$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: obU1wt7I1h0aGUUaWY4EC4M6pman18WhIYiY9lFaif0= Subject key identifier: 06:09:32:D6:78:84:61:5D:97:02:51:48:D9:D2:80:C9:B7:56:A5:6C Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 710E90030A0BDDE762B4B6A7FB540B45E15DF605 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 028D Signing time: Wed 06 Aug 2025 18:31:36 +0000 Manifest this update: Wed 06 Aug 2025 18:26:36 +0000 Manifest next update: Sun 10 Aug 2025 05:32:36 +0000 Files and hashes: 1: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: K+UHygo4qrap0HRp21an4Bv2wYIc+LITQ2V+cthKQG0=) 2: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: yNkNL0OzjLoiIeARqy0dofCzP6AvcVRuPOZgvxusc/k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 05:32:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:0e:90:03:0a:0b:dd:e7:62:b4:b6:a7:fb:54:0b:45:e1:5d:f6:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Aug 6 18:26:36 2025 GMT Not After : Aug 10 05:32:36 2025 GMT Subject: CN=060932D67884615D97025148D9D280C9B756A56C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:eb:06:3d:b6:87:8d:ab:fd:c3:68:de:b4:da: 8f:c6:af:29:29:d1:9a:86:93:15:f5:70:14:7e:95: 27:59:eb:a3:57:4d:e5:7d:0f:df:38:87:e4:15:9a: 2e:97:f2:25:64:3f:9a:a3:4c:bb:f8:0e:c9:d9:e4: 35:38:58:69:95:29:1a:5d:b6:70:f3:c3:47:fe:15: 19:e4:79:59:bb:20:81:b9:46:15:7e:60:59:2a:19: e5:f6:10:ad:68:ec:61:1c:4b:3e:0f:2a:74:56:3e: 6e:2f:af:92:68:9f:8b:92:e7:c7:ff:a0:57:bf:2d: 8e:de:09:e2:54:01:f8:6f:70:d0:bb:39:64:87:9b: 37:79:ae:85:87:dc:c3:5c:72:88:42:25:59:9a:5a: 5f:22:95:51:94:83:61:c0:a0:6d:1a:75:cc:4b:67: fc:b7:a7:11:0c:5c:a7:4a:0d:cc:d8:02:e6:3e:66: 2e:37:10:c9:de:9c:7f:67:0f:d7:f1:f7:e2:87:57: dd:15:22:17:85:a0:b8:42:0a:cd:97:ed:40:9f:f3: 5f:d5:7a:d0:1f:b5:cd:c3:6e:fe:ed:fb:4d:2d:14: f5:e5:69:62:4d:30:57:64:8f:4a:c6:fb:2b:35:03: 4d:33:d1:d5:c3:4f:ff:13:41:9b:6f:df:0c:f1:df: 8a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:09:32:D6:78:84:61:5D:97:02:51:48:D9:D2:80:C9:B7:56:A5:6C X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:e2:2d:94:c9:ae:64:79:92:9c:79:ba:8a:02:40:27:86:5f: 84:30:52:92:a0:7a:d6:25:5d:a0:1d:85:c2:d5:d5:0b:7d:1c: e2:41:81:48:72:f7:21:4a:a6:92:b5:47:f2:51:4d:dc:dd:0d: a8:07:91:e8:33:48:68:3c:a5:2f:e7:4d:8b:c0:5a:0f:84:6d: 24:e4:10:74:bb:ce:b6:91:5e:b3:6d:5e:95:56:70:58:5d:5d: 7a:b2:96:c1:3b:44:09:24:ba:41:09:83:5c:f8:a1:1c:a8:53: 46:08:9a:df:5d:47:38:a3:8b:83:a0:fa:7a:da:45:16:2a:b3: 04:f9:9a:79:30:4b:6e:8d:6c:32:04:6b:56:22:72:9d:ba:3e: 62:5f:c4:ae:be:da:53:6a:2a:19:63:6f:b9:e3:e1:ef:38:d3: bc:a9:34:66:49:61:be:d7:c7:7e:cd:21:b6:e1:33:20:fc:ea: 63:e2:a2:ed:f2:79:8d:b5:31:bf:0a:0a:45:af:4b:05:f6:f8: 9c:5d:aa:fe:c7:6c:17:45:a8:dd:ce:e7:bf:c5:36:3e:b7:fe: e5:8c:76:64:c0:39:c0:ba:f7:fe:76:40:8e:fe:8a:72:43:01: c5:39:f2:67:4f:7a:d8:3a:ac:9b:3f:d0:91:d6:fc:82:8b:56: 6d:2a:14:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQ6QAwoL3editLan+1QLReFd9gUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTA4MDYxODI2MzZaFw0yNTA4MTAwNTMyMzZaMDMxMTAvBgNV BAMTKDA2MDkzMkQ2Nzg4NDYxNUQ5NzAyNTE0OEQ5RDI4MEM5Qjc1NkE1NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg6wY9toeNq/3DaN602o/Grykp 0ZqGkxX1cBR+lSdZ66NXTeV9D984h+QVmi6X8iVkP5qjTLv4DsnZ5DU4WGmVKRpd tnDzw0f+FRnkeVm7IIG5RhV+YFkqGeX2EK1o7GEcSz4PKnRWPm4vr5Jon4uS58f/ oFe/LY7eCeJUAfhvcNC7OWSHmzd5roWH3MNccohCJVmaWl8ilVGUg2HAoG0adcxL Z/y3pxEMXKdKDczYAuY+Zi43EMnenH9nD9fx9+KHV90VIheFoLhCCs2X7UCf81/V etAftc3Dbv7t+00tFPXlaWJNMFdkj0rG+ys1A00z0dXDT/8TQZtv3wzx34oTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBgky1niEYV2XAlFI2dKAybdWpWwwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLiLZTJrmR5kpx5uooCQCeGX4QwUpKgetYl XaAdhcLV1Qt9HOJBgUhy9yFKppK1R/JRTdzdDagHkegzSGg8pS/nTYvAWg+EbSTk EHS7zraRXrNtXpVWcFhdXXqylsE7RAkkukEJg1z4oRyoU0YImt9dRziji4Og+nra RRYqswT5mnkwS26NbDIEa1Yicp26PmJfxK6+2lNqKhljb7nj4e8407ypNGZJYb7X x37NIbbhMyD86mPiou3yeY21Mb8KCkWvSwX2+Jxdqv7HbBdFqN3O57/FNj63/uWM dmTAOcC69/52QI7+inJDAcU58mdPetg6rJs/0JHW/IKLVm0qFN8= -----END CERTIFICATE-----Generated at Thu Aug 7 07:19:31 2025 by rpki-client