$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: FFvROFzI/bP5tckz395r8W3LzoCsIN+L//rIgEB6Qys= Subject key identifier: 64:19:EA:B4:97:72:9D:50:BC:72:D5:12:27:13:4F:F5:86:70:1A:CA Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 1369A5A04F3921F43A1B38AFD5FF509AD54BED4D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 17:51:07 +0000 Manifest this update: Wed 04 Nov 2026 17:46:07 +0000 Manifest next update: Thu 05 Nov 2026 21:04:07 +0000 Files and hashes: 1: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) 2: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: +dUOR4aHWPm+qEjIi6upwoG6gYxLT3ob2gMAFfAzqpk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:69:a5:a0:4f:39:21:f4:3a:1b:38:af:d5:ff:50:9a:d5:4b:ed:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Nov 4 17:46:07 2026 GMT Not After : Nov 5 21:04:07 2026 GMT Subject: CN=6419EAB497729D50BC72D51227134FF586701ACA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:d2:65:9d:98:b1:fe:6b:7b:8f:b0:62:5f:f2: 0d:cc:d2:6b:24:42:12:d1:ae:cb:4e:93:09:1e:70: 72:3e:3e:5c:f4:00:55:78:24:0b:a0:18:e6:57:1e: 12:7e:79:24:f4:45:ea:69:bb:9b:8b:f4:05:1e:cd: 5b:80:82:eb:1b:34:07:94:32:3c:09:c9:a7:5e:a5: 3c:1b:a0:b8:79:c1:89:16:ab:96:70:fd:f4:e0:8e: db:92:4e:a8:50:ce:db:22:11:42:ae:68:fa:c9:8b: 07:ee:cc:7c:01:8e:b7:6b:28:65:34:50:fa:8c:e1: 9f:2b:d4:e1:70:01:cc:1e:ef:4b:4e:9e:10:6f:22: 3b:37:f2:18:af:d3:ee:07:91:a5:43:bb:ed:0f:b1: da:6c:ae:0b:79:0c:e0:ab:87:d3:10:16:ea:af:0b: c0:8c:11:37:33:a6:c6:24:49:c5:c4:02:fa:43:e0: 26:d6:34:bd:ab:f7:33:5a:d7:3b:37:0c:ad:4f:eb: a0:73:fc:8e:b1:3a:f9:59:70:08:5b:dc:77:5d:d4: d5:10:58:e5:ef:3d:96:27:6f:38:c3:8c:f3:85:1c: ee:2b:3b:94:82:64:7b:3d:97:74:71:81:64:82:44: ab:58:75:e7:f8:3c:bc:cc:6c:58:0b:3a:3b:29:05: 51:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:EA:B4:97:72:9D:50:BC:72:D5:12:27:13:4F:F5:86:70:1A:CA X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:5c:a5:3d:26:a1:e7:da:36:eb:f2:34:b5:0a:00:b2:b6:39: 1b:76:98:b5:11:cc:f6:37:f2:e5:a2:8d:61:83:98:eb:4a:64: 99:c7:2d:ac:64:af:9b:0d:95:fd:73:60:63:10:18:28:c8:a4: 1b:70:a1:ba:35:68:be:ec:19:74:09:d5:b0:46:b3:61:da:22: 02:f7:4b:14:51:0a:8c:1a:91:f6:15:e2:62:02:19:e5:4c:5f: 05:e7:7d:17:54:7f:9d:a8:6d:cb:9a:95:2a:4a:25:d2:a2:04: 87:5b:cc:27:95:1b:62:a7:76:5c:a6:e0:51:fc:55:cb:12:7c: cd:9e:07:a3:73:9a:b4:55:20:50:27:b2:bb:fe:2c:79:31:2f: 7c:7f:90:8e:5e:cf:22:b6:14:5a:15:a3:6f:15:c6:e5:3c:75: ca:37:08:1c:e2:87:4f:d2:df:4a:50:5a:32:f4:5c:24:39:a2: 23:ad:72:c5:56:52:e6:37:d5:de:ef:b1:a5:54:98:00:13:b5: 2f:a3:8b:47:69:43:b0:05:e7:84:e4:d3:14:6d:08:b2:24:53: 96:04:04:a7:84:aa:91:75:95:af:63:2a:8c:e1:90:0f:65:e0: a8:7c:96:ad:35:75:e2:3b:32:22:1b:c9:99:0c:52:e1:aa:22: c1:72:78:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE2mloE85IfQ6Gziv1f9QmtVL7U0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjExMDQxNzQ2MDdaFw0yNjExMDUyMTA0MDdaMDMxMTAvBgNV BAMTKDY0MTlFQUI0OTc3MjlENTBCQzcyRDUxMjI3MTM0RkY1ODY3MDFBQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE0mWdmLH+a3uPsGJf8g3M0msk QhLRrstOkwkecHI+Plz0AFV4JAugGOZXHhJ+eST0Reppu5uL9AUezVuAgusbNAeU MjwJyadepTwboLh5wYkWq5Zw/fTgjtuSTqhQztsiEUKuaPrJiwfuzHwBjrdrKGU0 UPqM4Z8r1OFwAcwe70tOnhBvIjs38hiv0+4HkaVDu+0Psdpsrgt5DOCrh9MQFuqv C8CMETczpsYkScXEAvpD4CbWNL2r9zNa1zs3DK1P66Bz/I6xOvlZcAhb3Hdd1NUQ WOXvPZYnbzjDjPOFHO4rO5SCZHs9l3RxgWSCRKtYdef4PLzMbFgLOjspBVFrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZBnqtJdynVC8ctUSJxNP9YZwGsowHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB9cpT0moefaNuvyNLUKALK2ORt2mLURzPY3 8uWijWGDmOtKZJnHLaxkr5sNlf1zYGMQGCjIpBtwobo1aL7sGXQJ1bBGs2HaIgL3 SxRRCowakfYV4mICGeVMXwXnfRdUf52obcualSpKJdKiBIdbzCeVG2Kndlym4FH8 VcsSfM2eB6NzmrRVIFAnsrv+LHkxL3x/kI5ezyK2FFoVo28VxuU8dco3CBzih0/S 30pQWjL0XCQ5oiOtcsVWUuY31d7vsaVUmAATtS+ji0dpQ7AF54Tk0xRtCLIkU5YE BKeEqpF1la9jKozhkA9l4Kh8lq01deI7MiIbyZkMUuGqIsFyeMw= -----END CERTIFICATE-----Generated at Thu Nov 5 01:07:18 2026 by rpki-client