$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: XfPG1NnkzEQ3Ee6xsQm2Rpm5eohnQXD4V909H1QDg60= Subject key identifier: 3B:BE:97:AD:75:51:B2:BB:6D:B9:54:BC:11:36:37:AC:CF:69:27:9D Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 592F13C0F4D599AA028D204EA6EBDB340308F49C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 0202 Signing time: Thu 04 Sep 2025 20:20:03 +0000 Manifest this update: Thu 04 Sep 2025 20:15:03 +0000 Manifest next update: Mon 08 Sep 2025 08:13:03 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: wP/VcF8EjCv4xl7n5bpoAtFv9RVPKLsCE3OBv6OWzlg=) 2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) 3: 3130332e3137342e37392e302f32342d3234203d3e203338333230.roa (hash: AGvpCXR8gQBspf5FohNx3ipHrwnlCs57tuOOE5KVIPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 08:13:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:2f:13:c0:f4:d5:99:aa:02:8d:20:4e:a6:eb:db:34:03:08:f4:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Sep 4 20:15:03 2025 GMT Not After : Sep 8 08:13:03 2025 GMT Subject: CN=3BBE97AD7551B2BB6DB954BC113637ACCF69279D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:8b:72:c3:eb:bb:a6:24:df:45:47:87:de:b5: f8:96:ac:4a:8c:e3:61:2b:b0:0b:08:d4:22:90:bc: 87:ca:44:28:ef:56:30:db:20:0e:a9:71:34:50:47: 71:55:42:6b:07:ec:1b:48:cd:d5:21:d2:0e:11:7b: 0d:2c:66:d4:d3:d9:29:13:45:7f:44:1c:0a:72:09: 18:24:c9:15:a4:ea:e5:0e:98:4a:a6:40:a4:46:eb: 61:ff:3a:61:19:d3:ed:bf:d2:84:11:1a:1f:4e:7d: 07:dc:92:33:87:98:33:d1:df:fd:31:ea:66:af:21: ff:24:ea:af:e1:a6:9d:ad:69:b2:38:e4:4a:2c:19: 94:10:d9:79:43:4b:a9:f8:a9:85:44:58:bf:21:bb: c8:a4:d9:ff:1b:9b:39:f7:37:8b:52:72:e5:fb:ff: 8d:e4:89:71:d5:ec:96:4a:17:d6:cd:96:4b:9c:ca: b0:39:97:4c:56:4a:31:db:65:09:9f:44:9d:af:23: 1d:fa:fc:e0:eb:e3:39:48:71:4b:34:6f:67:10:0c: 62:b2:c3:75:bc:8c:31:56:1e:f7:63:e4:f0:f3:76: 3c:e5:1e:22:f8:f9:08:41:ac:0a:d4:5b:d2:2e:08: 0f:a2:fb:93:79:93:c2:08:a8:56:44:53:1b:a8:37: 3e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:BE:97:AD:75:51:B2:BB:6D:B9:54:BC:11:36:37:AC:CF:69:27:9D X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:a1:25:c2:7b:06:e5:7f:ce:b1:f6:d6:d6:25:0b:69:5e:37: 57:25:28:da:ed:4f:a8:03:ba:05:bd:1a:b0:30:64:5d:4a:fc: 80:8c:92:47:90:9c:a0:53:6b:58:3f:c8:4a:ca:ba:a3:fb:32: 82:c6:18:dc:88:fe:48:9a:ba:7d:15:5a:98:e5:fc:62:57:77: 31:7a:eb:d7:88:28:1e:cc:af:bf:4d:b5:4f:55:b9:e3:f3:10: 49:6b:63:08:89:5d:55:ed:b0:6f:2a:5a:29:56:0e:fb:5f:b0: f1:f0:11:da:83:96:12:67:b1:d2:34:a7:e7:eb:38:a6:5d:d4: 7a:f5:c2:cb:8f:69:81:69:30:d0:a8:40:a3:4e:82:57:d8:81: 87:8e:8c:16:21:09:b7:37:3f:48:e7:04:d6:94:7b:c3:99:bd: 7b:2a:b8:0f:1b:ed:91:d9:79:b9:c1:b9:c0:66:73:06:3d:27: 07:b9:79:ca:4c:6f:ba:b6:c8:f7:5c:00:0f:41:a3:ee:f5:eb: c9:8c:c1:9c:14:c7:e4:f4:a9:a2:62:7f:d5:2a:e2:f9:6d:45: 79:ed:ad:91:dd:38:c0:6b:da:f9:3a:bf:88:85:ba:30:69:50: 16:da:32:77:b3:fd:9d:b6:46:27:a8:ac:6b:ed:31:bc:be:76: 29:af:16:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWS8TwPTVmaoCjSBOpuvbNAMI9JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTA5MDQyMDE1MDNaFw0yNTA5MDgwODEzMDNaMDMxMTAvBgNV BAMTKDNCQkU5N0FENzU1MUIyQkI2REI5NTRCQzExMzYzN0FDQ0Y2OTI3OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4i3LD67umJN9FR4fetfiWrEqM 42ErsAsI1CKQvIfKRCjvVjDbIA6pcTRQR3FVQmsH7BtIzdUh0g4Rew0sZtTT2SkT RX9EHApyCRgkyRWk6uUOmEqmQKRG62H/OmEZ0+2/0oQRGh9OfQfckjOHmDPR3/0x 6mavIf8k6q/hpp2tabI45EosGZQQ2XlDS6n4qYVEWL8hu8ik2f8bmzn3N4tScuX7 /43kiXHV7JZKF9bNlkucyrA5l0xWSjHbZQmfRJ2vIx36/ODr4zlIcUs0b2cQDGKy w3W8jDFWHvdj5PDzdjzlHiL4+QhBrArUW9IuCA+i+5N5k8IIqFZEUxuoNz6tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO76XrXVRsrttuVS8ETY3rM9pJ50wHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyhJcJ7BuV/zrH21tYlC2leN1clKNrtT6gD ugW9GrAwZF1K/ICMkkeQnKBTa1g/yErKuqP7MoLGGNyI/kiaun0VWpjl/GJXdzF6 69eIKB7Mr79NtU9VuePzEElrYwiJXVXtsG8qWilWDvtfsPHwEdqDlhJnsdI0p+fr OKZd1Hr1wsuPaYFpMNCoQKNOglfYgYeOjBYhCbc3P0jnBNaUe8OZvXsquA8b7ZHZ ebnBucBmcwY9Jwe5ecpMb7q2yPdcAA9Bo+7168mMwZwUx+T0qaJif9Uq4vltRXnt rZHdOMBr2vk6v4iFujBpUBbaMnez/Z22RieorGvtMby+dimvFvs= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:23 2025 by rpki-client