$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: Y8a56RZYFF6CBuRjAb2psLZokb0S3dFH/LkxgyFgPbQ= Subject key identifier: 5D:BD:2F:50:5E:79:96:ED:05:86:40:F5:63:62:E4:1E:D6:70:B3:8A Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 08CAC2D605B17D39C35C9740A277D0503E999AE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: D7 Signing time: Sun 01 Jun 2025 22:51:40 +0000 Manifest this update: Sun 01 Jun 2025 22:46:40 +0000 Manifest next update: Thu 05 Jun 2025 04:09:40 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: aQpZU+L/2OnjQhrfj12hVFX2TyzybGSLtYhwU6UTaiE=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 04:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ca:c2:d6:05:b1:7d:39:c3:5c:97:40:a2:77:d0:50:3e:99:9a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Jun 1 22:46:40 2025 GMT Not After : Jun 5 04:09:40 2025 GMT Subject: CN=5DBD2F505E7996ED058640F56362E41ED670B38A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ad:90:c7:67:3f:f6:c8:80:cf:e0:c8:08:fe: 64:27:54:79:c5:6c:92:9a:0d:03:06:c5:1e:7f:6b: cf:b3:eb:54:19:3d:04:a6:fb:cd:4b:b1:c7:55:21: 02:6e:fa:a6:2d:68:13:cc:70:7a:83:99:c9:1e:0d: a5:4a:92:2e:19:89:65:f3:6d:15:63:90:1d:bc:24: b7:11:ea:53:ca:01:5d:60:73:f1:49:3c:12:01:e3: 25:37:a4:db:a5:87:41:03:48:91:c3:f1:1f:d7:cb: b0:f2:6d:13:ec:aa:9e:00:cd:44:c8:fd:c2:44:00: 04:50:65:98:85:f5:ac:5d:3b:4a:23:41:4c:c6:8a: 44:22:1a:a3:4e:16:d0:76:7b:6e:69:9c:bc:e7:10: b3:4c:fd:ed:40:01:11:f4:ee:60:25:b6:c0:9e:0e: 86:63:75:cd:cd:c9:ba:58:03:f2:f1:71:b5:3a:4b: 58:5a:7e:d9:0f:0b:07:e9:43:f5:00:a3:ec:30:37: 88:28:f9:d9:8f:73:db:be:53:c5:22:48:9f:d6:3e: 84:ea:06:bd:2e:30:d4:d1:a5:2c:7e:30:ce:93:26: 65:76:e0:7e:20:d2:ba:6c:7d:10:49:dc:71:9c:23: c2:7f:87:2e:46:64:4b:18:cf:47:dd:02:99:6d:78: 61:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:BD:2F:50:5E:79:96:ED:05:86:40:F5:63:62:E4:1E:D6:70:B3:8A X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:df:47:d0:29:e2:e9:18:ad:94:0a:62:d8:12:35:b5:73:fc: 55:fe:62:a2:7e:10:a5:79:b2:60:e1:0b:38:bb:ad:8c:ad:bb: 55:60:1a:ab:ee:c2:dd:71:44:3d:8c:4d:16:3c:2c:99:4f:63: 09:27:1e:95:ed:96:d9:3c:79:bd:c5:71:0d:f5:25:40:e6:57: ee:92:5b:a1:a3:eb:8b:65:4b:b7:bd:be:e1:dd:9a:f7:2c:29: b9:bb:4c:d6:f3:11:6a:07:d8:1e:2b:06:1f:68:8c:2a:61:66: e8:56:23:24:37:5c:fe:db:42:dd:74:d9:e8:fd:5a:98:eb:83: 56:b8:b1:8e:17:18:1c:98:73:a7:80:03:fe:67:c4:60:1f:54: 32:70:23:b7:ef:b9:68:52:c6:78:dd:12:da:15:2c:bb:c3:f9: 88:14:ac:ae:1a:79:97:17:c8:79:cf:0c:86:bb:e1:48:e6:1f: f9:9a:e9:75:c2:7d:d1:e7:cd:8b:4b:e2:8b:d0:f4:11:43:71: 46:85:70:1f:e8:d3:25:62:89:25:15:f6:5f:d6:dd:d3:4f:65: 15:69:c2:d7:0f:8f:74:13:1d:18:f9:58:26:3a:14:ab:8d:7b: 1b:3d:b7:8a:07:d5:89:da:6d:6a:c3:7d:2b:96:de:cd:47:a1: 5e:fe:27:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCMrC1gWxfTnDXJdAonfQUD6ZmukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTA2MDEyMjQ2NDBaFw0yNTA2MDUwNDA5NDBaMDMxMTAvBgNV BAMTKDVEQkQyRjUwNUU3OTk2RUQwNTg2NDBGNTYzNjJFNDFFRDY3MEIzOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDErZDHZz/2yIDP4MgI/mQnVHnF bJKaDQMGxR5/a8+z61QZPQSm+81LscdVIQJu+qYtaBPMcHqDmckeDaVKki4ZiWXz bRVjkB28JLcR6lPKAV1gc/FJPBIB4yU3pNulh0EDSJHD8R/Xy7DybRPsqp4AzUTI /cJEAARQZZiF9axdO0ojQUzGikQiGqNOFtB2e25pnLznELNM/e1AARH07mAltsCe DoZjdc3NybpYA/LxcbU6S1haftkPCwfpQ/UAo+wwN4go+dmPc9u+U8UiSJ/WPoTq Br0uMNTRpSx+MM6TJmV24H4g0rpsfRBJ3HGcI8J/hy5GZEsYz0fdAplteGEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXb0vUF55lu0FhkD1Y2LkHtZws4owHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvfR9Ap4ukYrZQKYtgSNbVz/FX+YqJ+EKV5 smDhCzi7rYytu1VgGqvuwt1xRD2MTRY8LJlPYwknHpXtltk8eb3FcQ31JUDmV+6S W6Gj64tlS7e9vuHdmvcsKbm7TNbzEWoH2B4rBh9ojCphZuhWIyQ3XP7bQt102ej9 Wpjrg1a4sY4XGByYc6eAA/5nxGAfVDJwI7fvuWhSxnjdEtoVLLvD+YgUrK4aeZcX yHnPDIa74UjmH/ma6XXCfdHnzYtL4ovQ9BFDcUaFcB/o0yViiSUV9l/W3dNPZRVp wtcPj3QTHRj5WCY6FKuNexs9t4oH1YnabWrDfSuW3s1HoV7+J+A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:00 2025 by rpki-client