$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft File: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft (raw, json) Hash identifier: qXUxvWVRGLli7HQ8xNahZyDRFMIf3mNhRU+56dKR8jU= Subject key identifier: F7:4B:B7:5C:DB:62:F6:7C:89:2D:D3:F0:C6:E2:BC:EB:AE:BA:FA:7A Authority key identifier: D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 Certificate issuer: /CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Certificate serial: 01290FA655D8EB324DCEBA0AFDE1E478E2C62E60 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft Manifest number: E7 Signing time: Wed 21 Oct 2026 17:05:19 +0000 Manifest this update: Wed 21 Oct 2026 17:00:18 +0000 Manifest next update: Thu 22 Oct 2026 17:20:18 +0000 Files and hashes: 1: 33362e35302e34362e302f32332d3233203d3e20313338383838.roa (hash: /7DADKxkcEneVChkCCyUD/ZC0G20xDnhNSvZJoeZ1RA=) 2: 33362e35302e34362e302f32342d3234203d3e20313338383838.roa (hash: Nvdk0iQE3TVdSwCANLKWH60xsOqyH90GO9904bD5/jk=) 3: D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl (hash: leAuAy19aPrDnIm4R+AE9TAdGBS3OaF2AtBPRUnnFr8=) 4: 33362e35302e34372e302f32342d3234203d3e20313338383838.roa (hash: i4qKsTrQYXXhXKXalOlOEUcc525wPy7zaNFMk5Bgx/c=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 22 Oct 2026 09:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:29:0f:a6:55:d8:eb:32:4d:ce:ba:0a:fd:e1:e4:78:e2:c6:2e:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F97EC289823A0FEC59A16FEDFA09F72EBC835 Validity Not Before: Oct 21 17:00:18 2026 GMT Not After : Oct 22 17:20:18 2026 GMT Subject: CN=F74BB75CDB62F67C892DD3F0C6E2BCEBAEBAFA7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:55:5d:70:df:4f:ac:0a:e6:f2:b9:b3:e0:bb: 1a:ce:1c:f3:f7:b7:3d:8f:9f:d0:d9:10:40:10:57: ad:d8:aa:3b:8c:8b:89:56:0d:ab:93:03:ca:a5:13: 16:d3:4c:e1:b9:73:2e:69:02:0a:39:8c:82:f0:73: bb:c2:01:01:f1:64:f9:ba:a0:22:96:02:4a:34:8b: 6d:85:63:0c:60:62:6f:f6:5d:01:12:52:72:e1:80: e8:c6:ed:f2:e4:7c:68:d9:a8:53:72:f0:a7:8b:4f: 3d:df:fb:cf:41:87:28:3b:cf:3f:0d:87:30:93:da: 92:ad:cb:91:51:71:3f:1b:c6:c5:3d:43:69:bf:f8: e6:0c:bd:01:25:b2:3a:56:c1:74:30:e4:55:8b:3d: 56:b1:64:9f:16:ac:4f:1f:72:3f:fb:71:e5:e2:cb: dd:31:61:b2:1d:a7:19:d6:cb:ff:c0:91:ae:cf:df: 66:70:db:73:43:e3:fd:09:b4:d3:95:cf:5f:25:42: 44:a4:b4:4f:96:e8:f6:2d:66:af:7e:7f:09:e7:83: 5c:d8:ec:b6:1d:1a:89:b3:fc:30:d0:9d:07:92:56: ba:ba:12:39:6c:1c:f1:99:39:c1:4a:34:15:1d:17: 28:4d:c8:65:6d:e2:63:c9:4b:52:21:e3:67:2f:fb: b7:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:4B:B7:5C:DB:62:F6:7C:89:2D:D3:F0:C6:E2:BC:EB:AE:BA:FA:7A X509v3 Authority Key Identifier: keyid:D8:5F:97:EC:28:98:23:A0:FE:C5:9A:16:FE:DF:A0:9F:72:EB:C8:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0268462e-bfa5-4337-9153-c556d9d771fa/0/D85F97EC289823A0FEC59A16FEDFA09F72EBC835.