$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: jVWoWSrE9yXSVnXWuetFUQrSGmo94kA+uXqsPQIQNW0= Subject key identifier: 44:FB:E5:E3:1C:DE:76:00:E9:0C:8F:3B:86:E1:42:A9:3A:FB:50:AB Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 0B70BD58395333662074A268AF0A772A60038ADF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 056C Signing time: Sat 18 Apr 2026 22:02:33 +0000 Manifest this update: Sat 18 Apr 2026 21:57:33 +0000 Manifest next update: Wed 22 Apr 2026 02:14:33 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: qob7SLxbQR1eSwA7B4Kl4Sl761q9INWfZ2a4lG3kB0c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:70:bd:58:39:53:33:66:20:74:a2:68:af:0a:77:2a:60:03:8a:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Apr 18 21:57:33 2026 GMT Not After : Apr 22 02:14:33 2026 GMT Subject: CN=44FBE5E31CDE7600E90C8F3B86E142A93AFB50AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:40:4d:db:d2:e7:14:a3:26:fc:1d:8e:ec:c8: 7d:46:81:74:c3:b2:40:95:65:ea:6d:08:4d:f8:c7: 29:35:2d:53:50:c5:9d:91:a1:7b:ac:0f:ed:cc:12: 5a:37:69:79:55:47:5f:31:49:6c:00:9c:6f:06:36: 88:de:b6:d5:42:ca:ab:af:89:47:0b:14:a5:36:17: 83:96:70:61:e9:c6:8d:97:78:1e:6d:c5:09:a2:00: 74:d0:1d:90:71:3f:49:7c:80:86:fa:78:b8:22:0b: 87:03:43:52:a1:c4:54:d1:42:33:d1:e1:4b:c5:37: ff:d2:89:80:ae:98:67:4a:33:8f:c6:69:ee:c7:39: c6:bb:66:46:fc:3d:94:3f:f4:18:ce:7e:57:04:90: 75:23:97:15:7c:6b:95:f9:d1:83:6f:77:e2:2b:86: 6c:3d:0b:3e:36:c3:1b:c5:eb:68:9a:6b:9e:43:71: b5:6a:89:24:d3:b8:c3:55:b1:64:c0:4f:6d:dd:9e: 53:7e:50:0c:e1:f9:bd:73:df:8a:26:46:ad:cb:16: 22:2d:94:46:18:e6:19:db:15:6d:9a:a0:f0:7b:0b: 7c:60:11:9b:60:a8:c0:41:2b:bb:a8:8a:6d:6d:96: ac:39:0d:40:e5:89:ea:06:1d:6a:cb:b5:e1:35:f5: f0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:FB:E5:E3:1C:DE:76:00:E9:0C:8F:3B:86:E1:42:A9:3A:FB:50:AB X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:60:de:64:d0:c7:67:4b:f2:86:e3:5a:38:eb:aa:7d:dd:7f: 89:1f:41:02:1a:b8:70:38:06:fa:fa:38:03:1a:14:3b:ce:b6: 5d:7e:71:ab:96:c7:91:6d:1c:6b:a3:ce:f6:55:c9:9f:e9:aa: 10:0c:40:6a:3d:59:75:0c:95:47:80:4e:2d:ac:8a:ba:be:c4: 78:67:23:90:bd:47:f4:33:61:44:6b:e5:34:7b:80:3a:00:d5: be:81:3e:39:f4:40:50:79:b4:70:37:fd:98:fe:de:2a:c0:c5: 62:ef:79:a6:ee:4b:2b:da:38:b0:c9:db:78:66:5b:ac:cb:c3: a6:4f:15:ce:5a:3b:0b:54:58:4a:d6:29:fe:39:d0:d4:a8:5b: a5:9e:60:db:2e:f8:f4:ed:82:65:3a:d7:15:3e:65:dc:ba:a7: ed:5b:86:08:97:f3:94:0d:07:d7:09:84:02:aa:e8:a7:77:aa: bb:0f:a9:c9:d2:9b:23:0c:d9:b0:c6:36:05:80:dd:64:8a:c8: c6:97:2f:80:78:26:c1:a1:02:8d:8e:55:7a:04:f3:a7:bd:a1: 0c:78:b9:ed:b0:9b:44:13:6d:bf:3f:6f:6d:be:1c:01:2d:f5: 51:f9:4b:5a:c1:7d:bf:c7:c2:a2:32:a5:03:e3:a9:d0:20:f2: 3c:43:05:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3C9WDlTM2YgdKJorwp3KmADit8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNjA0MTgyMTU3MzNaFw0yNjA0MjIwMjE0MzNaMDMxMTAvBgNV BAMTKDQ0RkJFNUUzMUNERTc2MDBFOTBDOEYzQjg2RTE0MkE5M0FGQjUwQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6QE3b0ucUoyb8HY7syH1GgXTD skCVZeptCE34xyk1LVNQxZ2RoXusD+3MElo3aXlVR18xSWwAnG8GNojettVCyquv iUcLFKU2F4OWcGHpxo2XeB5txQmiAHTQHZBxP0l8gIb6eLgiC4cDQ1KhxFTRQjPR 4UvFN//SiYCumGdKM4/Gae7HOca7Zkb8PZQ/9BjOflcEkHUjlxV8a5X50YNvd+Ir hmw9Cz42wxvF62iaa55DcbVqiSTTuMNVsWTAT23dnlN+UAzh+b1z34omRq3LFiIt lEYY5hnbFW2aoPB7C3xgEZtgqMBBK7uoim1tlqw5DUDlieoGHWrLteE19fA7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURPvl4xzedgDpDI87huFCqTr7UKswHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACdg3mTQx2dL8objWjjrqn3df4kfQQIauHA4 Bvr6OAMaFDvOtl1+cauWx5FtHGujzvZVyZ/pqhAMQGo9WXUMlUeATi2sirq+xHhn I5C9R/QzYURr5TR7gDoA1b6BPjn0QFB5tHA3/Zj+3irAxWLveabuSyvaOLDJ23hm W6zLw6ZPFc5aOwtUWErWKf450NSoW6WeYNsu+PTtgmU61xU+Zdy6p+1bhgiX85QN B9cJhAKq6Kd3qrsPqcnSmyMM2bDGNgWA3WSKyMaXL4B4JsGhAo2OVXoE86e9oQx4 ue2wm0QTbb8/b22+HAEt9VH5S1rBfb/HwqIypQPjqdAg8jxDBXM= -----END CERTIFICATE-----Generated at Sun Apr 19 10:34:10 2026 by rpki-client