$ rpki-client -vvf repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft File: 85735A4922D529215199E6F4D6829DF68512E117.mft (raw, json) Hash identifier: y4bGdMl4LQPG1nidYQW7mwMiEmlPkdPCLEYG+4fkol4= Subject key identifier: EA:4F:90:89:EE:BA:D1:2B:61:FC:4F:0F:55:11:E8:37:7C:DD:2D:5D Authority key identifier: 85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 Certificate issuer: /CN=85735A4922D529215199E6F4D6829DF68512E117 Certificate serial: 3E7CDEA3FA895417C608E397BC26507336AE6F41 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft Manifest number: BB Signing time: Sun 15 Jun 2025 22:22:20 +0000 Manifest this update: Sun 15 Jun 2025 22:17:20 +0000 Manifest next update: Thu 19 Jun 2025 02:58:20 +0000 Files and hashes: 1: 85735A4922D529215199E6F4D6829DF68512E117.crl (hash: HJR2QGLQ+lgiktRbdNa1oPUQIq9s3zKq1NAk75nb4N8=) 2: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: ZYRFgg3YsM3yKUn62KsbkyrpaJzgLMKU6Z815DCOnrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 02:58:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7c:de:a3:fa:89:54:17:c6:08:e3:97:bc:26:50:73:36:ae:6f:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85735A4922D529215199E6F4D6829DF68512E117 Validity Not Before: Jun 15 22:17:20 2025 GMT Not After : Jun 19 02:58:20 2025 GMT Subject: CN=EA4F9089EEBAD12B61FC4F0F5511E8377CDD2D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:91:6f:3b:27:08:c2:fd:4e:f6:22:0a:99:6a: 59:ca:72:c7:a9:e5:86:f0:a8:36:8c:77:71:10:cb: 2d:1a:1a:c1:aa:11:67:b7:cf:00:5f:98:47:7a:2b: 7a:bd:30:cc:af:38:8f:53:42:20:7b:03:1b:0e:1c: f4:4c:ee:52:57:d1:b5:50:df:04:28:6b:e2:37:75: 67:ac:3a:5e:1e:46:5c:bf:8a:c5:60:78:db:0e:52: 28:24:22:16:0e:a1:90:91:2d:80:11:21:63:bf:4d: 8a:0b:c8:d2:aa:34:bf:9d:37:ad:c8:4a:36:73:86: 07:32:f5:66:b6:89:90:a3:ef:21:44:42:c7:54:10: 37:9c:16:59:79:28:89:ce:68:97:76:8c:f3:c1:9b: fd:41:47:04:c5:0e:b3:ef:f9:b9:22:be:d4:de:ca: 38:90:0e:08:fd:e6:4c:e2:db:a1:b1:fa:a8:6c:62: fa:0a:7b:d2:1e:6a:7a:9a:2b:b4:28:20:aa:0c:4c: 22:ed:f4:e2:30:b0:08:91:a9:01:9d:b0:90:46:39: ae:07:0a:11:77:2b:5f:c2:f9:45:fd:ab:b6:00:70: 02:29:bf:c9:01:3a:76:ee:37:28:1a:a2:06:b0:c9: b8:d1:56:6e:23:0a:6c:6f:6c:88:8e:43:4f:1b:a6: 0b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:4F:90:89:EE:BA:D1:2B:61:FC:4F:0F:55:11:E8:37:7C:DD:2D:5D X509v3 Authority Key Identifier: keyid:85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:99:24:73:b1:ac:b2:3a:52:9c:af:b9:7f:6e:ef:85:ee:ee: 34:84:4e:01:37:58:67:fe:a4:27:0d:fe:6d:13:1e:93:e0:57: ad:06:fb:60:20:8a:88:e5:eb:c4:2a:4c:46:c6:47:3e:9b:f7: 10:71:79:44:27:d9:fd:1a:32:06:cc:e3:3e:b4:46:aa:33:76: e7:ea:c2:15:85:3d:b6:04:21:8f:ab:b1:85:2f:65:a1:c3:8c: 53:96:22:5f:27:43:e2:61:e6:9d:bd:2f:b0:33:70:a1:a4:4d: 32:fd:65:84:a8:5c:ce:c7:d8:85:91:00:6c:f9:a0:2a:49:cd: a5:c2:3a:8f:95:23:30:5f:51:43:5e:b6:db:93:57:6a:9e:fc: d5:8c:6c:db:9b:e7:0e:fb:61:bf:0f:d4:10:88:77:d1:ba:c9: 08:c8:43:5b:f6:5d:13:25:9c:e5:60:69:58:54:93:a6:d3:0d: 49:6a:fb:00:4f:62:8e:93:4f:e4:bd:b0:3f:bb:d9:78:c4:ab: 73:23:42:05:31:05:f4:74:a1:64:90:12:36:15:48:60:25:ae: 4b:9b:68:0f:c0:cc:c0:bc:bb:d6:d8:c8:9b:61:29:37:45:5a: dd:14:5a:3c:f0:ac:70:2d:86:da:2e:45:f4:75:d3:df:23:aa: 5d:c5:ec:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnzeo/qJVBfGCOOXvCZQczaub0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4 NTEyRTExNzAeFw0yNTA2MTUyMjE3MjBaFw0yNTA2MTkwMjU4MjBaMDMxMTAvBgNV BAMTKEVBNEY5MDg5RUVCQUQxMkI2MUZDNEYwRjU1MTFFODM3N0NERDJENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEkW87JwjC/U72IgqZalnKcsep 5YbwqDaMd3EQyy0aGsGqEWe3zwBfmEd6K3q9MMyvOI9TQiB7AxsOHPRM7lJX0bVQ 3wQoa+I3dWesOl4eRly/isVgeNsOUigkIhYOoZCRLYARIWO/TYoLyNKqNL+dN63I SjZzhgcy9Wa2iZCj7yFEQsdUEDecFll5KInOaJd2jPPBm/1BRwTFDrPv+bkivtTe yjiQDgj95kzi26Gx+qhsYvoKe9IeanqaK7QoIKoMTCLt9OIwsAiRqQGdsJBGOa4H ChF3K1/C+UX9q7YAcAIpv8kBOnbuNygaogawybjRVm4jCmxvbIiOQ08bpgvdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6k+Qie660Sth/E8PVRHoN3zdLV0wHwYDVR0j BBgwFoAUhXNaSSLVKSFRmeb01oKd9oUS4RcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzNlNjhiZC1iMDRjLTRkMzUtODAyMC0wMjkzNjM0MmZiMWQvMC84NTczNUE0OTIy RDUyOTIxNTE5OUU2RjRENjgyOURGNjg1MTJFMTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4NTEy RTExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlE RjY4NTEyRTExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGZJHOxrLI6UpyvuX9u74Xu7jSETgE3WGf+ pCcN/m0THpPgV60G+2Agiojl68QqTEbGRz6b9xBxeUQn2f0aMgbM4z60Rqozdufq whWFPbYEIY+rsYUvZaHDjFOWIl8nQ+Jh5p29L7AzcKGkTTL9ZYSoXM7H2IWRAGz5 oCpJzaXCOo+VIzBfUUNettuTV2qe/NWMbNub5w77Yb8P1BCId9G6yQjIQ1v2XRMl nOVgaVhUk6bTDUlq+wBPYo6TT+S9sD+72XjEq3MjQgUxBfR0oWSQEjYVSGAlrkub aA/AzMC8u9bYyJthKTdFWt0UWjzwrHAthtouRfR1098jql3F7B0= -----END CERTIFICATE-----Generated at Tue Jun 17 22:32:05 2025 by rpki-client