$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft File: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft (raw, json) Hash identifier: u9GAZfP1YCNyqkHEp2l56CZ/T/6+Yt4YqM0YnADU2sw= Subject key identifier: CF:2D:6B:7C:AF:3B:2B:A4:E5:05:60:A6:8C:D3:61:1D:01:D0:FB:07 Authority key identifier: 85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 Certificate issuer: /CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Certificate serial: 1668EEF597590963AFCD42699466F27E2E708D2B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:41:48 +0000 Manifest this update: Thu 17 Sep 2026 06:36:48 +0000 Manifest next update: Fri 18 Sep 2026 09:17:48 +0000 Files and hashes: 1: 85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl (hash: +yxf1LhVaHLtw5WXEeM2qXapJTjt+FpAHWu9/GS9h/s=) 2: 3130332e3131322e3232382e302f32332d3234203d3e20313336313136.roa (hash: yAzMQkLI2YElNnNv3RsEoxmgF9F1Ze8FCH2iEusLcbI=) 3: 3130332e39332e3135382e302f32332d3234203d3e20313336313136.roa (hash: SMyShINBZJhBLQDbVGEzp9/aVi59DehpgguYlaDtpEI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:46:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:68:ee:f5:97:59:09:63:af:cd:42:69:94:66:f2:7e:2e:70:8d:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85672FF4607E3AFD9CACD97C84E0F247A89FC3C7 Validity Not Before: Sep 17 06:36:48 2026 GMT Not After : Sep 18 09:17:48 2026 GMT Subject: CN=CF2D6B7CAF3B2BA4E50560A68CD3611D01D0FB07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:83:9e:8d:37:e8:1e:76:04:80:ca:d8:4c:70: ad:60:30:71:8b:19:18:ab:22:a5:00:27:2e:4e:31: b3:73:22:8c:3f:6a:a1:e3:a1:23:61:c1:92:3d:02: 3a:66:36:b0:19:9f:bd:39:81:20:a6:8f:89:62:45: 2f:ce:5c:ac:93:07:a6:c2:e4:25:03:07:d2:01:16: 4b:9b:08:1d:c3:72:b2:41:82:e4:d7:81:55:b7:56: 6e:14:22:68:9a:ae:6c:0d:36:73:8e:6d:40:a5:e3: 9d:da:ff:8f:a8:82:d9:3c:ac:bd:19:55:a0:ec:32: 5f:53:ab:86:b0:01:5d:58:59:75:2b:f6:f5:3f:e7: 10:4c:f3:f2:0a:a8:b9:6a:f3:72:67:aa:57:84:42: de:98:9f:3e:b0:d2:1a:4d:46:3a:24:a4:52:d0:c9: 81:d4:b3:99:72:0d:00:c3:13:0b:ce:a0:69:74:01: 43:67:ca:3d:72:b1:f6:35:92:18:7d:ed:7a:7d:9b: ce:31:1d:f8:62:c1:67:66:ad:65:ef:bd:b0:0a:6f: d7:75:ed:9b:31:ab:3d:a7:71:6e:d3:ac:8b:f8:c1: 01:50:2e:85:62:5e:3f:d7:db:11:f7:35:0c:02:42: e8:74:51:e5:11:f5:0a:24:0e:24:9c:5f:29:13:55: d0:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:2D:6B:7C:AF:3B:2B:A4:E5:05:60:A6:8C:D3:61:1D:01:D0:FB:07 X509v3 Authority Key Identifier: keyid:85:67:2F:F4:60:7E:3A:FD:9C:AC:D9:7C:84:E0:F2:47:A8:9F:C3:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b6ae2a2-d93f-49ca-ba4b-171ff8d1e57f/0/85672FF4607E3AFD9CACD97C84E0F247A89FC3C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:3e:04:4b:9a:25:11:62:a3:92:c1:b3:35:cb:da:f6:4f:35: 