$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: EpsU3fvBF1jGUEjyP29MESd0nHYYlWDsST57UXWlCU4= Subject key identifier: A0:22:BE:58:79:C7:B4:E0:9A:03:F9:6C:C1:AC:A3:AB:87:E4:E8:36 Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 57D836D0BF57694B0CCB41AEEDE432BDFF5391C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 01D5 Signing time: Mon 02 Jun 2025 01:10:03 +0000 Manifest this update: Mon 02 Jun 2025 01:05:03 +0000 Manifest next update: Thu 05 Jun 2025 09:44:03 +0000 Files and hashes: 1: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: 6SjyNaC8clfPZSpOfkhlsk3uZcguqbS+LhGtf4nhY3k=) 2: 3130332e3137342e37382e302f32332d3234203d3e203338333230.roa (hash: JLvwrDCSe45qQUH0nf/lghekanOyIElCFqxu5ayU5Q0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 09:44:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:d8:36:d0:bf:57:69:4b:0c:cb:41:ae:ed:e4:32:bd:ff:53:91:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Jun 2 01:05:03 2025 GMT Not After : Jun 5 09:44:03 2025 GMT Subject: CN=A022BE5879C7B4E09A03F96CC1ACA3AB87E4E836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ef:f9:cb:94:17:4b:db:9c:58:85:30:62:b8: 5e:77:a0:69:ad:b8:9a:0b:6e:5f:aa:96:5a:64:cd: 4e:1c:57:ea:c6:b2:52:23:28:cd:cb:2c:8d:31:fd: 5c:f4:c9:36:c9:a0:d4:fe:3e:c9:6f:1f:39:ce:e6: ee:3a:ef:a2:d9:d8:54:2f:2d:07:66:75:1c:19:49: 45:2d:7a:1f:f5:23:0b:88:39:11:b5:a5:b9:b3:a4: a2:e5:93:2d:4a:9e:d9:49:69:2a:bc:16:59:92:e4: a7:fd:b8:c3:75:69:c7:43:a4:81:55:de:29:b4:df: eb:ee:2f:32:c7:49:8e:c7:8c:83:94:4c:ae:fb:b1: a8:e7:3c:e6:96:71:6b:d3:61:a9:ce:d4:06:b1:58: 85:7b:11:34:12:b5:60:b5:0e:40:35:cc:8b:02:b5: 19:47:34:bc:32:14:b6:f4:83:45:b8:96:fd:42:1c: 98:24:0a:b9:99:1c:26:b7:24:de:7c:27:8a:43:9a: 4e:ad:f2:a9:b6:3d:b2:5c:29:2b:19:b5:37:48:f9: 5d:1b:10:ea:e2:f1:6d:cd:9f:42:c9:66:41:61:2f: 1b:f1:f6:67:0e:fd:70:fd:a0:c8:01:5b:b6:58:0c: eb:37:4c:86:0e:55:5d:a4:d9:47:96:f4:4e:b9:3d: 98:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:22:BE:58:79:C7:B4:E0:9A:03:F9:6C:C1:AC:A3:AB:87:E4:E8:36 X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:61:e7:6e:f6:44:9f:3f:27:77:00:25:68:35:19:29:d0:5b: 04:71:bc:90:a4:b0:25:73:ec:0e:17:50:6d:ae:83:38:45:0a: a5:da:4e:05:97:d6:52:dd:57:40:a9:00:58:d8:d7:e2:1d:09: bc:9b:ed:e9:36:1a:49:69:d5:e4:88:1d:cc:81:9b:66:2b:e3: 3f:5f:ef:4c:45:f8:9d:98:11:88:99:b6:30:9f:44:d9:2f:82: fa:09:76:14:99:9c:05:f2:8f:64:bb:5a:29:52:5c:87:ad:ca: c3:78:c5:d6:04:0d:45:75:41:37:c5:aa:14:1e:83:49:10:45: 85:79:09:c2:c9:d0:3a:f1:e1:21:e4:27:43:57:c8:82:1b:fa: 78:03:e5:01:ea:56:30:ef:d8:36:8f:40:50:e1:35:54:96:12: fd:14:e5:80:69:c7:68:81:da:83:cb:9b:33:c1:07:94:03:a1: 50:e7:02:03:80:51:c1:c7:63:1c:5b:03:82:7b:de:92:f5:6f: 68:85:db:37:d4:d3:e4:ce:f3:35:12:0f:06:fb:e6:93:cb:a9: 66:9d:53:ba:b4:35:3b:04:05:0a:32:65:ac:e5:ca:6f:e9:3e: 1a:ea:eb:be:39:8f:3c:a5:a9:8c:36:31:75:c8:1b:1b:bd:3b: aa:74:35:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV9g20L9XaUsMy0Gu7eQyvf9TkcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTA2MDIwMTA1MDNaFw0yNTA2MDUwOTQ0MDNaMDMxMTAvBgNV BAMTKEEwMjJCRTU4NzlDN0I0RTA5QTAzRjk2Q0MxQUNBM0FCODdFNEU4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ7/nLlBdL25xYhTBiuF53oGmt uJoLbl+qllpkzU4cV+rGslIjKM3LLI0x/Vz0yTbJoNT+PslvHznO5u4676LZ2FQv LQdmdRwZSUUteh/1IwuIORG1pbmzpKLlky1KntlJaSq8FlmS5Kf9uMN1acdDpIFV 3im03+vuLzLHSY7HjIOUTK77sajnPOaWcWvTYanO1AaxWIV7ETQStWC1DkA1zIsC tRlHNLwyFLb0g0W4lv1CHJgkCrmZHCa3JN58J4pDmk6t8qm2PbJcKSsZtTdI+V0b EOri8W3Nn0LJZkFhLxvx9mcO/XD9oMgBW7ZYDOs3TIYOVV2k2UeW9E65PZgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoCK+WHnHtOCaA/lswayjq4fk6DYwHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxh5272RJ8/J3cAJWg1GSnQWwRxvJCksCVz 7A4XUG2ugzhFCqXaTgWX1lLdV0CpAFjY1+IdCbyb7ek2Gklp1eSIHcyBm2Yr4z9f 70xF+J2YEYiZtjCfRNkvgvoJdhSZnAXyj2S7WilSXIetysN4xdYEDUV1QTfFqhQe g0kQRYV5CcLJ0Drx4SHkJ0NXyIIb+ngD5QHqVjDv2DaPQFDhNVSWEv0U5YBpx2iB 2oPLmzPBB5QDoVDnAgOAUcHHYxxbA4J73pL1b2iF2zfU0+TO8zUSDwb75pPLqWad U7q0NTsEBQoyZazlym/pPhrq6745jzylqYw2MXXIGxu9O6p0NeM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:13:10 2025 by rpki-client