$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft File: D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft (raw, json) Hash identifier: 7IwI5MQ2Rza8cTcIUVmmgjgGCLu4ZqyALvE55j6DhYA= Subject key identifier: 41:7D:79:93:71:EF:CB:09:11:BC:84:A7:85:83:A5:67:5D:4D:68:C7 Authority key identifier: D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB Certificate issuer: /CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Certificate serial: 58DFD9C65FA6E0E699A2EEA51901CF7A253C9BAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft Manifest number: EC Signing time: Sun 25 Oct 2026 20:42:39 +0000 Manifest this update: Sun 25 Oct 2026 20:37:39 +0000 Manifest next update: Mon 26 Oct 2026 20:56:39 +0000 Files and hashes: 1: D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl (hash: 1J0BvYZxx1amk144M4P9kAFB6pPokqaUOZigUVdx+lk=) 2: 32372e3132342e37362e302f32332d3234203d3e20313532303336.roa (hash: iKJ0DIWC7U9aKL7GFCNEusABKzEUQiWvlNcSeLFvSF4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:df:d9:c6:5f:a6:e0:e6:99:a2:ee:a5:19:01:cf:7a:25:3c:9b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B5F563F238E2E321FCB30013AE445C7D38DEB Validity Not Before: Oct 25 20:37:39 2026 GMT Not After : Oct 26 20:56:39 2026 GMT Subject: CN=417D799371EFCB0911BC84A78583A5675D4D68C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:28:c5:ed:d8:13:48:43:19:e3:e7:51:2b:08: 07:73:7b:1d:5b:47:b0:82:1e:65:89:e9:35:fe:06: 10:e0:4e:2b:80:95:3f:a1:d3:6d:01:4c:99:2a:2d: a0:10:39:90:10:f2:df:97:ed:00:da:3a:c2:6b:74: 70:a4:8c:89:ce:67:68:59:be:e0:dd:86:1d:51:47: 5c:dc:0a:b6:5a:69:2e:d3:a0:45:f0:48:f4:fe:09: 9e:80:ef:8e:78:44:59:c3:0b:ac:81:e9:a3:ef:59: 36:4b:41:2c:80:6c:4e:9e:4c:d9:3a:e5:f5:d6:2a: d0:bf:8f:33:45:b1:f9:99:b0:e8:2a:1d:f3:14:05: 2e:cb:c3:24:e1:a3:20:55:39:36:02:3e:7d:22:29: b0:02:45:5d:dc:90:ce:5e:11:8f:fe:21:55:37:e0: b0:92:f6:0e:25:ff:23:c7:dc:be:47:e0:d7:76:19: 25:ba:94:c8:7c:88:b5:31:f2:36:4b:2b:a5:35:62: d0:4b:1c:ac:85:8d:79:ef:ed:ac:6c:01:89:4f:e8: 0a:18:97:d9:76:b8:36:ad:bb:4e:26:79:f3:01:a2: c2:32:b5:55:16:5d:da:e9:d4:be:dd:55:84:e7:5a: 2f:ae:95:b7:a9:81:98:5c:c2:34:9b:c4:e7:e7:c6: 54:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:7D:79:93:71:EF:CB:09:11:BC:84:A7:85:83:A5:67:5D:4D:68:C7 X509v3 Authority Key Identifier: keyid:D8:5B:5F:56:3F:23:8E:2E:32:1F:CB:30:01:3A:E4:45:C7:D3:8D:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85B5F563F238E2E321FCB30013AE445C7D38DEB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6f2a8011-4c66-43d1-bbc5-fb11e89f91e0/0/D85B5F563F238E2E321FCB30013AE445C7D38DEB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:84:8e:00:9d:42:aa:b3:f2:00:f7:80:3e:46:41:1a:18:36: 