$ rpki-client -vvf repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft File: 85735A4922D529215199E6F4D6829DF68512E117.mft (raw, json) Hash identifier: V71TRBPn+bsmk5iem/sNg2Uucx4MVBKiWFujUqNS968= Subject key identifier: 4B:67:07:DD:8E:A6:23:F9:66:EC:4E:58:C9:E0:DB:21:F6:C0:0A:D4 Authority key identifier: 85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 Certificate issuer: /CN=85735A4922D529215199E6F4D6829DF68512E117 Certificate serial: 43857734C3A843D1522A20C17D775740E671F33C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft Manifest number: 0141 Signing time: Fri 17 Apr 2026 01:52:39 +0000 Manifest this update: Fri 17 Apr 2026 01:47:39 +0000 Manifest next update: Mon 20 Apr 2026 13:24:39 +0000 Files and hashes: 1: 85735A4922D529215199E6F4D6829DF68512E117.crl (hash: nTaK9iDx9xC5RIwkFTmdDkz3E+VmH/OSnFK3a/Pis9I=) 2: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: XHVllAX/UXDKrZwLLYWAgUneaiPswSM3kgLSE6ruL6s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:24:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:85:77:34:c3:a8:43:d1:52:2a:20:c1:7d:77:57:40:e6:71:f3:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85735A4922D529215199E6F4D6829DF68512E117 Validity Not Before: Apr 17 01:47:39 2026 GMT Not After : Apr 20 13:24:39 2026 GMT Subject: CN=4B6707DD8EA623F966EC4E58C9E0DB21F6C00AD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:01:e6:7f:79:59:3c:77:5e:b2:14:25:66:04: dc:b8:93:7d:53:af:17:52:78:65:7a:84:a5:b6:de: 6c:ff:db:08:a0:6c:01:cc:2d:c9:4d:75:68:3c:88: ba:ca:9a:09:ed:a9:cd:8c:d8:db:fb:fb:ba:1b:84: 28:d3:0e:99:e1:fa:ac:ab:6b:05:80:af:16:17:aa: ea:1b:bf:2b:20:c6:b7:28:f5:9e:5e:67:fe:b3:ac: 25:90:ae:bb:a2:6e:0e:f5:3e:0a:e7:63:9e:37:18: 23:89:21:e6:df:24:a2:68:55:56:1f:b1:2c:f1:22: fe:a3:80:5b:e6:5a:f8:dd:dc:dc:c9:12:8d:7d:d6: 04:ca:b5:43:dd:a6:83:30:7a:72:4d:47:8b:fc:d3: a0:96:dd:e4:ac:39:ca:57:29:a1:72:c0:e4:08:e7: 6a:ad:71:7f:a3:1b:f7:9e:2f:64:7b:57:36:eb:76: 1f:da:72:06:95:93:37:14:d8:36:5a:c5:3b:61:11: 51:8c:15:f6:8d:6d:f3:f1:03:2b:11:a1:59:a9:ea: cd:2d:10:23:35:fd:7d:90:37:46:6e:ee:54:80:36: 45:22:79:e9:01:b5:2a:29:2f:76:63:c9:01:f8:45: 1c:68:46:75:c3:78:69:85:db:c8:65:24:c3:24:92: e1:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:67:07:DD:8E:A6:23:F9:66:EC:4E:58:C9:E0:DB:21:F6:C0:0A:D4 X509v3 Authority Key Identifier: keyid:85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c9:6f:ed:54:e9:28:fe:2d:78:a0:da:87:3a:b1:a9:c1:b5: 58:ec:c6:de:7a:ca:ad:f0:2d:e6:12:ca:24:8a:c2:3f:17:0c: c9:4d:2e:95:35:88:c9:4d:61:dd:db:c4:90:ca:f7:4b:a8:86: 0b:bc:be:71:77:64:73:52:e6:b3:0f:8c:94:b0:19:36:a2:a8: 6f:67:fa:9d:85:5e:75:95:35:1e:ec:87:1c:78:a8:e5:82:aa: b3:93:e2:fd:94:b3:d7:83:0b:f6:af:75:bc:85:16:88:f6:60: 42:af:4e:5f:82:7b:7b:b8:4e:83:cd:99:a0:b4:5a:df:f7:56: 80:b3:21:cb:ee:db:0a:82:88:07:2f:8d:f2:d4:74:fb:fe:c1: 9c:28:a1:0d:1e:ea:4d:2b:80:10:39:ef:08:cb:3d:e7:9d:0b: 20:f2:d2:8f:94:11:45:2b:08:43:72:87:da:48:dc:08:94:77: 58:e9:5b:5c:d7:4b:62:64:47:02:55:94:45:ea:f5:d2:5b:20: 42:06:6e:d4:bb:75:c3:d8:eb:d6:4d:ad:9b:38:e5:d1:6c:ba: 2f:36:e3:75:c2:ed:60:ff:36:1f:59:2f:cf:15:0a:53:24:2c: fd:5e:7c:c1:a2:8b:33:f6:cb:b4:22:d2:b9:30:a9:40:15:0f: 79:a9:57:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4V3NMOoQ9FSKiDBfXdXQOZx8zwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4 NTEyRTExNzAeFw0yNjA0MTcwMTQ3MzlaFw0yNjA0MjAxMzI0MzlaMDMxMTAvBgNV BAMTKDRCNjcwN0REOEVBNjIzRjk2NkVDNEU1OEM5RTBEQjIxRjZDMDBBRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbAeZ/eVk8d16yFCVmBNy4k31T rxdSeGV6hKW23mz/2wigbAHMLclNdWg8iLrKmgntqc2M2Nv7+7obhCjTDpnh+qyr awWArxYXquobvysgxrco9Z5eZ/6zrCWQrruibg71PgrnY543GCOJIebfJKJoVVYf sSzxIv6jgFvmWvjd3NzJEo191gTKtUPdpoMwenJNR4v806CW3eSsOcpXKaFywOQI 52qtcX+jG/eeL2R7Vzbrdh/acgaVkzcU2DZaxTthEVGMFfaNbfPxAysRoVmp6s0t ECM1/X2QN0Zu7lSANkUieekBtSopL3ZjyQH4RRxoRnXDeGmF28hlJMMkkuHzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS2cH3Y6mI/lm7E5YyeDbIfbACtQwHwYDVR0j BBgwFoAUhXNaSSLVKSFRmeb01oKd9oUS4RcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzNlNjhiZC1iMDRjLTRkMzUtODAyMC0wMjkzNjM0MmZiMWQvMC84NTczNUE0OTIy RDUyOTIxNTE5OUU2RjRENjgyOURGNjg1MTJFMTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4NTEy RTExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlE RjY4NTEyRTExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrJb+1U6Sj+LXig2oc6sanBtVjsxt56yq3w LeYSyiSKwj8XDMlNLpU1iMlNYd3bxJDK90uohgu8vnF3ZHNS5rMPjJSwGTaiqG9n +p2FXnWVNR7shxx4qOWCqrOT4v2Us9eDC/avdbyFFoj2YEKvTl+Ce3u4ToPNmaC0 Wt/3VoCzIcvu2wqCiAcvjfLUdPv+wZwooQ0e6k0rgBA57wjLPeedCyDy0o+UEUUr CENyh9pI3AiUd1jpW1zXS2JkRwJVlEXq9dJbIEIGbtS7dcPY69ZNrZs45dFsui82 43XC7WD/Nh9ZL88VClMkLP1efMGiizP2y7Qi0rkwqUAVD3mpV4I= -----END CERTIFICATE-----Generated at Fri Apr 17 15:41:39 2026 by rpki-client