$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json) Hash identifier: ZRn6PzGI43+IZ9l6IoCpGvmnCaM7WSxXuH/9YFj5k5U= Subject key identifier: 62:E0:FF:A1:87:37:D8:C7:86:7C:36:22:D3:1C:BF:D8:E6:76:3E:9D Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Certificate serial: 23370B3028553643E557E243492D986954F77067 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 04:18:09 +0000 Manifest this update: Tue 03 Nov 2026 04:13:09 +0000 Manifest next update: Wed 04 Nov 2026 05:25:09 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=) 2: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=) 3: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: oJmndldVRs5UPpujJh//lIIgl3+l3fhzlVDhP5Q8MVY=) 4: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=) 5: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=) 6: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=) 7: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=) 8: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 05:25:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:37:0b:30:28:55:36:43:e5:57:e2:43:49:2d:98:69:54:f7:70:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Validity Not Before: Nov 3 04:13:09 2026 GMT Not After : Nov 4 05:25:09 2026 GMT Subject: CN=62E0FFA18737D8C7867C3622D31CBFD8E6763E9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d5:75:d5:84:9e:d3:5e:72:a1:4b:8e:52:a2: be:2d:b6:2d:0e:de:f5:49:dc:65:50:89:ca:e1:fb: 16:d0:6b:84:12:f7:50:da:a8:21:fa:3c:b5:44:71: 55:b9:15:74:31:a9:0d:b7:d5:98:70:43:b0:d9:10: dd:4b:28:e8:7e:41:38:b6:22:05:14:84:64:bb:79: cb:fd:67:e2:38:1c:11:29:ef:52:44:75:54:f4:d4: cf:ae:7a:86:f2:d3:7e:09:0a:2e:cb:1a:20:b6:1d: 6e:31:21:e7:c7:87:f1:0d:b7:82:54:34:c7:19:83: b2:55:93:96:42:86:bc:64:8e:64:1b:86:73:99:6d: e2:1f:41:37:89:ac:40:b5:67:f3:fe:13:09:75:8c: d0:25:8e:7f:0f:3a:30:45:b4:62:cf:65:46:a3:5a: 4e:db:95:30:34:b3:7b:88:ef:19:48:22:c6:eb:78: cb:5d:03:a0:23:5b:e3:8b:f7:40:ab:3e:24:b0:64: 54:23:f5:6a:a0:c2:ff:6b:75:12:f7:72:59:0f:09: 10:2f:1e:ba:51:d5:07:1a:6a:88:e7:a9:34:03:b0: 30:4d:9f:79:58:8a:fe:c5:e7:68:cb:d6:bf:8f:3d: d8:5c:88:b4:b6:05:c2:1b:f1:24:7a:a3:aa:3d:24: 59:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:E0:FF:A1:87:37:D8:C7:86:7C:36:22:D3:1C:BF:D8:E6:76:3E:9D X509v3 Authority Key Identifier: keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:05:d1:71:f4:90:cc:50:3d:c0:9f:f9:c7:1f:ed:de:90:77: 6d:ed:4a:b1:6a:4a:af:ee:2c:e8:78:73:d3:35:7c:4d:2a:b0: 54:56:78:65:df:5c:fe:57:41:8c:a4:8a:66:3e:0a:70:34:f8: d0:a0:73:82:25:c8:3c:0f:09:ba:ed:cf:43:e8:ef:ea:92:7c: b1:f2:49:2c:34:3c:4d:1e:25:a4:7d:c2:d0:c7:44:ab:9f:36: 63:aa:b8:c9:4b:43:6a:f9:72:30:57:c0:da:8e:c9:90:67:c9: 16:de:2e:0d:52:c8:47:5f:8a:88:2e:44:c5:ed:e1:b4:74:48: 3b:db:2b:c8:34:99:a4:c4:83:75:43:1e:00:d7:f1:63:57:b5: 0d:70:53:c5:d9:4a:70:af:46:9f:5e:76:a5:2e:2b:c5:f1:b0: 83:99:32:5d:97:a1:e8:81:77:6e:62:7b:50:31:29:6a:80:04: 14:d9:8c:76:74:da:fd:b3:e0:fe:e9:41:26:f9:49:64:17:1f: 85:d5:68:bb:d6:f7:cd:b0:6f:d4:9b:8b:9f:90:93:c5:d1:85: 4a:08:0e:9f:4c:ab:73:42:e3:2f:f1:8f:a1:af:05:8f:2c:a2: 93:9c:ae:5f:35:1b:7c:3a:a5:bd:1c:6b:db:b9:dc:04:28:9c: c2:db:f0:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIzcLMChVNkPlV+JDSS2YaVT3cGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5 MzYyRDA2NzAeFw0yNjExMDMwNDEzMDlaFw0yNjExMDQwNTI1MDlaMDMxMTAvBgNV BAMTKDYyRTBGRkExODczN0Q4Qzc4NjdDMzYyMkQzMUNCRkQ4RTY3NjNFOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1XXVhJ7TXnKhS45Sor4tti0O 3vVJ3GVQicrh+xbQa4QS91DaqCH6PLVEcVW5FXQxqQ231ZhwQ7DZEN1LKOh+QTi2 IgUUhGS7ecv9Z+I4HBEp71JEdVT01M+ueoby034JCi7LGiC2HW4xIefHh/ENt4JU NMcZg7JVk5ZChrxkjmQbhnOZbeIfQTeJrEC1Z/P+Ewl1jNAljn8POjBFtGLPZUaj Wk7blTA0s3uI7xlIIsbreMtdA6AjW+OL90CrPiSwZFQj9Wqgwv9rdRL3clkPCRAv HrpR1QcaaojnqTQDsDBNn3lYiv7F52jL1r+PPdhciLS2BcIb8SR6o6o9JFmfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYuD/oYc32MeGfDYi0xy/2OZ2Pp0wHwYDVR0j BBgwFoAUhQweGAnir0mifD5n8noXmJNi0GcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyNzJmN2ItZDY1Ni00MDU4LWE3YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgw OUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5MzYyRDA2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTBDMUUxODA5RTJBRjQ5QTI3QzNFNjdGMjdBMTc5ODkzNjJE MDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3 OTg5MzYyRDA2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFEF0XH0kMxQPcCf+ccf7d6Qd23tSrFqSq/u LOh4c9M1fE0qsFRWeGXfXP5XQYykimY+CnA0+NCgc4IlyDwPCbrtz0Po7+qSfLHy SSw0PE0eJaR9wtDHRKufNmOquMlLQ2r5cjBXwNqOyZBnyRbeLg1SyEdfioguRMXt 4bR0SDvbK8g0maTEg3VDHgDX8WNXtQ1wU8XZSnCvRp9edqUuK8XxsIOZMl2XoeiB d25ie1AxKWqABBTZjHZ02v2z4P7pQSb5SWQXH4XVaLvW982wb9Sbi5+Qk8XRhUoI Dp9Mq3NC4y/xj6GvBY8sopOcrl81G3w6pb0ca9u53AQonMLb8Jk= -----END CERTIFICATE-----Generated at Tue Nov 3 21:18:23 2026 by rpki-client