$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json) Hash identifier: 2Hk/aHjKFm38CfeaSTSJwijretOvd4/2NFHzdalR2qc= Subject key identifier: B2:D2:D9:F7:12:CF:0C:85:D9:D9:CD:EC:9C:E1:12:EE:74:2E:FF:F2 Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Certificate serial: 281FECADE0F925B059AF943482590812CB1EA882 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 09:24:17 +0000 Manifest this update: Mon 02 Nov 2026 09:19:17 +0000 Manifest next update: Tue 03 Nov 2026 12:14:17 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=) 2: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=) 3: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=) 4: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=) 5: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=) 6: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=) 7: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: UzqEzdUM2EgnCzHp0cNsJ29h5P3wfOeNieG2+ucQfm4=) 8: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:14:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:1f:ec:ad:e0:f9:25:b0:59:af:94:34:82:59:08:12:cb:1e:a8:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Validity Not Before: Nov 2 09:19:17 2026 GMT Not After : Nov 3 12:14:17 2026 GMT Subject: CN=B2D2D9F712CF0C85D9D9CDEC9CE112EE742EFFF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bd:ea:6a:b3:cf:34:bf:98:19:72:7d:4f:fa: 9d:36:7b:43:49:2c:e7:df:77:80:82:dc:7e:83:7b: 2f:ac:86:4a:aa:3e:4b:54:e7:9f:51:2a:d7:66:52: 21:2f:24:dc:47:34:a5:39:50:80:cf:5e:3b:7d:e8: fe:c5:9c:42:4d:84:dd:84:03:88:f9:c3:a6:9e:2c: 23:f1:51:59:38:20:a8:55:be:0b:57:b9:96:c0:7b: c6:37:e6:22:9e:e2:cf:54:f7:b3:64:6a:95:ea:e8: bd:d0:73:6b:22:20:b1:ac:ba:de:82:91:b8:f2:95: 4c:c6:9e:d6:2b:15:f5:99:27:e2:e9:b6:dc:b2:a1: 67:b0:28:0e:bd:b8:d5:ee:44:32:f5:c2:0e:74:bc: 2c:3c:75:de:49:96:f8:f0:38:f6:49:fa:40:76:9c: c0:29:ce:d7:af:14:11:16:d2:fb:dc:0e:79:e9:89: 2c:86:4c:a5:2c:fd:3f:2d:34:b4:df:07:34:e8:15: 2f:34:82:9f:3d:03:72:8b:0b:f7:b8:6b:64:5e:b2: 13:f4:13:e0:14:69:13:80:1c:1a:97:56:31:f8:b9: 17:46:be:88:bd:91:ea:58:6d:b0:31:15:ab:a6:ac: ef:39:b3:05:da:28:ea:3c:48:91:32:29:b0:21:c4: eb:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D2:D9:F7:12:CF:0C:85:D9:D9:CD:EC:9C:E1:12:EE:74:2E:FF:F2 X509v3 Authority Key Identifier: keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:fb:1e:8b:77:14:9f:3e:40:69:14:0b:4f:29:c6:75:2a:f7: d9:e0:01:86:c1:17:83:2c:f4:79:a2:8c:8a:57:a5:20:27:0f: 0a:68:52:97:d5:52:40:4f:2d:89:38:84:c6:a5:84:29:45:88: 87:61:ec:59:be:fd:14:1a:38:cb:c6:ad:ff:07:13:5d:e5:c0: fb:9a:62:d4:c2:41:01:ad:d0:3e:fb:c2:5e:68:50:91:71:6b: 7d:14:5c:6b:1f:81:01:f9:80:be:21:9b:32:e7:3b:6c:ba:1f: c1:c2:61:f7:05:7b:3e:b6:90:a4:36:6a:25:0f:fc:18:2f:0b: 30:97:9b:71:1e:07:37:4a:65:a4:8f:cc:3e:24:be:4d:e9:35: d5:72:2c:c2:ae:76:2a:1e:82:29:d9:11:97:46:18:08:46:0f: 9c:2d:52:55:e2:00:6c:57:4b:b9:e9:4e:d0:42:c2:be:f2:3b: ba:96:18:8f:a4:7a:73:ec:a4:31:ac:d4:a7:54:f9:da:b3:e5: ac:72:c2:bb:03:60:7a:2d:14:65:95:7c:cc:13:55:79:7f:d7: 43:b1:e0:e1:2c:63:56:80:f9:4e:d4:7d:7e:44:a1:13:ea:ee: a0:e6:00:43:0b:0d:51:f3:3d:82:7f:c3:12:cb:16:93:96:34: 7e:de:5f:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKB/sreD5JbBZr5Q0glkIEsseqIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5 MzYyRDA2NzAeFw0yNjExMDIwOTE5MTdaFw0yNjExMDMxMjE0MTdaMDMxMTAvBgNV BAMTKEIyRDJEOUY3MTJDRjBDODVEOUQ5Q0RFQzlDRTExMkVFNzQyRUZGRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpvepqs880v5gZcn1P+p02e0NJ LOffd4CC3H6Dey+shkqqPktU559RKtdmUiEvJNxHNKU5UIDPXjt96P7FnEJNhN2E A4j5w6aeLCPxUVk4IKhVvgtXuZbAe8Y35iKe4s9U97NkapXq6L3Qc2siILGsut6C kbjylUzGntYrFfWZJ+LpttyyoWewKA69uNXuRDL1wg50vCw8dd5JlvjwOPZJ+kB2 nMApztevFBEW0vvcDnnpiSyGTKUs/T8tNLTfBzToFS80gp89A3KLC/e4a2ReshP0 E+AUaROAHBqXVjH4uRdGvoi9kepYbbAxFaumrO85swXaKOo8SJEyKbAhxOsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUstLZ9xLPDIXZ2c3snOES7nQu//IwHwYDVR0j BBgwFoAUhQweGAnir0mifD5n8noXmJNi0GcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyNzJmN2ItZDY1Ni00MDU4LWE3YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgw OUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5MzYyRDA2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTBDMUUxODA5RTJBRjQ5QTI3QzNFNjdGMjdBMTc5ODkzNjJE MDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3 OTg5MzYyRDA2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALj7Hot3FJ8+QGkUC08pxnUq99ngAYbBF4Ms 9HmijIpXpSAnDwpoUpfVUkBPLYk4hMalhClFiIdh7Fm+/RQaOMvGrf8HE13lwPua YtTCQQGt0D77wl5oUJFxa30UXGsfgQH5gL4hmzLnO2y6H8HCYfcFez62kKQ2aiUP /BgvCzCXm3EeBzdKZaSPzD4kvk3pNdVyLMKudioeginZEZdGGAhGD5wtUlXiAGxX S7npTtBCwr7yO7qWGI+kenPspDGs1KdU+dqz5axywrsDYHotFGWVfMwTVXl/10Ox 4OEsY1aA+U7UfX5EoRPq7qDmAEMLDVHzPYJ/wxLLFpOWNH7eX4c= -----END CERTIFICATE-----Generated at Mon Nov 2 22:01:54 2026 by rpki-client