$ rpki-client -vvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: jw6NF/+EwB1qo2IVxbPgC6ixGhH33XVBZOy+7D3/cQo= Subject key identifier: 2F:0E:72:2F:0D:42:3C:28:03:F2:27:7A:97:E3:10:08:AD:1C:43:E1 Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 41119B9A0726202B322A80926EF06285610127C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 11:34:23 +0000 Manifest this update: Tue 02 Jun 2026 11:29:23 +0000 Manifest next update: Wed 03 Jun 2026 13:26:23 +0000 Files and hashes: 1: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: rmOKWDaBZUJlO3bI1r4/ki8VCvwKyOrQxFiZGjPywDc=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:11:9b:9a:07:26:20:2b:32:2a:80:92:6e:f0:62:85:61:01:27:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Jun 2 11:29:23 2026 GMT Not After : Jun 3 13:26:23 2026 GMT Subject: CN=2F0E722F0D423C2803F2277A97E31008AD1C43E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f6:a9:21:cb:45:2f:75:33:a5:fd:6d:99:84: 38:5a:ba:85:36:3b:5e:94:89:1c:64:d0:0f:e3:2e: ef:5f:54:13:61:d3:2a:d1:2d:0e:9b:9c:0f:99:47: 59:fe:22:09:9b:4f:36:b4:fd:e8:4d:f6:46:c3:d8: f6:1e:49:d3:77:c5:ef:a7:83:24:83:50:72:ae:7c: 95:86:c2:41:9b:14:aa:8f:2c:64:4d:3c:f9:71:dd: 84:17:00:74:a4:e8:de:71:5b:39:33:4b:09:30:5e: 99:6e:13:bd:34:31:50:5c:c4:94:4f:e1:5c:43:44: 5b:60:17:ab:5f:97:4b:07:15:ed:94:ed:3c:10:b8: 0a:ec:d7:96:9b:8b:56:23:6d:11:59:c3:8c:53:99: 9f:08:62:cf:0f:f8:08:44:2f:b3:d8:0d:09:f3:0d: b7:03:16:e2:bc:02:34:a3:39:8d:50:81:43:ad:54: 79:bd:09:57:b6:df:70:45:de:1f:e9:ea:12:e3:3c: e5:55:ef:63:c0:2e:9d:5b:20:56:ab:df:6c:5c:46: e7:04:d8:93:58:4c:71:3c:74:0e:97:af:93:c6:cc: 18:b1:b3:41:73:b6:1b:d4:0f:49:cd:76:e8:01:f4: 8a:aa:3f:89:17:05:6b:9c:c8:2c:b2:1f:d0:e6:4d: 0c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:0E:72:2F:0D:42:3C:28:03:F2:27:7A:97:E3:10:08:AD:1C:43:E1 X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:2c:7b:46:87:76:ae:5c:05:2e:e3:08:85:6a:5a:f4:3f:8f: 29:95:4d:cb:02:4f:82:ec:2a:a7:b4:58:a5:75:32:51:96:0f: 87:ca:7e:d6:d7:1d:38:b0:da:28:c4:5e:62:75:9a:71:86:ad: 22:29:30:c3:67:54:7d:86:9d:d9:12:2b:14:f6:aa:19:83:f7: df:ed:da:0c:48:bc:1b:e5:3c:48:c8:55:76:07:8e:7e:71:02: 5e:cb:0e:fb:d8:3a:83:1c:d7:2a:ca:63:ff:99:e4:b5:0e:08: 67:e6:ef:0a:17:2c:01:c7:ef:05:18:fc:a0:91:a3:89:99:4b: 46:9c:a6:a4:56:bd:26:38:20:ad:d2:09:ba:87:e7:2e:b8:ed: a1:46:2d:82:96:76:af:ab:6d:d5:58:af:6e:6d:b0:0c:e6:3f: dc:77:06:64:35:11:a3:ec:b8:12:f6:d4:a6:a9:76:3d:f6:ce: 87:94:40:db:35:d6:a4:a0:d3:57:19:17:f5:36:ad:29:a0:ad: 54:1f:12:c6:a2:f1:b5:21:0c:71:22:9f:79:54:9f:59:32:75: c4:93:e7:9b:1d:4c:91:7a:e0:6b:b9:f7:81:06:b5:b3:a2:ae: 33:1d:9c:88:bd:67:2b:76:fc:ee:3e:aa:83:60:00:58:92:c7: a6:8a:e2:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRGbmgcmICsyKoCSbvBihWEBJ8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA2MDIxMTI5MjNaFw0yNjA2MDMxMzI2MjNaMDMxMTAvBgNV BAMTKDJGMEU3MjJGMEQ0MjNDMjgwM0YyMjc3QTk3RTMxMDA4QUQxQzQzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA9qkhy0UvdTOl/W2ZhDhauoU2 O16UiRxk0A/jLu9fVBNh0yrRLQ6bnA+ZR1n+IgmbTza0/ehN9kbD2PYeSdN3xe+n gySDUHKufJWGwkGbFKqPLGRNPPlx3YQXAHSk6N5xWzkzSwkwXpluE700MVBcxJRP 4VxDRFtgF6tfl0sHFe2U7TwQuArs15abi1YjbRFZw4xTmZ8IYs8P+AhEL7PYDQnz DbcDFuK8AjSjOY1QgUOtVHm9CVe233BF3h/p6hLjPOVV72PALp1bIFar32xcRucE 2JNYTHE8dA6Xr5PGzBixs0FzthvUD0nNdugB9IqqP4kXBWucyCyyH9DmTQy1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULw5yLw1CPCgD8id6l+MQCK0cQ+EwHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQse0aHdq5cBS7jCIVqWvQ/jymVTcsCT4Ls Kqe0WKV1MlGWD4fKftbXHTiw2ijEXmJ1mnGGrSIpMMNnVH2GndkSKxT2qhmD99/t 2gxIvBvlPEjIVXYHjn5xAl7LDvvYOoMc1yrKY/+Z5LUOCGfm7woXLAHH7wUY/KCR o4mZS0acpqRWvSY4IK3SCbqH5y647aFGLYKWdq+rbdVYr25tsAzmP9x3BmQ1EaPs uBL21Kapdj32zoeUQNs11qSg01cZF/U2rSmgrVQfEsai8bUhDHEin3lUn1kydcST 55sdTJF64Gu594EGtbOirjMdnIi9Zyt2/O4+qoNgAFiSx6aK4pw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:04:36 2026 by rpki-client