$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: bVpLwvwn1kIqNTZ/iTSJHj5ePBzg2OiWJEPJ576tM1c= Subject key identifier: AA:ED:BA:22:DE:2F:E7:DA:CA:BA:CE:BD:54:B8:C3:81:B0:D1:54:23 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 7B979B13F9B7A76408F6B2B911ED2271DCFB7D57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01BF Signing time: Tue 17 Jun 2025 07:42:13 +0000 Manifest this update: Tue 17 Jun 2025 07:37:13 +0000 Manifest next update: Fri 20 Jun 2025 14:00:13 +0000 Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=) 2: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: jFE4xoUrl9YAmN3twKx5acN6cGPEkgvVJk+XKMY0CSs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:97:9b:13:f9:b7:a7:64:08:f6:b2:b9:11:ed:22:71:dc:fb:7d:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Jun 17 07:37:13 2025 GMT Not After : Jun 20 14:00:13 2025 GMT Subject: CN=AAEDBA22DE2FE7DACABACEBD54B8C381B0D15423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c3:bb:43:6d:ed:c2:7b:3a:13:01:5b:37:08: 37:54:d3:2d:5b:52:13:22:96:05:7c:e6:22:a7:e6: f8:e7:29:7e:ef:81:e2:fc:ae:61:5e:18:b0:98:6c: 3d:ba:56:8e:0c:3f:5c:f5:f9:a7:f9:e7:b2:ec:5a: 90:d0:fc:07:9f:c4:31:c2:b3:cd:ea:16:e1:34:a6: b6:0a:6e:32:e0:84:26:b1:4a:1b:0e:86:34:6c:cb: d0:bb:03:ba:3c:ba:1e:c3:0a:82:4e:5c:cc:7d:a2: 19:b9:0d:c3:5b:f6:39:96:85:b9:76:e4:a8:f8:db: 7c:58:fd:c8:28:21:12:5f:84:8a:ae:5f:64:05:91: b2:ee:ab:70:d8:7e:ba:49:f7:16:a8:f0:36:20:91: fc:27:08:e3:4f:51:d1:de:4c:28:ff:92:27:26:ab: dd:0b:bb:f3:aa:4f:6f:66:f3:92:aa:cb:57:49:73: dd:01:d6:f1:9a:a3:f8:fb:4c:f4:e6:ef:3b:ed:d1: be:e6:39:49:75:70:51:bc:7c:4f:c4:21:9e:e5:d3: c3:a1:c3:b0:01:3b:d7:3f:e9:7d:1e:b6:2c:28:d2: 5a:1a:a5:9d:b7:d8:e1:74:43:be:db:d8:09:47:94: 61:34:24:0e:41:10:30:8d:21:f5:ac:29:3c:9e:40: 71:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:ED:BA:22:DE:2F:E7:DA:CA:BA:CE:BD:54:B8:C3:81:B0:D1:54:23 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:58:27:1b:77:a7:ff:6c:50:0a:44:79:df:8c:89:4f:1b:9a: f9:24:5f:a2:db:ca:1a:ee:70:13:fb:4d:27:c2:fc:96:d2:30: 31:09:ae:76:a1:8d:a7:5c:fa:56:64:b2:1d:52:64:90:40:af: 8f:d0:e8:8a:c5:a3:ef:85:ee:2f:4f:dc:13:3d:df:c6:2f:da: f1:fc:2c:af:29:d1:5a:35:e3:72:de:7c:63:12:07:cf:98:8f: 1d:ca:6b:de:bf:00:00:58:41:05:7f:5b:11:15:76:73:43:2b: 48:f8:1f:de:3f:3b:01:72:63:1f:d8:0e:07:56:33:d5:fb:06: 86:d7:25:29:09:b5:29:bd:22:db:09:6f:d1:60:5d:89:3b:70: e2:bc:ed:4c:06:09:6e:d1:ef:7b:eb:53:21:65:04:44:ba:6c: 79:7d:f7:a9:6b:39:d2:9f:3a:ef:d4:ee:24:99:3b:a1:17:00: ba:3e:4b:91:44:09:f7:ff:cc:be:a1:9a:c5:66:9f:f6:c4:ac: 85:e3:fb:04:9f:71:8d:ea:71:af:a7:c8:ef:51:8e:86:19:a2: 70:af:7b:b9:0a:88:ae:88:0e:d2:f5:9c:b4:de:9a:48:14:3e: 94:1b:65:ee:70:8f:58:27:f9:19:50:a5:1a:ea:e8:2b:57:d0: b7:1d:41:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5ebE/m3p2QI9rK5Ee0icdz7fVcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA2MTcwNzM3MTNaFw0yNTA2MjAxNDAwMTNaMDMxMTAvBgNV BAMTKEFBRURCQTIyREUyRkU3REFDQUJBQ0VCRDU0QjhDMzgxQjBEMTU0MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtw7tDbe3CezoTAVs3CDdU0y1b UhMilgV85iKn5vjnKX7vgeL8rmFeGLCYbD26Vo4MP1z1+af557LsWpDQ/AefxDHC s83qFuE0prYKbjLghCaxShsOhjRsy9C7A7o8uh7DCoJOXMx9ohm5DcNb9jmWhbl2 5Kj423xY/cgoIRJfhIquX2QFkbLuq3DYfrpJ9xao8DYgkfwnCONPUdHeTCj/kicm q90Lu/OqT29m85Kqy1dJc90B1vGao/j7TPTm7zvt0b7mOUl1cFG8fE/EIZ7l08Oh w7ABO9c/6X0etiwo0loapZ232OF0Q77b2AlHlGE0JA5BEDCNIfWsKTyeQHFxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqu26It4v59rKus69VLjDgbDRVCMwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVYJxt3p/9sUApEed+MiU8bmvkkX6Lbyhru cBP7TSfC/JbSMDEJrnahjadc+lZksh1SZJBAr4/Q6IrFo++F7i9P3BM938Yv2vH8 LK8p0Vo143LefGMSB8+Yjx3Ka96/AABYQQV/WxEVdnNDK0j4H94/OwFyYx/YDgdW M9X7BobXJSkJtSm9ItsJb9FgXYk7cOK87UwGCW7R73vrUyFlBES6bHl996lrOdKf Ou/U7iSZO6EXALo+S5FECff/zL6hmsVmn/bErIXj+wSfcY3qca+nyO9RjoYZonCv e7kKiK6IDtL1nLTemkgUPpQbZe5wj1gn+RlQpRrq6CtX0LcdQT0= -----END CERTIFICATE-----Generated at Tue Jun 17 14:00:12 2025 by rpki-client