$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: qMhrEj1Nsawto7waR1Ul6mB2LMEJyzm1gDv9OsAU9L4= Subject key identifier: 72:96:EB:A8:B0:AB:18:82:F6:21:F9:10:E0:2C:F2:01:F8:E7:CF:D6 Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 0EC7786BDE5816C0D06A6BFF4C78CD2A6EEBB54F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 015B Signing time: Wed 25 Mar 2026 19:01:58 +0000 Manifest this update: Wed 25 Mar 2026 18:56:58 +0000 Manifest next update: Sun 29 Mar 2026 04:50:58 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: nHyrGIwFlYXJMDQNPN4bN5vUOGfyvsw9VACaRmy/jis=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: 26Hr94IvTPNWLtyGYpXVN8+IvP+74Uco2RJ0Tu/T2Wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:c7:78:6b:de:58:16:c0:d0:6a:6b:ff:4c:78:cd:2a:6e:eb:b5:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Mar 25 18:56:58 2026 GMT Not After : Mar 29 04:50:58 2026 GMT Subject: CN=7296EBA8B0AB1882F621F910E02CF201F8E7CFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6f:76:3d:4f:c1:e7:4e:b2:61:ee:19:05:0c: 7e:04:de:9d:c4:0e:bc:f6:83:55:75:35:bc:8b:63: ed:a4:b0:c5:4a:71:fc:8d:61:34:95:11:a7:f7:67: 4a:52:f1:41:dc:95:32:dc:2b:7c:86:5d:6d:36:97: 3b:c7:de:ff:fe:37:b3:41:6e:77:18:ca:03:f6:ad: 9b:8d:ca:b7:37:e9:04:61:e4:37:82:e6:55:78:9e: 90:a5:25:89:f9:fd:fc:1a:64:2f:a4:28:fe:61:df: 99:dc:cb:fe:a6:9e:f3:b2:fb:dd:21:7f:7d:8b:43: 28:92:f1:01:45:39:79:5b:e8:97:9b:ed:4b:48:96: 7f:54:42:7c:01:39:28:f9:82:11:65:1a:e9:fe:a4: b7:2f:65:4e:8a:5e:8a:d3:2e:e8:1d:1b:44:67:ca: 44:50:df:ef:b1:b2:fa:fd:72:03:31:50:5a:e9:43: ac:f7:df:c9:be:b0:52:2c:01:b1:77:6a:43:a7:98: 8d:63:d7:42:39:fb:e6:31:64:bf:d1:79:f7:7c:a3: 36:f9:00:2c:13:3a:86:5c:66:20:a7:8c:f9:11:d0: 3c:8d:d1:c1:d2:65:69:4a:d8:fc:36:e1:0d:86:d1: 3f:93:d3:eb:19:37:f3:68:f3:04:e0:46:52:41:cc: 99:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:96:EB:A8:B0:AB:18:82:F6:21:F9:10:E0:2C:F2:01:F8:E7:CF:D6 X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:91:f2:fe:12:9c:bd:60:0b:ca:34:83:bb:6e:54:20:24:f3: 6c:94:4b:f1:d6:50:60:85:e4:e9:ce:e8:0d:97:b5:f7:d5:be: f8:9b:b6:2f:31:44:12:1b:9e:7d:f6:25:c6:c6:d6:fc:86:ee: 48:e6:56:01:df:39:97:2f:b7:5f:06:e1:a9:df:7d:84:2d:a7: 77:c2:45:ff:0e:c4:3c:59:ad:d2:1a:82:61:8e:4b:1d:48:68: cc:93:1b:9d:63:99:ce:0d:4a:7a:5d:c6:1f:31:54:fb:fa:36: 83:fc:b9:98:60:c0:07:49:48:8a:e7:54:8d:34:76:81:a8:83: bb:6b:45:7d:02:2e:c0:92:e3:51:e1:dc:97:2d:1e:89:15:71: ce:aa:61:5e:9e:4b:c1:51:18:76:99:a9:d6:e6:61:cc:c8:f6: 6c:c2:ea:07:5d:7d:f4:02:87:1b:74:75:74:2f:18:af:40:5e: 80:7e:63:73:81:40:4a:1f:bb:dc:cb:9f:23:80:d5:94:f5:8c: 63:02:45:26:16:22:12:d9:16:d8:84:e1:a8:36:cc:17:c8:aa: 25:39:e7:64:ea:5c:a0:d9:67:af:18:f9:28:ca:7f:ba:4e:da: 72:db:19:5a:77:2b:9f:6d:10:09:f9:cf:96:27:53:5e:d9:eb: 21:6b:ca:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDsd4a95YFsDQamv/THjNKm7rtU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNjAzMjUxODU2NThaFw0yNjAzMjkwNDUwNThaMDMxMTAvBgNV BAMTKDcyOTZFQkE4QjBBQjE4ODJGNjIxRjkxMEUwMkNGMjAxRjhFN0NGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQb3Y9T8HnTrJh7hkFDH4E3p3E Drz2g1V1NbyLY+2ksMVKcfyNYTSVEaf3Z0pS8UHclTLcK3yGXW02lzvH3v/+N7NB bncYygP2rZuNyrc36QRh5DeC5lV4npClJYn5/fwaZC+kKP5h35ncy/6mnvOy+90h f32LQyiS8QFFOXlb6Jeb7UtIln9UQnwBOSj5ghFlGun+pLcvZU6KXorTLugdG0Rn ykRQ3++xsvr9cgMxUFrpQ6z338m+sFIsAbF3akOnmI1j10I5++YxZL/Refd8ozb5 ACwTOoZcZiCnjPkR0DyN0cHSZWlK2Pw24Q2G0T+T0+sZN/No8wTgRlJBzJm/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpbrqLCrGIL2IfkQ4CzyAfjnz9YwHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiR8v4SnL1gC8o0g7tuVCAk82yUS/HWUGCF 5OnO6A2XtffVvvibti8xRBIbnn32JcbG1vyG7kjmVgHfOZcvt18G4anffYQtp3fC Rf8OxDxZrdIagmGOSx1IaMyTG51jmc4NSnpdxh8xVPv6NoP8uZhgwAdJSIrnVI00 doGog7trRX0CLsCS41Hh3JctHokVcc6qYV6eS8FRGHaZqdbmYczI9mzC6gddffQC hxt0dXQvGK9AXoB+Y3OBQEofu9zLnyOA1ZT1jGMCRSYWIhLZFtiE4ag2zBfIqiU5 52TqXKDZZ68Y+SjKf7pO2nLbGVp3K59tEAn5z5YnU17Z6yFryuY= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:27 2026 by rpki-client