$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: Ilv3L3C0NgYtuQjoXnTtY9O/TvCl/bDW0YhD3btkmao= Subject key identifier: 83:F2:F8:B7:5E:0E:F3:B0:92:09:70:F1:B8:1B:BB:84:81:8F:B2:F7 Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 5150B6C42602EC76E696A5CBFBA7C129B4BB6F9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 0101 Signing time: Fri 05 Sep 2025 06:41:41 +0000 Manifest this update: Fri 05 Sep 2025 06:36:41 +0000 Manifest next update: Mon 08 Sep 2025 11:31:41 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: 3GIIMggQ+TjaCCqihVGhGq8fg7GEfHTTR2BER4tDeHo=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 11:31:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:50:b6:c4:26:02:ec:76:e6:96:a5:cb:fb:a7:c1:29:b4:bb:6f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Sep 5 06:36:41 2025 GMT Not After : Sep 8 11:31:41 2025 GMT Subject: CN=83F2F8B75E0EF3B0920970F1B81BBB84818FB2F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f0:93:cf:24:ee:14:3d:10:5a:2a:40:9b:52: a1:2c:20:8a:b5:4e:4e:76:2e:58:5c:d1:7d:f8:09: 0d:59:40:0a:27:ba:48:41:73:1e:c9:9c:bf:d0:20: af:20:c6:b2:7c:14:75:d9:de:05:92:90:42:07:1e: 40:26:c6:f3:ea:62:23:fc:ed:60:3d:9e:9b:93:90: ee:ab:ac:25:81:67:cf:f9:af:7e:f5:9c:28:6d:14: 45:79:46:d4:ea:e5:fa:18:cd:46:d7:17:6f:bf:2e: 33:3d:d6:c8:d2:54:db:7c:56:bc:e8:b3:f5:0a:46: d0:12:dd:ae:7e:bf:2d:84:18:0f:0c:66:95:50:71: 0d:32:05:34:1f:df:c9:07:15:d9:a3:f1:10:9f:ad: ba:dd:87:0b:bb:e9:2b:f1:23:10:ed:2e:ff:0a:ab: ef:9a:da:0c:f9:f6:5a:bc:6a:17:dd:f8:c8:3b:22: b5:68:bc:17:7e:7a:65:b0:59:27:6f:1e:17:58:f4: 5c:e8:b4:4e:c2:d4:8e:eb:95:65:ac:40:01:fa:ef: 5f:1a:5f:28:4a:f3:94:e5:cc:22:50:2e:5e:1b:48: 7e:d5:fe:bb:e5:aa:f4:a3:b9:ec:c3:ac:a1:1a:66: f5:fc:c4:6b:13:2f:5d:5d:de:da:b9:70:f1:db:90: 4f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F2:F8:B7:5E:0E:F3:B0:92:09:70:F1:B8:1B:BB:84:81:8F:B2:F7 X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:03:ec:83:0c:3a:a0:09:20:c9:a6:9a:5a:d2:f9:4f:6f:db: d9:8c:6a:9c:72:e2:9d:24:e2:5c:3f:19:c6:c5:5f:b7:97:61: 8d:77:44:19:ce:a6:55:41:ee:c8:6e:d6:51:68:e9:9d:f8:32: bc:dc:c5:b8:c3:5d:97:00:55:4e:61:a5:ac:1b:58:f1:93:1e: 02:dc:fb:f0:8c:f7:f1:6f:ec:98:2e:0b:37:8c:41:75:d3:1b: 11:6c:a7:e9:ba:48:60:2e:58:63:54:ec:25:43:85:69:12:27: dc:42:88:1f:81:8b:c2:a1:fd:52:09:ae:2c:d8:40:9e:e1:31: c9:07:41:21:09:00:2e:1e:b1:be:c6:56:21:41:f3:9a:74:22: be:41:c8:7d:19:60:f3:1b:fd:b4:6c:3c:08:7f:43:9b:0f:e6: 93:9d:e2:b1:ae:45:59:b9:52:bd:19:d9:cb:40:fa:45:bc:65: 50:a2:70:46:ff:32:4f:40:c3:62:cb:1b:81:b0:46:1a:fe:7c: 66:48:10:3d:d6:64:43:3b:af:b3:e3:ce:50:6d:9b:8b:ed:f4: a8:7d:5b:91:bd:51:e2:23:fe:4f:96:e0:81:71:a7:f7:95:fc: a2:4b:c4:da:be:63:7c:16:e0:bd:7d:e2:6a:9f:ed:a4:5c:c3: 36:db:69:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUVC2xCYC7HbmlqXL+6fBKbS7b58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTA5MDUwNjM2NDFaFw0yNTA5MDgxMTMxNDFaMDMxMTAvBgNV BAMTKDgzRjJGOEI3NUUwRUYzQjA5MjA5NzBGMUI4MUJCQjg0ODE4RkIyRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy8JPPJO4UPRBaKkCbUqEsIIq1 Tk52Llhc0X34CQ1ZQAonukhBcx7JnL/QIK8gxrJ8FHXZ3gWSkEIHHkAmxvPqYiP8 7WA9npuTkO6rrCWBZ8/5r371nChtFEV5RtTq5foYzUbXF2+/LjM91sjSVNt8Vrzo s/UKRtAS3a5+vy2EGA8MZpVQcQ0yBTQf38kHFdmj8RCfrbrdhwu76SvxIxDtLv8K q++a2gz59lq8ahfd+Mg7IrVovBd+emWwWSdvHhdY9FzotE7C1I7rlWWsQAH6718a XyhK85TlzCJQLl4bSH7V/rvlqvSjuezDrKEaZvX8xGsTL11d3tq5cPHbkE/hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/L4t14O87CSCXDxuBu7hIGPsvcwHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMD7IMMOqAJIMmmmlrS+U9v29mMapxy4p0k 4lw/GcbFX7eXYY13RBnOplVB7shu1lFo6Z34MrzcxbjDXZcAVU5hpawbWPGTHgLc +/CM9/Fv7JguCzeMQXXTGxFsp+m6SGAuWGNU7CVDhWkSJ9xCiB+Bi8Kh/VIJrizY QJ7hMckHQSEJAC4esb7GViFB85p0Ir5ByH0ZYPMb/bRsPAh/Q5sP5pOd4rGuRVm5 Ur0Z2ctA+kW8ZVCicEb/Mk9Aw2LLG4GwRhr+fGZIED3WZEM7r7PjzlBtm4vt9Kh9 W5G9UeIj/k+W4IFxp/eV/KJLxNq+Y3wW4L194mqf7aRcwzbbado= -----END CERTIFICATE-----Generated at Fri Sep 5 10:11:32 2025 by rpki-client