$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: Bc2y9nyG2RaZ/Q5mhRiSn6+JiAx6V2r1kY6t/9Gb3o8= Subject key identifier: 29:DD:66:30:5E:41:78:53:4F:A7:00:8A:E6:CA:C4:AF:7A:EE:5E:34 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 17BE9CE127FB13C77F4303CEF00AF2EF0037FE65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 0556 Signing time: Sat 28 Feb 2026 15:42:28 +0000 Manifest this update: Sat 28 Feb 2026 15:37:28 +0000 Manifest next update: Tue 03 Mar 2026 21:56:28 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: Jd8KA2u3Wgkst1kb7sZK2fcqqp+HOqsVSAWLtRhN76c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:56:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:be:9c:e1:27:fb:13:c7:7f:43:03:ce:f0:0a:f2:ef:00:37:fe:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Feb 28 15:37:28 2026 GMT Not After : Mar 3 21:56:28 2026 GMT Subject: CN=29DD66305E4178534FA7008AE6CAC4AF7AEE5E34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:36:36:58:54:21:88:61:d8:86:c3:65:56:09: fb:92:f7:39:4b:0d:8a:36:26:22:dc:32:a8:2c:cb: d5:9a:ef:2d:ce:84:a7:f7:3e:e2:c2:6b:54:22:29: 08:df:ba:b1:41:88:a5:6f:49:be:17:27:01:d4:f0: 94:8a:ce:83:7a:e5:5f:ce:e9:b5:0f:19:43:83:14: d4:ac:e2:31:41:c0:be:05:3b:b8:5a:dd:4b:a4:78: b3:b6:aa:24:e1:1c:c4:3c:0d:51:03:e4:7c:31:b0: 6d:df:b4:68:06:6c:7a:4a:cb:16:f3:0d:35:65:54: 29:58:6a:62:77:2d:e2:ce:f1:21:63:ff:29:be:71: d2:0a:a0:b1:fd:f0:e3:f4:9f:e5:3c:1a:94:f8:ad: 00:de:54:93:10:e0:48:f6:a3:3e:2c:e2:74:ce:07: 11:c4:20:4f:a5:60:8d:42:98:ad:a6:67:ed:c9:8f: f1:ba:28:04:7a:e6:f8:07:99:23:c5:fc:b5:3b:76: 89:00:be:24:86:b8:81:c0:73:29:09:61:b5:29:b4: e3:f9:fd:9d:7e:0a:93:b1:86:96:81:f5:99:35:aa: 04:2e:6f:89:73:62:3b:3d:68:5d:2f:3d:8d:e8:96: ed:00:83:f8:71:32:20:65:6b:8a:cb:e9:4b:9d:b4: ff:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:DD:66:30:5E:41:78:53:4F:A7:00:8A:E6:CA:C4:AF:7A:EE:5E:34 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f7:67:09:ba:f6:15:09:8f:f0:5b:7b:59:01:c5:52:da:df: eb:39:25:1d:b6:c7:2b:b2:e8:77:6a:cd:b0:6d:46:f3:b3:24: 13:ab:3f:a7:61:8f:b1:53:4b:69:90:f2:7d:59:65:bc:66:f2: 1d:4b:b6:bb:04:4e:59:dc:f3:71:c2:6c:71:52:67:25:27:56: d1:f7:92:5b:3f:3b:b4:a8:58:8c:11:68:93:44:ac:a9:74:25: d4:69:86:ad:56:2a:93:72:7e:0e:5c:92:b3:90:6e:63:d2:01: 66:01:e9:f6:9b:c5:25:f1:1d:9c:72:4c:fa:7a:54:c3:ca:33: 96:64:13:14:a2:22:b9:75:29:89:c8:f0:9a:a8:ce:9f:24:36: fe:90:c7:93:68:b0:ab:6b:90:0e:64:b3:9e:61:64:18:fe:c2: 81:57:20:7a:86:7e:bf:f0:a5:9c:57:b0:78:64:ff:35:26:b0: 1e:d0:36:c1:70:ca:6f:a8:87:7a:b5:39:50:dc:f9:05:86:d2: aa:5a:d5:f9:37:cd:4e:fe:19:40:94:0f:7f:d6:23:c3:a0:07: 4a:c8:4c:b1:35:36:4e:9c:2d:f1:ea:64:d3:2f:12:67:c4:ac: 9a:95:a4:82:f5:83:54:59:dc:68:22:85:6f:ce:8e:ab:70:77: c2:83:6d:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF76c4Sf7E8d/QwPO8Ary7wA3/mUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNjAyMjgxNTM3MjhaFw0yNjAzMDMyMTU2MjhaMDMxMTAvBgNV BAMTKDI5REQ2NjMwNUU0MTc4NTM0RkE3MDA4QUU2Q0FDNEFGN0FFRTVFMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNjZYVCGIYdiGw2VWCfuS9zlL DYo2JiLcMqgsy9Wa7y3OhKf3PuLCa1QiKQjfurFBiKVvSb4XJwHU8JSKzoN65V/O 6bUPGUODFNSs4jFBwL4FO7ha3UukeLO2qiThHMQ8DVED5HwxsG3ftGgGbHpKyxbz DTVlVClYamJ3LeLO8SFj/ym+cdIKoLH98OP0n+U8GpT4rQDeVJMQ4Ej2oz4s4nTO BxHEIE+lYI1CmK2mZ+3Jj/G6KAR65vgHmSPF/LU7dokAviSGuIHAcykJYbUptOP5 /Z1+CpOxhpaB9Zk1qgQub4lzYjs9aF0vPY3olu0Ag/hxMiBla4rL6UudtP9ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKd1mMF5BeFNPpwCK5srEr3ruXjQwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM33Zwm69hUJj/Bbe1kBxVLa3+s5JR22xyuy 6HdqzbBtRvOzJBOrP6dhj7FTS2mQ8n1ZZbxm8h1LtrsETlnc83HCbHFSZyUnVtH3 kls/O7SoWIwRaJNErKl0JdRphq1WKpNyfg5ckrOQbmPSAWYB6fabxSXxHZxyTPp6 VMPKM5ZkExSiIrl1KYnI8Jqozp8kNv6Qx5NosKtrkA5ks55hZBj+woFXIHqGfr/w pZxXsHhk/zUmsB7QNsFwym+oh3q1OVDc+QWG0qpa1fk3zU7+GUCUD3/WI8OgB0rI TLE1Nk6cLfHqZNMvEmfErJqVpIL1g1RZ3GgihW/Ojqtwd8KDbfY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:55 2026 by rpki-client