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:fc:a2:63:5c:f1:b3:36:5b:4a:6a:9e:de:13:f4:95:31:6f: 4c:1a:9f:11:ff:6c:d9:2f:bb:9d:dc:12:c7:45:32:16:87:66: 41:b5:c9:7f:0a:bb:00:6d:d1:b5:2b:50:29:34:6f:a4:e0:fa: cc:dd:39:76:2e:c4:9a:f3:95:75:23:77:af:4b:5e:67:c0:84: 5e:e4:01:dc:a4:bf:7f:a0:2b:38:dd:a1:67:4f:7a:a6:fe:40: 83:f7:cd:76:87:f9:e6:2a:60:8f:7f:26:75:5b:7c:c0:e5:e7: 67:d3:88:17:8f:13:3e:7e:bc:5b:9d:99:74:18:f2:84:cd:ed: 52:21:ea:2c:ea:74:96:7b:a3:78:d2:b5:81:28:c6:44:0a:ef: ec:6d:bf:80:4f:ef:2d:9a:b9:53:b8:45:d0:bf:f3:89:54:0f: 92:30:9b:b9:84:66:48:cd:ad:15:a0:da:cc:cf:38:ae:da:e7: 63:bc:53:34:f3:f0:d3:8f:0d:14:84:76:18:50:5c:41:98:81: f0:42:c5:af:71:a9:94:15:09:3d:a2:92:36:14:15:76:c3:fb: cc:83:86:3c:a8:e3:96:6f:5c:cb:6b:8b:87:a7:df:39:63:6a: fe:ee:d8:e2:d5:59:48:9a:a3:45:93:e6:cc:94:8d:39:d6:31: f6:ec:bb:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUASkPplXY6zJNzroK/eHkeOLGLmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3 MkVCQzgzNTAeFw0yNjEwMjExNzAwMThaFw0yNjEwMjIxNzIwMThaMDMxMTAvBgNV BAMTKEY3NEJCNzVDREI2MkY2N0M4OTJERDNGMEM2RTJCQ0VCQUVCQUZBN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVV1w30+sCubyubPguxrOHPP3 tz2Pn9DZEEAQV63YqjuMi4lWDauTA8qlExbTTOG5cy5pAgo5jILwc7vCAQHxZPm6 oCKWAko0i22FYwxgYm/2XQESUnLhgOjG7fLkfGjZqFNy8KeLTz3f+89Bhyg7zz8N hzCT2pKty5FRcT8bxsU9Q2m/+OYMvQElsjpWwXQw5FWLPVaxZJ8WrE8fcj/7ceXi y90xYbIdpxnWy//Aka7P32Zw23ND4/0JtNOVz18lQkSktE+W6PYtZq9+fwnng1zY 7LYdGomz/DDQnQeSVrq6EjlsHPGZOcFKNBUdFyhNyGVt4mPJS1Ih42cv+7fRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90u3XNti9nyJLdPwxuK86666+nowHwYDVR0j BBgwFoAU2F+X7CiYI6D+xZoW/t+gn3LryDUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDI2ODQ2MmUtYmZhNS00MzM3LTkxNTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMy ODk4MjNBMEZFQzU5QTE2RkVERkEwOUY3MkVCQzgzNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVGOTdFQzI4OTgyM0EwRkVDNTlBMTZGRURGQTA5RjcyRUJD ODM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDI2ODQ2MmUtYmZhNS00MzM3LTkx NTMtYzU1NmQ5ZDc3MWZhLzAvRDg1Rjk3RUMyODk4MjNBMEZFQzU5QTE2RkVERkEw OUY3MkVCQzgzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGf8omNc8bM2W0pqnt4T9JUxb0wanxH/bNkv u53cEsdFMhaHZkG1yX8KuwBt0bUrUCk0b6Tg+szdOXYuxJrzlXUjd69LXmfAhF7k Adykv3+gKzjdoWdPeqb+QIP3zXaH+eYqYI9/JnVbfMDl52fTiBePEz5+vFudmXQY 8oTN7VIh6izqdJZ7o3jStYEoxkQK7+xtv4BP7y2auVO4RdC/84lUD5Iwm7mEZkjN rRWg2szPOK7a52O8UzTz8NOPDRSEdhhQXEGYgfBCxa9xqZQVCT2ikjYUFXbD+8yD hjyo45ZvXMtri4en3zljav7u2OLVWUiao0WT5syUjTnWMfbsuyE= -----END CERTIFICATE-----Generated at Wed Oct 21 21:13:31 2026 by rpki-client