$ rpki-client -vvvf rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft File: 850C1E1809E2AF49A27C3E67F27A17989362D067.mft (raw, json) Hash identifier: i9/kDLj71E8NaTkurSZkqIvNDEIXzhoz2P6NMfgxMMc= Subject key identifier: 03:7D:61:60:EA:1D:00:2F:08:FE:86:04:9F:C3:80:B2:DA:35:28:37 Authority key identifier: 85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 Certificate issuer: /CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Certificate serial: 1F07A65DE1E17168A979D92D2A4368D96803F6FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 15:48:37 +0000 Manifest this update: Wed 16 Sep 2026 15:43:37 +0000 Manifest next update: Thu 17 Sep 2026 17:57:37 +0000 Files and hashes: 1: 3130332e3234352e31362e302f32332d3234203d3e203436303233.roa (hash: 9oKw8VPoGRe3WqWHLUItkitkfdRCjKfZ2jlw7IVeUGY=) 2: 3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (hash: ido02jZkpzLhT3WVvo2wGmfcL2AQpu/NtwB+KCD2uww=) 3: 3130332e3234352e31372e302f32342d3234203d3e203436303233.roa (hash: Vm4egc3ZD+BeyN3SFYkno2WcMT0Gx/yPNLqxm0VLvUY=) 4: 850C1E1809E2AF49A27C3E67F27A17989362D067.crl (hash: wwMIcV9EtfmnTdGbB7FciYZyHIVjHf2+I5aBXa3NZVY=) 5: 3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (hash: iUY+SdN+QQAOG22XorTDG8S2mJg0a1nPIepKaYKt6FE=) 6: 3130332e3234352e31382e302f32342d3234203d3e203436303233.roa (hash: zTrk/mUqNGYGN3goqf8btntNYIFiQO0wuda1PmG4Zpo=) 7: 3130332e3234352e31382e302f32332d3234203d3e203436303233.roa (hash: 84fJ6NdePRx8rt6emF6aQ9i56bMtAD8nB35y3SPMr9k=) 8: 3130332e3234352e31392e302f32342d3234203d3e203436303233.roa (hash: zFeGqbymyO2wTVAEMU1zjKcoMWht/fBxcRoxaii1Cog=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:07:a6:5d:e1:e1:71:68:a9:79:d9:2d:2a:43:68:d9:68:03:f6:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=850C1E1809E2AF49A27C3E67F27A17989362D067 Validity Not Before: Sep 16 15:43:37 2026 GMT Not After : Sep 17 17:57:37 2026 GMT Subject: CN=037D6160EA1D002F08FE86049FC380B2DA352837 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0c:6c:07:59:80:ac:77:f9:1c:cc:2c:e9:ca: 23:39:ee:43:df:84:98:4b:c9:5a:b2:40:18:24:03: 2f:2a:8b:8d:34:06:a9:55:65:cc:10:2c:4c:2a:e2: b2:59:ca:3d:98:79:9d:3f:03:4c:e5:43:ab:84:db: af:e0:07:bf:22:27:6d:a6:15:e3:1f:f8:63:4b:09: 9b:79:89:c0:d2:2b:1c:6b:95:ab:e6:77:6c:5e:03: 69:80:e8:04:12:a5:7c:b6:ce:1e:5e:3d:74:5d:46: a8:f9:4d:03:55:72:18:b8:83:75:54:a9:19:6c:8f: ee:4f:0e:88:9a:46:4e:67:40:f3:eb:1a:56:64:7b: 84:d5:5f:e7:0e:9d:0c:22:b1:51:b2:dc:ce:d8:27: 66:7f:ee:8b:5a:e4:de:89:45:ce:3a:cb:9c:14:87: f0:8a:c4:8d:1c:ba:a6:d1:e9:54:b3:71:64:c2:20: 35:d2:8d:b6:1d:d1:0d:d5:f9:ec:e1:07:84:d3:9e: 03:26:68:60:84:cd:09:6b:02:ce:84:d5:9d:e0:ef: 37:ae:55:31:e4:3e:04:ce:e3:d1:05:f6:52:46:bd: 01:3b:93:c4:5d:b4:42:a5:99:12:8a:18:91:87:19: 48:73:c4:6a:22:a7:40:54:17:9c:88:c9:19:13:66: 18:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7D:61:60:EA:1D:00:2F:08:FE:86:04:9F:C3:80:B2:DA:35:28:37 X509v3 Authority Key Identifier: keyid:85:0C:1E:18:09:E2:AF:49:A2:7C:3E:67:F2:7A:17:98:93:62:D0:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/850C1E1809E2AF49A27C3E67F27A17989362D067.