$ rpki-client -vvf rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft (raw, json) Hash identifier: puRDPWoDR3+/L+b+vs30xXgp3pVMKZG9DNffNitQh5g= Subject key identifier: 1E:C5:75:A5:CD:25:8E:C4:B1:6E:3C:72:DE:03:04:8D:34:C5:24:3A Authority key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Certificate issuer: /CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Certificate serial: 66D3A0B2E4C07CB48845B324904710B6976FB0CB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 09:16:29 +0000 Manifest this update: Tue 02 Jun 2026 09:11:29 +0000 Manifest next update: Wed 03 Jun 2026 11:41:29 +0000 Files and hashes: 1: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl (hash: Ch94Av3awenGdQ8l9iFCMF2YWGSW/L8RIbp/2qa2GDE=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: OmTMu2442b172ucsFf/mMUYIo/5ux22+t2Y1lTl29zM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 11:41:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d3:a0:b2:e4:c0:7c:b4:88:45:b3:24:90:47:10:b6:97:6f:b0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Validity Not Before: Jun 2 09:11:29 2026 GMT Not After : Jun 3 11:41:29 2026 GMT Subject: CN=1EC575A5CD258EC4B16E3C72DE03048D34C5243A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b4:31:5f:c1:b2:11:dc:46:84:5d:b2:56:cd: ea:e7:93:97:85:27:36:cd:c5:35:29:2b:c5:f2:b9: 0f:57:69:d1:cf:91:86:01:b8:88:22:8f:af:46:47: d3:2b:6b:9e:ed:16:1e:04:72:98:9a:d2:8d:fa:65: d4:b0:b1:e9:d5:61:cb:66:cd:98:f9:f5:9b:02:d5: 15:00:37:35:e0:ab:a2:87:81:16:ee:b8:68:c4:dd: bb:77:11:6f:ec:a8:be:7c:d6:af:2c:aa:ae:c6:e1: 57:58:3c:00:27:df:7a:d1:1d:c1:ea:6f:95:01:12: 39:e3:f0:59:15:fb:f4:55:e8:a0:4b:2a:50:27:0b: d5:67:c2:d3:88:17:b0:c4:29:86:d1:f3:2a:23:20: 58:13:0b:76:ec:a0:f7:e4:e9:81:92:0d:02:e3:9e: 98:e7:57:72:ea:09:57:28:5d:9a:9e:7e:30:54:19: 27:64:73:c8:87:b4:a4:c8:b9:14:a5:0a:e5:8a:22: 8c:29:70:23:29:4e:82:d5:e3:80:fd:14:b5:23:da: 1f:b1:4a:7b:c9:36:7e:20:35:7d:a4:1c:3c:1c:c8: 28:51:63:ba:2d:56:58:7c:8b:07:9e:23:cd:95:4b: 84:d4:4d:80:7c:67:e3:39:b9:e6:61:b4:37:fe:f1: 12:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:C5:75:A5:CD:25:8E:C4:B1:6E:3C:72:DE:03:04:8D:34:C5:24:3A X509v3 Authority Key Identifier: keyid:85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:11:63:51:b0:8f:67:a4:eb:d4:7c:b5:2b:6d:53:3e:e5:8d: fb:f5:4a:29:0d:3d:63:c0:c5:57:de:ca:44:57:b8:2a:63:37: 43:e6:e0:4a:33:d5:0e:40:54:2d:a8:48:6b:80:d4:30:94:cb: 66:0d:1a:59:d7:cd:e8:53:9b:33:f2:d3:ff:e0:44:2b:be:3f: 62:68:38:f2:dd:93:ae:67:bd:7b:09:0f:1e:34:3c:6b:9d:e8: 06:a3:3d:cc:da:26:7e:2a:0f:c9:8d:a6:07:96:87:f6:ec:8a: f6:94:6e:82:c6:3e:8c:98:95:94:d9:da:36:9c:f4:3e:f1:ca: d0:31:93:93:0f:48:38:b4:3e:c9:80:f7:aa:f4:b7:96:d0:2b: 28:a2:b3:ac:ef:95:c3:c3:2a:7e:e1:ca:12:9f:4c:42:a5:56: f1:e3:5d:ef:f6:5c:1b:b1:2d:df:19:78:46:71:a2:fb:45:f4: be:32:4b:a4:ed:e8:e5:ce:01:ef:5a:6f:8b:a7:00:65:45:36: c5:51:2e:53:46:87:76:8e:ab:16:5a:e1:50:64:65:59:50:5f: 12:f9:4e:b0:52:0d:78:14:1b:8d:ae:82:95:f2:e6:f3:c9:80: 44:cc:29:64:b7:89:87:eb:1d:42:8e:99:4b:bf:51:bb:a3:46: 1f:5e:40:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtOgsuTAfLSIRbMkkEcQtpdvsMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhC Qzc2QUJGMjAeFw0yNjA2MDIwOTExMjlaFw0yNjA2MDMxMTQxMjlaMDMxMTAvBgNV BAMTKDFFQzU3NUE1Q0QyNThFQzRCMTZFM0M3MkRFMDMwNDhEMzRDNTI0M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChtDFfwbIR3EaEXbJWzernk5eF JzbNxTUpK8XyuQ9XadHPkYYBuIgij69GR9Mra57tFh4Ecpia0o36ZdSwsenVYctm zZj59ZsC1RUANzXgq6KHgRbuuGjE3bt3EW/sqL581q8sqq7G4VdYPAAn33rRHcHq b5UBEjnj8FkV+/RV6KBLKlAnC9VnwtOIF7DEKYbR8yojIFgTC3bsoPfk6YGSDQLj npjnV3LqCVcoXZqefjBUGSdkc8iHtKTIuRSlCuWKIowpcCMpToLV44D9FLUj2h+x SnvJNn4gNX2kHDwcyChRY7otVlh8iweeI82VS4TUTYB8Z+M5ueZhtDf+8RJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHsV1pc0ljsSxbjxy3gMEjTTFJDowHwYDVR0j BBgwFoAUhbmitKTzc5yPwD5RAloraLx2q/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyYjhkMjgtZmY3Yy00NjkyLTkwMTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRB NEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhCQzc2QUJGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUI5QTJCNEE0RjM3MzlDOEZDMDNFNTEwMjVBMkI2OEJDNzZB QkYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJC NjhCQzc2QUJGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEYRY1Gwj2ek69R8tSttUz7ljfv1SikNPWPA xVfeykRXuCpjN0Pm4Eoz1Q5AVC2oSGuA1DCUy2YNGlnXzehTmzPy0//gRCu+P2Jo OPLdk65nvXsJDx40PGud6AajPczaJn4qD8mNpgeWh/bsivaUboLGPoyYlZTZ2jac 9D7xytAxk5MPSDi0PsmA96r0t5bQKyiis6zvlcPDKn7hyhKfTEKlVvHjXe/2XBux Ld8ZeEZxovtF9L4yS6Tt6OXOAe9ab4unAGVFNsVRLlNGh3aOqxZa4VBkZVlQXxL5 TrBSDXgUG42ugpXy5vPJgETMKWS3iYfrHUKOmUu/UbujRh9eQIY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:22:47 2026 by rpki-client