$ rpki-client -vvvf rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft File: 85638E4C723F993851F22E4C79D5E467D64EF6E5.mft (raw, json) Hash identifier: MB4uupcjqNbBNouCFfGAmJ/qcgrYn3RCR3cx1zgQKQM= Subject key identifier: 84:4C:7C:A4:2F:9F:36:C0:48:9F:35:1F:92:74:45:AE:6E:FF:B8:2B Authority key identifier: 85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 Certificate issuer: /CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Certificate serial: 6159B3A4E26F39C399AF5CEEC93927EF090635C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 09:20:14 +0000 Manifest this update: Thu 17 Sep 2026 09:15:14 +0000 Manifest next update: Fri 18 Sep 2026 11:01:14 +0000 Files and hashes: 1: 85638E4C723F993851F22E4C79D5E467D64EF6E5.crl (hash: MGmmpAfcroPbVl87FYE6KrzZVphgiO+M1TPvB8LSdQs=) 2: 3230332e3131312e3235342e302f32332d3234203d3e20313531393931.roa (hash: otj2sIGnWzWgRnhmdcO20guHoUVJ8w7hWeCj8su+1ls=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:59:b3:a4:e2:6f:39:c3:99:af:5c:ee:c9:39:27:ef:09:06:35:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85638E4C723F993851F22E4C79D5E467D64EF6E5 Validity Not Before: Sep 17 09:15:14 2026 GMT Not After : Sep 18 11:01:14 2026 GMT Subject: CN=844C7CA42F9F36C0489F351F927445AE6EFFB82B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:5a:8b:fa:02:a8:40:7c:35:dd:2c:c1:36:9f: 24:b2:7d:28:11:83:d4:06:8c:dc:d8:2b:4f:67:19: 34:80:6b:b7:82:1c:fc:96:b3:26:e9:1f:07:e3:2c: 99:76:b9:8b:82:14:fe:00:3b:bf:64:b4:35:35:47: 4b:d3:76:3c:ea:a4:3e:be:bc:05:4d:21:bb:65:ee: a3:f2:64:b2:ec:1d:4f:0c:88:3b:cf:80:da:9d:22: 28:8c:1d:88:53:78:83:ee:66:3f:8c:99:aa:a7:09: 2c:63:85:c1:7b:49:66:1b:8f:2b:1a:91:f0:34:fd: a1:65:b4:b0:f0:18:86:9d:23:eb:60:05:28:10:90: e4:69:58:c8:07:89:05:c4:08:b7:57:60:34:32:0d: 00:12:96:42:48:7d:ad:22:07:6c:1e:48:8c:b3:f9: 0a:b3:3a:52:2f:09:e6:ac:be:e7:93:35:65:12:74: 0e:2b:7f:02:f7:15:5d:a3:cb:97:df:34:ce:d8:e8: 68:41:a0:07:7e:06:3f:2b:ca:5b:35:b4:08:b3:7a: 79:e7:09:7e:24:5b:ce:8a:e8:3f:58:10:be:3b:af: 50:b6:5e:43:b5:1b:00:28:15:a3:18:0f:d4:99:20: 9e:d1:b0:ec:d0:60:c4:fb:72:d6:68:eb:b4:93:6f: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:4C:7C:A4:2F:9F:36:C0:48:9F:35:1F:92:74:45:AE:6E:FF:B8:2B X509v3 Authority Key Identifier: keyid:85:63:8E:4C:72:3F:99:38:51:F2:2E:4C:79:D5:E4:67:D6:4E:F6:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85638E4C723F993851F22E4C79D5E467D64EF6E5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/04e377b9-5889-4cb3-a4c9-08712b4f66fc/0/85638E4C723F993851F22E4C79D5E467D64EF6E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:15:94:78:23:0e:d8:1c:0d:04:b6:03:ec:24:19:dc:ef:88: 