$ rpki-client -vvvf rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft File: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft (raw, json) Hash identifier: 4KwF6QKVbgLtsy2kKtuZaH5zXQF14RXK9GkcQeJZEFw= Subject key identifier: F9:F7:91:4F:45:24:D3:AA:11:53:0B:15:86:E4:D0:9F:BC:63:FE:71 Authority key identifier: 85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 Certificate issuer: /CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Certificate serial: 0B636A35FBDAE4E2D6BA961C7ECCC88A9CD0D2DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft Manifest number: B9 Signing time: Wed 16 Sep 2026 15:43:30 +0000 Manifest this update: Wed 16 Sep 2026 15:38:30 +0000 Manifest next update: Thu 17 Sep 2026 19:22:30 +0000 Files and hashes: 1: 85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl (hash: r7BUBgS/WY9Ew+UBLFGBO3dX1KPxtqu36Svic4K3CXw=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: OmTMu2442b172ucsFf/mMUYIo/5ux22+t2Y1lTl29zM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:22:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:63:6a:35:fb:da:e4:e2:d6:ba:96:1c:7e:cc:c8:8a:9c:d0:d2:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2 Validity Not Before: Sep 16 15:38:30 2026 GMT Not After : Sep 17 19:22:30 2026 GMT Subject: CN=F9F7914F4524D3AA11530B1586E4D09FBC63FE71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:20:b7:ff:0c:b0:cd:f4:13:fc:f5:dd:fe:43: 7e:d7:75:34:29:7c:dd:ef:0f:bb:6d:f3:35:93:5d: 45:07:0d:a7:d3:b6:2e:2e:04:db:16:90:84:78:ca: 89:9f:49:00:e1:30:b3:0d:db:47:40:64:c0:ce:2f: 2b:bc:ee:6f:d6:14:80:ef:fa:33:15:11:6d:ad:b2: ff:c2:b1:2c:37:6b:46:46:51:3d:21:11:76:84:e0: 7f:af:0a:bb:a3:cc:8b:10:95:7c:11:e3:c8:d9:91: 97:34:e5:0b:08:b3:ce:d9:96:8e:08:0a:2f:3c:71: f9:87:a7:78:87:05:ca:c0:a7:43:6b:61:5a:55:17: 89:ca:49:11:5f:2c:81:1b:b5:1a:76:6d:28:70:c4: b0:b5:da:cb:3c:a2:ea:02:c3:a2:18:cd:fe:a9:c0: f8:fb:b0:ad:4b:25:06:d8:5a:72:af:2a:68:da:15: cb:4b:05:81:09:c8:59:f3:44:3a:de:c6:c0:98:15: e2:f0:ff:76:42:9b:67:97:57:8f:2f:6d:4c:a3:d3: d8:1f:18:1b:a4:81:0e:a5:1b:2d:4c:27:b0:f2:46: 5f:ac:8a:68:e9:cd:7c:79:96:a7:bc:90:9b:3a:4c: ba:3e:8c:4a:a1:31:26:76:11:6c:6c:a9:d3:e6:92: 22:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:F7:91:4F:45:24:D3:AA:11:53:0B:15:86:E4:D0:9F:BC:63:FE:71 X509v3 Authority Key Identifier: keyid:85:B9:A2:B4:A4:F3:73:9C:8F:C0:3E:51:02:5A:2B:68:BC:76:AB:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/85B9A2B4A4F3739C8FC03E51025A2B68BC76ABF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:40:95:3a:a5:78:70:06:55:ed:fb:ba:21:10:ab:08:dc:cf: