$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: 7wXMS601BYQvhgZRnz76x0i2tXC3RALe9CRNDTRu6+o= Subject key identifier: 43:20:7B:6D:76:32:98:27:C7:9D:B8:C7:05:6F:C9:47:DD:1B:1F:3F Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 5B088B23AB4E718FDBDCFA0826761CEF69BEFA6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 021D Signing time: Wed 05 Nov 2025 00:10:03 +0000 Manifest this update: Wed 05 Nov 2025 00:05:03 +0000 Manifest next update: Sat 08 Nov 2025 04:20:03 +0000 Files and hashes: 1: 3130332e3137342e37392e302f32342d3234203d3e203338333230.roa (hash: AGvpCXR8gQBspf5FohNx3ipHrwnlCs57tuOOE5KVIPk=) 2: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) 3: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: wxFVAV6uftt3lTDgjidD1HdkT1ZNasAx4bhNGV+qrYQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 04:20:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:08:8b:23:ab:4e:71:8f:db:dc:fa:08:26:76:1c:ef:69:be:fa:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Nov 5 00:05:03 2025 GMT Not After : Nov 8 04:20:03 2025 GMT Subject: CN=43207B6D76329827C79DB8C7056FC947DD1B1F3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:8d:05:f9:1a:28:f5:d7:a3:5f:fc:d6:d9:3e: c9:7f:11:4c:ae:9b:66:30:db:90:aa:3b:e7:27:8d: 2b:12:54:0c:87:fc:5c:46:50:42:5f:86:ad:8c:78: 89:f8:b1:29:1e:a8:9c:e3:5c:48:0c:fb:29:59:36: a0:73:8a:fe:18:77:cc:ac:2f:2d:80:e1:41:6e:87: 71:34:4d:0e:46:2b:f5:bb:56:db:56:dc:17:30:a8: 59:e5:a2:fa:0d:0b:8a:fe:78:8f:5d:35:5a:0e:80: 0c:80:48:99:08:16:6b:66:50:d8:dc:28:78:bb:db: 2e:6b:1a:64:1e:3a:ae:dc:aa:8a:4c:0f:4e:fe:77: 82:b2:d8:11:13:b2:f8:a2:6d:83:09:3c:b4:69:cc: 0c:03:fb:69:77:b9:ec:1e:16:6d:ad:73:cc:44:f8: 1f:d8:70:3c:ce:7b:8e:f0:cc:0e:90:ae:e8:7f:6b: 2d:fb:ab:da:e8:bc:ea:ab:13:cb:34:57:ec:cb:24: cc:67:be:34:f5:5c:6a:de:d2:17:4c:80:fe:91:3f: 87:cc:24:a6:db:af:88:a8:25:ed:75:a8:51:99:bb: 01:e7:47:94:00:48:89:cc:24:09:42:92:fd:47:ae: 69:b7:a3:2d:df:69:59:93:ac:65:d3:57:ac:b3:49: b6:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:20:7B:6D:76:32:98:27:C7:9D:B8:C7:05:6F:C9:47:DD:1B:1F:3F X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:44:57:01:01:3f:6b:8a:4a:19:56:35:41:47:39:5e:74:80: b8:bb:35:cf:38:21:dd:66:e0:b1:9b:4f:8e:53:9e:16:7c:b6: 45:8f:73:04:b8:60:c8:ea:9e:8e:42:58:25:4b:21:62:af:8f: 77:6d:ca:62:9e:4e:2e:cf:5f:00:31:69:df:7d:cf:06:4b:3e: 9c:e8:53:6b:48:c4:ce:1e:3d:3a:d8:cf:c1:97:93:f5:18:39: c0:61:89:4f:78:5e:89:6f:ed:53:5f:f1:cf:99:80:9b:94:2f: 20:a8:d3:39:96:68:6f:f6:8a:2d:a3:8c:d7:b0:84:72:1b:10: 9e:a5:de:0f:00:9e:28:aa:8c:4c:f3:43:11:63:a6:70:04:97: 0b:a3:c8:b6:07:5a:e6:71:e7:c4:88:54:ab:f0:e8:31:f4:97: 9b:01:a2:2e:0f:72:e7:b3:a0:e2:6f:3e:5d:01:cb:7a:0f:b5: 70:a4:a3:46:3e:06:3d:82:4a:41:56:dd:e5:d7:38:29:fd:4d: 37:d7:81:c6:88:43:a2:a5:8f:9f:e5:7c:1a:8e:7c:09:a5:d5: 1d:39:45:1a:3f:53:b8:02:64:58:67:37:1b:81:32:d7:d9:6b: 64:9c:8c:5d:6a:af:2c:23:9f:ac:cb:64:97:65:f8:d9:b3:e3: ab:6f:a7:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWwiLI6tOcY/b3PoIJnYc72m++mwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTExMDUwMDA1MDNaFw0yNTExMDgwNDIwMDNaMDMxMTAvBgNV BAMTKDQzMjA3QjZENzYzMjk4MjdDNzlEQjhDNzA1NkZDOTQ3REQxQjFGM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQjQX5Gij116Nf/NbZPsl/EUyu m2Yw25CqO+cnjSsSVAyH/FxGUEJfhq2MeIn4sSkeqJzjXEgM+ylZNqBziv4Yd8ys Ly2A4UFuh3E0TQ5GK/W7VttW3BcwqFnlovoNC4r+eI9dNVoOgAyASJkIFmtmUNjc KHi72y5rGmQeOq7cqopMD07+d4Ky2BETsviibYMJPLRpzAwD+2l3ueweFm2tc8xE +B/YcDzOe47wzA6Qruh/ay37q9rovOqrE8s0V+zLJMxnvjT1XGre0hdMgP6RP4fM JKbbr4ioJe11qFGZuwHnR5QASInMJAlCkv1Hrmm3oy3faVmTrGXTV6yzSbZ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyB7bXYymCfHnbjHBW/JR90bHz8wHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGhEVwEBP2uKShlWNUFHOV50gLi7Nc84Id1m 4LGbT45TnhZ8tkWPcwS4YMjqno5CWCVLIWKvj3dtymKeTi7PXwAxad99zwZLPpzo U2tIxM4ePTrYz8GXk/UYOcBhiU94Xolv7VNf8c+ZgJuULyCo0zmWaG/2ii2jjNew hHIbEJ6l3g8AniiqjEzzQxFjpnAElwujyLYHWuZx58SIVKvw6DH0l5sBoi4Pcuez oOJvPl0By3oPtXCko0Y+Bj2CSkFW3eXXOCn9TTfXgcaIQ6Klj5/lfBqOfAml1R05 RRo/U7gCZFhnNxuBMtfZa2ScjF1qrywjn6zLZJdl+Nmz46tvp+A= -----END CERTIFICATE-----Generated at Thu Nov 6 03:01:34 2025 by rpki-client