$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: npnm8j2iV7jYfQa/xvrnhNqcFBQfUzz3BfNumVtgV/o= Subject key identifier: 7D:1F:1B:4E:D8:F3:90:9F:9C:B6:87:9F:0A:AB:4B:B1:B6:14:B7:D5 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 440C82159EC0168E7802CFE00BA1A2734DA36D24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04E4 Signing time: Mon 16 Jun 2025 08:02:13 +0000 Manifest this update: Mon 16 Jun 2025 07:57:13 +0000 Manifest next update: Thu 19 Jun 2025 17:22:13 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: ZUV9ULsYbpJsMX7dp//9Vz39zjz/6Pw9dWirOa2KZTo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 17:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:0c:82:15:9e:c0:16:8e:78:02:cf:e0:0b:a1:a2:73:4d:a3:6d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Jun 16 07:57:13 2025 GMT Not After : Jun 19 17:22:13 2025 GMT Subject: CN=7D1F1B4ED8F3909F9CB6879F0AAB4BB1B614B7D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fc:44:fe:77:73:5e:56:8c:c1:4f:a5:1d:7e: b5:08:9b:bb:bd:87:f4:ad:0b:a2:6c:ad:c4:bd:48: 60:b5:3b:9d:91:a1:4f:75:b2:29:e5:60:44:9c:e6: 18:d5:42:65:c1:e9:69:08:dc:19:b8:a1:d9:19:25: 52:4d:ea:b4:9c:32:dc:26:3f:09:13:82:6b:5c:ae: 98:a0:13:be:e1:c1:89:68:75:35:78:3a:b9:97:44: de:0e:51:18:93:92:b6:ca:53:08:be:9e:54:d9:09: da:62:3b:ce:9d:41:db:c0:7e:cd:19:37:91:7d:07: 86:fe:88:4d:66:6f:c2:08:f7:cf:5d:f6:92:11:fe: 70:e5:74:89:de:88:21:1e:fc:2c:4b:6d:2b:be:c0: e5:16:05:44:e1:e1:7c:68:90:b6:f0:25:0a:23:bb: 4f:ff:9b:17:9c:1f:cf:fa:79:65:6a:a3:ad:8f:b3: 43:27:3c:0b:b1:31:4a:fa:c9:db:c0:0d:26:2b:ab: 63:78:1e:a6:2e:31:3a:38:0b:3c:dd:9e:d4:c9:68: 9d:55:e5:4f:13:d7:71:a7:a3:12:47:54:df:96:86: 01:f9:68:1f:b9:93:ef:97:eb:bd:30:c4:7a:ef:e7: 38:9c:9f:39:3c:79:cb:66:6b:0a:80:43:7c:a3:dd: e5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:1F:1B:4E:D8:F3:90:9F:9C:B6:87:9F:0A:AB:4B:B1:B6:14:B7:D5 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:6f:64:ed:c1:ea:66:14:28:af:ea:22:ce:d2:be:23:c5:f8: 54:b0:93:13:7c:27:be:3a:88:e1:00:f3:45:b0:7e:2e:d6:3f: 05:7d:52:91:24:c3:56:e1:83:08:51:f5:95:45:1b:8f:49:bb: da:1f:2c:b9:cb:64:31:28:b7:01:7d:8d:2b:57:5b:8d:07:0b: 80:ae:fc:ad:76:e2:7c:ce:57:22:fd:a1:77:a2:b3:78:53:63: f8:75:f9:c0:76:dc:f6:de:3d:3a:75:f8:4c:6f:18:62:a1:4e: a2:f7:9c:d0:62:84:c0:18:3e:f3:35:1b:94:04:2d:de:4a:1d: df:ed:a7:72:e9:bf:65:5f:a4:63:98:a2:21:17:7d:3a:2d:07: f6:af:c2:6a:ac:5a:99:95:70:c6:b2:33:a2:8c:f8:4b:02:27: bb:77:f7:4d:b1:cb:4f:53:03:93:3c:62:d7:59:87:65:bc:a6: e6:2b:6d:e8:bc:3b:5b:69:4d:ae:4c:57:69:eb:d2:5b:a2:74: bf:e5:67:c5:e8:82:1e:06:23:04:48:88:3b:a7:6a:d3:da:c3: f0:d6:9b:98:e8:c3:fb:41:91:bd:1f:a3:02:7a:1d:45:88:47: 33:d4:c4:de:f3:e6:20:e1:f9:e9:c4:30:46:f3:f0:02:d7:3f: 07:57:6a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAyCFZ7AFo54As/gC6Gic02jbSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA2MTYwNzU3MTNaFw0yNTA2MTkxNzIyMTNaMDMxMTAvBgNV BAMTKDdEMUYxQjRFRDhGMzkwOUY5Q0I2ODc5RjBBQUI0QkIxQjYxNEI3RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/ET+d3NeVozBT6UdfrUIm7u9 h/StC6JsrcS9SGC1O52RoU91sinlYESc5hjVQmXB6WkI3Bm4odkZJVJN6rScMtwm PwkTgmtcrpigE77hwYlodTV4OrmXRN4OURiTkrbKUwi+nlTZCdpiO86dQdvAfs0Z N5F9B4b+iE1mb8II989d9pIR/nDldIneiCEe/CxLbSu+wOUWBUTh4XxokLbwJQoj u0//mxecH8/6eWVqo62Ps0MnPAuxMUr6ydvADSYrq2N4HqYuMTo4CzzdntTJaJ1V 5U8T13GnoxJHVN+WhgH5aB+5k++X670wxHrv5zicnzk8ectmawqAQ3yj3eWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfR8bTtjzkJ+ctoefCqtLsbYUt9UwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpvZO3B6mYUKK/qIs7SviPF+FSwkxN8J746 iOEA80Wwfi7WPwV9UpEkw1bhgwhR9ZVFG49Ju9ofLLnLZDEotwF9jStXW40HC4Cu /K124nzOVyL9oXeis3hTY/h1+cB23PbePTp1+ExvGGKhTqL3nNBihMAYPvM1G5QE Ld5KHd/tp3Lpv2VfpGOYoiEXfTotB/avwmqsWpmVcMayM6KM+EsCJ7t3902xy09T A5M8YtdZh2W8puYrbei8O1tpTa5MV2nr0luidL/lZ8Xogh4GIwRIiDunatPaw/DW m5jow/tBkb0fowJ6HUWIRzPUxN7z5iDh+enEMEbz8ALXPwdXaug= -----END CERTIFICATE-----Generated at Tue Jun 17 00:17:41 2025 by rpki-client