$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: tZGsB3SD+BxVG7hm8I8WTf2K4/54U82gWazQAm0KyUs= Subject key identifier: 6E:C9:03:43:5D:D0:5C:05:E0:BF:FA:BE:5B:4F:22:8D:61:2F:A2:9B Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 46305DDB0FB60927ABE35A739DFB718665D523FC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: F6 Signing time: Tue 03 Nov 2026 20:53:44 +0000 Manifest this update: Tue 03 Nov 2026 20:48:44 +0000 Manifest next update: Wed 04 Nov 2026 22:15:44 +0000 Files and hashes: 1: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) 2: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: nTLNfKBgNb6kotywCaefF+NUaeNGCVxShKKWO0DEPI8=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 22:15:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:30:5d:db:0f:b6:09:27:ab:e3:5a:73:9d:fb:71:86:65:d5:23:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Nov 3 20:48:44 2026 GMT Not After : Nov 4 22:15:44 2026 GMT Subject: CN=6EC903435DD05C05E0BFFABE5B4F228D612FA29B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:09:50:fd:0e:92:c5:08:f9:17:c7:a0:54:db: d0:00:f6:b8:0c:ec:40:92:a2:00:3f:55:a7:7d:76: e2:41:79:35:54:01:01:9f:3d:2d:9d:fe:59:84:59: 1c:a2:23:16:c3:f4:ee:d3:45:dd:e9:5c:d0:55:38: 5e:ad:3c:87:e4:f1:48:85:ab:62:1d:a5:db:8e:9f: 4e:89:d2:13:17:c2:47:e1:79:c0:e7:f4:8a:cb:b6: 7b:a9:1a:a5:79:84:7d:1d:2c:a5:28:3b:b2:fa:19: 23:fc:5f:18:ca:6c:6c:57:33:cc:46:ea:d8:eb:94: fc:c7:f4:fb:21:4d:c7:c3:52:ab:46:35:38:e7:e6: 13:7c:37:aa:37:6f:b3:a1:5b:87:54:e9:41:76:bc: bc:3a:4a:b8:69:1e:7a:4d:57:32:27:08:3b:91:4d: a2:36:1f:8d:20:48:ef:d7:bb:a5:ab:14:41:27:93: 7c:b4:44:99:16:b9:3d:3f:21:db:a0:f9:b6:a2:48: 70:22:dc:cb:84:11:9d:14:e9:34:1a:fd:e0:4e:22: fd:ce:4b:57:41:39:08:d8:71:e0:83:a5:d5:39:07: 32:ae:06:56:37:99:f0:62:2a:2e:7b:16:77:c6:40: 4f:e0:97:2e:b3:8e:7f:28:4f:ed:4d:9a:af:87:f4: 69:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:C9:03:43:5D:D0:5C:05:E0:BF:FA:BE:5B:4F:22:8D:61:2F:A2:9B X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d7:d2:42:c8:a0:12:f2:5b:a5:f3:e7:4e:51:85:31:3b:eb: 78:4b:7e:bc:fa:b9:7a:b8:d0:f9:c6:2f:09:d7:bd:c1:65:55: c1:92:d3:0a:4c:57:1a:73:79:73:dd:fb:58:77:b4:a0:04:d0: 18:39:07:e1:e0:58:1d:a3:21:82:91:38:96:8a:93:84:b9:c6: 8a:49:1c:ec:4a:dd:e8:48:56:87:ea:b3:ab:1d:87:5c:96:7c: 0c:de:5a:e9:58:2e:28:dd:6f:32:74:35:c9:b0:a4:7a:2e:1b: d0:85:6b:ad:f4:57:e5:87:11:7b:e8:b3:d1:de:27:48:81:00: e7:64:44:38:33:23:77:a7:0b:32:a8:17:cf:c9:5a:f3:c7:f0: 1a:c5:87:05:16:ab:f7:4b:5e:7f:36:0a:8f:48:fb:58:05:8e: 65:4b:6b:03:fa:e0:c5:73:82:03:10:b0:3e:ce:0b:c8:8c:62: 5b:e7:92:29:82:f8:2b:a1:0a:b3:e4:32:22:ab:08:62:57:02: 83:ab:eb:eb:03:8f:31:d0:6f:ac:41:7f:ae:99:48:00:d3:66: 0e:b4:66:f5:ae:b7:32:b4:e9:9e:a7:f4:c1:ed:14:a4:eb:3e: cb:42:20:66:85:70:73:9b:56:23:07:77:dd:38:9b:cc:81:f0: 52:54:db:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjBd2w+2CSer41pznftxhmXVI/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjExMDMyMDQ4NDRaFw0yNjExMDQyMjE1NDRaMDMxMTAvBgNV BAMTKDZFQzkwMzQzNUREMDVDMDVFMEJGRkFCRTVCNEYyMjhENjEyRkEyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbCVD9DpLFCPkXx6BU29AA9rgM 7ECSogA/Vad9duJBeTVUAQGfPS2d/lmEWRyiIxbD9O7TRd3pXNBVOF6tPIfk8UiF q2IdpduOn06J0hMXwkfhecDn9IrLtnupGqV5hH0dLKUoO7L6GSP8XxjKbGxXM8xG 6tjrlPzH9PshTcfDUqtGNTjn5hN8N6o3b7OhW4dU6UF2vLw6SrhpHnpNVzInCDuR TaI2H40gSO/Xu6WrFEEnk3y0RJkWuT0/Idug+baiSHAi3MuEEZ0U6TQa/eBOIv3O S1dBOQjYceCDpdU5BzKuBlY3mfBiKi57FnfGQE/gly6zjn8oT+1Nmq+H9GnbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbskDQ13QXAXgv/q+W08ijWEvopswHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjX0kLIoBLyW6Xz505RhTE763hLfrz6uXq4 0PnGLwnXvcFlVcGS0wpMVxpzeXPd+1h3tKAE0Bg5B+HgWB2jIYKROJaKk4S5xopJ HOxK3ehIVofqs6sdh1yWfAzeWulYLijdbzJ0NcmwpHouG9CFa630V+WHEXvos9He J0iBAOdkRDgzI3enCzKoF8/JWvPH8BrFhwUWq/dLXn82Co9I+1gFjmVLawP64MVz ggMQsD7OC8iMYlvnkimC+CuhCrPkMiKrCGJXAoOr6+sDjzHQb6xBf66ZSADTZg60 ZvWutzK06Z6n9MHtFKTrPstCIGaFcHObViMHd904m8yB8FJU2zA= -----END CERTIFICATE-----Generated at Wed Nov 4 05:27:29 2026 by rpki-client