$ rpki-client -vvf rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft File: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft (raw, json) Hash identifier: P6GDNwm/2+Q/ls4NTso2HiB5lXspxJxY/Pn0pHmOhuE= Subject key identifier: 97:BD:80:2C:DD:FB:E9:6E:DA:09:46:00:3C:DE:38:3F:9D:6B:16:D7 Authority key identifier: 85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 Certificate issuer: /CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Certificate serial: 5A14A7DAFA9D46AABB11C6F9C9DE61ECCF2C159F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:21:50 +0000 Manifest this update: Fri 19 Jun 2026 17:16:50 +0000 Manifest next update: Sat 20 Jun 2026 18:42:50 +0000 Files and hashes: 1: 3130332e3133322e35322e302f32342d3234203d3e20313338313233.roa (hash: 5z/bJ+/CuNEw4m9GqIpMgGnlawNQOmNZd7tIdNX/UD8=) 2: 85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl (hash: T4DseqwV01M7gJDyY43pf9593Qkq1OVo/HbFSYCWTOU=) 3: 3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (hash: MYHc1QilfD2U8Oz6IIqNh/TzUhL1fSoeXnQW/OCLsII=) 4: 3130332e3133322e35342e302f32342d3234203d3e20313338313233.roa (hash: epFZ7zWYLgQKVmQro1YL1zQJbgOEFFHEwNqHtx29BxM=) 5: 3130332e3133322e35332e302f32342d3234203d3e20313338313233.roa (hash: +B7APtjLCoUGlmZg2IX9a/3yBj6gC7Y5su6xqwGObds=) 6: 3130332e3133322e35322e302f32322d3234203d3e20313338313233.roa (hash: s667PtqoW0WKaw5tY6mNJ2X7kSPQ3a5nNNVlKXVkn2g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:42:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:14:a7:da:fa:9d:46:aa:bb:11:c6:f9:c9:de:61:ec:cf:2c:15:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D73D804E8B428E434B4D2A773BA02F5C60F5C3 Validity Not Before: Jun 19 17:16:50 2026 GMT Not After : Jun 20 18:42:50 2026 GMT Subject: CN=97BD802CDDFBE96EDA0946003CDE383F9D6B16D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:26:59:87:a6:1c:ea:8f:65:34:0a:f1:da:f8: fb:c8:5f:b4:e9:92:bb:2c:dc:d2:14:51:00:c8:5f: b6:97:35:82:2c:36:8a:3f:bc:ef:90:3e:ba:90:4d: 49:92:46:d5:a5:44:e1:12:b3:25:fe:d7:3b:8f:24: cd:e0:6d:ec:4d:9a:1d:6b:11:0e:ef:e0:00:f5:0f: 98:cc:60:c7:4f:6b:63:14:04:6c:5a:df:4b:cb:21: 00:d3:ca:bb:ff:48:f7:17:92:0e:2b:81:ce:fa:54: 99:2d:6c:0d:c2:a6:01:f8:37:4c:81:2c:fe:52:eb: 7a:72:0c:d0:68:f4:1b:02:33:b4:f7:42:67:a2:3d: 2a:f2:86:99:75:bf:2f:0f:df:c3:49:7a:92:e3:f7: 2b:0e:73:0b:07:69:58:47:e6:ca:db:5c:71:b2:30: 4e:0a:57:9c:bc:3d:b8:f8:f4:7c:c4:c8:3d:8d:6a: c3:48:3e:98:23:b8:b7:36:1d:46:c1:7c:eb:43:c0: a4:0b:45:66:ac:de:94:fc:75:74:75:71:f1:6a:fa: 66:fc:1e:ea:48:a7:56:8b:c6:28:90:16:e0:58:8d: 2e:7d:bf:31:07:24:ce:42:da:d1:e9:47:87:77:7e: a2:5c:73:4b:e2:e2:54:27:9b:5c:6c:b6:8e:5f:71: cf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:BD:80:2C:DD:FB:E9:6E:DA:09:46:00:3C:DE:38:3F:9D:6B:16:D7 