$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: ruF7y/n1PInc0kj0wYyEqLsJi/m7aFeocM7w2x1VPLU= Subject key identifier: 69:83:F9:FC:FE:9D:3B:8D:43:CB:25:FC:50:0C:96:77:86:1E:C6:A8 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 0B77A23B86A92E0BD096BCA6A90589393CC66512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 0276 Signing time: Sun 15 Jun 2025 15:51:33 +0000 Manifest this update: Sun 15 Jun 2025 15:46:33 +0000 Manifest next update: Wed 18 Jun 2025 21:22:33 +0000 Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: K+UHygo4qrap0HRp21an4Bv2wYIc+LITQ2V+cthKQG0=) 2: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: AzG52eJ27j/2mZQFkf6QcFMNNLGjvi1194HeXJrGJLE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 21:22:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:77:a2:3b:86:a9:2e:0b:d0:96:bc:a6:a9:05:89:39:3c:c6:65:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Jun 15 15:46:33 2025 GMT Not After : Jun 18 21:22:33 2025 GMT Subject: CN=6983F9FCFE9D3B8D43CB25FC500C9677861EC6A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:f8:5b:2e:d2:5a:4c:1e:52:c6:3f:9c:4d:60: 21:c6:fc:d4:4c:12:58:23:e5:1d:cc:b4:d5:a3:45: b3:3f:fc:16:cd:8b:91:33:97:75:a6:96:3c:97:2a: bc:d8:9e:0b:41:cc:72:66:94:d5:1e:1e:97:d2:92: 55:d2:43:ff:88:22:31:3f:48:d4:6f:2a:2f:ad:84: 02:7c:51:2f:97:d2:c6:f3:c8:96:7f:56:c3:af:eb: 54:9c:28:97:a9:bf:9d:ea:50:f5:d8:a9:f8:9f:a7: f5:76:56:51:95:c6:b9:a9:48:b7:af:ef:d8:26:1a: 68:b9:5c:66:e5:c3:b6:1f:2d:d9:0b:b2:41:bb:4a: f8:1a:b3:f7:d5:5b:b4:e6:d8:32:72:3a:00:0d:b4: 5d:01:6f:c8:a9:13:6b:8c:a7:3c:dc:7c:b2:be:bc: 86:92:51:70:d0:c9:1e:0b:e6:94:6f:44:c3:74:fa: e3:72:e6:98:bb:fe:95:da:b8:43:e7:74:ed:08:d4: 94:d9:65:4c:52:2a:45:01:a4:0a:91:91:9e:56:fe: 9a:aa:28:f4:f6:a3:8e:62:3a:8d:7b:d3:6d:36:9c: 48:6f:1c:fa:c3:64:dd:4f:a6:83:fe:03:84:fa:2f: c1:cc:d2:32:99:a2:8c:80:cd:b9:34:53:68:79:3f: 18:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:83:F9:FC:FE:9D:3B:8D:43:CB:25:FC:50:0C:96:77:86:1E:C6:A8 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:46:4b:57:aa:ff:aa:94:72:d4:53:6d:31:42:bb:34:c9:d0: 4c:31:9c:cf:cb:5a:ac:45:3f:3a:32:0e:38:52:a2:9e:48:08: cf:9f:f5:5a:26:92:02:ab:d3:21:c6:da:eb:00:db:4c:bc:e7: 55:cf:20:7a:d7:82:d5:e4:65:8e:d8:79:72:20:34:04:35:38: dc:e2:b7:66:3b:87:56:f1:53:fe:21:1d:15:08:84:fe:db:10: 95:34:45:d7:88:39:cd:df:5f:b9:9e:85:1d:80:12:5d:69:5e: 56:83:70:f4:e8:57:c6:d4:8f:fa:d0:a8:f5:3c:69:b3:38:b2: ab:c9:58:b2:f8:3d:e4:9d:4d:17:eb:e6:87:4a:17:77:fd:6d: f0:f6:f7:ca:18:71:ef:58:26:5d:ac:75:61:7b:cc:50:65:d3: 9f:c7:6c:c7:2e:5e:2d:92:14:6a:ec:41:f5:33:b0:21:4a:37: 35:d1:a2:df:33:ea:ed:48:18:d5:42:e3:81:23:1b:22:df:9e: a6:fe:4f:b4:71:7a:92:13:0d:37:1c:fb:a6:ae:be:52:ff:94: 56:77:56:d2:0b:94:70:6e:f6:61:3b:b3:cb:9d:ff:a5:2d:d4: fa:07:0f:11:53:f8:64:dc:c2:bd:64:1a:07:65:cd:ea:fd:84: a0:62:9d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3eiO4apLgvQlrymqQWJOTzGZRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTA2MTUxNTQ2MzNaFw0yNTA2MTgyMTIyMzNaMDMxMTAvBgNV BAMTKDY5ODNGOUZDRkU5RDNCOEQ0M0NCMjVGQzUwMEM5Njc3ODYxRUM2QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ+Fsu0lpMHlLGP5xNYCHG/NRM Elgj5R3MtNWjRbM//BbNi5Ezl3WmljyXKrzYngtBzHJmlNUeHpfSklXSQ/+IIjE/ SNRvKi+thAJ8US+X0sbzyJZ/VsOv61ScKJepv53qUPXYqfifp/V2VlGVxrmpSLev 79gmGmi5XGblw7YfLdkLskG7Svgas/fVW7Tm2DJyOgANtF0Bb8ipE2uMpzzcfLK+ vIaSUXDQyR4L5pRvRMN0+uNy5pi7/pXauEPndO0I1JTZZUxSKkUBpAqRkZ5W/pqq KPT2o45iOo170202nEhvHPrDZN1PpoP+A4T6L8HM0jKZooyAzbk0U2h5Pxj3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYP5/P6dO41DyyX8UAyWd4YexqgwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhGS1eq/6qUctRTbTFCuzTJ0EwxnM/LWqxF PzoyDjhSop5ICM+f9VomkgKr0yHG2usA20y851XPIHrXgtXkZY7YeXIgNAQ1ONzi t2Y7h1bxU/4hHRUIhP7bEJU0RdeIOc3fX7mehR2AEl1pXlaDcPToV8bUj/rQqPU8 abM4sqvJWLL4PeSdTRfr5odKF3f9bfD298oYce9YJl2sdWF7zFBl05/HbMcuXi2S FGrsQfUzsCFKNzXRot8z6u1IGNVC44EjGyLfnqb+T7RxepITDTcc+6auvlL/lFZ3 VtILlHBu9mE7s8ud/6Ut1PoHDxFT+GTcwr1kGgdlzer9hKBinVQ= -----END CERTIFICATE-----Generated at Tue Jun 17 19:11:18 2025 by rpki-client