$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: ICIMHvunwI4ITDP1Lx6lv3OJKQOp6FKIljeOya/XQRI= Subject key identifier: 36:A4:0D:7D:A7:47:78:4A:ED:7B:1E:5E:82:85:2D:F8:7E:87:1E:C3 Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 631C224B37EB63E110B3E4ACE4965FC880F23514 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: EC Signing time: Sun 25 Oct 2026 14:19:29 +0000 Manifest this update: Sun 25 Oct 2026 14:14:29 +0000 Manifest next update: Mon 26 Oct 2026 14:19:29 +0000 Files and hashes: 1: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) 2: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 3: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 4: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: vqQA6eN6KsjfpzO9SeSaZJ18ToEwmfkMPIFRyLNrUQg=) 5: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) 6: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:1c:22:4b:37:eb:63:e1:10:b3:e4:ac:e4:96:5f:c8:80:f2:35:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: Oct 25 14:14:29 2026 GMT Not After : Oct 26 14:19:29 2026 GMT Subject: CN=36A40D7DA747784AED7B1E5E82852DF87E871EC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a6:84:33:65:e5:4d:3a:53:9a:f7:db:f0:cd: d3:1a:fd:53:ef:80:52:f2:8f:da:25:98:b5:32:01: c7:b7:41:88:4c:32:45:10:e2:7d:2a:fc:ac:fd:e1: 5b:1a:12:92:e6:ef:1c:e5:f6:e6:61:67:8d:96:71: 89:8e:ac:89:05:98:1b:fa:b3:4c:ce:3b:e6:30:ff: 22:e5:6c:77:8a:e5:ff:08:4c:5a:db:54:db:26:52: b8:f9:46:33:89:4e:f0:93:f9:cd:8a:d8:de:27:c1: a4:13:3f:57:24:78:ac:8b:03:70:2f:e0:c3:fd:5e: 1e:19:d9:92:83:3e:d8:b9:bf:94:99:7a:01:86:37: df:9e:09:55:e9:d6:00:e6:4c:82:c4:d5:c7:bc:2c: b6:43:a6:91:51:32:b1:d1:47:a2:fc:79:28:0a:92: 59:b8:f4:2f:b8:6b:c2:8d:27:e9:f1:68:3c:f7:25: 3a:13:4d:3e:51:cd:b3:82:bc:73:c2:2a:95:c4:07: df:d2:eb:db:28:07:4a:ea:dc:1f:62:6a:fb:6d:78: c8:2e:2b:b8:c7:8c:f6:c7:00:71:06:02:fe:f2:5b: d2:cd:32:b1:29:2c:02:2c:ac:58:e5:94:a8:67:e0: ac:23:16:fd:9a:1c:7e:08:71:4e:02:e2:38:48:82: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:A4:0D:7D:A7:47:78:4A:ED:7B:1E:5E:82:85:2D:F8:7E:87:1E:C3 X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:3d:e9:30:f4:9b:16:33:8d:03:82:d9:8b:59:db:08:71:e9: e8:42:fc:8f:18:27:c7:57:6a:3a:a6:95:bf:38:1f:53:13:9a: 91:c0:60:33:a8:0f:9d:03:30:06:f6:5b:4a:6c:8c:a9:48:57: 43:dc:90:d2:62:b2:86:dc:ad:5e:81:76:9b:1c:fb:ea:55:30: 44:d8:9e:2f:49:3a:d7:f4:d7:07:38:4f:08:1c:31:13:c9:02: 42:54:ad:3f:c4:dd:8d:65:a5:37:a4:04:0b:81:be:c4:9f:02: bf:b0:22:4f:cc:4d:82:37:23:08:c3:5d:31:b6:d4:cf:8e:ba: bf:1f:41:65:2b:30:f2:e2:e2:6f:e1:33:c7:50:de:6e:64:4b: 57:ea:0d:b6:73:c5:2e:da:4b:27:63:b7:4e:ca:a4:bf:3e:b5: 1e:62:e8:19:77:63:e3:bc:d6:69:eb:6c:87:4c:49:95:df:e6: 8d:8a:89:76:6b:c7:a2:fe:cc:9c:21:cd:dd:f1:93:82:20:37: 94:50:12:67:9b:21:ef:b9:2c:02:60:db:56:0b:29:74:ff:f4: 67:18:84:33:00:de:b7:06:39:b6:48:fe:70:6d:10:45:45:99: 3c:04:fc:bc:d7:41:95:01:27:e6:ac:3f:64:9c:51:8b:6b:df: 5f:cc:be:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYxwiSzfrY+EQs+Ss5JZfyIDyNRQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjEwMjUxNDE0MjlaFw0yNjEwMjYxNDE5MjlaMDMxMTAvBgNV BAMTKDM2QTQwRDdEQTc0Nzc4NEFFRDdCMUU1RTgyODUyREY4N0U4NzFFQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGpoQzZeVNOlOa99vwzdMa/VPv gFLyj9olmLUyAce3QYhMMkUQ4n0q/Kz94VsaEpLm7xzl9uZhZ42WcYmOrIkFmBv6 s0zOO+Yw/yLlbHeK5f8ITFrbVNsmUrj5RjOJTvCT+c2K2N4nwaQTP1ckeKyLA3Av 4MP9Xh4Z2ZKDPti5v5SZegGGN9+eCVXp1gDmTILE1ce8LLZDppFRMrHRR6L8eSgK klm49C+4a8KNJ+nxaDz3JToTTT5RzbOCvHPCKpXEB9/S69soB0rq3B9iavtteMgu K7jHjPbHAHEGAv7yW9LNMrEpLAIsrFjllKhn4KwjFv2aHH4IcU4C4jhIgojbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNqQNfadHeErtex5egoUt+H6HHsMwHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI096TD0mxYzjQOC2YtZ2whx6ehC/I8YJ8dX ajqmlb84H1MTmpHAYDOoD50DMAb2W0psjKlIV0PckNJisobcrV6Bdpsc++pVMETY ni9JOtf01wc4TwgcMRPJAkJUrT/E3Y1lpTekBAuBvsSfAr+wIk/MTYI3IwjDXTG2 1M+Our8fQWUrMPLi4m/hM8dQ3m5kS1fqDbZzxS7aSydjt07KpL8+tR5i6Bl3Y+O8 1mnrbIdMSZXf5o2KiXZrx6L+zJwhzd3xk4IgN5RQEmebIe+5LAJg21YLKXT/9GcY hDMA3rcGObZI/nBtEEVFmTwE/LzXQZUBJ+asP2ScUYtr31/Mvoc= -----END CERTIFICATE-----Generated at Sun Oct 25 20:56:05 2026 by rpki-client