$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: nmpvDfOxvIf0eMeotzuozf51XdQthT1M/eY8kX/N46g= Subject key identifier: 86:05:F0:45:B5:D7:36:D1:74:39:DD:14:A9:5B:DA:9D:3D:10:4C:4D Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 066F03F8A43981C0F4933D82E31DFA37F5C4B490 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: F7 Signing time: Wed 04 Nov 2026 14:16:00 +0000 Manifest this update: Wed 04 Nov 2026 14:11:00 +0000 Manifest next update: Thu 05 Nov 2026 16:42:00 +0000 Files and hashes: 1: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: 8oVHTZdCOs3OxjFPkx9KUrOd1QV+ua/VIEGJzglzPnw=) 2: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) 3: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:6f:03:f8:a4:39:81:c0:f4:93:3d:82:e3:1d:fa:37:f5:c4:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Nov 4 14:11:00 2026 GMT Not After : Nov 5 16:42:00 2026 GMT Subject: CN=8605F045B5D736D17439DD14A95BDA9D3D104C4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:b3:e5:39:51:f1:82:aa:1b:9a:fe:c5:cf:60: 5a:e9:0b:c4:52:11:ac:e1:f5:9f:19:9c:da:ae:66: 34:ff:12:db:67:c4:a6:81:e3:48:de:1f:f9:a5:24: de:0d:55:ca:66:78:a4:75:db:f8:2b:e2:80:22:95: dd:e4:d6:1a:73:ed:ab:a4:1b:4e:cd:ca:1c:76:08: bd:86:55:5e:b3:01:ff:f0:a2:27:da:9b:28:0f:d9: 62:bb:50:07:a2:b0:1b:95:c1:b4:fa:ed:8e:d7:37: 7e:0b:03:16:ff:b6:2a:e0:11:fa:ee:8a:02:ea:cb: 10:79:73:49:da:f3:43:73:26:51:f4:a1:a0:a1:59: d5:a9:80:bf:77:09:27:ef:58:85:11:6c:e9:ca:f3: b2:ad:04:5b:42:54:c3:7d:d2:72:1f:59:5c:ae:b0: 09:d6:67:06:0d:30:ae:87:44:14:eb:13:71:42:3a: 51:5c:31:a8:e7:b0:50:b0:90:d3:dc:70:0f:e8:9c: 73:be:29:d8:69:ef:31:98:ab:6a:75:8e:03:45:28: e5:a6:f9:e3:0d:32:e5:63:2f:51:43:a3:b3:9f:15: 71:82:b6:af:87:74:47:40:e9:be:61:84:63:4f:f3: eb:42:3b:7a:3e:5c:11:75:e5:ef:47:1c:ef:87:a7: 93:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:05:F0:45:B5:D7:36:D1:74:39:DD:14:A9:5B:DA:9D:3D:10:4C:4D X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:13:55:28:50:22:ef:c0:1a:09:5f:90:11:d9:06:48:8d:f5: f0:96:a4:57:62:eb:94:21:4c:15:bc:86:a3:07:11:94:e8:93: 22:37:be:70:27:41:6d:11:fb:20:61:28:88:a5:7e:b4:ed:62: 21:e6:fb:95:60:43:ab:89:dc:de:26:45:10:b8:5e:a6:be:d4: 33:1b:92:fd:d1:c0:3a:92:7a:cd:c9:45:50:60:f6:c5:ff:4a: 64:07:18:ce:dd:c6:73:5d:83:c3:d9:f4:90:01:a3:8a:95:e2: 36:d7:01:04:77:d9:24:5e:51:a2:26:4a:53:a8:32:1c:81:3f: 6f:89:d6:bd:5e:12:64:01:fa:3e:af:ac:d5:cd:42:8d:e1:28: 0c:4c:cc:0f:5f:06:4b:87:89:9d:56:bb:f7:03:dc:75:0d:a0: 0b:7b:01:15:82:d2:d7:36:ba:21:b6:c2:1d:a9:15:f7:cd:91: c9:c1:b2:11:15:44:67:80:19:5f:c9:15:e7:33:e3:55:8f:3f: 3c:fa:aa:d7:4e:72:c9:63:37:b5:15:75:98:05:e6:c8:4e:39: 41:ff:b6:d6:48:38:f4:1a:67:06:44:09:28:09:e3:7e:90:eb: 79:12:3e:75:21:55:01:88:9d:e3:fd:b8:d0:c3:03:af:35:55: cf:15:d5:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBm8D+KQ5gcD0kz2C4x36N/XEtJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjExMDQxNDExMDBaFw0yNjExMDUxNjQyMDBaMDMxMTAvBgNV BAMTKDg2MDVGMDQ1QjVENzM2RDE3NDM5REQxNEE5NUJEQTlEM0QxMDRDNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzs+U5UfGCqhua/sXPYFrpC8RS Eazh9Z8ZnNquZjT/EttnxKaB40jeH/mlJN4NVcpmeKR12/gr4oAild3k1hpz7auk G07Nyhx2CL2GVV6zAf/woifamygP2WK7UAeisBuVwbT67Y7XN34LAxb/tirgEfru igLqyxB5c0na80NzJlH0oaChWdWpgL93CSfvWIURbOnK87KtBFtCVMN90nIfWVyu sAnWZwYNMK6HRBTrE3FCOlFcMajnsFCwkNPccA/onHO+Kdhp7zGYq2p1jgNFKOWm +eMNMuVjL1FDo7OfFXGCtq+HdEdA6b5hhGNP8+tCO3o+XBF15e9HHO+Hp5PZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhgXwRbXXNtF0Od0UqVvanT0QTE0wHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYTVShQIu/AGglfkBHZBkiN9fCWpFdi65Qh TBW8hqMHEZTokyI3vnAnQW0R+yBhKIilfrTtYiHm+5VgQ6uJ3N4mRRC4Xqa+1DMb kv3RwDqSes3JRVBg9sX/SmQHGM7dxnNdg8PZ9JABo4qV4jbXAQR32SReUaImSlOo MhyBP2+J1r1eEmQB+j6vrNXNQo3hKAxMzA9fBkuHiZ1Wu/cD3HUNoAt7ARWC0tc2 uiG2wh2pFffNkcnBshEVRGeAGV/JFecz41WPPzz6qtdOcsljN7UVdZgF5shOOUH/ ttZIOPQaZwZECSgJ436Q63kSPnUhVQGIneP9uNDDA681Vc8V1WE= -----END CERTIFICATE-----Generated at Wed Nov 4 22:21:23 2026 by rpki-client