$ rpki-client -vvf rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft (raw, json) Hash identifier: 3w2IYbwLwpWzi355wzS+zbzBFHS2PwQhyuyeWpZwSa8= Subject key identifier: 23:59:C1:B4:F7:92:6C:94:01:50:7B:E7:A5:32:33:9F:BA:5B:12:C2 Authority key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Certificate issuer: /CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Certificate serial: 0CE2C039284348755306D8FE2C81E48513366662 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft Manifest number: 6D Signing time: Tue 21 Jul 2026 00:16:06 +0000 Manifest this update: Tue 21 Jul 2026 00:11:06 +0000 Manifest next update: Wed 22 Jul 2026 02:14:06 +0000 Files and hashes: 1: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl (hash: DOmMvtrS5TxNSNVF5likW3++Bnf64+XdCCaAt+/EnFE=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: OmTMu2442b172ucsFf/mMUYIo/5ux22+t2Y1lTl29zM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e2:c0:39:28:43:48:75:53:06:d8:fe:2c:81:e4:85:13:36:66:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Validity Not Before: Jul 21 00:11:06 2026 GMT Not After : Jul 22 02:14:06 2026 GMT Subject: CN=2359C1B4F7926C9401507BE7A532339FBA5B12C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f0:fb:99:dc:e5:c4:f7:30:f9:3a:e8:0a:22: 39:f5:6e:dd:48:01:5e:84:ba:cb:21:13:23:e4:11: 27:dc:c0:82:b1:8b:b4:57:81:8f:41:ef:a6:d0:3b: cf:4c:6e:f8:e5:d1:0a:44:ed:d5:35:b9:23:b7:c0: fd:01:ad:c6:13:63:26:0d:2d:12:0b:7f:e2:27:93: 7e:64:dd:a3:84:08:da:9b:4b:fe:ee:d2:31:b1:81: ee:cd:6b:e4:3b:36:00:12:b6:68:cd:ed:ac:42:d4: b0:3f:e9:44:cd:9a:ea:bf:fe:29:29:41:52:07:57: 8a:0e:94:c0:36:55:d9:2c:59:50:1c:94:e6:16:a2: 3c:2a:15:a5:d8:ab:53:09:36:75:1b:97:b2:63:dc: 50:ca:3a:3d:fd:c2:5d:44:0d:b4:9d:ea:3e:85:fc: 41:d0:93:07:3a:1d:11:f7:d1:4c:dd:e6:36:66:8f: 2b:97:d1:c8:ec:17:cd:f0:8d:ec:b1:2d:77:f7:8e: 08:6f:9a:67:23:19:3a:90:c5:fa:3c:4b:7f:1a:c7: 73:15:00:2d:f1:b1:8b:52:03:c7:b8:63:f8:09:37: ab:39:cf:80:7c:69:db:71:32:6a:56:0d:07:dd:04: 55:fa:c7:4d:d4:f2:5e:35:74:ee:4e:11:49:05:5e: 81:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:59:C1:B4:F7:92:6C:94:01:50:7B:E7:A5:32:33:9F:BA:5B:12:C2 X509v3 Authority Key Identifier: keyid:85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:4e:64:63:69:bc:46:e9:c4:22:29:f5:47:1e:38:20:34:0c: 71:c0:e2:2a:7b:0f:90:92:13:8a:23:17:8f:85:90:6f:3e:0b: 0b:40:2e:38:ac:76:19:17:11:2e:1a:5e:65:47:8f:83:64:0a: cf:14:48:ae:6d:57:8d:13:6c:5c:6a:1c:43:54:ff:bd:61:40: e1:cb:14:0a:2b:11:b5:8a:6e:1b:ad:a2:47:18:7b:0d:80:e0: ee:4a:b2:aa:2b:94:97:2d:d9:89:e3:b2:a7:be:aa:71:8c:50: c4:74:d5:29:66:77:e6:c6:c9:e0:f2:a5:2c:ea:4e:c5:84:cd: 7a:35:bc:19:a4:45:42:b1:52:92:7c:8c:7b:16:3d:b4:c6:12: ef:ab:6d:70:eb:f4:8d:46:c4:66:66:90:af:c6:62:1c:bf:9f: 75:18:7a:c1:cd:18:af:26:58:20:94:8b:92:da:94:46:f5:51: a7:12:ce:a4:07:d7:d0:6a:7f:4e:6e:dc:e5:e1:70:2c:ba:81: a1:94:ec:94:96:e7:b9:24:0f:f0:af:06:74:b5:c8:9a:4b:4c: 36:63:3e:4e:3e:8b:f5:a1:d4:99:a4:6a:4d:20:b6:5e:1d:36: ab:c0:07:f6:04:07:bd:d2:a1:39:3f:4d:1d:6b:74:0e:6f:eb: 99:2f:3a:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOLAOShDSHVTBtj+LIHkhRM2ZmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhC Qzc2QUJGMjAeFw0yNjA3MjEwMDExMDZaFw0yNjA3MjIwMjE0MDZaMDMxMTAvBgNV BAMTKDIzNTlDMUI0Rjc5MjZDOTQwMTUwN0JFN0E1MzIzMzlGQkE1QjEyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT8PuZ3OXE9zD5OugKIjn1bt1I AV6EusshEyPkESfcwIKxi7RXgY9B76bQO89Mbvjl0QpE7dU1uSO3wP0BrcYTYyYN LRILf+Ink35k3aOECNqbS/7u0jGxge7Na+Q7NgAStmjN7axC1LA/6UTNmuq//ikp QVIHV4oOlMA2VdksWVAclOYWojwqFaXYq1MJNnUbl7Jj3FDKOj39wl1EDbSd6j6F /EHQkwc6HRH30Uzd5jZmjyuX0cjsF83wjeyxLXf3jghvmmcjGTqQxfo8S38ax3MV AC3xsYtSA8e4Y/gJN6s5z4B8adtxMmpWDQfdBFX6x03U8l41dO5OEUkFXoH7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI1nBtPeSbJQBUHvnpTIzn7pbEsIwHwYDVR0j BBgwFoAUhbmitKTzc5yPwD5RAloraLx2q/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyYjhkMjgtZmY3Yy00NjkyLTkwMTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRB NEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhCQzc2QUJGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUI5QTJCNEE0RjM3MzlDOEZDMDNFNTEwMjVBMkI2OEJDNzZB QkYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJC NjhCQzc2QUJGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZOZGNpvEbpxCIp9UceOCA0DHHA4ip7D5CS E4ojF4+FkG8+CwtALjisdhkXES4aXmVHj4NkCs8USK5tV40TbFxqHENU/71hQOHL FAorEbWKbhutokcYew2A4O5KsqorlJct2Ynjsqe+qnGMUMR01Slmd+bGyeDypSzq TsWEzXo1vBmkRUKxUpJ8jHsWPbTGEu+rbXDr9I1GxGZmkK/GYhy/n3UYesHNGK8m WCCUi5LalEb1UacSzqQH19Bqf05u3OXhcCy6gaGU7JSW57kkD/CvBnS1yJpLTDZj Pk4+i/Wh1Jmkak0gtl4dNqvAB/YEB73SoTk/TR1rdA5v65kvOrU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:59:02 2026 by rpki-client