$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: ChOshV3SeVMrLE6BqF7zByFVvXInOLfyHbgvNNQ64ZU= Subject key identifier: 60:73:42:77:2F:69:84:4B:CD:E1:08:0B:81:41:D9:C8:44:F3:4F:D3 Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 3581705BC69765B91A032846C303C9FE3039782F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 01EE Signing time: Mon 21 Jul 2025 05:10:03 +0000 Manifest this update: Mon 21 Jul 2025 05:05:03 +0000 Manifest next update: Thu 24 Jul 2025 10:46:03 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: pKGBdHJ1UO7TEOKZH09mRR/Qg1XNyFTd7bJn/wNnqMo=) 2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) 3: 3130332e3137342e37392e302f32342d3234203d3e203338333230.roa (hash: AGvpCXR8gQBspf5FohNx3ipHrwnlCs57tuOOE5KVIPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:81:70:5b:c6:97:65:b9:1a:03:28:46:c3:03:c9:fe:30:39:78:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Jul 21 05:05:03 2025 GMT Not After : Jul 24 10:46:03 2025 GMT Subject: CN=607342772F69844BCDE1080B8141D9C844F34FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:61:06:50:96:78:e1:f3:a8:79:a3:97:32: ad:81:4d:92:8b:c7:f6:a6:4f:a5:55:4b:b1:c1:f2: 80:bf:92:eb:52:69:b6:47:83:0a:18:68:50:7b:9a: 66:1a:60:fe:78:78:b8:a8:ff:4b:5c:ff:3c:e1:34: ee:12:e6:9d:c6:d2:a0:9a:5c:68:25:c8:58:dc:c2: 3d:06:00:d6:c9:fe:44:81:33:bd:bf:c5:4b:80:2c: ec:29:3f:88:4b:68:47:72:c5:03:52:82:dd:70:62: 6b:37:70:71:de:dd:ae:3b:fd:74:eb:08:f2:44:08: 1c:38:03:b9:43:04:ce:09:d6:c7:82:eb:6c:81:20: f5:71:89:88:27:18:a3:68:08:b6:70:a8:07:87:50: b7:dc:1a:f1:38:e2:a8:19:6e:64:b7:c5:17:ac:76: b2:b8:78:15:58:c9:09:75:d2:b4:58:0a:a8:a8:ee: 15:f7:7a:db:f5:c9:60:fc:d1:eb:6f:34:d1:d0:f6: da:49:87:5b:a3:90:d0:28:14:87:63:f3:2f:ed:d1: 60:b6:56:e1:14:a3:ed:15:e8:9d:a1:39:2a:36:1d: 70:f2:87:e2:c1:c7:02:88:e8:c4:ac:cf:f6:54:e4: 98:8f:e0:a8:a1:a3:e2:5d:1d:a3:f9:5f:46:d8:84: 8e:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:73:42:77:2F:69:84:4B:CD:E1:08:0B:81:41:D9:C8:44:F3:4F:D3 X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:78:91:4e:1c:3a:00:d1:b9:1f:db:69:4d:d5:c3:03:9d:5f: 50:17:ca:12:75:7e:fa:73:89:ef:73:32:31:2a:f2:7d:89:48: 8d:d9:e0:61:37:e2:9d:bb:f9:04:23:01:77:96:41:b7:65:5f: 2d:22:55:0c:d6:b3:7a:3a:da:b3:37:a6:91:a2:31:75:a8:4e: 70:f9:46:06:3e:ae:35:6f:ac:0f:f4:55:61:4e:08:ec:eb:fc: d4:9b:d8:6c:7c:cd:2a:1f:e2:c3:51:1e:41:0d:68:66:e0:c3: 82:f3:2b:aa:4d:9a:a8:0f:31:3b:c4:d0:63:15:de:ce:65:fc: af:fa:21:dd:50:13:9e:7c:31:48:6c:0e:60:ca:8b:ca:6a:da: f9:3f:77:b2:0a:be:87:8e:4e:39:b5:2b:98:a1:bf:f3:23:49: 8b:17:63:d3:3e:a3:06:4e:e6:04:86:32:dd:15:48:ab:85:a2: 58:8d:82:50:d0:5f:23:8d:34:0b:77:2a:47:a6:d2:c6:65:01: 19:0c:ac:ac:45:f5:77:2e:4e:e1:70:72:fd:b4:a1:95:a1:ca: 30:f8:d0:eb:80:ff:04:a6:f1:ed:b9:bc:07:98:c2:ac:0e:b3: 13:18:28:15:3b:04:11:1a:01:f0:b2:2a:1d:66:31:78:23:2c: ef:59:d6:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNYFwW8aXZbkaAyhGwwPJ/jA5eC8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTA3MjEwNTA1MDNaFw0yNTA3MjQxMDQ2MDNaMDMxMTAvBgNV BAMTKDYwNzM0Mjc3MkY2OTg0NEJDREUxMDgwQjgxNDFEOUM4NDRGMzRGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJmEGUJZ44fOoeaOXMq2BTZKL x/amT6VVS7HB8oC/kutSabZHgwoYaFB7mmYaYP54eLio/0tc/zzhNO4S5p3G0qCa XGglyFjcwj0GANbJ/kSBM72/xUuALOwpP4hLaEdyxQNSgt1wYms3cHHe3a47/XTr CPJECBw4A7lDBM4J1seC62yBIPVxiYgnGKNoCLZwqAeHULfcGvE44qgZbmS3xRes drK4eBVYyQl10rRYCqio7hX3etv1yWD80etvNNHQ9tpJh1ujkNAoFIdj8y/t0WC2 VuEUo+0V6J2hOSo2HXDyh+LBxwKI6MSsz/ZU5JiP4Kiho+JdHaP5X0bYhI7hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYHNCdy9phEvN4QgLgUHZyETzT9MwHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADR4kU4cOgDRuR/baU3VwwOdX1AXyhJ1fvpz ie9zMjEq8n2JSI3Z4GE34p27+QQjAXeWQbdlXy0iVQzWs3o62rM3ppGiMXWoTnD5 RgY+rjVvrA/0VWFOCOzr/NSb2Gx8zSof4sNRHkENaGbgw4LzK6pNmqgPMTvE0GMV 3s5l/K/6Id1QE558MUhsDmDKi8pq2vk/d7IKvoeOTjm1K5ihv/MjSYsXY9M+owZO 5gSGMt0VSKuFoliNglDQXyONNAt3Kkem0sZlARkMrKxF9XcuTuFwcv20oZWhyjD4 0OuA/wSm8e25vAeYwqwOsxMYKBU7BBEaAfCyKh1mMXgjLO9Z1gs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:11 2025 by rpki-client