$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: mOF8+yW4bzE9AMQbTpAsJ5Mvle69jszcZyV5cUDMjE4= Subject key identifier: 91:F4:3C:C0:D2:FA:2D:0F:41:D9:43:9D:FE:F1:FB:AD:2F:96:06:88 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 2E63407E5B58FF2D46ED7B9BCAE5FB7BBFD68F45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04CE Signing time: Sun 27 Apr 2025 23:42:10 +0000 Manifest this update: Sun 27 Apr 2025 23:37:10 +0000 Manifest next update: Thu 01 May 2025 03:02:10 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: D+d4frbev+bsrt/vaweWiGGjCJiGTyG7X65l6DzB2cI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 03:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:63:40:7e:5b:58:ff:2d:46:ed:7b:9b:ca:e5:fb:7b:bf:d6:8f:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Apr 27 23:37:10 2025 GMT Not After : May 1 03:02:10 2025 GMT Subject: CN=91F43CC0D2FA2D0F41D9439DFEF1FBAD2F960688 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:75:01:b8:c1:0a:86:5f:64:10:2c:73:5a: 42:f4:a4:70:44:3f:9e:77:9e:0b:b2:2e:ff:aa:0d: 0a:f1:b9:a3:78:20:52:a1:13:1f:2e:d4:84:6e:13: f5:7b:26:bf:89:87:dc:7c:f5:f5:43:67:1b:8c:2f: 7f:2c:9e:9a:72:e5:92:fe:f7:e0:48:68:4f:19:0c: b0:f7:00:cd:cf:58:03:11:72:7e:bf:69:75:85:0e: 89:14:db:d5:b1:d3:b7:5c:0f:c5:33:71:05:18:97: 1e:bf:5e:40:6c:6e:7f:97:59:d6:30:1e:da:a4:4b: 2a:ad:85:bc:ac:7f:e3:93:11:2e:a5:b9:c7:aa:ac: 49:a5:7b:08:dd:f5:aa:ef:96:2a:a0:49:24:e5:b0: 08:17:c6:4e:ab:e1:24:60:4f:a3:4c:a9:14:3a:cf: 0e:f1:62:27:a3:db:f6:98:05:54:c3:b5:40:95:88: 1b:64:8e:d8:cb:89:72:26:5d:37:34:75:60:ba:b2: 32:9e:51:81:18:c9:76:6f:fd:bd:43:cf:a8:cb:b9: 8c:33:0d:33:01:be:59:be:32:92:85:aa:50:f6:7a: 40:cf:57:21:f6:89:51:0f:ad:be:cd:3c:9f:df:4d: 52:69:04:bb:fa:8c:ba:d3:43:20:6a:6b:9b:77:f0: 48:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:F4:3C:C0:D2:FA:2D:0F:41:D9:43:9D:FE:F1:FB:AD:2F:96:06:88 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:24:1f:75:d4:5c:c3:ef:31:25:92:f7:c6:2e:69:c2:44:0a: ec:d6:98:4e:f6:ef:b7:18:90:0e:50:07:4e:4d:6a:fd:a2:d5: 7f:8e:97:e4:e8:b8:7d:7e:28:a1:27:ce:9a:ba:fe:2c:72:52: ef:e3:b5:19:ea:11:1e:03:94:bc:94:9c:7d:a0:b9:26:79:dd: ee:18:e3:d8:4d:20:aa:b0:8f:d0:33:ef:a0:3f:4a:68:7b:b7: 89:bc:88:26:4b:d9:83:5f:90:f3:75:ca:ce:f2:04:19:0f:25: d0:94:4c:c5:16:bf:57:83:58:03:38:0b:7e:da:86:20:05:cc: 60:d9:3c:30:96:fc:c2:ae:5e:b4:bf:14:c4:c7:6a:52:37:de: 93:39:5a:31:93:88:41:c6:45:5d:64:49:79:a6:db:09:05:fc: 6d:d2:ea:5f:96:e4:1e:95:cc:33:29:27:80:34:71:8f:83:aa: 20:b2:b8:46:31:0d:dc:97:11:53:7a:c5:a4:0a:43:14:3e:8e: 41:2b:a0:9f:2c:d3:ec:8e:8f:c4:49:64:f5:25:c3:3e:66:86: 3a:51:15:8f:65:ae:53:5f:d7:86:ff:ac:b1:37:4d:b5:77:62: 7e:a8:17:66:5f:3f:17:e8:18:0f:16:9e:63:bf:66:47:ad:ad: 7c:2a:b0:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULmNAfltY/y1G7XubyuX7e7/Wj0UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA0MjcyMzM3MTBaFw0yNTA1MDEwMzAyMTBaMDMxMTAvBgNV BAMTKDkxRjQzQ0MwRDJGQTJEMEY0MUQ5NDM5REZFRjFGQkFEMkY5NjA2ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClmXUBuMEKhl9kECxzWkL0pHBE P553nguyLv+qDQrxuaN4IFKhEx8u1IRuE/V7Jr+Jh9x89fVDZxuML38snppy5ZL+ 9+BIaE8ZDLD3AM3PWAMRcn6/aXWFDokU29Wx07dcD8UzcQUYlx6/XkBsbn+XWdYw HtqkSyqthbysf+OTES6luceqrEmlewjd9arvliqgSSTlsAgXxk6r4SRgT6NMqRQ6 zw7xYiej2/aYBVTDtUCViBtkjtjLiXImXTc0dWC6sjKeUYEYyXZv/b1Dz6jLuYwz DTMBvlm+MpKFqlD2ekDPVyH2iVEPrb7NPJ/fTVJpBLv6jLrTQyBqa5t38EgLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkfQ8wNL6LQ9B2UOd/vH7rS+WBogwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKokH3XUXMPvMSWS98YuacJECuzWmE7277cY kA5QB05Nav2i1X+Ol+TouH1+KKEnzpq6/ixyUu/jtRnqER4DlLyUnH2guSZ53e4Y 49hNIKqwj9Az76A/Smh7t4m8iCZL2YNfkPN1ys7yBBkPJdCUTMUWv1eDWAM4C37a hiAFzGDZPDCW/MKuXrS/FMTHalI33pM5WjGTiEHGRV1kSXmm2wkF/G3S6l+W5B6V zDMpJ4A0cY+DqiCyuEYxDdyXEVN6xaQKQxQ+jkEroJ8s0+yOj8RJZPUlwz5mhjpR FY9lrlNf14b/rLE3TbV3Yn6oF2ZfPxfoGA8WnmO/ZketrXwqsGA= -----END CERTIFICATE-----Generated at Tue Apr 29 18:35:06 2025 by rpki-client