$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft File: D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft (raw, json) Hash identifier: BJgJwR5fw2Cgj8e/DNpV3aZonFLRUroNPMHTxwuF/m8= Subject key identifier: 82:32:8A:97:6E:E3:3D:A3:DC:80:0E:17:31:C6:33:FD:6D:84:75:49 Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 0EFD096562D00A9B660334FC5327651092B27081 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft Manifest number: A6 Signing time: Wed 02 Sep 2026 19:57:14 +0000 Manifest this update: Wed 02 Sep 2026 19:52:14 +0000 Manifest next update: Thu 03 Sep 2026 23:42:14 +0000 Files and hashes: 1: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4=) 2: D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl (hash: PgNthJ5u4X80u3Tlso8W+CqcX7HhVHS9dtMq3AATows=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 21:53:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:fd:09:65:62:d0:0a:9b:66:03:34:fc:53:27:65:10:92:b2:70:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: Sep 2 19:52:14 2026 GMT Not After : Sep 3 23:42:14 2026 GMT Subject: CN=82328A976EE33DA3DC800E1731C633FD6D847549 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:d8:02:f1:12:31:d7:a2:68:76:5f:6b:d1: 22:28:7e:75:c3:c2:07:81:2b:03:b8:5c:21:48:be: fd:6b:c2:c4:6f:5a:d1:e7:be:9f:29:2e:35:55:7d: 14:71:0c:69:a7:2c:8c:be:30:14:ef:85:6b:40:e7: 0a:48:56:52:f7:14:c7:66:32:8b:6c:04:17:83:76: 53:2c:2c:c2:b1:20:88:3e:64:81:cf:b0:90:c6:69: 22:36:2c:33:52:14:fa:19:ac:cb:c1:77:d2:1b:c1: c3:f5:29:ff:97:ac:cf:b6:9e:60:bb:2c:e6:6e:31: c1:cd:26:4b:dd:b4:3c:38:79:09:54:e2:7e:87:49: a3:ec:26:2e:6e:8b:fb:14:3c:04:c1:eb:c7:ba:41: 57:9a:34:2f:97:be:f6:c6:76:04:c6:05:3e:ab:4a: 56:77:22:e7:20:0b:70:3b:25:c9:37:f0:6c:dd:7d: 19:45:ab:ca:35:7e:47:3c:f1:e7:cc:97:8a:66:4e: b6:3e:37:58:5a:be:ec:61:6a:54:66:87:52:99:21: 87:0a:34:18:5d:f6:a5:15:0a:3e:56:bf:60:d3:1e: 9e:33:2e:58:c1:c9:0f:bf:fc:86:4d:2f:30:29:9d: 08:b4:a0:90:00:73:b3:82:6c:27:39:40:ce:42:5d: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:32:8A:97:6E:E3:3D:A3:DC:80:0E:17:31:C6:33:FD:6D:84:75:49 X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:13:5e:60:e3:49:1f:b3:34:84:01:e3:61:4a:9d:1f:b6:0e: 79:d2:36:32:92:4b:51:52:fa:4f:a6:28:eb:1e:e0:14:11:f8: 2a:34:b7:5e:bd:cb:ac:5a:c8:6f:10:5b:0a:39:d1:5a:ed:d7: 83:2b:00:e8:5e:7d:2e:a5:b0:61:57:96:8e:96:03:27:7e:a8: 0e:9a:1f:89:18:4f:d2:17:c4:3f:ff:6b:78:16:4e:30:fc:35: 1d:ee:67:a0:cd:07:14:bf:ef:6e:63:08:4b:f3:4e:f0:c7:23: 52:e2:39:2f:f1:40:ab:aa:bf:9b:33:f7:81:38:a2:46:fb:0a: d2:70:5b:87:90:76:9b:d4:34:55:10:9a:32:54:40:4b:bd:49: 66:a3:29:70:7d:ca:b4:6a:f7:0b:72:af:de:c3:97:5a:38:60: 6f:fd:9a:b5:24:a6:f4:d2:96:75:6f:a9:10:a9:74:03:4b:ec: 1f:fe:bb:4f:64:07:06:f1:62:db:2b:12:bf:94:02:71:9f:68: a8:e2:b6:45:12:85:40:ef:bf:6e:91:6b:24:2f:b3:0e:c6:6b: 04:88:1f:94:ed:54:ab:1b:75:ce:51:d0:1b:6e:2b:51:7d:b7: e2:db:ee:71:f0:ef:d0:58:3f:85:d6:cb:c5:31:70:c3:95:83: d9:ad:62:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDv0JZWLQCptmAzT8UydlEJKycIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjA5MDIxOTUyMTRaFw0yNjA5MDMyMzQyMTRaMDMxMTAvBgNV BAMTKDgyMzI4QTk3NkVFMzNEQTNEQzgwMEUxNzMxQzYzM0ZENkQ4NDc1NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/dgC8RIx16Jodl9r0SIofnXD wgeBKwO4XCFIvv1rwsRvWtHnvp8pLjVVfRRxDGmnLIy+MBTvhWtA5wpIVlL3FMdm MotsBBeDdlMsLMKxIIg+ZIHPsJDGaSI2LDNSFPoZrMvBd9IbwcP1Kf+XrM+2nmC7 LOZuMcHNJkvdtDw4eQlU4n6HSaPsJi5ui/sUPATB68e6QVeaNC+XvvbGdgTGBT6r SlZ3IucgC3A7Jck38GzdfRlFq8o1fkc88efMl4pmTrY+N1havuxhalRmh1KZIYcK NBhd9qUVCj5Wv2DTHp4zLljByQ+//IZNLzApnQi0oJAAc7OCbCc5QM5CXbCVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgjKKl27jPaPcgA4XMcYz/W2EdUkwHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0 NDVDN0QzOERFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIITXmDjSR+zNIQB42FKnR+2DnnSNjKSS1FS +k+mKOse4BQR+Co0t169y6xayG8QWwo50Vrt14MrAOhefS6lsGFXlo6WAyd+qA6a H4kYT9IXxD//a3gWTjD8NR3uZ6DNBxS/725jCEvzTvDHI1LiOS/xQKuqv5sz94E4 okb7CtJwW4eQdpvUNFUQmjJUQEu9SWajKXB9yrRq9wtyr97Dl1o4YG/9mrUkpvTS lnVvqRCpdANL7B/+u09kBwbxYtsrEr+UAnGfaKjitkUShUDvv26RayQvsw7GawSI H5TtVKsbdc5R0BtuK1F9t+Lb7nHw79BYP4XWy8UxcMOVg9mtYmI= -----END CERTIFICATE-----Generated at Thu Sep 3 07:59:34 2026 by rpki-client