$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: m72CAJnvVBn3RbWS4Lm0AZX2dnRmxgnlt3DQ039icg0= Subject key identifier: 72:C3:5F:C2:8B:EE:20:BD:19:13:28:58:30:F4:54:07:CF:F8:33:EA Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 1E912BE442C94FFAA90FD11FBD2E66F2DFF1B2F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 01F5 Signing time: Wed 06 Aug 2025 04:00:03 +0000 Manifest this update: Wed 06 Aug 2025 03:55:03 +0000 Manifest next update: Sat 09 Aug 2025 13:12:03 +0000 Files and hashes: 1: 3130332e3137342e37382e302f32342d3234203d3e20313331363939.roa (hash: lKFSHdHF3wWJIcTGvyjieSUWfDWF+TAqKVs638owOUk=) 2: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: c5rrHNd0KqIN8Z6csAlLiii9vCxVHsJqNJzUIfgWick=) 3: 3130332e3137342e37392e302f32342d3234203d3e203338333230.roa (hash: AGvpCXR8gQBspf5FohNx3ipHrwnlCs57tuOOE5KVIPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 13:12:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:91:2b:e4:42:c9:4f:fa:a9:0f:d1:1f:bd:2e:66:f2:df:f1:b2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Aug 6 03:55:03 2025 GMT Not After : Aug 9 13:12:03 2025 GMT Subject: CN=72C35FC28BEE20BD1913285830F45407CFF833EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:8e:aa:d4:56:63:c3:08:30:af:9b:57:2c:62: c0:4f:63:f7:44:cc:87:c8:ea:34:59:4f:8c:ae:ab: f8:ce:fd:aa:6c:36:59:f3:3f:35:05:b1:4d:4d:85: 9d:d8:8d:e5:18:87:c0:17:9d:b9:b0:b5:20:2e:e2: 1f:f0:e9:e1:e1:ae:e0:60:89:dc:72:f3:62:0f:bc: 06:7c:bf:ab:05:7a:16:09:00:ab:4e:8e:25:5c:eb: 50:a2:1b:24:c8:0c:45:f7:13:8a:b2:72:6b:bd:8d: 9a:c4:13:f3:ae:78:c5:34:17:d1:b8:7b:b1:6e:89: 45:b8:c6:f9:e1:a2:c0:2f:c6:c9:15:ff:09:25:eb: 71:b7:fa:43:c6:89:d5:8c:75:82:0d:a3:60:c8:ef: 9f:fd:00:95:40:b9:be:29:5b:7c:01:48:7b:4a:bb: e1:06:ae:15:6d:66:44:f0:db:72:0e:dd:16:c6:42: d3:6d:06:19:df:d3:16:ba:83:4f:bf:f9:99:4a:3b: 33:a9:77:fe:b3:17:4b:11:69:42:08:3f:c4:95:75: b6:19:f8:1b:a1:14:2a:e8:19:c1:d3:d0:8c:5d:54: 83:d6:ea:0a:bf:c1:1b:ec:8f:73:80:33:3a:45:c5: 40:30:eb:6b:0c:08:fc:df:e0:2e:87:a8:68:c9:74: ae:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C3:5F:C2:8B:EE:20:BD:19:13:28:58:30:F4:54:07:CF:F8:33:EA X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:51:6e:ea:9b:63:d1:29:29:0b:ff:9e:0b:c5:92:8b:42:4b: b2:97:f7:19:c9:e9:5f:65:c0:bc:2f:fc:58:c3:63:6e:d4:1a: 57:08:be:99:7f:4c:f4:76:88:08:5d:20:b0:f5:be:90:33:15: f5:35:c4:f1:16:c6:39:76:93:c4:6f:54:30:12:08:3a:e4:1e: e1:63:79:65:34:71:e2:a7:89:df:e0:e3:08:11:dc:de:f8:c3: eb:2f:ca:39:55:c7:99:59:4d:9a:55:30:f1:b5:16:e4:30:21: 88:bb:ba:5d:37:32:23:f2:43:2d:68:e1:16:c6:56:0a:52:52: 20:2d:f8:ad:27:62:55:58:bb:93:94:b6:82:2b:85:03:54:9b: ef:e6:8e:af:9f:af:f7:f3:8f:17:2c:0b:f8:ac:00:e4:12:98: 59:40:5a:0c:b4:49:2a:25:96:f1:9c:c2:ca:0c:af:e1:80:34: 8a:bf:44:dd:4b:49:a4:08:47:dd:d4:bb:7e:d9:93:f4:a4:11: aa:83:31:e2:f1:5b:0d:49:9e:4c:18:ca:e5:af:da:a9:6e:b7: 32:71:31:38:24:35:9f:b7:8e:f1:3e:b4:d7:62:7e:1c:02:76: 4e:ce:ca:83:06:04:e8:28:95:57:56:13:f5:3c:a1:26:38:84: fb:84:65:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHpEr5ELJT/qpD9EfvS5m8t/xsvkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTA4MDYwMzU1MDNaFw0yNTA4MDkxMzEyMDNaMDMxMTAvBgNV BAMTKDcyQzM1RkMyOEJFRTIwQkQxOTEzMjg1ODMwRjQ1NDA3Q0ZGODMzRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPjqrUVmPDCDCvm1csYsBPY/dE zIfI6jRZT4yuq/jO/apsNlnzPzUFsU1NhZ3YjeUYh8AXnbmwtSAu4h/w6eHhruBg idxy82IPvAZ8v6sFehYJAKtOjiVc61CiGyTIDEX3E4qycmu9jZrEE/OueMU0F9G4 e7FuiUW4xvnhosAvxskV/wkl63G3+kPGidWMdYINo2DI75/9AJVAub4pW3wBSHtK u+EGrhVtZkTw23IO3RbGQtNtBhnf0xa6g0+/+ZlKOzOpd/6zF0sRaUIIP8SVdbYZ +BuhFCroGcHT0IxdVIPW6gq/wRvsj3OAMzpFxUAw62sMCPzf4C6HqGjJdK41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsNfwovuIL0ZEyhYMPRUB8/4M+owHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGVRbuqbY9EpKQv/ngvFkotCS7KX9xnJ6V9l wLwv/FjDY27UGlcIvpl/TPR2iAhdILD1vpAzFfU1xPEWxjl2k8RvVDASCDrkHuFj eWU0ceKnid/g4wgR3N74w+svyjlVx5lZTZpVMPG1FuQwIYi7ul03MiPyQy1o4RbG VgpSUiAt+K0nYlVYu5OUtoIrhQNUm+/mjq+fr/fzjxcsC/isAOQSmFlAWgy0SSol lvGcwsoMr+GANIq/RN1LSaQIR93Uu37Zk/SkEaqDMeLxWw1JnkwYyuWv2qlutzJx MTgkNZ+3jvE+tNdifhwCdk7OyoMGBOgolVdWE/U8oSY4hPuEZak= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:06 2025 by rpki-client