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/850C1E1809E2AF49A27C3E67F27A17989362D067.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:cf:0f:7a:8c:85:8a:61:33:39:c1:15:29:05:19:29:20:a0: 1b:c5:69:d9:56:9f:83:19:36:14:56:39:64:b7:8f:90:cb:96: af:cd:e2:de:c0:0f:3f:41:74:7c:59:5f:f6:1b:d8:69:2f:74: dc:ce:13:12:39:c3:ca:69:4a:a0:22:37:07:50:10:0b:43:b0: a9:2f:84:7b:1b:59:5a:82:82:9d:92:45:3d:a7:df:7c:fa:f8: 00:16:37:b2:2c:c8:e3:69:7c:17:d5:c3:ec:3a:c6:f5:bb:34: 32:71:fe:a0:39:50:23:48:07:dd:82:a4:c2:f7:dc:ec:b0:61: 03:0c:00:0e:e9:3d:1b:58:fa:cc:16:3f:05:7b:4f:47:ce:3f: 41:7a:ed:b7:68:bd:86:15:f6:f8:47:71:58:88:9c:a7:92:fe: 7f:23:3b:ce:5f:5e:1b:97:3a:c3:bb:fe:94:ed:e0:2e:65:20: 23:84:73:e6:f9:4b:57:2b:2f:d5:a0:f6:e6:86:3f:a7:89:b4: bb:d7:6a:3e:61:83:e5:3c:98:62:45:8e:45:1e:82:14:ad:46: ad:dd:29:12:7e:63:64:29:85:f0:f6:05:ca:33:0a:be:10:7f: 4f:a9:b4:bd:90:d7:da:bf:26:36:d1:e1:ff:72:1a:0e:97:ab: 13:62:42:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHwemXeHhcWipedktKkNo2WgD9v8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5 MzYyRDA2NzAeFw0yNjA5MTYxNTQzMzdaFw0yNjA5MTcxNzU3MzdaMDMxMTAvBgNV BAMTKDAzN0Q2MTYwRUExRDAwMkYwOEZFODYwNDlGQzM4MEIyREEzNTI4MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DGwHWYCsd/kczCzpyiM57kPf hJhLyVqyQBgkAy8qi400BqlVZcwQLEwq4rJZyj2YeZ0/A0zlQ6uE26/gB78iJ22m FeMf+GNLCZt5icDSKxxrlavmd2xeA2mA6AQSpXy2zh5ePXRdRqj5TQNVchi4g3VU qRlsj+5PDoiaRk5nQPPrGlZke4TVX+cOnQwisVGy3M7YJ2Z/7ota5N6JRc46y5wU h/CKxI0cuqbR6VSzcWTCIDXSjbYd0Q3V+ezhB4TTngMmaGCEzQlrAs6E1Z3g7zeu VTHkPgTO49EF9lJGvQE7k8RdtEKlmRKKGJGHGUhzxGoip0BUF5yIyRkTZhjXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA31hYOodAC8I/oYEn8OAsto1KDcwHwYDVR0j BBgwFoAUhQweGAnir0mifD5n8noXmJNi0GcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTUyNzJmN2ItZDY1Ni00MDU4LWE3YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgw OUUyQUY0OUEyN0MzRTY3RjI3QTE3OTg5MzYyRDA2Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTBDMUUxODA5RTJBRjQ5QTI3QzNFNjdGMjdBMTc5ODkzNjJE MDY3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTUyNzJmN2ItZDY1Ni00MDU4LWE3 YjYtZjI1YWRmM2VkMWJlLzAvODUwQzFFMTgwOUUyQUY0OUEyN0MzRTY3RjI3QTE3 OTg5MzYyRDA2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrPD3qMhYphMznBFSkFGSkgoBvFadlWn4MZ NhRWOWS3j5DLlq/N4t7ADz9BdHxZX/Yb2GkvdNzOExI5w8ppSqAiNwdQEAtDsKkv hHsbWVqCgp2SRT2n33z6+AAWN7IsyONpfBfVw+w6xvW7NDJx/qA5UCNIB92CpML3 3OywYQMMAA7pPRtY+swWPwV7T0fOP0F67bdovYYV9vhHcViInKeS/n8jO85fXhuX OsO7/pTt4C5lICOEc+b5S1crL9Wg9uaGP6eJtLvXaj5hg+U8mGJFjkUeghStRq3d KRJ+Y2QphfD2BcozCr4Qf0+ptL2Q19q/JjbR4f9yGg6XqxNiQm0= -----END CERTIFICATE-----Generated at Thu Sep 17 06:41:15 2026 by rpki-client