e6:5a:94:a1:5c:f9:8b:90:15:10:fb:23:a7:90:b8:4c:76:62: 21:67:b8:af:b6:96:7f:5d:ee:fb:37:d6:81:8f:7a:39:59:a2: 10:1b:37:e5:8b:77:5b:fa:14:74:fd:3f:86:9a:69:c1:04:f1: a0:0a:d3:32:31:75:0d:2f:fc:f8:4d:7e:6c:02:4c:99:71:22: 0b:a3:a5:43:71:f4:8a:6a:b7:bd:1c:3a:f5:0d:1b:e4:e0:da: e8:4a:4d:e3:31:20:ec:2e:f6:63:5d:b1:34:59:27:4d:9a:60: a2:d2:2f:5e:5e:dc:ba:06:45:03:bb:6e:4f:b3:c3:7f:db:ed: 63:57:c2:28:bc:81:18:06:bd:40:32:5f:99:4e:18:30:04:51: f7:c0:c7:41:33:1d:73:41:02:a0:c4:89:7a:b9:bc:52:9b:5d: 96:77:3b:7c:ab:86:aa:0c:3d:c2:27:9f:5a:5b:f0:f3:25:01: 4f:74:59:87:94:ba:e6:69:b4:95:26:e9:8b:db:24:d8:9e:98: 71:ff:e6:43:c0:84:59:41:ec:ff:7e:7b:de:57:c0:8b:78:b7: 57:c3:61:07:9c:a2:0c:fd:84:fb:75:25:17:35:4c:37:d0:e2: a2:3b:52:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC2NqNfva5OLWupYcfszIipzQ0twwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhC Qzc2QUJGMjAeFw0yNjA5MTYxNTM4MzBaFw0yNjA5MTcxOTIyMzBaMDMxMTAvBgNV BAMTKEY5Rjc5MTRGNDUyNEQzQUExMTUzMEIxNTg2RTREMDlGQkM2M0ZFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyILf/DLDN9BP89d3+Q37XdTQp fN3vD7tt8zWTXUUHDafTti4uBNsWkIR4yomfSQDhMLMN20dAZMDOLyu87m/WFIDv +jMVEW2tsv/CsSw3a0ZGUT0hEXaE4H+vCrujzIsQlXwR48jZkZc05QsIs87Zlo4I Ci88cfmHp3iHBcrAp0NrYVpVF4nKSRFfLIEbtRp2bShwxLC12ss8ouoCw6IYzf6p wPj7sK1LJQbYWnKvKmjaFctLBYEJyFnzRDrexsCYFeLw/3ZCm2eXV48vbUyj09gf GBukgQ6lGy1MJ7DyRl+simjpzXx5lqe8kJs6TLo+jEqhMSZ2EWxsqdPmkiItAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+feRT0Uk06oRUwsVhuTQn7xj/nEwHwYDVR0j BBgwFoAUhbmitKTzc5yPwD5RAloraLx2q/IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzcyYjhkMjgtZmY3Yy00NjkyLTkwMTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRB NEYzNzM5QzhGQzAzRTUxMDI1QTJCNjhCQzc2QUJGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NUI5QTJCNEE0RjM3MzlDOEZDMDNFNTEwMjVBMkI2OEJDNzZB QkYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvODVCOUEyQjRBNEYzNzM5QzhGQzAzRTUxMDI1QTJC NjhCQzc2QUJGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABhAlTqleHAGVe37uiEQqwjcz+ZalKFc+YuQ FRD7I6eQuEx2YiFnuK+2ln9d7vs31oGPejlZohAbN+WLd1v6FHT9P4aaacEE8aAK 0zIxdQ0v/PhNfmwCTJlxIgujpUNx9Ipqt70cOvUNG+Tg2uhKTeMxIOwu9mNdsTRZ J02aYKLSL15e3LoGRQO7bk+zw3/b7WNXwii8gRgGvUAyX5lOGDAEUffAx0EzHXNB AqDEiXq5vFKbXZZ3O3yrhqoMPcInn1pb8PMlAU90WYeUuuZptJUm6YvbJNiemHH/ 5kPAhFlB7P9+e95XwIt4t1fDYQecogz9hPt1JRc1TDfQ4qI7UmI= -----END CERTIFICATE-----Generated at Thu Sep 17 11:35:44 2026 by rpki-client