X509v3 Authority Key Identifier: keyid:85:D7:3D:80:4E:8B:42:8E:43:4B:4D:2A:77:3B:A0:2F:5C:60:F5:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/85D73D804E8B428E434B4D2A773BA02F5C60F5C3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption de:b1:1a:32:2f:f7:f4:d6:d7:3b:13:09:7f:64:bd:90:23:45: cf:04:a3:71:70:c4:45:1b:4f:63:66:0e:50:ce:fb:88:09:ae: 92:16:0c:fd:d1:84:50:a6:02:89:b7:66:1f:a0:cd:3d:f2:ed: eb:87:2f:eb:f7:b9:d9:2c:14:c6:02:1c:38:80:76:bb:81:f6: 4b:ab:75:45:80:45:13:52:ae:70:4e:e7:1e:6f:80:b8:c7:3e: eb:c2:83:17:ac:a4:97:64:3a:b3:96:62:d8:40:78:fc:bd:8e: 20:cf:dd:22:4a:6d:f6:c7:e3:38:be:8d:7f:97:9b:41:71:bd: 1c:38:31:ff:93:0c:0b:95:4e:6f:8b:26:56:b9:f3:d5:2c:b1: 30:38:6e:6d:92:48:dd:d7:06:92:03:55:d0:61:46:be:17:aa: b1:f3:cc:b0:80:6b:20:32:7a:af:06:3a:9f:38:10:8a:55:4f: 23:79:a2:36:e3:20:ed:e1:36:64:2d:92:c6:b2:b4:76:ad:e3: 36:e6:00:11:7d:f4:43:84:0e:5b:30:8c:59:3b:db:7f:de:90: 1f:08:99:8f:8e:83:21:72:72:d5:85:dd:79:d2:85:5d:6e:99: 3a:42:d7:7a:8b:05:7e:27:b4:68:9d:b6:98:4a:d0:14:e5:18: 8f:e2:f4:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWhSn2vqdRqq7Ecb5yd5h7M8sFZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1 QzYwRjVDMzAeFw0yNjA2MTkxNzE2NTBaFw0yNjA2MjAxODQyNTBaMDMxMTAvBgNV BAMTKDk3QkQ4MDJDRERGQkU5NkVEQTA5NDYwMDNDREUzODNGOUQ2QjE2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkJlmHphzqj2U0CvHa+PvIX7Tp krss3NIUUQDIX7aXNYIsNoo/vO+QPrqQTUmSRtWlROESsyX+1zuPJM3gbexNmh1r EQ7v4AD1D5jMYMdPa2MUBGxa30vLIQDTyrv/SPcXkg4rgc76VJktbA3CpgH4N0yB LP5S63pyDNBo9BsCM7T3QmeiPSryhpl1vy8P38NJepLj9ysOcwsHaVhH5srbXHGy ME4KV5y8Pbj49HzEyD2NasNIPpgjuLc2HUbBfOtDwKQLRWas3pT8dXR1cfFq+mb8 HupIp1aLxiiQFuBYjS59vzEHJM5C2tHpR4d3fqJcc0vi4lQnm1xsto5fcc+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl72ALN376W7aCUYAPN44P51rFtcwHwYDVR0j BBgwFoAUhdc9gE6LQo5DS00qdzugL1xg9cMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGU5NmVkODktMmExNi00MTUxLWJmODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0 RThCNDI4RTQzNEI0RDJBNzczQkEwMkY1QzYwRjVDMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUQ3M0Q4MDRFOEI0MjhFNDM0QjREMkE3NzNCQTAyRjVDNjBG NUMzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGU5NmVkODktMmExNi00MTUxLWJm ODMtNTlkY2U1NjE0NjBjLzAvODVENzNEODA0RThCNDI4RTQzNEI0RDJBNzczQkEw MkY1QzYwRjVDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN6xGjIv9/TW1zsTCX9kvZAjRc8Eo3FwxEUb T2NmDlDO+4gJrpIWDP3RhFCmAom3Zh+gzT3y7euHL+v3udksFMYCHDiAdruB9kur dUWARRNSrnBO5x5vgLjHPuvCgxespJdkOrOWYthAePy9jiDP3SJKbfbH4zi+jX+X m0FxvRw4Mf+TDAuVTm+LJla589UssTA4bm2SSN3XBpIDVdBhRr4XqrHzzLCAayAy eq8GOp84EIpVTyN5ojbjIO3hNmQtksaytHat4zbmABF99EOEDlswjFk723/ekB8I mY+OgyFyctWF3XnShV1umTpC13qLBX4ntGidtphK0BTlGI/i9Dk= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:17 2026 by rpki-client