$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft File: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft (raw, json) Hash identifier: wJFCTShl3ndokyDMvUbMpmo/tPvvxqwqk4piXv1qDUk= Subject key identifier: 0B:61:A4:7D:7B:E0:FA:0A:4C:A8:B0:77:3E:46:02:4A:29:4B:E5:BE Authority key identifier: D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A Certificate issuer: /CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Certificate serial: 413BC73B86BE9FCB6CF93D7BA7B893C694862350 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:26:42 +0000 Manifest this update: Wed 16 Sep 2026 22:21:42 +0000 Manifest next update: Thu 17 Sep 2026 23:47:42 +0000 Files and hashes: 1: D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl (hash: NC+tSlz8DDO40Feb4e1W1IpnLPqH68CleL79RI3bD8I=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: Y/EQKcpkANIA0psSjIaznqwzitz7bm3TFARBNjc3Kms=) 3: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: oPoNFbylWE3wDnquzh9cCts/g1mAJ32eRWzuqQ1Bx0w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 23:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:3b:c7:3b:86:be:9f:cb:6c:f9:3d:7b:a7:b8:93:c6:94:86:23:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A Validity Not Before: Sep 16 22:21:42 2026 GMT Not After : Sep 17 23:47:42 2026 GMT Subject: CN=0B61A47D7BE0FA0A4CA8B0773E46024A294BE5BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:03:ff:8f:1c:20:f5:63:15:81:69:16:4f:24: 07:0c:03:8e:72:62:72:f2:78:d6:e3:0b:06:10:ce: cf:a2:69:f3:99:48:cc:be:75:a9:89:af:da:04:61: 9e:e7:ab:c0:32:2f:9c:cf:9d:bf:2b:f1:72:7f:72: 6f:a5:c6:f2:64:95:41:cd:04:2b:76:fa:ac:7a:15: 3b:16:ca:36:d7:a7:12:b2:55:c1:33:42:04:70:4d: a4:e3:15:9f:e3:bd:1f:20:fb:ce:b8:ce:78:dc:c1: 2a:b9:bf:8f:8e:b1:1d:1a:5e:eb:8d:c1:0d:b1:27: b7:d9:f8:b8:fd:9a:59:86:4a:12:1b:e9:e3:fe:32: a8:e7:62:1a:69:71:c1:41:1e:b8:2b:12:12:28:e2: 07:18:51:32:21:ba:40:9f:ca:38:b5:17:49:54:57: 0f:c9:f3:df:2d:7e:e9:c1:0f:c1:c4:69:63:e8:07: cd:8f:83:ea:66:28:55:bc:87:e1:14:4a:a4:65:96: d0:09:b1:30:0d:cb:32:17:ac:a1:88:af:0d:e3:cf: c1:d4:c1:e7:6f:e2:f4:5d:82:0f:62:a9:00:10:2a: c5:25:be:ef:e7:8e:e4:5c:88:dd:09:0a:e9:94:95: 45:cc:b6:5f:f5:74:71:c4:d1:74:64:29:67:8f:78: 47:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:61:A4:7D:7B:E0:FA:0A:4C:A8:B0:77:3E:46:02:4A:29:4B:E5:BE X509v3 Authority Key Identifier: keyid:D8:5D:DC:BE:5B:D7:5A:50:DB:0F:9F:99:16:12:3B:E9:7C:C8:E0:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/D85DDCBE5BD75A50DB0F9F9916123BE97CC8E01A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7a:4a:01:39:31:42:e1:6d:09:3e:b8:98:0c:46:36:b1:19: