$ rpki-client -vvf repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft File: 85B934D25B97AC3F22C3D45778109B50456E4722.mft (raw, json) Hash identifier: A74Puf1Oro3+woer5n1bOHXBM62MDN251Iw86aZvrds= Subject key identifier: C4:98:56:EC:59:F9:CC:83:6C:C7:F4:5D:74:81:42:FD:69:A2:32:17 Authority key identifier: 85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 Certificate issuer: /CN=85B934D25B97AC3F22C3D45778109B50456E4722 Certificate serial: 742E353E813D68257F24443FE22FA6E2CBBF34B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft Manifest number: 011C Signing time: Tue 04 Nov 2025 02:41:44 +0000 Manifest this update: Tue 04 Nov 2025 02:36:44 +0000 Manifest next update: Fri 07 Nov 2025 07:06:44 +0000 Files and hashes: 1: 85B934D25B97AC3F22C3D45778109B50456E4722.crl (hash: U6lBrEARVeB36ICm0SYUY3usIlKmUA1gAyJjqHhsjWQ=) 2: 3130332e3234352e35372e302f32342d3234203d3e20313531353335.roa (hash: Z67yx8ZcKGwzuTX0HadLjdL6alzCtLMaS1YAjbB729M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 07:06:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:2e:35:3e:81:3d:68:25:7f:24:44:3f:e2:2f:a6:e2:cb:bf:34:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85B934D25B97AC3F22C3D45778109B50456E4722 Validity Not Before: Nov 4 02:36:44 2025 GMT Not After : Nov 7 07:06:44 2025 GMT Subject: CN=C49856EC59F9CC836CC7F45D748142FD69A23217 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fc:54:14:d0:90:a9:8a:fc:61:99:d4:d7:df: b2:cb:59:86:60:d9:b1:e1:59:3b:90:a5:9f:1b:e5: c3:46:e0:22:d6:1a:95:8d:08:e3:5a:27:ad:f8:1e: 09:17:2f:59:b8:48:de:0e:0d:46:f9:7a:68:cc:a3: 28:8c:06:4b:b1:cd:44:b2:57:15:26:0a:7f:1a:53: ab:12:be:a7:17:8b:1b:76:21:59:c8:cf:3e:d0:b4: 26:33:a1:bf:2e:54:81:d9:97:51:cc:ac:00:17:ce: e9:7b:ec:61:b9:83:c2:e7:2c:b1:0d:42:f7:67:e1: 5d:90:9a:99:01:f0:22:21:aa:e0:a3:72:95:17:1d: 61:8f:dc:e2:93:7d:f5:37:1a:b0:f2:e9:34:64:9e: ed:3b:c1:32:67:ad:46:8f:a5:a6:3f:f4:c4:1f:47: 1f:5d:ca:3a:3c:05:ea:20:71:9c:db:d9:6b:82:c6: 23:60:be:e7:c1:a4:37:0f:46:cf:21:46:d3:05:66: 46:2c:02:61:6f:53:d6:ec:49:24:0a:7b:dc:07:6b: e6:82:ef:4b:d4:75:b5:14:ff:91:82:08:be:25:bc: 4f:13:76:14:da:eb:d7:93:e2:d0:66:dd:01:06:97: 8c:0f:8e:c0:3b:f1:83:14:c2:be:bf:f2:08:4e:f9: 50:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:98:56:EC:59:F9:CC:83:6C:C7:F4:5D:74:81:42:FD:69:A2:32:17 X509v3 Authority Key Identifier: keyid:85:B9:34:D2:5B:97:AC:3F:22:C3:D4:57:78:10:9B:50:45:6E:47:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85B934D25B97AC3F22C3D45778109B50456E4722.