39:53:6e:54:6f:4f:00:06:25:ae:7d:0d:8e:e9:41:63:52:00: db:be:67:ef:2d:cf:24:49:f0:c5:7e:e3:e2:a8:11:fa:84:53: 0b:21:a7:d6:c3:22:08:ac:de:6c:ec:80:39:2f:c0:a8:cb:c5: e8:a0:22:c9:9d:bf:fb:cf:d0:90:9d:71:95:37:8e:c5:ae:9a: 58:db:aa:c1:d3:18:1f:7f:cb:21:0b:28:12:8a:1f:8e:56:1f: 5e:e1:2b:a3:33:d0:24:40:ad:3e:ba:c3:05:54:d3:94:ee:cf: f2:0a:34:b9:ce:ee:57:e5:96:7f:04:01:51:18:00:9b:83:43: 16:fa:2e:2e:f9:f0:34:ec:e2:99:84:8c:17:67:2f:c5:ca:da: 9f:93:90:4c:a1:bf:4d:a1:15:f1:54:77:ff:b8:19:dc:24:23: 1f:76:6e:09:9f:33:01:f8:be:0f:26:24:93:a4:c3:9c:36:59: f4:71:8f:65:fe:50:c0:67:d0:8e:79:e8:02:34:04:06:dc:53: 6f:a9:03:36:6c:f1:54:e5:d5:6e:57:0b:df:f3:2b:0d:a6:64: 6d:a3:5d:10:e0:94:80:b9:c5:50:b8:63:59:d3:cf:e3:fc:f7: d6:1d:87:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWN/Zxl+m4OaZou6lGQHPeiU8m64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVD N0QzOERFQjAeFw0yNjEwMjUyMDM3MzlaFw0yNjEwMjYyMDU2MzlaMDMxMTAvBgNV BAMTKDQxN0Q3OTkzNzFFRkNCMDkxMUJDODRBNzg1ODNBNTY3NUQ0RDY4QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVKMXt2BNIQxnj51ErCAdzex1b R7CCHmWJ6TX+BhDgTiuAlT+h020BTJkqLaAQOZAQ8t+X7QDaOsJrdHCkjInOZ2hZ vuDdhh1RR1zcCrZaaS7ToEXwSPT+CZ6A7454RFnDC6yB6aPvWTZLQSyAbE6eTNk6 5fXWKtC/jzNFsfmZsOgqHfMUBS7LwyThoyBVOTYCPn0iKbACRV3ckM5eEY/+IVU3 4LCS9g4l/yPH3L5H4Nd2GSW6lMh8iLUx8jZLK6U1YtBLHKyFjXnv7axsAYlP6AoY l9l2uDatu04mefMBosIytVUWXdrp1L7dVYTnWi+ulbepgZhcwjSbxOfnxlSLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQX15k3HvywkRvISnhYOlZ11NaMcwHwYDVR0j BBgwFoAU2FtfVj8jji4yH8swATrkRcfTjeswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmYyYTgwMTEtNGM2Ni00M2QxLWJiYzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYz RjIzOEUyRTMyMUZDQjMwMDEzQUU0NDVDN0QzOERFQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVCNUY1NjNGMjM4RTJFMzIxRkNCMzAwMTNBRTQ0NUM3RDM4 REVCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmYyYTgwMTEtNGM2Ni00M2QxLWJi YzUtZmIxMWU4OWY5MWUwLzAvRDg1QjVGNTYzRjIzOEUyRTMyMUZDQjMwMDEzQUU0 NDVDN0QzOERFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2EjgCdQqqz8gD3gD5GQRoYNjlTblRvTwAG Ja59DY7pQWNSANu+Z+8tzyRJ8MV+4+KoEfqEUwshp9bDIgis3mzsgDkvwKjLxeig Ismdv/vP0JCdcZU3jsWumljbqsHTGB9/yyELKBKKH45WH17hK6Mz0CRArT66wwVU 05Tuz/IKNLnO7lflln8EAVEYAJuDQxb6Li758DTs4pmEjBdnL8XK2p+TkEyhv02h FfFUd/+4GdwkIx92bgmfMwH4vg8mJJOkw5w2WfRxj2X+UMBn0I556AI0BAbcU2+p AzZs8VTl1W5XC9/zKw2mZG2jXRDglIC5xVC4Y1nTz+P899YdhxQ= -----END CERTIFICATE-----Generated at Mon Oct 26 01:49:58 2026 by rpki-client