$ rpki-client -vvf repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft File: 85735A4922D529215199E6F4D6829DF68512E117.mft (raw, json) Hash identifier: ZUcrqW4dcKSTNM4Ya3Ewfek6qz4vkZQYcoyBrVY2hec= Subject key identifier: 8A:03:85:AC:23:99:6E:AC:9A:4A:BC:D8:AF:B9:E0:24:E8:4C:50:46 Authority key identifier: 85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 Certificate issuer: /CN=85735A4922D529215199E6F4D6829DF68512E117 Certificate serial: 73AB20376877AE428AA0CB42B4513F1B14548B19 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft Manifest number: F9 Signing time: Mon 03 Nov 2025 15:52:19 +0000 Manifest this update: Mon 03 Nov 2025 15:47:19 +0000 Manifest next update: Fri 07 Nov 2025 00:47:19 +0000 Files and hashes: 1: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: ZYRFgg3YsM3yKUn62KsbkyrpaJzgLMKU6Z815DCOnrQ=) 2: 85735A4922D529215199E6F4D6829DF68512E117.crl (hash: T9zcfeZTFyeVQ3A+VocohPMuE3mqtvmCEfrTPBzGxg8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:ab:20:37:68:77:ae:42:8a:a0:cb:42:b4:51:3f:1b:14:54:8b:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85735A4922D529215199E6F4D6829DF68512E117 Validity Not Before: Nov 3 15:47:19 2025 GMT Not After : Nov 7 00:47:19 2025 GMT Subject: CN=8A0385AC23996EAC9A4ABCD8AFB9E024E84C5046 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:47:61:49:7a:d2:d8:59:84:3c:dd:39:a6:4e: ce:e4:5f:27:d0:a9:2d:b2:fd:24:d3:e0:7d:0d:f1: 88:d6:1c:6e:a7:b9:dd:49:2f:14:62:e6:f6:90:69: 49:ac:e5:19:dd:73:7e:99:7a:fa:67:d5:31:11:73: 42:c8:0f:fb:b2:a0:05:d5:3c:1e:bb:04:83:24:46: b1:dc:d5:d7:90:78:9f:b9:b8:49:f9:5f:30:78:a2: 3c:e9:71:48:cd:55:d4:61:61:d1:b5:d4:b4:94:5b: 2b:a2:1b:ef:26:f7:a4:ee:91:11:e1:e6:f3:f2:44: 2f:b2:c3:cb:70:ac:89:7f:e4:02:70:5d:bd:13:ab: b3:14:16:96:8a:7f:03:9f:67:2d:59:d6:79:38:50: 72:fc:9a:58:c3:b5:4f:5c:e3:96:01:eb:83:68:ae: 56:cd:94:e1:f2:2a:25:62:a1:53:dd:46:64:dd:b6: 3c:3a:df:fa:53:06:8e:fb:42:14:d1:33:01:e6:16: 4e:ae:ee:66:bb:41:06:4f:54:89:6b:e0:26:e5:b9: 4b:0b:0a:d2:3e:d2:a5:a4:9c:0d:71:f8:80:82:00: 7f:9c:d6:06:c4:67:5b:aa:85:f5:3f:f5:f5:0c:54: dd:27:d7:20:9f:d5:e5:e6:fe:fd:12:77:36:b1:be: 35:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:85:AC:23:99:6E:AC:9A:4A:BC:D8:AF:B9:E0:24:E8:4C:50:46 X509v3 Authority Key Identifier: keyid:85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1f:3a:9b:80:d9:ca:bc:39:ae:05:91:20:35:35:51:89:ff: 