$ rpki-client -vvf repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft File: 85735A4922D529215199E6F4D6829DF68512E117.mft (raw, json) Hash identifier: nudknj1zG6F9sDdR9MDaTPi/R9YVDwprp1g6ucaWE5Q= Subject key identifier: 8D:9C:53:25:8A:39:16:68:12:EE:CC:DF:A6:D6:A4:7C:90:8F:77:A4 Authority key identifier: 85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 Certificate issuer: /CN=85735A4922D529215199E6F4D6829DF68512E117 Certificate serial: 32FAB0E76F51D7B6A2089BFF7BA8DC2973EB96AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft Manifest number: A6 Signing time: Mon 28 Apr 2025 17:22:17 +0000 Manifest this update: Mon 28 Apr 2025 17:17:17 +0000 Manifest next update: Fri 02 May 2025 04:03:17 +0000 Files and hashes: 1: 3135372e36362e33342e302f32332d3234203d3e203535363838.roa (hash: ZYRFgg3YsM3yKUn62KsbkyrpaJzgLMKU6Z815DCOnrQ=) 2: 85735A4922D529215199E6F4D6829DF68512E117.crl (hash: ecYtcYETZKRGdxkpUOKhfs1W8Z9sd440ZqmJOOkthzo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:fa:b0:e7:6f:51:d7:b6:a2:08:9b:ff:7b:a8:dc:29:73:eb:96:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85735A4922D529215199E6F4D6829DF68512E117 Validity Not Before: Apr 28 17:17:17 2025 GMT Not After : May 2 04:03:17 2025 GMT Subject: CN=8D9C53258A39166812EECCDFA6D6A47C908F77A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3c:c1:05:6a:8d:20:53:72:66:e5:5f:c7:0e: d7:88:57:ad:36:4e:ba:ad:36:79:3e:d1:f4:a3:09: a8:01:8f:87:31:d4:2c:16:c9:c6:03:63:c3:38:67: b3:40:92:68:93:a4:14:0f:4b:51:1c:ff:df:09:63: 09:37:1e:db:c7:6e:12:6b:90:b8:32:aa:ad:b4:ea: f7:d3:12:b6:da:cc:09:61:29:15:3b:50:7d:a1:1a: a8:a8:cf:9e:1b:d0:a4:a1:a1:09:24:4e:d8:80:5d: 23:09:d4:d1:50:c0:15:a3:19:ba:cd:27:30:67:28: be:7d:83:aa:7a:f3:b1:bf:17:be:98:fc:8c:4d:d7: ca:fe:09:e8:6e:29:37:ff:cb:71:d5:81:ff:98:16: 9d:49:90:fb:c3:85:a3:be:11:5d:16:36:dd:82:42: dd:4e:c4:16:81:6c:ff:5f:01:44:4c:6f:2a:ab:bb: b0:e5:69:b9:c9:80:cb:27:47:ca:f5:a9:8e:9e:da: 69:8e:82:7e:01:57:62:40:02:c1:d7:da:e9:fc:b9: a5:ab:ce:e9:2f:aa:c3:27:9e:80:55:87:a2:f3:72: 05:c6:f9:96:fb:a1:37:bf:85:78:b9:c5:7b:1e:a1: e5:1a:0d:c1:c1:8d:65:28:d1:fc:e3:e6:c6:2a:e9: 1a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9C:53:25:8A:39:16:68:12:EE:CC:DF:A6:D6:A4:7C:90:8F:77:A4 X509v3 Authority Key Identifier: keyid:85:73:5A:49:22:D5:29:21:51:99:E6:F4:D6:82:9D:F6:85:12:E1:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/85735A4922D529215199E6F4D6829DF68512E117.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c3e68bd-b04c-4d35-8020-02936342fb1d/0/85735A4922D529215199E6F4D6829DF68512E117.