$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: z+G4mJA0e8zoaqGUd175ufKcxxdUgKLyor4u2jxI/VE= Subject key identifier: 58:B2:98:55:12:0B:87:EE:CE:E7:E1:0F:45:7D:FE:F4:BF:26:AA:BD Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 116BA97A5A022D13DB9E1554BDABE10C9500DB57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 021C Signing time: Sun 02 Nov 2025 12:40:03 +0000 Manifest this update: Sun 02 Nov 2025 12:35:03 +0000 Manifest next update: Thu 06 Nov 2025 00:03:03 +0000 Files and hashes: 1: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) 2: 3130332e3137342e37392e302f32342d3234203d3e203338333230.roa (hash: AGvpCXR8gQBspf5FohNx3ipHrwnlCs57tuOOE5KVIPk=) 3: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: BNwB+AM9YKE/EeTvTffb5LLJ0U36Jljn/3/zfI8u7ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:03:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:6b:a9:7a:5a:02:2d:13:db:9e:15:54:bd:ab:e1:0c:95:00:db:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Nov 2 12:35:03 2025 GMT Not After : Nov 6 00:03:03 2025 GMT Subject: CN=58B29855120B87EECEE7E10F457DFEF4BF26AABD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6a:78:d4:e4:3f:81:b8:2d:57:e6:37:b9:12: b9:55:5e:ad:69:84:24:eb:e4:85:6b:50:e4:73:5b: d0:2c:69:df:15:de:e9:2a:bd:dc:8b:74:02:06:65: f4:a2:39:38:51:80:7f:3f:ad:a9:83:67:1b:e9:51: 9b:a1:50:cc:96:cd:b2:86:61:99:57:bf:be:92:d0: bb:a8:c8:3d:db:cd:c0:00:a8:0d:2f:85:55:10:2a: 95:71:f4:b5:09:b6:89:ce:c9:86:0a:fe:07:29:00: 39:a5:f3:1a:ce:03:be:19:01:8a:eb:63:27:e2:a6: b9:72:89:8b:9f:a5:61:f4:af:fa:fa:d8:e4:5c:04: 7c:02:b1:7e:2e:f9:dc:ff:57:02:d3:ac:8e:8b:da: 05:5b:92:7c:1e:1d:99:cf:8c:05:14:32:6d:93:e7: a0:c7:2b:12:c1:45:cd:e7:49:cd:a9:f2:71:8c:99: f8:01:b0:26:fa:c2:b6:ff:a4:c6:2f:47:d3:84:87: 2f:73:c6:1e:e0:f0:04:5f:3b:28:c7:68:63:fe:0c: a0:90:7e:b5:17:8f:0a:72:bd:d9:80:ef:6c:1a:c1: b5:be:fa:d6:96:db:f8:01:65:94:36:8e:95:07:83: 90:0c:ed:28:d6:65:2a:31:fe:e1:d1:2b:27:39:d9: 92:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B2:98:55:12:0B:87:EE:CE:E7:E1:0F:45:7D:FE:F4:BF:26:AA:BD X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c9:96:d7:25:ce:9c:a2:bf:2a:51:d0:36:f0:07:7b:15:e5: 5c:80:4c:e0:ba:11:aa:f5:5b:de:46:0e:02:8e:e3:5a:c0:3d: 95:9e:9a:c8:a2:47:d9:3c:91:67:51:e3:1d:11:14:2b:e8:0b: 76:cd:fa:bd:a0:28:39:ea:33:8a:8e:66:8b:8b:bf:7d:28:4a: ab:38:3c:0f:32:8f:26:92:1f:69:3c:d9:8f:b2:39:94:7f:fc: 6d:65:c8:49:af:be:f1:9c:ad:69:cb:0d:a5:29:09:db:9a:1b: 8d:7d:26:7d:af:b8:75:b2:2c:48:64:b5:45:12:1d:ca:c8:41: 77:36:32:e9:9a:ae:9d:3d:90:79:8f:81:ba:6c:7b:9c:75:85: 6c:16:69:6e:0b:0d:a9:68:86:cb:39:b9:20:de:e5:41:12:cc: 2e:aa:a0:46:32:8b:c2:3d:ff:37:a4:70:df:56:6e:45:56:6c: 1f:9b:37:bc:ad:80:07:ed:28:69:ff:2e:47:22:06:55:70:a3: 2e:7d:5b:4c:4b:cd:db:f6:d8:5e:79:e8:24:6e:21:73:3c:be: 8f:b0:f6:16:22:66:79:31:a6:5c:ca:04:bf:c2:57:f7:c0:af: 1c:e6:96:43:54:96:35:0a:d4:d3:9b:3a:23:d6:f0:71:3e:10: 7b:9d:b7:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEWupeloCLRPbnhVUvavhDJUA21cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTExMDIxMjM1MDNaFw0yNTExMDYwMDAzMDNaMDMxMTAvBgNV BAMTKDU4QjI5ODU1MTIwQjg3RUVDRUU3RTEwRjQ1N0RGRUY0QkYyNkFBQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFanjU5D+BuC1X5je5ErlVXq1p hCTr5IVrUORzW9Asad8V3ukqvdyLdAIGZfSiOThRgH8/ramDZxvpUZuhUMyWzbKG YZlXv76S0LuoyD3bzcAAqA0vhVUQKpVx9LUJtonOyYYK/gcpADml8xrOA74ZAYrr YyfiprlyiYufpWH0r/r62ORcBHwCsX4u+dz/VwLTrI6L2gVbknweHZnPjAUUMm2T 56DHKxLBRc3nSc2p8nGMmfgBsCb6wrb/pMYvR9OEhy9zxh7g8ARfOyjHaGP+DKCQ frUXjwpyvdmA72wawbW++taW2/gBZZQ2jpUHg5AM7SjWZSox/uHRKyc52ZJLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWLKYVRILh+7O5+EPRX3+9L8mqr0wHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPJltclzpyivypR0DbwB3sV5VyATOC6Ear1 W95GDgKO41rAPZWemsiiR9k8kWdR4x0RFCvoC3bN+r2gKDnqM4qOZouLv30oSqs4 PA8yjyaSH2k82Y+yOZR//G1lyEmvvvGcrWnLDaUpCduaG419Jn2vuHWyLEhktUUS HcrIQXc2Mumarp09kHmPgbpse5x1hWwWaW4LDalohss5uSDe5UESzC6qoEYyi8I9 /zekcN9WbkVWbB+bN7ytgAftKGn/LkciBlVwoy59W0xLzdv22F556CRuIXM8vo+w 9hYiZnkxplzKBL/CV/fArxzmlkNUljUK1NObOiPW8HE+EHudt2g= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:45 2025 by rpki-client