38:3f:90:89:0e:db:00:cf:5e:cd:41:8c:b8:57:48:7b:16:69: 82:72:34:d9:6c:9a:fd:d8:7d:08:85:cf:67:60:80:42:89:03: 75:44:50:63:c6:98:b8:f5:bb:84:89:0f:62:ec:d5:cd:e8:12: 57:1c:f4:79:ec:0b:70:97:14:64:ae:f5:cd:14:00:43:b7:11: 23:40:19:25:8d:74:74:6a:e1:42:9c:5f:56:de:75:d6:39:1a: 06:6b:0f:ad:e2:b3:b6:70:b6:5f:06:b5:fd:be:92:1c:71:1d: 77:b1:66:22:9c:e7:68:5f:fc:66:2d:9d:e6:64:b4:b7:7c:08: d7:0c:e6:bc:e2:f8:72:71:d9:8f:70:a2:dd:a5:b2:59:d8:29: ff:ab:cb:ba:cd:ce:d8:6c:b2:dc:5b:2d:22:7c:51:db:16:35: bc:98:a4:64:d1:2f:7a:6e:4e:7c:4d:c7:5e:63:2e:76:6c:40: af:64:d1:ab:28:e7:7a:3d:8b:39:27:c3:6a:c9:9d:52:9f:cf: e3:16:71:e7:5b:5c:87:ea:a7:03:d1:0d:e8:59:a2:fa:42:d0: 93:0f:54:53:a8:3f:0e:9e:4a:2e:1a:94:7a:66:95:26:79:ea: be:e5:c5:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc6sgN2h3rkKKoMtCtFE/GxRUixkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4 NTEyRTExNzAeFw0yNTExMDMxNTQ3MTlaFw0yNTExMDcwMDQ3MTlaMDMxMTAvBgNV BAMTKDhBMDM4NUFDMjM5OTZFQUM5QTRBQkNEOEFGQjlFMDI0RTg0QzUwNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDR2FJetLYWYQ83TmmTs7kXyfQ qS2y/STT4H0N8YjWHG6nud1JLxRi5vaQaUms5Rndc36Zevpn1TERc0LID/uyoAXV PB67BIMkRrHc1deQeJ+5uEn5XzB4ojzpcUjNVdRhYdG11LSUWyuiG+8m96TukRHh 5vPyRC+yw8twrIl/5AJwXb0Tq7MUFpaKfwOfZy1Z1nk4UHL8mljDtU9c45YB64No rlbNlOHyKiVioVPdRmTdtjw63/pTBo77QhTRMwHmFk6u7ma7QQZPVIlr4CbluUsL CtI+0qWknA1x+ICCAH+c1gbEZ1uqhfU/9fUMVN0n1yCf1eXm/v0SdzaxvjVfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigOFrCOZbqyaSrzYr7ngJOhMUEYwHwYDVR0j BBgwFoAUhXNaSSLVKSFRmeb01oKd9oUS4RcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzNlNjhiZC1iMDRjLTRkMzUtODAyMC0wMjkzNjM0MmZiMWQvMC84NTczNUE0OTIy RDUyOTIxNTE5OUU2RjRENjgyOURGNjg1MTJFMTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4NTEy RTExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlE RjY4NTEyRTExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkfOpuA2cq8Oa4FkSA1NVGJ/zg/kIkO2wDP Xs1BjLhXSHsWaYJyNNlsmv3YfQiFz2dggEKJA3VEUGPGmLj1u4SJD2Ls1c3oElcc 9HnsC3CXFGSu9c0UAEO3ESNAGSWNdHRq4UKcX1beddY5GgZrD63is7Zwtl8Gtf2+ khxxHXexZiKc52hf/GYtneZktLd8CNcM5rzi+HJx2Y9wot2lslnYKf+ry7rNzths stxbLSJ8UdsWNbyYpGTRL3puTnxNx15jLnZsQK9k0aso53o9izknw2rJnVKfz+MW cedbXIfqpwPRDehZovpC0JMPVFOoPw6eSi4alHpmlSZ56r7lxZ8= -----END CERTIFICATE-----Generated at Wed Nov 5 07:14:57 2025 by rpki-client