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b64e26c5-b564-474e-92dc-bd9c13977cd5/0/85B934D25B97AC3F22C3D45778109B50456E4722.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d5:78:1b:60:2c:02:f0:3f:0b:95:76:f0:ef:3e:db:3a:62:39: 07:2a:85:44:3a:45:51:1d:6b:7f:a0:a1:16:48:d7:3e:60:18: b8:2d:fb:1d:56:8f:f6:0e:d7:43:32:67:70:68:19:91:e3:2f: 30:4f:fc:7a:9b:50:21:99:3d:b6:b9:0b:04:8f:52:68:4a:c8: 8e:a1:24:d7:15:fe:93:a1:37:ca:22:3f:68:28:4b:fa:da:0c: ee:f5:95:24:f7:6a:cb:a9:f3:06:ba:cc:90:02:af:08:cc:cd: d3:03:9c:7f:94:66:24:17:3a:2c:db:e3:07:7f:72:30:50:6f: e9:18:28:2d:a0:3a:cf:a9:f1:d3:f3:58:53:84:1b:e4:0c:ce: 0f:9e:73:4c:8e:9a:71:ba:eb:5e:d5:2b:ba:10:eb:e8:cf:fc: e3:8d:42:e3:e5:4d:fe:e9:61:c5:a1:74:c0:fa:35:3f:47:40: 32:52:06:cd:a1:40:36:68:88:e3:29:c5:ad:4d:83:a4:c6:04: 3d:e3:f0:aa:0c:ef:71:b2:65:2c:e0:c3:55:ad:2f:f8:81:67: 68:c0:10:98:1f:53:65:af:2c:a3:74:80:d7:01:c0:f9:88:08: f7:ec:9b:fd:ce:c5:73:94:d7:71:24:3b:89:e2:18:a2:3e:66: 8a:5c:be:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdC41PoE9aCV/JEQ/4i+m4su/NLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0 NTZFNDcyMjAeFw0yNTExMDQwMjM2NDRaFw0yNTExMDcwNzA2NDRaMDMxMTAvBgNV BAMTKEM0OTg1NkVDNTlGOUNDODM2Q0M3RjQ1RDc0ODE0MkZENjlBMjMyMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/FQU0JCpivxhmdTX37LLWYZg 2bHhWTuQpZ8b5cNG4CLWGpWNCONaJ634HgkXL1m4SN4ODUb5emjMoyiMBkuxzUSy VxUmCn8aU6sSvqcXixt2IVnIzz7QtCYzob8uVIHZl1HMrAAXzul77GG5g8LnLLEN Qvdn4V2QmpkB8CIhquCjcpUXHWGP3OKTffU3GrDy6TRknu07wTJnrUaPpaY/9MQf Rx9dyjo8BeogcZzb2WuCxiNgvufBpDcPRs8hRtMFZkYsAmFvU9bsSSQKe9wHa+aC 70vUdbUU/5GCCL4lvE8TdhTa69eT4tBm3QEGl4wPjsA78YMUwr6/8ghO+VB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxJhW7Fn5zINsx/RddIFC/WmiMhcwHwYDVR0j BBgwFoAUhbk00luXrD8iw9RXeBCbUEVuRyIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NjRlMjZjNS1iNTY0LTQ3NGUtOTJkYy1iZDljMTM5NzdjZDUvMC84NUI5MzREMjVC OTdBQzNGMjJDM0Q0NTc3ODEwOUI1MDQ1NkU0NzIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlCNTA0NTZF NDcyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjY0ZTI2YzUtYjU2NC00NzRlLTky ZGMtYmQ5YzEzOTc3Y2Q1LzAvODVCOTM0RDI1Qjk3QUMzRjIyQzNENDU3NzgxMDlC NTA0NTZFNDcyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANV4G2AsAvA/C5V28O8+2zpiOQcqhUQ6RVEd a3+goRZI1z5gGLgt+x1Wj/YO10MyZ3BoGZHjLzBP/HqbUCGZPba5CwSPUmhKyI6h JNcV/pOhN8oiP2goS/raDO71lST3asup8wa6zJACrwjMzdMDnH+UZiQXOizb4wd/ cjBQb+kYKC2gOs+p8dPzWFOEG+QMzg+ec0yOmnG6617VK7oQ6+jP/OONQuPlTf7p YcWhdMD6NT9HQDJSBs2hQDZoiOMpxa1Ng6TGBD3j8KoM73GyZSzgw1WtL/iBZ2jA EJgfU2WvLKN0gNcBwPmICPfsm/3OxXOU13EkO4niGKI+Zopcvsc= -----END CERTIFICATE-----Generated at Tue Nov 4 19:07:47 2025 by rpki-client