5jxkjA4L5z+M7dWJow0HbM66AkQy2E3+em2HvXk6dyS0A 6uINOEz1IqKrL8Skj8lsH/D474hIkWs2wAgZiWjJdNHbVklV5GwP06Hzu/ZOUkfz xJod2BMFKgZWejwzqVx2dAplXd6b646OgEFZYbLmXHAA0q4a56MTkL2kJi2qgOxx XLGgvr7Ss7VWnmN+BUWgZCJLP+31Z+lWjYMQumGd2VfB7GVf2nBw0xF7KVvwt6CL g46I6BBrcZyZo3D/e1skAGrFPLndZBUckOZvAvHUutIT6ZvzGOs= -----END CERTIFICATE-----Generated at Fri Sep 4 15:25:36 2026 by rpki-client