$ rpki-client -vvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: 7jZFzzU7jL4PXBHZlpAvwaC2XyWEUYZbuotSLv/Py1I= Subject key identifier: 2B:43:24:86:CE:DE:3E:E1:7B:E2:E2:14:44:3C:7D:B7:A4:F2:39:98 Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 4D3FDCE11D42F44D35C6F301BC20B18B4F4E1332 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: 6C Signing time: Tue 21 Jul 2026 17:32:51 +0000 Manifest this update: Tue 21 Jul 2026 17:27:51 +0000 Manifest next update: Wed 22 Jul 2026 17:32:51 +0000 Files and hashes: 1: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: /BzMdgbkZYjoZgJIgR/FJey0n4wnPtnLBOKpgPHDC0g=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 17:32:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:3f:dc:e1:1d:42:f4:4d:35:c6:f3:01:bc:20:b1:8b:4f:4e:13:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Jul 21 17:27:51 2026 GMT Not After : Jul 22 17:32:51 2026 GMT Subject: CN=2B432486CEDE3EE17BE2E214443C7DB7A4F23998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:92:4b:ce:6c:79:06:af:09:a9:a9:c0:cb:a5: 77:e7:6b:9f:2b:2d:c4:76:1c:83:a5:16:31:b6:0c: c3:dd:8a:ad:b4:e9:e1:64:0f:0a:37:9c:a4:58:a5: de:ae:4a:77:cb:7b:0a:a7:b4:1f:b2:4a:35:a0:0a: 06:d3:64:fc:f3:48:be:20:01:7f:24:69:b1:31:3c: 57:d3:38:f7:08:c3:de:db:19:39:79:55:50:a3:9e: 07:45:9a:71:8f:eb:f3:93:60:72:97:91:98:4e:f5: a7:df:a8:8a:95:ff:c9:1c:48:e6:dd:9d:2d:2e:f1: 29:ed:7e:4a:22:09:ce:b5:a7:ff:6d:ee:14:94:fe: da:e3:73:20:eb:57:71:0b:ae:45:b9:27:72:94:22: 8c:5f:8d:0d:24:36:83:2b:be:0e:8a:7a:c2:51:ca: a5:78:36:c4:1e:24:ae:3b:ca:5e:82:c0:18:f8:c5: d5:af:d8:0a:9d:1d:ad:9e:fb:fe:8d:44:0b:75:13: 32:0f:b6:f0:9e:a9:38:58:47:28:ee:c6:5e:79:a4: d9:5d:1e:06:60:27:9f:9d:d5:d3:88:99:f1:ec:c0: 04:28:0c:b4:32:b3:4d:05:3a:58:2f:c5:2f:b1:2e: 0e:cf:c7:c9:86:29:04:51:46:f8:48:20:ac:16:fd: 88:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:43:24:86:CE:DE:3E:E1:7B:E2:E2:14:44:3C:7D:B7:A4:F2:39:98 X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:0c:f8:d4:d4:62:65:3b:bd:16:e1:95:6c:83:3e:fa:5e:e1: be:51:19:b8:4b:2f:90:bc:f8:19:8e:f6:f8:a2:4d:ac:c6:e6: fd:2e:f8:97:b2:60:c6:f0:2d:0f:1b:3c:b7:e2:23:ee:df:a1: 95:ed:75:14:dc:4c:e2:f3:7e:41:e2:be:e5:2e:5a:ea:71:39: 46:02:e6:4c:10:6f:c8:c4:dc:e6:25:43:6f:e0:58:a2:58:61: cb:86:12:3c:61:27:e9:5e:b1:4e:00:4f:60:19:ef:f1:b5:74: 45:65:b3:0f:04:88:95:3e:ee:a9:f8:32:58:01:4f:df:c1:0d: a2:0b:b9:25:8e:c4:36:2a:49:6f:34:cc:3f:60:23:40:bd:48: 36:f0:37:f4:e1:bc:b0:8c:3c:f7:46:a2:b7:9b:0a:6f:6f:dc: 97:20:ef:11:a5:42:06:f6:4a:43:d2:57:f1:1d:c7:82:5c:ef: 3e:99:3d:30:38:c6:e2:cc:29:7f:cc:78:e0:53:4d:58:20:80: 61:4e:60:c8:de:8d:7d:e9:e1:70:f8:29:36:02:a7:b3:65:bc: e4:6f:cb:90:0b:b8:5b:e8:89:30:ab:6a:13:2f:54:50:ee:3c: a7:24:c7:0a:5f:d9:67:5e:92:de:cd:2c:1f:e9:85:f1:5d:95: f2:7b:32:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTT/c4R1C9E01xvMBvCCxi09OEzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA3MjExNzI3NTFaFw0yNjA3MjIxNzMyNTFaMDMxMTAvBgNV BAMTKDJCNDMyNDg2Q0VERTNFRTE3QkUyRTIxNDQ0M0M3REI3QTRGMjM5OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkkvObHkGrwmpqcDLpXfna58r LcR2HIOlFjG2DMPdiq206eFkDwo3nKRYpd6uSnfLewqntB+ySjWgCgbTZPzzSL4g AX8kabExPFfTOPcIw97bGTl5VVCjngdFmnGP6/OTYHKXkZhO9affqIqV/8kcSObd nS0u8SntfkoiCc61p/9t7hSU/trjcyDrV3ELrkW5J3KUIoxfjQ0kNoMrvg6KesJR yqV4NsQeJK47yl6CwBj4xdWv2AqdHa2e+/6NRAt1EzIPtvCeqThYRyjuxl55pNld HgZgJ5+d1dOImfHswAQoDLQys00FOlgvxS+xLg7Px8mGKQRRRvhIIKwW/YiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0Mkhs7ePuF74uIURDx9t6TyOZgwHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADsM+NTUYmU7vRbhlWyDPvpe4b5RGbhLL5C8 +BmO9viiTazG5v0u+JeyYMbwLQ8bPLfiI+7foZXtdRTcTOLzfkHivuUuWupxOUYC 5kwQb8jE3OYlQ2/gWKJYYcuGEjxhJ+lesU4AT2AZ7/G1dEVlsw8EiJU+7qn4MlgB T9/BDaILuSWOxDYqSW80zD9gI0C9SDbwN/ThvLCMPPdGorebCm9v3Jcg7xGlQgb2 SkPSV/Edx4Jc7z6ZPTA4xuLMKX/MeOBTTVgggGFOYMjejX3p4XD4KTYCp7NlvORv y5ALuFvoiTCrahMvVFDuPKckxwpf2Wdekt7NLB/phfFdlfJ7Mlw= -----END CERTIFICATE-----Generated at Tue Jul 21 22:19:17 2026 by rpki-client