$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: fbXx+SFa6S71FR9x0GD63Hh8emKvXtdvKKVBmWIMSFk= Subject key identifier: B7:0D:C6:6B:27:DD:41:3A:47:7E:B7:7A:60:75:76:6B:74:08:06:26 Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 2039D640E02866DB1B1004B5E272BF786B7CBD0F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 04:53:37 +0000 Manifest this update: Mon 02 Nov 2026 04:48:37 +0000 Manifest next update: Tue 03 Nov 2026 06:01:37 +0000 Files and hashes: 1: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 2: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: lEgcovLwN/ABIeND0jEINy5rcQ/OZP0NvCsezAkcfxo=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 06:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:39:d6:40:e0:28:66:db:1b:10:04:b5:e2:72:bf:78:6b:7c:bd:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Nov 2 04:48:37 2026 GMT Not After : Nov 3 06:01:37 2026 GMT Subject: CN=B70DC66B27DD413A477EB77A6075766B74080626 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f2:47:5a:5a:92:07:d7:c1:d9:99:98:7d:d1: 98:1e:48:20:1d:09:7a:97:33:e1:f9:ee:33:cd:b4: 81:ee:71:91:b9:ef:50:02:3d:9a:9f:f4:2d:ab:50: 9a:6a:30:3e:82:45:3a:f0:f1:61:f2:ad:86:49:28: 09:53:61:65:5f:9b:14:2a:c9:8f:62:c7:8d:91:90: 70:24:ba:fe:6a:0d:3a:79:5e:70:1b:59:14:65:fd: d8:54:5a:be:85:3a:f4:c2:1f:76:da:33:a1:02:0d: 80:61:75:12:b6:0e:e7:7c:e7:6d:8d:77:ca:17:b5: 25:62:14:fc:da:a4:ab:42:be:d7:9f:85:bf:1a:9f: fb:29:91:c8:ef:10:c7:5e:6f:e4:7f:55:80:f2:42: 46:11:65:d3:70:5e:26:7a:9f:cc:24:ff:fd:b6:91: 17:4a:d3:a5:77:6e:8b:69:d5:d4:82:96:87:b0:a8: 92:a4:12:38:a8:c6:46:a6:73:5a:6a:1d:ec:20:11: 98:4f:1d:58:f2:4e:87:66:21:04:dd:ca:09:b6:ab: 99:25:15:5a:59:1d:d4:6f:9e:79:17:e5:c9:11:1c: 15:3c:4c:1f:e9:90:78:68:f0:73:d4:07:d7:3c:3f: c5:d1:a0:0d:a2:17:bd:6d:76:6f:3b:1f:98:1f:a3: ea:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0D:C6:6B:27:DD:41:3A:47:7E:B7:7A:60:75:76:6B:74:08:06:26 X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b0:81:28:6a:bf:e0:d7:09:d8:ff:6c:20:a0:e9:00:69:51: 25:b8:c9:b2:a8:99:dd:22:04:f2:0d:d6:74:d7:9b:4c:c0:34: fe:6b:98:73:f8:63:e0:ae:51:23:9c:3a:72:61:d7:44:fc:06: 1c:4b:28:e2:fa:bd:5d:5a:b3:4b:d5:48:b3:86:fd:40:c8:d4: 13:8a:be:67:08:60:2e:24:3d:45:52:59:8e:e2:76:4b:48:33: 2c:87:d2:ae:06:6f:e3:17:cb:16:22:60:ae:4d:97:b0:6d:09: 80:e0:6d:e3:6a:72:49:81:5c:62:34:43:c5:cb:3d:08:f9:82: d8:0c:2b:9e:a2:a3:a4:4c:1c:09:ee:ef:24:b6:30:8b:4d:f3: 1e:e7:cb:c8:45:11:05:b9:d9:1f:6e:e6:54:75:26:0b:7e:01: 68:59:5d:3b:40:bb:49:b7:a9:74:92:b1:2e:ba:d0:36:f3:ff: fa:a6:e1:9d:b3:22:d1:86:82:81:ee:a7:a9:0f:46:08:f6:0e: 7f:ce:90:65:4e:72:db:a5:33:3a:a8:35:9d:a2:19:be:c7:06: 4a:10:1c:1a:4b:73:f8:47:a4:ae:15:c6:b7:9c:e9:52:69:2d: 27:30:5b:ad:3e:52:89:78:19:c7:9d:5a:d7:76:48:fc:0e:dd: ff:60:9c:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDnWQOAoZtsbEAS14nK/eGt8vQ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjExMDIwNDQ4MzdaFw0yNjExMDMwNjAxMzdaMDMxMTAvBgNV BAMTKEI3MERDNjZCMjdERDQxM0E0NzdFQjc3QTYwNzU3NjZCNzQwODA2MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh8kdaWpIH18HZmZh90ZgeSCAd CXqXM+H57jPNtIHucZG571ACPZqf9C2rUJpqMD6CRTrw8WHyrYZJKAlTYWVfmxQq yY9ix42RkHAkuv5qDTp5XnAbWRRl/dhUWr6FOvTCH3baM6ECDYBhdRK2Dud8522N d8oXtSViFPzapKtCvtefhb8an/spkcjvEMdeb+R/VYDyQkYRZdNwXiZ6n8wk//22 kRdK06V3botp1dSCloewqJKkEjioxkamc1pqHewgEZhPHVjyTodmIQTdygm2q5kl FVpZHdRvnnkX5ckRHBU8TB/pkHho8HPUB9c8P8XRoA2iF71tdm87H5gfo+pZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtw3GayfdQTpHfrd6YHV2a3QIBiYwHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHawgShqv+DXCdj/bCCg6QBpUSW4ybKomd0i BPIN1nTXm0zANP5rmHP4Y+CuUSOcOnJh10T8BhxLKOL6vV1as0vVSLOG/UDI1BOK vmcIYC4kPUVSWY7idktIMyyH0q4Gb+MXyxYiYK5Nl7BtCYDgbeNqckmBXGI0Q8XL PQj5gtgMK56io6RMHAnu7yS2MItN8x7ny8hFEQW52R9u5lR1Jgt+AWhZXTtAu0m3 qXSSsS660Dbz//qm4Z2zItGGgoHup6kPRgj2Dn/OkGVOctulMzqoNZ2iGb7HBkoQ HBpLc/hHpK4Vxrec6VJpLScwW60+Uol4GcedWtd2SPwO3f9gnPo= -----END CERTIFICATE-----Generated at Mon Nov 2 14:16:27 2026 by rpki-client