58:2d:b1:59:b1:c2:9e:5f:b1:7f:81:c6:10:9d:76:2d:5b:9f: e5:51:29:ae:0c:bb:41:65:9e:8b:2c:0b:bd:b0:c7:e1:28:e9: fe:67:ab:d7:15:91:3b:1b:cf:e6:ed:ca:b1:7f:90:48:77:66: a4:f4:e1:38:91:6d:29:fc:60:58:81:ef:83:66:48:e9:f2:5d: de:a6:3c:ff:84:12:a0:d5:74:d5:25:8c:38:6d:90:24:68:62: 2d:0f:49:e8:6e:3a:eb:e7:13:37:e7:5e:ab:4f:51:67:9b:41: 3e:8c:ac:d7:37:89:9d:4d:af:58:d0:59:e9:11:eb:7b:ff:f1: cf:e6:05:d1:dd:26:48:3e:d7:b0:a9:78:22:1a:7a:ff:1f:dd: 56:43:e6:b5:dc:d5:3e:43:5e:a3:09:8f:ab:18:9b:91:1e:b7: e1:58:7b:1b:74:ab:e3:4a:94:2b:83:46:cd:c3:55:8b:bf:88: 19:ef:2f:b0:a5:01:be:6a:4f:59:29:75:da:be:d0:f1:c0:34: 83:1e:82:56:e5:86:21:0d:cf:25:82:21:52:3c:a6:4f:7a:63: db:f1:e5:a7:21:97:58:67:bc:d2:72:25:7e:6a:b3:b7:26:b0: a7:d1:1a:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVmzpOJvOcOZr1zuyTkn7wkGNcEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0NjdE NjRFRjZFNTAeFw0yNjA5MTcwOTE1MTRaFw0yNjA5MTgxMTAxMTRaMDMxMTAvBgNV BAMTKDg0NEM3Q0E0MkY5RjM2QzA0ODlGMzUxRjkyNzQ0NUFFNkVGRkI4MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuWov6AqhAfDXdLME2nySyfSgR g9QGjNzYK09nGTSAa7eCHPyWsybpHwfjLJl2uYuCFP4AO79ktDU1R0vTdjzqpD6+ vAVNIbtl7qPyZLLsHU8MiDvPgNqdIiiMHYhTeIPuZj+MmaqnCSxjhcF7SWYbjysa kfA0/aFltLDwGIadI+tgBSgQkORpWMgHiQXECLdXYDQyDQASlkJIfa0iB2weSIyz +QqzOlIvCeasvueTNWUSdA4rfwL3FV2jy5ffNM7Y6GhBoAd+Bj8ryls1tAizennn CX4kW86K6D9YEL47r1C2XkO1GwAoFaMYD9SZIJ7RsOzQYMT7ctZo67STb7nPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEx8pC+fNsBInzUfknRFrm7/uCswHwYDVR0j BBgwFoAUhWOOTHI/mThR8i5MedXkZ9ZO9uUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDRlMzc3YjktNTg4OS00Y2IzLWE0YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3 MjNGOTkzODUxRjIyRTRDNzlENUU0NjdENjRFRjZFNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTYzOEU0QzcyM0Y5OTM4NTFGMjJFNEM3OUQ1RTQ2N0Q2NEVG NkU1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDRlMzc3YjktNTg4OS00Y2IzLWE0 YzktMDg3MTJiNGY2NmZjLzAvODU2MzhFNEM3MjNGOTkzODUxRjIyRTRDNzlENUU0 NjdENjRFRjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMVlHgjDtgcDQS2A+wkGdzviFgtsVmxwp5f sX+BxhCddi1bn+VRKa4Mu0FlnossC72wx+Eo6f5nq9cVkTsbz+btyrF/kEh3ZqT0 4TiRbSn8YFiB74NmSOnyXd6mPP+EEqDVdNUljDhtkCRoYi0PSehuOuvnEzfnXqtP UWebQT6MrNc3iZ1Nr1jQWekR63v/8c/mBdHdJkg+17CpeCIaev8f3VZD5rXc1T5D XqMJj6sYm5Eet+FYext0q+NKlCuDRs3DVYu/iBnvL7ClAb5qT1kpddq+0PHANIMe glblhiENzyWCIVI8pk96Y9vx5achl1hnvNJyJX5qs7cmsKfRGos= -----END CERTIFICATE-----Generated at Thu Sep 17 14:04:10 2026 by rpki-client