58:3a:20:58:c1:7f:bc:a4:60:a9:11:5e:89:f7:56:b0:c1:a6: 2f:dd:4f:2b:59:c3:3f:a8:99:2b:7c:01:90:08:ee:9f:14:ff: 5c:27:05:06:7c:59:72:0b:93:e3:00:c3:3f:fe:35:11:35:88: c3:de:56:05:a9:c6:e8:d8:5a:80:f8:ef:6a:43:d3:98:9d:1c: ec:bd:be:6d:92:0b:79:55:61:3d:5e:46:5e:40:53:43:6d:03: 12:6f:39:d1:b9:24:48:a5:ef:00:e1:1d:8a:3e:68:21:cb:b2: 47:11:a7:34:b9:a0:a4:f0:6f:67:a3:81:05:d7:59:8b:59:1c: 40:2e:fb:e7:08:7b:d6:5b:5f:bb:e0:34:0c:0a:6c:62:8b:63: c9:ce:9c:22:d8:d0:26:26:f6:13:92:a1:47:dc:83:c6:ca:73: 5f:74:2d:1b:a4:e0:cf:95:5b:d2:35:31:56:6e:01:6d:89:ad: 47:c3:08:e1:f9:59:bd:a9:b4:31:ef:b9:b7:23:38:41:10:d6: 4e:56:c2:18:28:6f:79:fa:f6:a3:d0:e1:5a:7e:73:31:d6:68: 5c:a0:ea:77:7e:91:18:86:20:87:81:3f:cb:bd:f3:d9:95:71: 39:7d:78:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmju9ZdZCWOvzUJplGbyfi5wjSswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdB ODlGQzNDNzAeFw0yNjA5MTcwNjM2NDhaFw0yNjA5MTgwOTE3NDhaMDMxMTAvBgNV BAMTKENGMkQ2QjdDQUYzQjJCQTRFNTA1NjBBNjhDRDM2MTFEMDFEMEZCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFg56NN+gedgSAythMcK1gMHGL GRirIqUAJy5OMbNzIow/aqHjoSNhwZI9AjpmNrAZn705gSCmj4liRS/OXKyTB6bC 5CUDB9IBFkubCB3DcrJBguTXgVW3Vm4UImiarmwNNnOObUCl453a/4+ogtk8rL0Z VaDsMl9Tq4awAV1YWXUr9vU/5xBM8/IKqLlq83JnqleEQt6Ynz6w0hpNRjokpFLQ yYHUs5lyDQDDEwvOoGl0AUNnyj1ysfY1khh97Xp9m84xHfhiwWdmrWXvvbAKb9d1 7Zsxqz2ncW7TrIv4wQFQLoViXj/X2xH3NQwCQuh0UeUR9QokDiScXykTVdArAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzy1rfK87K6TlBWCmjNNhHQHQ+wcwHwYDVR0j BBgwFoAUhWcv9GB+Ov2crNl8hODyR6ifw8cwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI2YWUyYTItZDkzZi00OWNhLWJhNGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2 MDdFM0FGRDlDQUNEOTdDODRFMEYyNDdBODlGQzNDNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NTY3MkZGNDYwN0UzQUZEOUNBQ0Q5N0M4NEUwRjI0N0E4OUZD M0M3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI2YWUyYTItZDkzZi00OWNhLWJh NGItMTcxZmY4ZDFlNTdmLzAvODU2NzJGRjQ2MDdFM0FGRDlDQUNEOTdDODRFMEYy NDdBODlGQzNDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAI+BEuaJRFio5LBszXL2vZPNVg6IFjBf7yk YKkRXon3VrDBpi/dTytZwz+omSt8AZAI7p8U/1wnBQZ8WXILk+MAwz/+NRE1iMPe VgWpxujYWoD472pD05idHOy9vm2SC3lVYT1eRl5AU0NtAxJvOdG5JEil7wDhHYo+ aCHLskcRpzS5oKTwb2ejgQXXWYtZHEAu++cIe9ZbX7vgNAwKbGKLY8nOnCLY0CYm 9hOSoUfcg8bKc190LRuk4M+VW9I1MVZuAW2JrUfDCOH5Wb2ptDHvubcjOEEQ1k5W whgob3n69qPQ4Vp+czHWaFyg6nd+kRiGIIeBP8u989mVcTl9eBA= -----END CERTIFICATE-----Generated at Thu Sep 17 08:26:22 2026 by rpki-client