$ rpki-client -vvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: odJZUniUzHGq8h10hVaykcuDozLxh9Lo+7mWsCt7NKg= Subject key identifier: FD:5A:A8:10:1E:85:19:CD:E5:60:56:38:4D:27:41:F7:87:95:30:CF Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 0FBF5047964B33DA2412775A464AFEF6ED9A9526 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:11:12 +0000 Manifest this update: Mon 20 Jul 2026 20:06:12 +0000 Manifest next update: Tue 21 Jul 2026 22:25:12 +0000 Files and hashes: 1: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: lKHAUejcF4WDR6AxruaGJZSz8AmKIz4phRZb5iWy/Wo=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 22:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:bf:50:47:96:4b:33:da:24:12:77:5a:46:4a:fe:f6:ed:9a:95:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Jul 20 20:06:12 2026 GMT Not After : Jul 21 22:25:12 2026 GMT Subject: CN=FD5AA8101E8519CDE56056384D2741F7879530CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e5:e6:a9:15:50:a0:b7:2a:f9:b2:21:8c:5d: 8f:4e:8b:ff:8d:41:57:f8:ab:92:69:a3:80:66:4d: 7d:74:94:33:73:6b:b4:cc:65:3a:b4:8a:8b:da:3f: 39:97:b7:99:08:06:94:93:ff:57:fc:ee:82:9d:d5: 9e:f1:07:46:d6:95:e6:bd:dd:65:c0:d7:b2:c3:2b: 43:3d:ff:0c:07:61:83:e3:c9:f2:1b:2b:c3:5d:74: af:e2:2f:09:e2:33:61:1b:d4:bb:7d:48:31:ca:ea: 4f:bf:95:75:0e:83:a6:28:ee:1f:72:50:2f:9b:28: 37:b6:d1:38:03:db:ed:bf:be:9a:a8:3a:8b:f9:4c: ef:c5:6e:95:43:ec:6d:58:87:00:f8:fe:c8:2c:98: 6c:e2:2c:9c:43:a8:ec:44:14:5e:30:c3:52:c6:9d: fd:af:76:af:98:6e:b2:2e:6c:fd:f7:f8:58:79:d9: 02:d0:91:93:36:21:5a:75:7b:21:cd:3a:13:cf:5d: d2:fb:14:e2:7c:4d:21:cf:ad:71:24:fa:bd:03:60: 34:52:5c:e9:29:b2:9b:43:9c:48:80:6b:b9:cd:ba: 5f:39:58:8e:8d:42:80:7e:f5:5b:9d:64:15:c7:ea: 82:48:63:33:61:80:28:64:b9:fd:81:92:cd:68:31: d1:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:5A:A8:10:1E:85:19:CD:E5:60:56:38:4D:27:41:F7:87:95:30:CF X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:30:e7:8a:30:07:36:80:2a:d6:8f:fe:e4:8f:71:0e:1f:19: d5:0a:4a:b2:81:de:ad:a2:73:cc:b8:cb:57:10:d8:fe:b0:ac: 4d:c4:4d:4e:fb:8a:69:1b:a6:0d:ff:d1:82:0e:dc:e1:98:f9: 5f:1c:ae:3b:25:e7:a7:a3:bd:b4:65:f5:d1:83:48:6a:1d:f4: 04:b8:a4:85:c7:1b:04:77:7a:b8:37:52:f2:80:e5:b3:93:32: 6c:47:b3:ce:1a:20:b5:3c:46:0a:27:d7:bb:9f:bf:c3:f7:78: 26:90:89:d5:6f:0f:19:ce:93:3a:fd:b7:49:fa:f4:bd:f1:eb: a0:cb:43:e2:3b:28:a6:0a:8e:3f:7e:c1:d9:a3:6f:03:35:a3: 85:6e:aa:37:0e:33:9e:aa:1c:ea:08:36:d8:7d:8b:cb:75:ee: 82:3d:21:e5:60:a6:50:9b:01:44:af:cb:8f:9c:a0:d3:a2:3f: 95:37:e9:7a:48:e9:95:b1:e2:af:3a:8e:fa:35:2f:74:5e:c1: 26:de:b0:3a:9a:66:81:4c:db:b1:81:8f:61:c6:fb:d2:46:75: 70:b7:c8:ce:78:28:bb:d4:1d:8b:68:95:80:2b:93:7f:dc:1e: 6a:4c:36:c2:61:95:30:2f:22:67:8b:1b:ba:e9:7e:67:a1:b9: 3b:5b:39:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD79QR5ZLM9okEndaRkr+9u2alSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjA3MjAyMDA2MTJaFw0yNjA3MjEyMjI1MTJaMDMxMTAvBgNV BAMTKEZENUFBODEwMUU4NTE5Q0RFNTYwNTYzODREMjc0MUY3ODc5NTMwQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh5eapFVCgtyr5siGMXY9Oi/+N QVf4q5Jpo4BmTX10lDNza7TMZTq0iovaPzmXt5kIBpST/1f87oKd1Z7xB0bWlea9 3WXA17LDK0M9/wwHYYPjyfIbK8NddK/iLwniM2Eb1Lt9SDHK6k+/lXUOg6Yo7h9y UC+bKDe20TgD2+2/vpqoOov5TO/FbpVD7G1YhwD4/sgsmGziLJxDqOxEFF4ww1LG nf2vdq+YbrIubP33+Fh52QLQkZM2IVp1eyHNOhPPXdL7FOJ8TSHPrXEk+r0DYDRS XOkpsptDnEiAa7nNul85WI6NQoB+9VudZBXH6oJIYzNhgChkuf2Bks1oMdGXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/VqoEB6FGc3lYFY4TSdB94eVMM8wHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEw54owBzaAKtaP/uSPcQ4fGdUKSrKB3q2i c8y4y1cQ2P6wrE3ETU77imkbpg3/0YIO3OGY+V8crjsl56ejvbRl9dGDSGod9AS4 pIXHGwR3erg3UvKA5bOTMmxHs84aILU8Rgon17ufv8P3eCaQidVvDxnOkzr9t0n6 9L3x66DLQ+I7KKYKjj9+wdmjbwM1o4VuqjcOM56qHOoINth9i8t17oI9IeVgplCb AUSvy4+coNOiP5U36XpI6ZWx4q86jvo1L3RewSbesDqaZoFM27GBj2HG+9JGdXC3 yM54KLvUHYtolYArk3/cHmpMNsJhlTAvImeLG7rpfmehuTtbOQU= -----END CERTIFICATE-----Generated at Tue Jul 21 08:32:16 2026 by rpki-client