$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: ZPr+NJXgiLlTiVXPD6qi3c5SfpYmNRvysCAi6LLtOmY= Subject key identifier: 54:2A:E8:7B:76:AA:8F:35:42:9B:8E:33:FF:EB:6C:94:86:66:56:3F Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 49EBC644C33D2B4F31F24C927E4C4DB1649B2CC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: CB Signing time: Tue 06 May 2025 16:51:40 +0000 Manifest this update: Tue 06 May 2025 16:46:40 +0000 Manifest next update: Fri 09 May 2025 23:38:40 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: qsKJGh0diXsfjcvH1OYNm5bOoTdy4EeWJd3vh/veWfY=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 23:38:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:eb:c6:44:c3:3d:2b:4f:31:f2:4c:92:7e:4c:4d:b1:64:9b:2c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: May 6 16:46:40 2025 GMT Not After : May 9 23:38:40 2025 GMT Subject: CN=542AE87B76AA8F35429B8E33FFEB6C948666563F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1d:b7:d5:96:75:0e:eb:3f:0f:3c:d7:3b:46: 40:8c:e6:c8:a0:b5:03:56:7f:1e:5f:e0:21:04:6a: c6:b8:0d:f5:9b:b8:b6:48:3d:b9:46:21:cc:47:09: 3d:02:76:ee:54:0e:ca:d1:e6:be:92:b7:e6:d5:17: d4:98:69:80:a1:2c:52:e7:9f:24:e4:12:e1:fd:c9: 91:33:a8:6e:37:4e:10:96:c3:d4:85:a5:eb:4c:5d: 9f:11:ed:7f:31:9d:18:a7:13:5c:73:6f:db:49:8a: d0:ba:0a:1b:c0:73:b5:12:83:47:b5:85:99:fb:88: a6:3b:5c:c8:3a:87:d0:09:37:77:21:77:e8:c3:f0: f7:19:49:47:08:6d:5f:19:dc:fc:ca:db:4c:c8:d4: ce:ba:14:d6:b9:42:c8:c8:b9:80:c4:14:db:67:70: 3e:83:e8:0c:1e:f5:9d:58:4f:f0:84:81:a4:50:80: 1c:d1:11:22:ed:d8:5a:ba:68:fe:b1:9b:0b:51:89: 73:18:5a:d7:48:d0:f8:23:6c:7a:2b:c6:86:12:63: 3d:9f:d7:5c:8e:40:a0:4b:48:93:05:8e:f4:7e:61: 8a:b9:c2:39:d0:9f:a9:b8:57:95:4a:ce:81:3d:84: f3:2e:f1:e8:ee:e6:ed:48:80:23:04:6e:ed:27:c9: a7:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:2A:E8:7B:76:AA:8F:35:42:9B:8E:33:FF:EB:6C:94:86:66:56:3F X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:76:e7:76:4e:46:c1:38:d5:97:7d:28:e2:01:cd:03:87:b8: 49:b7:ee:3e:f6:16:82:8a:ee:2f:4a:4a:6e:aa:ff:22:56:6c: 9d:03:ca:87:d1:9e:b1:cb:9c:42:7e:29:a8:e3:df:b4:f1:81: 02:cc:85:a7:67:10:fa:23:bb:2b:62:ec:98:20:e2:3c:fe:92: 07:f5:bc:dc:38:d8:da:5a:50:2c:e5:88:c0:79:4b:3d:87:65: 31:06:98:f7:b9:24:82:16:bd:ba:5e:64:04:4d:50:d0:94:43: 0a:46:f6:b7:df:6b:3c:54:87:78:89:51:4b:28:35:1a:37:70: 95:7d:27:42:0a:88:90:3f:8f:e8:c9:ca:c9:b8:6b:6d:ce:40: 0f:a7:12:6d:73:d4:91:ab:19:4d:8f:3c:d4:c1:76:2e:30:b7: 6a:fc:6a:81:f6:d3:12:05:d5:6a:7f:02:07:9a:b5:47:f3:df: e8:83:b2:dd:94:e9:77:3d:e2:da:2c:2c:42:4d:35:08:5d:c4: 78:84:7d:6d:2f:a7:f7:e5:8c:da:4f:ed:d7:87:69:8d:b4:b3: 5e:ce:dc:68:78:fd:e9:6f:38:ae:77:64:b9:e7:80:35:86:a0: 53:24:f9:d4:ef:f6:08:96:d9:d3:5f:ea:de:d7:06:cd:48:b2: 48:62:c4:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSevGRMM9K08x8kySfkxNsWSbLMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTA1MDYxNjQ2NDBaFw0yNTA1MDkyMzM4NDBaMDMxMTAvBgNV BAMTKDU0MkFFODdCNzZBQThGMzU0MjlCOEUzM0ZGRUI2Qzk0ODY2NjU2M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHbfVlnUO6z8PPNc7RkCM5sig tQNWfx5f4CEEasa4DfWbuLZIPblGIcxHCT0Cdu5UDsrR5r6St+bVF9SYaYChLFLn nyTkEuH9yZEzqG43ThCWw9SFpetMXZ8R7X8xnRinE1xzb9tJitC6ChvAc7USg0e1 hZn7iKY7XMg6h9AJN3chd+jD8PcZSUcIbV8Z3PzK20zI1M66FNa5QsjIuYDEFNtn cD6D6Awe9Z1YT/CEgaRQgBzRESLt2Fq6aP6xmwtRiXMYWtdI0PgjbHorxoYSYz2f 11yOQKBLSJMFjvR+YYq5wjnQn6m4V5VKzoE9hPMu8eju5u1IgCMEbu0nyafVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVCroe3aqjzVCm44z/+tslIZmVj8wHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB253ZORsE41Zd9KOIBzQOHuEm37j72FoKK 7i9KSm6q/yJWbJ0DyofRnrHLnEJ+Kajj37TxgQLMhadnEPojuyti7Jgg4jz+kgf1 vNw42NpaUCzliMB5Sz2HZTEGmPe5JIIWvbpeZARNUNCUQwpG9rffazxUh3iJUUso NRo3cJV9J0IKiJA/j+jJysm4a23OQA+nEm1z1JGrGU2PPNTBdi4wt2r8aoH20xIF 1Wp/AgeatUfz3+iDst2U6Xc94tosLEJNNQhdxHiEfW0vp/fljNpP7deHaY20s17O 3Gh4/elvOK53ZLnngDWGoFMk+dTv9giW2dNf6t7XBs1IskhixOc= -----END CERTIFICATE-----Generated at Thu May 8 08:43:49 2025 by rpki-client