$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: KQD/fMxzFo4ZU2vaoXt/dGb/JYoyt/GaXdcIHWwyZxY= Subject key identifier: 8A:F0:51:F1:70:B1:39:B6:0D:C8:14:77:00:60:ED:1E:83:F6:AD:4F Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 5D957A37926781B312E3DA12E25BB2BAD94E0563 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 02:44:11 +0000 Manifest this update: Tue 21 Jul 2026 02:39:11 +0000 Manifest next update: Wed 22 Jul 2026 05:22:11 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) 2: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: bV1rHiEBkKMHs+1fSBLlxxDlvWkUA5yUk+1lbxLfNbk=) 3: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:95:7a:37:92:67:81:b3:12:e3:da:12:e2:5b:b2:ba:d9:4e:05:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Jul 21 02:39:11 2026 GMT Not After : Jul 22 05:22:11 2026 GMT Subject: CN=8AF051F170B139B60DC814770060ED1E83F6AD4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e4:81:94:0a:3f:32:77:80:d4:45:76:fa:fc: 22:b2:94:ba:b5:e3:79:44:07:1d:71:a8:a8:aa:e8: 91:9d:da:f7:7e:8b:5a:71:0c:27:67:c9:f8:b0:9f: e1:a2:39:c1:c9:71:eb:f7:71:32:1f:29:ff:f6:16: 7e:84:eb:60:dc:14:f2:f6:ca:17:3e:bd:17:d5:87: 9e:a2:02:da:1d:4c:77:6a:21:69:c3:6c:e0:f7:be: 43:10:86:6c:27:51:36:1f:6d:e6:10:1b:89:a6:d9: 05:a3:ac:df:7d:1e:14:32:2d:ea:ba:11:f9:a2:1d: d9:33:d4:73:04:d1:e2:81:4c:04:2f:89:16:3f:02: f6:ab:6e:63:8f:1c:d3:2b:54:ed:5b:05:04:18:5b: 5c:d4:c8:b1:b8:25:0e:8f:c5:8b:0b:59:65:1f:a9: 17:db:f3:ee:f1:43:4b:29:61:0f:e2:4f:4b:53:cd: 04:5e:1d:6a:32:7f:46:57:bf:70:e2:19:86:8e:d3: 0f:49:e6:cf:d6:7d:7e:cf:af:49:8e:af:52:fc:78: e0:8f:a2:91:02:52:3d:41:bd:0c:9b:73:9e:0f:e8: 07:8a:a1:be:02:33:71:8c:a5:86:9d:0e:ea:4c:28: 0f:10:4c:0a:a5:69:45:28:ad:8f:77:c7:cd:85:11: 95:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:51:F1:70:B1:39:B6:0D:C8:14:77:00:60:ED:1E:83:F6:AD:4F X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:77:5a:db:68:f6:e3:43:ab:6c:6e:5a:d6:13:00:b4:fd:10: 6e:4c:76:df:e7:b2:71:7f:cd:7a:a1:e5:96:03:81:ad:f1:78: 33:88:b2:e3:f9:98:9c:e7:4e:ed:e9:38:04:75:5e:82:5a:32: 41:01:4d:7e:bc:d9:e9:14:b8:bb:52:cd:67:cb:34:30:47:39: 09:50:15:46:46:76:e3:80:f2:cb:d7:d7:77:e6:b0:8b:6f:0a: 14:1b:ea:3e:12:77:ec:d4:f7:30:7e:70:cf:a8:63:ce:3a:9c: d5:34:bd:66:4d:4d:f2:1b:40:39:20:67:6e:e5:a9:9d:77:13: a0:c7:b8:8d:99:bb:75:04:52:72:a6:75:2c:d2:bc:53:60:21: 88:f4:f6:d7:70:19:80:52:fb:99:42:ba:d1:23:b6:9a:6f:5a: 78:28:11:6b:ed:79:5d:d5:7f:4a:e6:35:62:c0:2f:01:fd:67: c1:10:12:ef:04:bb:04:ef:5d:64:15:56:a3:23:06:75:33:94: e2:0c:ae:c7:40:5f:8a:3c:d6:cc:34:f2:89:21:32:0f:e3:ac: 40:5a:08:3d:7d:34:1d:4c:5e:6b:93:fe:ba:f3:0b:d6:36:f1: 67:39:7f:a6:58:f7:a2:f5:f6:ad:c6:90:9f:31:e2:63:cf:28: 99:82:70:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXZV6N5JngbMS49oS4luyutlOBWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA3MjEwMjM5MTFaFw0yNjA3MjIwNTIyMTFaMDMxMTAvBgNV BAMTKDhBRjA1MUYxNzBCMTM5QjYwREM4MTQ3NzAwNjBFRDFFODNGNkFENEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv5IGUCj8yd4DURXb6/CKylLq1 43lEBx1xqKiq6JGd2vd+i1pxDCdnyfiwn+GiOcHJcev3cTIfKf/2Fn6E62DcFPL2 yhc+vRfVh56iAtodTHdqIWnDbOD3vkMQhmwnUTYfbeYQG4mm2QWjrN99HhQyLeq6 EfmiHdkz1HME0eKBTAQviRY/AvarbmOPHNMrVO1bBQQYW1zUyLG4JQ6PxYsLWWUf qRfb8+7xQ0spYQ/iT0tTzQReHWoyf0ZXv3DiGYaO0w9J5s/WfX7Pr0mOr1L8eOCP opECUj1BvQybc54P6AeKob4CM3GMpYadDupMKA8QTAqlaUUorY93x82FEZUBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivBR8XCxObYNyBR3AGDtHoP2rU8wHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE93Wtto9uNDq2xuWtYTALT9EG5Mdt/nsnF/ zXqh5ZYDga3xeDOIsuP5mJznTu3pOAR1XoJaMkEBTX682ekUuLtSzWfLNDBHOQlQ FUZGduOA8svX13fmsItvChQb6j4Sd+zU9zB+cM+oY846nNU0vWZNTfIbQDkgZ27l qZ13E6DHuI2Zu3UEUnKmdSzSvFNgIYj09tdwGYBS+5lCutEjtppvWngoEWvteV3V f0rmNWLALwH9Z8EQEu8EuwTvXWQVVqMjBnUzlOIMrsdAX4o81sw08okhMg/jrEBa CD19NB1MXmuT/rrzC9Y28Wc5f6ZY96L19q3GkJ8x4mPPKJmCcLM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:23:59 2026 by rpki-client