$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: lUddFKW8sG+jaXDwTjdvtniE0XWAUW0CHc+pw7o8yxU= Subject key identifier: 40:A6:83:D5:4B:63:F0:35:18:C8:2A:56:4E:A0:C4:C7:CB:E2:81:DB Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 473700B98754BE795D1F78088A78952BB2EDC987 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: A5 Signing time: Thu 03 Sep 2026 00:43:53 +0000 Manifest this update: Thu 03 Sep 2026 00:38:53 +0000 Manifest next update: Fri 04 Sep 2026 01:31:53 +0000 Files and hashes: 1: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 2: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 3: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) 4: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: ubQRujanUedHDRFz/Ui5LLQqj6flgZFT+eGdBJ7FH1g=) 5: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) 6: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 01:31:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:37:00:b9:87:54:be:79:5d:1f:78:08:8a:78:95:2b:b2:ed:c9:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: Sep 3 00:38:53 2026 GMT Not After : Sep 4 01:31:53 2026 GMT Subject: CN=40A683D54B63F03518C82A564EA0C4C7CBE281DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:e8:df:23:fc:8d:1a:47:3a:09:09:4b:f7:80: 19:96:3a:cd:33:3e:0f:75:b8:38:92:c6:05:14:79: c2:34:7f:35:37:ed:64:70:78:8d:31:ae:48:8e:5a: a5:ef:cf:ff:13:ef:b1:1f:2a:25:96:53:b0:e6:59: b8:35:20:67:1a:33:d6:d2:02:c0:21:dc:04:1b:4e: bf:8d:3b:1f:ea:d9:18:7e:19:f7:3a:b1:b7:4e:94: b7:00:8c:ff:cf:4e:81:03:0c:18:7f:47:4d:5a:9b: 86:10:f6:48:74:66:0c:89:61:43:e9:b8:fc:9a:0f: e0:79:c2:a0:75:8f:a1:4b:a8:36:f8:6c:d2:63:16: ff:38:2d:0a:71:fc:29:ff:43:fa:c3:6e:5f:09:f8: 52:1d:0d:2e:0b:c4:55:2f:1d:d4:d5:69:aa:8f:5d: b6:07:57:26:95:ac:9c:14:03:d8:47:4b:65:55:b4: e5:98:48:85:8e:2b:7f:65:04:43:17:5d:c2:ef:80: e8:c6:db:8a:2f:48:eb:d6:4d:95:29:8e:52:ec:a2: 23:68:86:3d:d1:d8:7a:24:d9:5f:38:8f:60:a6:9d: 51:34:3d:2d:0a:4b:5d:9b:83:7c:1f:23:d6:57:78: 33:25:14:ff:ac:90:8d:51:8f:f4:8a:15:e5:bd:85: 19:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:A6:83:D5:4B:63:F0:35:18:C8:2A:56:4E:A0:C4:C7:CB:E2:81:DB X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:7c:f7:13:3c:29:43:30:97:af:3b:a1:9b:81:8b:f9:cb:f1: 0d:66:3e:67:23:6b:6b:23:f9:0f:c5:26:c4:ff:ee:36:74:23: 69:d7:b9:67:e8:97:e9:75:78:42:2d:f5:47:da:28:61:8e:5b: 9e:a6:d6:61:38:2c:f3:10:c4:15:48:0f:aa:e0:60:90:77:c0: cc:c2:bc:c5:38:d8:79:69:6f:1d:cb:45:61:0e:4d:ad:7c:cb: db:17:32:7c:73:2e:fe:97:26:62:08:4f:0a:80:f9:11:92:e2: e5:6f:00:cd:85:d0:3a:d3:78:7b:5c:3b:9f:99:3f:21:e6:07: 88:7a:42:e5:e5:cd:80:5a:5d:6e:5a:a2:98:13:3b:81:ca:fd: 77:32:ad:ac:d4:cf:02:0c:57:1b:a3:b3:ec:03:dd:07:cd:b2: 2e:c5:38:5d:71:79:cc:c6:ee:1f:8f:49:bc:38:86:23:12:ce: 98:f2:51:60:81:ee:83:03:03:62:09:3f:77:a5:e7:aa:b4:39: e5:54:62:8c:d2:36:76:85:d1:41:37:b2:54:4c:18:48:18:41: 72:70:d1:53:7f:6b:4d:53:b2:f3:11:a9:4b:5f:fd:4a:89:27: ab:74:2e:1f:1a:c9:d3:04:c3:47:83:b2:47:26:86:e6:d1:3c: ad:20:7b:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURzcAuYdUvnldH3gIiniVK7LtyYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA5MDMwMDM4NTNaFw0yNjA5MDQwMTMxNTNaMDMxMTAvBgNV BAMTKDQwQTY4M0Q1NEI2M0YwMzUxOEM4MkE1NjRFQTBDNEM3Q0JFMjgxREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl6N8j/I0aRzoJCUv3gBmWOs0z Pg91uDiSxgUUecI0fzU37WRweI0xrkiOWqXvz/8T77EfKiWWU7DmWbg1IGcaM9bS AsAh3AQbTr+NOx/q2Rh+Gfc6sbdOlLcAjP/PToEDDBh/R01am4YQ9kh0ZgyJYUPp uPyaD+B5wqB1j6FLqDb4bNJjFv84LQpx/Cn/Q/rDbl8J+FIdDS4LxFUvHdTVaaqP XbYHVyaVrJwUA9hHS2VVtOWYSIWOK39lBEMXXcLvgOjG24ovSOvWTZUpjlLsoiNo hj3R2Hok2V84j2CmnVE0PS0KS12bg3wfI9ZXeDMlFP+skI1Rj/SKFeW9hRl9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQKaD1Utj8DUYyCpWTqDEx8vigdswHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANF89xM8KUMwl687oZuBi/nL8Q1mPmcja2sj +Q/FJsT/7jZ0I2nXuWfol+l1eEIt9UfaKGGOW56m1mE4LPMQxBVID6rgYJB3wMzC vMU42Hlpbx3LRWEOTa18y9sXMnxzLv6XJmIITwqA+RGS4uVvAM2F0DrTeHtcO5+Z PyHmB4h6QuXlzYBaXW5aopgTO4HK/XcyrazUzwIMVxujs+wD3QfNsi7FOF1xeczG 7h+PSbw4hiMSzpjyUWCB7oMDA2IJP3el56q0OeVUYozSNnaF0UE3slRMGEgYQXJw 0VN/a01TsvMRqUtf/UqJJ6t0Lh8aydMEw0eDskcmhubRPK0ge8c= -----END CERTIFICATE-----Generated at Thu Sep 3 14:17:20 2026 by rpki-client