f7:68:2a:6b:bd:59:e2:65:0e:6b:a0:0b:2c:a9:a2:9f:68:52: 13:b8:28:0f:77:59:3b:fb:bc:5a:c9:0c:2c:26:26:f6:94:46: c4:ee:3c:57:28:03:57:df:fe:45:81:aa:d3:80:cd:a7:ff:ea: 09:b8:84:df:2d:ea:e7:18:a8:18:42:fd:64:52:41:d5:bc:cb: 71:31:79:f5:ab:15:80:36:3f:b5:b6:00:0e:27:06:96:59:99: 7c:3b:ef:8d:5f:e9:c1:af:94:9e:45:af:44:48:e6:67:af:f4: ed:65:33:95:38:69:18:dd:29:e5:64:46:7d:b8:c3:f6:31:08: 5b:43:90:3c:6a:fd:c4:f1:75:24:87:b0:6b:5d:58:78:68:ae: 19:1c:69:ff:92:94:ac:fc:2e:02:83:9b:43:75:b4:3c:9a:67: 63:32:bc:a1:3a:c6:24:e7:20:7c:bb:1a:e7:a9:90:02:ec:87: 4e:1a:75:0e:33:82:ea:71:2c:e2:4b:f6:8c:34:9d:57:d6:68: ae:89:fa:55:2c:07:4b:87:f4:c3:e8:10:ea:eb:93:eb:67:fd: 85:fa:5b:9e:58:b6:7e:e1:e8:f9:13:73:24:b9:be:24:06:2f: d3:09:fe:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTvHO4a+n8ts+T17p7iTxpSGI1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3 Q0M4RTAxQTAeFw0yNjA5MTYyMjIxNDJaFw0yNjA5MTcyMzQ3NDJaMDMxMTAvBgNV BAMTKDBCNjFBNDdEN0JFMEZBMEE0Q0E4QjA3NzNFNDYwMjRBMjk0QkU1QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMA/+PHCD1YxWBaRZPJAcMA45y YnLyeNbjCwYQzs+iafOZSMy+damJr9oEYZ7nq8AyL5zPnb8r8XJ/cm+lxvJklUHN BCt2+qx6FTsWyjbXpxKyVcEzQgRwTaTjFZ/jvR8g+864znjcwSq5v4+OsR0aXuuN wQ2xJ7fZ+Lj9mlmGShIb6eP+MqjnYhppccFBHrgrEhIo4gcYUTIhukCfyji1F0lU Vw/J898tfunBD8HEaWPoB82Pg+pmKFW8h+EUSqRlltAJsTANyzIXrKGIrw3jz8HU wedv4vRdgg9iqQAQKsUlvu/njuRciN0JCumUlUXMtl/1dHHE0XRkKWePeEcZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC2GkfXvg+gpMqLB3PkYCSilL5b4wHwYDVR0j BBgwFoAU2F3cvlvXWlDbD5+ZFhI76XzI4BowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVhYjBhMDEtOGVlNC00ODI1LTg0MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1 QkQ3NUE1MERCMEY5Rjk5MTYxMjNCRTk3Q0M4RTAxQS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EODVERENCRTVCRDc1QTUwREIwRjlGOTkxNjEyM0JFOTdDQzhF MDFBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvRDg1RERDQkU1QkQ3NUE1MERCMEY5Rjk5MTYxMjNC RTk3Q0M4RTAxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ56SgE5MULhbQk+uJgMRjaxGfdoKmu9WeJl DmugCyypop9oUhO4KA93WTv7vFrJDCwmJvaURsTuPFcoA1ff/kWBqtOAzaf/6gm4 hN8t6ucYqBhC/WRSQdW8y3ExefWrFYA2P7W2AA4nBpZZmXw7741f6cGvlJ5Fr0RI 5mev9O1lM5U4aRjdKeVkRn24w/YxCFtDkDxq/cTxdSSHsGtdWHhorhkcaf+SlKz8 LgKDm0N1tDyaZ2MyvKE6xiTnIHy7GuepkALsh04adQ4zgupxLOJL9ow0nVfWaK6J +lUsB0uH9MPoEOrrk+tn/YX6W55Ytn7h6PkTcyS5viQGL9MJ/r8= -----END CERTIFICATE-----Generated at Thu Sep 17 14:40:20 2026 by rpki-client