$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft File: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft (raw, json) Hash identifier: RF8uKtEdGyi7/23GKSwDXae24WKtx1yHcxTNSYYi74c= Subject key identifier: CF:FA:CE:3E:AB:3A:1F:70:70:5C:FC:23:80:68:00:EF:BC:E2:5F:70 Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 Certificate issuer: /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Certificate serial: 05C2378B2E348A690DCC98FABF8A72F7C2357303 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft Manifest number: 02B5 Signing time: Sun 02 Nov 2025 22:11:36 +0000 Manifest this update: Sun 02 Nov 2025 22:06:36 +0000 Manifest next update: Thu 06 Nov 2025 05:07:36 +0000 Files and hashes: 1: 85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl (hash: uFEao8jxSp7Uar1saF0jr14oQZ3azCJGX8tEDhjXU74=) 2: 3130332e3137382e3137342e302f32332d3234203d3e20313337333331.roa (hash: gonve5wIJ3O85bDiwHHm2xjnNdsU9xH6JAbxD3Ax5a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 05:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:c2:37:8b:2e:34:8a:69:0d:cc:98:fa:bf:8a:72:f7:c2:35:73:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3 Validity Not Before: Nov 2 22:06:36 2025 GMT Not After : Nov 6 05:07:36 2025 GMT Subject: CN=CFFACE3EAB3A1F70705CFC23806800EFBCE25F70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:88:a9:55:75:1d:97:2f:52:ef:3c:55:06: 87:d8:88:d2:04:89:ed:95:1b:da:77:fc:39:31:02: 4e:75:0a:b0:df:78:35:5a:48:1c:1e:8a:e9:de:f2: b7:4c:f0:b4:2e:d0:73:fa:26:d1:e5:fd:12:fa:1c: a8:e9:09:9a:29:01:a1:4e:b9:54:ad:dd:65:62:fa: d3:3b:58:16:a1:3b:ec:1e:57:b3:09:13:63:df:94: 58:35:2e:d6:cd:9c:4e:79:cb:d4:0d:07:ab:ef:9a: c3:72:9c:10:fc:d0:bf:87:ee:be:b4:30:62:22:5f: 9a:cd:72:12:89:f9:9b:41:38:33:25:6e:6b:96:2a: 2d:0d:34:a7:4b:0a:84:e8:66:cd:dd:e1:87:00:d3: d8:d3:2b:2f:fa:c1:60:bc:56:9c:b7:97:49:e7:1a: 17:cc:50:5b:ca:c5:c5:10:c8:35:48:62:e7:97:77: e0:6c:6f:80:d3:7c:2d:7f:83:bc:32:1b:09:48:37: 27:b2:ba:f3:d1:9f:0c:25:bd:e7:0f:6b:96:ee:db: 23:65:10:71:07:25:61:a0:f3:d6:97:e0:be:73:5b: 0b:3c:27:45:11:f3:d5:07:a8:64:7f:e2:29:0e:0e: 7c:68:a9:05:04:06:42:12:37:73:db:9a:26:a6:b6: d4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:FA:CE:3E:AB:3A:1F:70:70:5C:FC:23:80:68:00:EF:BC:E2:5F:70 X509v3 Authority Key Identifier: keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7a:81:41:88:76:38:c7:e7:a2:3e:2b:df:f3:00:d8:04:66: 3f:e0:ab:08:71:58:0b:5a:ba:bc:38:95:03:9a:b3:8d:29:1e: 85:3d:b5:4d:75:db:36:9b:f1:95:e0:1d:6a:f4:89:5c:64:df: d9:ee:d4:31:30:32:bf:06:f8:6f:a5:38:13:9e:29:43:1f:4a: 5c:9c:32:80:5a:73:c5:16:d4:63:bf:db:ff:1b:16:ef:33:68: 38:dc:af:80:c6:3c:4a:29:94:6d:2c:d9:c6:c9:ce:0e:d7:e3: 0c:7f:c4:ba:a1:29:df:b2:16:34:ca:00:dd:25:cd:4d:28:c2: 2b:78:65:d9:4d:e3:63:ae:fa:ac:ba:47:fc:4a:b4:55:ee:65: dd:64:d6:d2:15:65:ad:9c:d3:1f:9d:3b:5f:3b:4a:09:b7:ee: c6:f4:35:e9:6b:28:5b:12:0f:f6:d0:5a:9f:8d:42:2a:f3:8d: 60:ce:64:f1:3e:dc:40:a0:ab:dc:6b:10:77:67:5c:78:22:4e: bd:ce:d6:1d:f2:12:ec:2c:7f:09:82:64:9c:53:71:24:cc:1f: 5b:29:44:de:65:ff:6c:93:4e:bb:4e:16:fb:02:1d:fa:80:70: a8:a3:22:26:d9:b0:22:cb:6c:ca:d5:d2:81:1f:0c:fa:d6:44: 3e:9e:32:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBcI3iy40imkNzJj6v4py98I1cwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMx RDMzN0FDMzAeFw0yNTExMDIyMjA2MzZaFw0yNTExMDYwNTA3MzZaMDMxMTAvBgNV BAMTKENGRkFDRTNFQUIzQTFGNzA3MDVDRkMyMzgwNjgwMEVGQkNFMjVGNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WYipVXUdly9S7zxVBofYiNIE ie2VG9p3/DkxAk51CrDfeDVaSBweiune8rdM8LQu0HP6JtHl/RL6HKjpCZopAaFO uVSt3WVi+tM7WBahO+weV7MJE2PflFg1LtbNnE55y9QNB6vvmsNynBD80L+H7r60 MGIiX5rNchKJ+ZtBODMlbmuWKi0NNKdLCoToZs3d4YcA09jTKy/6wWC8Vpy3l0nn GhfMUFvKxcUQyDVIYueXd+Bsb4DTfC1/g7wyGwlINyeyuvPRnwwlvecPa5bu2yNl EHEHJWGg89aX4L5zWws8J0UR89UHqGR/4ikODnxoqQUEBkISN3PbmiamttQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/rOPqs6H3BwXPwjgGgA77ziX3AwHwYDVR0j BBgwFoAUhejes4dC45DHv7NLHkq6wx0zesMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDdmOWVmNC1mOTlmLTQ0ZmYtYjk2OC03MGQ0NTI0ZDcyMDcvMC84NUU4REVCMzg3 NDJFMzkwQzdCRkIzNEIxRTRBQkFDMzFEMzM3QUMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJBQzMxRDMz N0FDMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ3ZjllZjQtZjk5Zi00NGZmLWI5 NjgtNzBkNDUyNGQ3MjA3LzAvODVFOERFQjM4NzQyRTM5MEM3QkZCMzRCMUU0QUJB QzMxRDMzN0FDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD96gUGIdjjH56I+K9/zANgEZj/gqwhxWAta urw4lQOas40pHoU9tU112zab8ZXgHWr0iVxk39nu1DEwMr8G+G+lOBOeKUMfSlyc MoBac8UW1GO/2/8bFu8zaDjcr4DGPEoplG0s2cbJzg7X4wx/xLqhKd+yFjTKAN0l zU0owit4ZdlN42Ou+qy6R/xKtFXuZd1k1tIVZa2c0x+dO187Sgm37sb0NelrKFsS D/bQWp+NQirzjWDOZPE+3ECgq9xrEHdnXHgiTr3O1h3yEuwsfwmCZJxTcSTMH1sp RN5l/2yTTrtOFvsCHfqAcKijIibZsCLLbMrV0oEfDPrWRD6eMp0= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:56 2025 by rpki-client