$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: W/2cqkMehWZzSRpRG9U6cb5XQPhcTLF7bCA6WpIOyzM= Subject key identifier: DC:BD:FF:A0:CD:1F:36:37:8E:0A:0C:3D:F7:D4:F4:A3:8A:47:31:7E Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 59A95849E41EA8C7AFB43EA0DB5366B01AA8BD3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: FB Signing time: Fri 22 Aug 2025 03:42:45 +0000 Manifest this update: Fri 22 Aug 2025 03:37:45 +0000 Manifest next update: Mon 25 Aug 2025 12:35:45 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: MtNU+amjNKhf7AtdXYNhQtEVJjaRVSoehm1rSsxeHCc=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:35:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a9:58:49:e4:1e:a8:c7:af:b4:3e:a0:db:53:66:b0:1a:a8:bd:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Aug 22 03:37:45 2025 GMT Not After : Aug 25 12:35:45 2025 GMT Subject: CN=DCBDFFA0CD1F36378E0A0C3DF7D4F4A38A47317E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:21:41:d6:86:8d:30:03:75:98:56:5d:49:69: fe:e9:32:5c:01:1e:ca:a2:d5:d5:81:0e:4d:84:40: 1c:e4:a7:4e:c9:e2:e3:21:86:90:84:53:ba:2f:3f: 1f:8d:2f:6b:c7:09:22:e1:c5:58:04:49:82:db:b6: 53:b0:a7:0a:50:ab:d7:f1:b2:3a:1d:5c:0b:a9:95: 87:9e:6f:9a:12:e2:50:62:ac:de:9e:07:81:96:70: f8:c6:64:60:df:25:c0:90:81:fa:ae:bf:dc:2b:03: 1d:3d:8e:f9:8d:7e:2c:95:4d:a2:37:1c:02:81:f7: 32:b3:2a:3d:7a:bd:af:cf:10:9f:58:71:3c:f3:f9: 02:57:96:65:ac:37:0d:80:4b:a4:85:01:30:70:1d: c7:8f:a4:05:7b:37:17:88:74:52:09:65:59:de:68: ca:e3:c8:e8:7f:71:62:5c:a8:2f:66:ac:dd:0a:a8: 56:6b:f0:17:7f:51:e5:58:5e:fb:04:0a:f4:66:0e: 9d:f9:12:13:e2:62:45:07:d0:74:74:21:31:80:5b: 3f:fb:12:d4:62:7b:3d:0b:4e:04:8b:0d:bf:04:dc: 0f:9d:5d:17:58:23:83:1b:1e:9c:5d:50:c3:90:98: ae:b8:ed:df:29:87:57:63:09:9a:09:03:00:a0:2c: c8:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:BD:FF:A0:CD:1F:36:37:8E:0A:0C:3D:F7:D4:F4:A3:8A:47:31:7E X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:45:d7:b7:12:03:82:75:8a:ff:33:0e:2e:85:b6:72:7d:08: 7a:0b:19:76:ee:90:c2:a3:96:1b:10:55:52:88:16:9e:51:86: cf:20:89:3a:31:8c:16:32:40:4d:a0:d1:66:67:4b:f6:48:91: 60:28:95:20:d3:35:a1:be:c1:01:54:95:94:89:6a:0d:2c:81: a8:b4:4c:20:98:d7:9b:e5:2d:ae:e8:36:21:e4:f4:01:a1:c9: e3:6b:f1:b3:06:ba:af:44:b7:57:38:cd:f4:20:80:0a:06:ff: 35:42:b9:2c:08:3f:f3:ab:5f:c7:af:1f:dc:4a:53:e6:cd:10: 89:06:3f:2a:e5:ff:7f:57:2d:d5:a7:54:7e:75:d1:b7:9c:f7: 26:91:b6:9a:ef:c6:79:0c:76:f7:42:b3:3e:34:84:89:2f:1a: e4:1a:ed:a9:8b:89:f4:57:b6:d7:05:08:64:72:96:23:67:d2: 90:f7:81:37:c5:f2:ff:5e:5b:19:db:45:3c:84:28:db:81:8d: bd:b0:5b:72:44:e9:73:c1:a9:2d:bc:93:21:73:8b:6b:d8:e3: 16:35:66:16:b6:2f:97:31:e9:72:4d:b6:59:2f:8c:b1:b4:d0: da:67:5e:9c:42:e8:42:17:6e:5f:45:8a:69:a3:5b:8d:1b:b4: fb:d4:40:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWalYSeQeqMevtD6g21NmsBqovTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTA4MjIwMzM3NDVaFw0yNTA4MjUxMjM1NDVaMDMxMTAvBgNV BAMTKERDQkRGRkEwQ0QxRjM2Mzc4RTBBMEMzREY3RDRGNEEzOEE0NzMxN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnIUHWho0wA3WYVl1Jaf7pMlwB Hsqi1dWBDk2EQBzkp07J4uMhhpCEU7ovPx+NL2vHCSLhxVgESYLbtlOwpwpQq9fx sjodXAuplYeeb5oS4lBirN6eB4GWcPjGZGDfJcCQgfquv9wrAx09jvmNfiyVTaI3 HAKB9zKzKj16va/PEJ9YcTzz+QJXlmWsNw2AS6SFATBwHcePpAV7NxeIdFIJZVne aMrjyOh/cWJcqC9mrN0KqFZr8Bd/UeVYXvsECvRmDp35EhPiYkUH0HR0ITGAWz/7 EtRiez0LTgSLDb8E3A+dXRdYI4MbHpxdUMOQmK647d8ph1djCZoJAwCgLMjnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3L3/oM0fNjeOCgw999T0o4pHMX4wHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdF17cSA4J1iv8zDi6FtnJ9CHoLGXbukMKj lhsQVVKIFp5Rhs8giToxjBYyQE2g0WZnS/ZIkWAolSDTNaG+wQFUlZSJag0sgai0 TCCY15vlLa7oNiHk9AGhyeNr8bMGuq9Et1c4zfQggAoG/zVCuSwIP/OrX8evH9xK U+bNEIkGPyrl/39XLdWnVH510bec9yaRtprvxnkMdvdCsz40hIkvGuQa7amLifRX ttcFCGRyliNn0pD3gTfF8v9eWxnbRTyEKNuBjb2wW3JE6XPBqS28kyFzi2vY4xY1 Zha2L5cx6XJNtlkvjLG00NpnXpxC6EIXbl9FimmjW40btPvUQLs= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:59 2025 by rpki-client