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:08:3d:ad:f8:5a:b0:b4:c5:2d:a2:6c:aa:4a:9a:62:f7:66: 1c:af:99:b2:01:e6:98:cf:19:f5:cb:75:80:b8:b8:90:e5:ce: b7:a1:66:4b:c0:6b:93:e2:42:73:55:f2:53:d4:98:17:01:5b: 30:ff:00:3b:7f:08:38:e6:99:67:ef:b9:20:bb:0b:58:47:44: c0:78:ef:ad:a6:b9:dd:c5:9e:36:07:7c:62:ce:81:1c:76:9a: 50:18:7f:63:07:8f:0d:6c:1b:a2:3d:90:62:ba:c8:1a:8c:b7: 91:9e:5f:3a:94:95:87:c7:73:a4:b8:a3:56:16:8f:b3:b0:f0: f7:e3:b5:cf:6d:ae:ff:0d:58:3f:33:38:18:11:36:f0:2f:21: 0e:1d:bb:1e:77:54:31:0f:9d:9d:6b:d6:08:77:f7:6d:d8:1e: c3:ef:8e:2f:f5:aa:34:96:5a:e3:5c:fb:40:24:b7:63:33:01: 74:05:60:36:ee:21:6d:fb:c4:80:41:fe:61:e8:0c:76:ff:cf: e4:6d:c5:76:dc:6a:7e:de:b4:fa:a9:d0:b9:77:84:a3:54:f9: c4:e8:cd:86:28:54:1e:24:11:ea:55:83:f4:ec:9f:7a:2c:8b: d7:64:3f:46:1a:9d:d5:62:10:46:60:b4:f9:fd:8f:79:05:7d: 3f:6d:c1:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMvqw529R17aiCJv/e6jcKXPrlqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4 NTEyRTExNzAeFw0yNTA0MjgxNzE3MTdaFw0yNTA1MDIwNDAzMTdaMDMxMTAvBgNV BAMTKDhEOUM1MzI1OEEzOTE2NjgxMkVFQ0NERkE2RDZBNDdDOTA4Rjc3QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnPMEFao0gU3Jm5V/HDteIV602 TrqtNnk+0fSjCagBj4cx1CwWycYDY8M4Z7NAkmiTpBQPS1Ec/98JYwk3HtvHbhJr kLgyqq206vfTErbazAlhKRU7UH2hGqioz54b0KShoQkkTtiAXSMJ1NFQwBWjGbrN JzBnKL59g6p687G/F76Y/IxN18r+CehuKTf/y3HVgf+YFp1JkPvDhaO+EV0WNt2C Qt1OxBaBbP9fAURMbyqru7DlabnJgMsnR8r1qY6e2mmOgn4BV2JAAsHX2un8uaWr zukvqsMnnoBVh6LzcgXG+Zb7oTe/hXi5xXseoeUaDcHBjWUo0fzj5sYq6RrHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjZxTJYo5FmgS7szfptakfJCPd6QwHwYDVR0j BBgwFoAUhXNaSSLVKSFRmeb01oKd9oUS4RcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzNlNjhiZC1iMDRjLTRkMzUtODAyMC0wMjkzNjM0MmZiMWQvMC84NTczNUE0OTIy RDUyOTIxNTE5OUU2RjRENjgyOURGNjg1MTJFMTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlERjY4NTEy RTExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2MzZTY4YmQtYjA0Yy00ZDM1LTgw MjAtMDI5MzYzNDJmYjFkLzAvODU3MzVBNDkyMkQ1MjkyMTUxOTlFNkY0RDY4MjlE RjY4NTEyRTExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUIPa34WrC0xS2ibKpKmmL3ZhyvmbIB5pjP GfXLdYC4uJDlzrehZkvAa5PiQnNV8lPUmBcBWzD/ADt/CDjmmWfvuSC7C1hHRMB4 762mud3FnjYHfGLOgRx2mlAYf2MHjw1sG6I9kGK6yBqMt5GeXzqUlYfHc6S4o1YW j7Ow8Pfjtc9trv8NWD8zOBgRNvAvIQ4dux53VDEPnZ1r1gh3923YHsPvji/1qjSW WuNc+0Akt2MzAXQFYDbuIW37xIBB/mHoDHb/z+RtxXbcan7etPqp0Ll3hKNU+cTo zYYoVB4kEepVg/Tsn3osi9dkP0YandViEEZgtPn9j3kFfT9twTs= -----END CERTIFICATE-----Generated at Tue Apr 29 09:32:44 2025 by rpki-client