$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: IvRD2wZs9NhkuNGMLWHLEgcAH0Uq+3dN/MdddedzboI= Subject key identifier: 83:0A:77:50:F4:D5:76:6F:32:64:7F:CA:7D:16:1A:A0:8A:67:06:8A Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 2DA7CE510CDEF33E9295843C81E667D66E9DE04A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: E4 Signing time: Mon 30 Jun 2025 13:01:40 +0000 Manifest this update: Mon 30 Jun 2025 12:56:40 +0000 Manifest next update: Thu 03 Jul 2025 14:11:40 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: svZUA0v7UsnRCc0ZIjQZPs4P9p/1gq1qNfm9TYLUUD0=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:11:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a7:ce:51:0c:de:f3:3e:92:95:84:3c:81:e6:67:d6:6e:9d:e0:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Jun 30 12:56:40 2025 GMT Not After : Jul 3 14:11:40 2025 GMT Subject: CN=830A7750F4D5766F32647FCA7D161AA08A67068A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fa:33:93:3c:38:04:cd:9a:19:d3:12:fb:bd: aa:4b:b3:f9:ed:35:2f:e9:c2:09:66:4a:2b:2a:da: 1f:c3:44:ac:02:71:3d:9e:8c:a2:67:8e:3e:e9:59: d8:fe:80:35:6d:c5:61:67:03:f8:d3:60:27:1a:3e: d1:c0:e5:9c:04:52:71:0b:47:9c:29:f3:b2:ea:c0: d0:a0:c8:0e:f9:4a:99:ce:d5:50:83:22:a1:af:50: d2:f3:38:70:dc:e2:99:62:60:10:bb:7b:8c:9c:85: 59:0f:d5:72:f5:ba:58:51:88:39:a0:eb:b8:e2:99: a7:f1:74:2a:0a:ae:c5:64:7c:ba:83:d0:6c:78:5a: 46:98:25:ae:eb:07:64:8a:e2:34:ea:f9:f1:ff:06: 56:21:b9:09:80:a0:9f:e0:24:78:74:b4:9b:0f:df: 5f:d1:03:b7:a5:fc:a6:1d:40:32:ed:e7:8b:c8:2a: d7:1d:c2:f2:7e:00:1e:8c:a4:97:64:12:2e:e7:97: 30:c3:83:39:32:de:a6:a3:53:69:59:22:a5:9b:4b: 29:5b:75:5b:c0:68:68:46:ae:77:a1:7d:5f:c5:eb: 6d:cd:5b:b8:e8:39:3f:14:f1:57:13:f6:64:37:da: 99:6f:06:f3:03:61:b2:ba:d0:f2:01:ce:39:57:5a: b0:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:0A:77:50:F4:D5:76:6F:32:64:7F:CA:7D:16:1A:A0:8A:67:06:8A X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:20:88:8e:19:29:0e:19:d4:33:39:cb:c9:47:5d:69:4c:10: fb:7b:91:0a:fe:cc:9e:54:9b:04:45:b5:42:5d:f3:2b:a5:1b: 90:5f:4f:af:07:03:3a:ec:e5:c2:4b:dd:31:80:69:83:fd:97: d3:4b:2e:14:7f:ea:6b:dd:f5:f4:b4:2d:15:8e:3b:02:75:08: 21:d3:66:73:25:5b:00:45:4b:68:8e:44:7e:13:f6:3b:5e:3b: 0c:63:10:47:4c:c5:03:f6:5a:ec:82:f7:ef:77:04:cd:79:e3: c3:77:21:2e:97:30:54:e1:30:94:b8:73:d4:08:d6:91:4a:b3: 2a:e1:b3:2e:93:2e:46:fb:20:62:1c:c5:d4:b9:f5:42:37:3f: fe:1f:76:02:8b:43:be:51:7b:00:f3:c5:3a:84:f2:de:99:e5: f8:f0:33:51:62:25:59:30:f0:a0:b9:37:c7:f5:c7:36:7f:4c: f6:fc:bf:a5:1f:7c:51:21:4a:36:6b:bf:0e:0e:d0:24:fd:43: f8:90:32:f1:d0:d1:02:fe:f2:1a:28:fb:c7:7a:db:fb:5e:a8: eb:a5:88:25:b2:bf:33:6a:fe:56:61:37:b9:bd:44:ef:46:20: ab:cc:6c:cd:9c:58:9f:32:9b:cb:ce:30:79:12:8f:8f:c7:d2: 1d:a5:49:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULafOUQze8z6SlYQ8geZn1m6d4EowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTA2MzAxMjU2NDBaFw0yNTA3MDMxNDExNDBaMDMxMTAvBgNV BAMTKDgzMEE3NzUwRjRENTc2NkYzMjY0N0ZDQTdEMTYxQUEwOEE2NzA2OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+jOTPDgEzZoZ0xL7vapLs/nt NS/pwglmSisq2h/DRKwCcT2ejKJnjj7pWdj+gDVtxWFnA/jTYCcaPtHA5ZwEUnEL R5wp87LqwNCgyA75SpnO1VCDIqGvUNLzOHDc4pliYBC7e4ychVkP1XL1ulhRiDmg 67jimafxdCoKrsVkfLqD0Gx4WkaYJa7rB2SK4jTq+fH/BlYhuQmAoJ/gJHh0tJsP 31/RA7el/KYdQDLt54vIKtcdwvJ+AB6MpJdkEi7nlzDDgzky3qajU2lZIqWbSylb dVvAaGhGrnehfV/F623NW7joOT8U8VcT9mQ32plvBvMDYbK60PIBzjlXWrDHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgwp3UPTVdm8yZH/KfRYaoIpnBoowHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMgiI4ZKQ4Z1DM5y8lHXWlMEPt7kQr+zJ5U mwRFtUJd8yulG5BfT68HAzrs5cJL3TGAaYP9l9NLLhR/6mvd9fS0LRWOOwJ1CCHT ZnMlWwBFS2iORH4T9jteOwxjEEdMxQP2WuyC9+93BM1548N3IS6XMFThMJS4c9QI 1pFKsyrhsy6TLkb7IGIcxdS59UI3P/4fdgKLQ75RewDzxTqE8t6Z5fjwM1FiJVkw 8KC5N8f1xzZ/TPb8v6UffFEhSjZrvw4O0CT9Q/iQMvHQ0QL+8hoo+8d62/teqOul iCWyvzNq/lZhN7m9RO9GIKvMbM2cWJ8ym8vOMHkSj4/H0h2lSQc= -----END CERTIFICATE-----Generated at Tue Jul 1 11:40:44 2025 by rpki-client