$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: thyxqGGCUdh+rBFJ5b+4jM5Grw8sCndzJRTdELJlMbA= Subject key identifier: 3B:67:11:14:D4:1A:E6:EA:B1:A6:2B:29:A4:23:A2:AF:70:75:D0:E1 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 7351F31BEE46185894BE9CE71D050D2B3353B569 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 0270 Signing time: Mon 02 Jun 2025 03:11:35 +0000 Manifest this update: Mon 02 Jun 2025 03:06:35 +0000 Manifest next update: Thu 05 Jun 2025 12:02:35 +0000 Files and hashes: 1: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: 7IE6j+SdNG1sVGyGlDcwcSGniufFOu0rhc+/IeHiD94=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: K+UHygo4qrap0HRp21an4Bv2wYIc+LITQ2V+cthKQG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:02:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:51:f3:1b:ee:46:18:58:94:be:9c:e7:1d:05:0d:2b:33:53:b5:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Jun 2 03:06:35 2025 GMT Not After : Jun 5 12:02:35 2025 GMT Subject: CN=3B671114D41AE6EAB1A62B29A423A2AF7075D0E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:87:90:23:c0:15:68:8a:b5:a1:39:0a:9b:ba: 24:60:ec:68:8b:05:fb:20:59:18:a0:67:5c:51:a0: e2:50:3a:42:ef:45:88:a3:c7:d7:d5:2c:d0:a5:6d: 38:d3:7d:4d:98:69:e9:97:84:d4:d3:8c:67:8f:75: 9b:6d:52:ab:be:67:e6:a7:4e:01:e6:32:bf:8d:79: 7a:2d:64:61:d9:cf:cf:b5:89:93:ab:ef:35:10:15: f3:43:79:3d:b2:81:62:b9:df:5e:77:1d:29:9e:8f: a4:a9:da:9b:87:e9:5c:70:a4:45:fb:68:c6:3b:6d: 30:06:11:64:cc:6a:f3:dc:1c:42:96:61:d6:da:ed: 1b:4f:8d:20:a8:16:c2:22:54:d5:d2:73:17:b4:7a: 39:d3:4b:a8:12:06:99:fc:44:4d:50:0f:68:c7:51: 89:0f:b0:cc:4a:01:13:38:e3:20:f5:ad:41:8b:e5: 1d:b0:8b:97:d3:bc:84:53:b6:f6:32:71:cd:4e:45: a1:dc:5d:ca:a4:dd:a7:d3:b3:39:ab:c8:e8:a3:f7: a0:80:b8:d7:dc:24:ba:4f:f1:b1:21:45:49:62:14: 40:2f:6d:c5:f0:66:c6:52:a5:05:c9:9e:4d:14:0a: b8:09:15:d1:f7:0d:ad:8f:20:89:35:d6:9c:e7:c0: f9:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:67:11:14:D4:1A:E6:EA:B1:A6:2B:29:A4:23:A2:AF:70:75:D0:E1 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:4c:01:8a:a6:87:5a:e9:5b:40:81:f8:65:22:ca:2c:62:62: bd:67:59:cb:cf:7b:9d:f0:f2:c1:3a:b9:a2:5b:86:e0:f4:29: 83:63:7d:a1:bc:d1:1c:27:46:c2:43:7d:8b:fc:e7:54:ae:c6: 4e:20:2b:7f:4f:6f:c8:96:7e:b5:02:3c:c3:e1:24:b0:65:ba: 38:45:fb:c9:cf:54:a4:66:b9:77:47:d3:ac:44:da:3d:b5:a3: 41:a8:55:ed:8d:b8:c6:93:b8:4e:1a:ce:f0:e3:f6:b9:77:43: b1:f4:e0:af:e2:e9:e0:d3:bd:cc:39:9e:dd:28:54:f7:b1:03: 58:26:0b:62:51:e7:5d:3e:53:74:74:6a:42:92:3c:02:7b:ce: 92:51:12:62:22:07:68:74:f4:f8:af:70:07:f5:06:2e:95:67: f6:8f:5c:41:6a:74:85:46:09:64:2b:46:5b:d4:00:53:54:45: 48:ae:b3:4b:4b:9e:d6:49:f2:8e:4e:f9:10:02:8e:c4:fe:6b: c2:de:b7:2d:34:29:bf:a3:ca:ba:8b:c7:64:46:07:fa:32:a6: 1f:65:2a:99:1c:71:9f:ac:61:98:55:11:ab:27:4e:09:3c:a4: ea:2b:01:d2:a2:4f:a3:84:eb:e4:07:be:3a:32:d2:a9:84:20: 3e:dd:9e:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc1HzG+5GGFiUvpznHQUNKzNTtWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTA2MDIwMzA2MzVaFw0yNTA2MDUxMjAyMzVaMDMxMTAvBgNV BAMTKDNCNjcxMTE0RDQxQUU2RUFCMUE2MkIyOUE0MjNBMkFGNzA3NUQwRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYh5AjwBVoirWhOQqbuiRg7GiL BfsgWRigZ1xRoOJQOkLvRYijx9fVLNClbTjTfU2YaemXhNTTjGePdZttUqu+Z+an TgHmMr+NeXotZGHZz8+1iZOr7zUQFfNDeT2ygWK53153HSmej6Sp2puH6VxwpEX7 aMY7bTAGEWTMavPcHEKWYdba7RtPjSCoFsIiVNXScxe0ejnTS6gSBpn8RE1QD2jH UYkPsMxKARM44yD1rUGL5R2wi5fTvIRTtvYycc1ORaHcXcqk3afTszmryOij96CA uNfcJLpP8bEhRUliFEAvbcXwZsZSpQXJnk0UCrgJFdH3Da2PIIk11pznwPltAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2cRFNQa5uqxpisppCOir3B10OEwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtMAYqmh1rpW0CB+GUiyixiYr1nWcvPe53w 8sE6uaJbhuD0KYNjfaG80RwnRsJDfYv851Suxk4gK39Pb8iWfrUCPMPhJLBlujhF +8nPVKRmuXdH06xE2j21o0GoVe2NuMaTuE4azvDj9rl3Q7H04K/i6eDTvcw5nt0o VPexA1gmC2JR510+U3R0akKSPAJ7zpJREmIiB2h09PivcAf1Bi6VZ/aPXEFqdIVG CWQrRlvUAFNURUius0tLntZJ8o5O+RACjsT+a8Lety00Kb+jyrqLx2RGB/oyph9l KpkccZ+sYZhVEasnTgk8pOorAdKiT6OE6+QHvjoy0qmEID7dnp4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:20:45 2025 by rpki-client