$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: l7n2nNrU8hFZlEORVDyKlvXVq8tzNUe4AP2r/MQ7mho= Subject key identifier: CD:CA:A3:24:A8:0F:0A:80:E1:78:B2:63:E8:AF:49:45:EF:47:78:9D Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 698DEF38096EBD591AADF013ABAA2CBEBD79A195 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 0115 Signing time: Sat 18 Oct 2025 23:21:42 +0000 Manifest this update: Sat 18 Oct 2025 23:16:42 +0000 Manifest next update: Wed 22 Oct 2025 11:07:42 +0000 Files and hashes: 1: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) 2: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: mnPw/lRt56Itvi7OruJJxK/mdcVlinop2HClxXw9R+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:07:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:8d:ef:38:09:6e:bd:59:1a:ad:f0:13:ab:aa:2c:be:bd:79:a1:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Oct 18 23:16:42 2025 GMT Not After : Oct 22 11:07:42 2025 GMT Subject: CN=CDCAA324A80F0A80E178B263E8AF4945EF47789D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:b1:85:81:ac:e3:c2:5a:a2:b2:cc:cc:0e: 84:f3:86:f5:5f:d4:a8:63:77:ec:3f:f2:0f:c3:1b: bf:4b:0a:a6:ae:e0:c2:00:70:c7:54:b1:32:de:ba: 05:45:2d:87:1b:a2:3d:01:d2:1c:93:2e:65:9f:79: b8:b2:50:4f:23:42:c6:7e:83:00:f8:86:8e:b7:32: 68:e2:a2:b0:14:70:f2:96:7e:82:0d:eb:85:0d:40: ce:4d:c2:2d:af:00:3f:a7:1b:2b:a8:7e:54:7d:73: a5:5a:c9:5b:fe:70:53:3b:51:74:b9:89:0a:80:38: 0d:fc:8c:c7:34:ae:45:1c:50:69:58:4f:4d:3b:0f: 6d:1c:7b:f6:7d:c0:e6:a1:1e:35:76:b5:99:43:a7: 5e:93:ac:1c:38:b8:3d:6c:75:0f:19:ab:22:c6:e4: 7f:1c:77:14:4c:df:28:09:64:ba:85:f2:e2:1b:73: 3e:b7:5f:d8:72:8c:50:67:8c:d7:08:68:ac:77:cb: 67:d6:66:24:f9:a9:c5:ef:a0:5e:b8:c5:50:11:40: 1e:ef:a8:46:59:ca:39:23:15:0c:47:44:bf:5b:00: 17:48:f4:da:f1:af:c9:3d:e3:e3:48:f4:9a:d9:8e: f3:b3:b1:05:89:93:2c:b2:7e:d6:22:cc:ee:b5:0a: ec:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CA:A3:24:A8:0F:0A:80:E1:78:B2:63:E8:AF:49:45:EF:47:78:9D X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:ff:77:36:79:78:f5:d6:77:88:e5:e8:eb:a7:f7:12:db:3c: 28:5b:1c:d8:64:16:6e:03:d9:4b:87:5c:4e:21:8e:66:a1:48: 4d:68:61:84:85:ff:d9:23:08:d2:97:b7:18:72:bc:a3:e9:58: c5:fb:b5:96:c4:89:3c:30:8e:70:af:3f:1c:58:e6:f6:83:2b: 49:fc:8b:d7:48:0f:55:ea:cd:c4:0b:e2:95:d2:95:fa:37:4c: ce:a2:6c:f7:db:91:cc:09:84:50:61:63:c7:f2:67:3c:98:3e: bc:aa:68:79:68:24:3e:de:ec:7d:9e:7f:58:45:2b:14:34:fd: e2:0a:3e:81:53:ac:c5:c6:cb:48:77:1f:ec:ee:70:b2:66:e0: c7:55:5f:aa:86:8c:c5:70:13:3f:56:a1:4c:4f:42:a8:31:96: 90:5c:70:ba:4f:bb:cc:d9:b0:ad:2f:f7:44:80:4a:7a:91:de: 86:dc:27:17:b0:79:96:56:f2:b7:94:90:33:54:2c:40:da:fb: f4:92:fa:3e:a6:ee:01:4d:3c:00:de:32:0a:b9:2e:15:0d:61: 90:17:fc:1a:7e:03:af:f1:76:b5:59:4b:d0:15:0c:b4:59:90: 79:1c:c0:38:44:ff:87:e3:5d:e7:8c:bf:7b:40:3c:af:89:31: 28:57:76:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaY3vOAluvVkarfATq6osvr15oZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTEwMTgyMzE2NDJaFw0yNTEwMjIxMTA3NDJaMDMxMTAvBgNV BAMTKENEQ0FBMzI0QTgwRjBBODBFMTc4QjI2M0U4QUY0OTQ1RUY0Nzc4OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9LGFgazjwlqisszMDoTzhvVf 1Khjd+w/8g/DG79LCqau4MIAcMdUsTLeugVFLYcboj0B0hyTLmWfebiyUE8jQsZ+ gwD4ho63MmjiorAUcPKWfoIN64UNQM5Nwi2vAD+nGyuoflR9c6VayVv+cFM7UXS5 iQqAOA38jMc0rkUcUGlYT007D20ce/Z9wOahHjV2tZlDp16TrBw4uD1sdQ8ZqyLG 5H8cdxRM3ygJZLqF8uIbcz63X9hyjFBnjNcIaKx3y2fWZiT5qcXvoF64xVARQB7v qEZZyjkjFQxHRL9bABdI9Nrxr8k94+NI9JrZjvOzsQWJkyyyftYizO61CuxjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzcqjJKgPCoDheLJj6K9JRe9HeJ0wHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABL/dzZ5ePXWd4jl6Oun9xLbPChbHNhkFm4D 2UuHXE4hjmahSE1oYYSF/9kjCNKXtxhyvKPpWMX7tZbEiTwwjnCvPxxY5vaDK0n8 i9dID1XqzcQL4pXSlfo3TM6ibPfbkcwJhFBhY8fyZzyYPryqaHloJD7e7H2ef1hF KxQ0/eIKPoFTrMXGy0h3H+zucLJm4MdVX6qGjMVwEz9WoUxPQqgxlpBccLpPu8zZ sK0v90SASnqR3obcJxeweZZW8reUkDNULEDa+/SS+j6m7gFNPADeMgq5LhUNYZAX /Bp+A6/xdrVZS9AVDLRZkHkcwDhE/4fjXeeMv3tAPK+JMShXdlQ= -----END CERTIFICATE-----Generated at Mon Oct 20 10:08:28 2025 by rpki-client