$ rpki-client -vvf repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft File: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft (raw, json) Hash identifier: quzOhKq7OZoamSmDp14qQxy7Hohygl5Z9DxG11G9bZ0= Subject key identifier: 2D:4E:4A:77:DF:AB:B6:FC:7E:D6:F2:E4:2E:92:3F:E1:AD:9D:15:8F Authority key identifier: 85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 Certificate issuer: /CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Certificate serial: 2EABB6C4C53AD0D6A408016B1B937D89240BBDB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft Manifest number: 01C5 Signing time: Fri 25 Apr 2025 22:40:03 +0000 Manifest this update: Fri 25 Apr 2025 22:35:03 +0000 Manifest next update: Tue 29 Apr 2025 04:46:03 +0000 Files and hashes: 1: 3130332e3137342e37382e302f32332d3234203d3e203338333230.roa (hash: JLvwrDCSe45qQUH0nf/lghekanOyIElCFqxu5ayU5Q0=) 2: 85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl (hash: XzhtxzbYj0f8E5JAfJLlh2tOeBrigg0Rfob+WYBM/eA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 04:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:ab:b6:c4:c5:3a:d0:d6:a4:08:01:6b:1b:93:7d:89:24:0b:bd:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85EA86756371BA89BB1AE846B5C30DDB816ACDB9 Validity Not Before: Apr 25 22:35:03 2025 GMT Not After : Apr 29 04:46:03 2025 GMT Subject: CN=2D4E4A77DFABB6FC7ED6F2E42E923FE1AD9D158F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:c6:4d:ff:34:e9:10:29:ee:79:db:2d:7e:fd: 71:2e:32:14:b9:35:30:b6:87:47:50:35:a9:38:24: 7d:61:8c:8d:44:a2:2b:65:fe:7d:a2:c8:c6:b2:e6: d1:29:ab:0e:c4:98:92:37:60:c2:fa:3b:a2:f7:47: 4b:cb:32:bc:dc:e8:45:de:68:23:b3:b6:e2:b3:17: f9:7c:55:fa:64:cf:cd:35:64:74:df:c3:a7:1e:e8: 43:d8:06:b8:6e:9f:d9:8d:d6:12:e7:08:00:98:d8: f4:54:74:94:5e:cd:07:13:6d:68:78:14:c5:c3:73: 24:5f:55:ac:f3:4a:e1:1a:6f:44:05:9b:1e:13:19: 2a:ca:c2:65:01:9b:9b:0a:ba:6b:3b:4a:7f:d3:51: f1:87:b1:95:34:e3:6e:27:b0:19:8c:78:a2:a1:be: 04:76:06:86:88:66:fe:d0:47:ce:ff:8a:69:db:12: ff:a5:61:66:7f:38:e6:f0:85:26:f6:92:3b:a3:61: 8f:3f:3d:3d:92:e3:0b:20:d1:ce:bc:46:bf:79:59: 58:75:36:3f:05:f9:e2:36:fc:7f:99:83:8f:16:88: f9:08:67:c2:98:03:16:41:4c:53:0d:9a:ae:03:ae: 10:29:3e:da:b1:02:3c:a7:d3:65:b8:bb:d7:bf:c9: 75:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4E:4A:77:DF:AB:B6:FC:7E:D6:F2:E4:2E:92:3F:E1:AD:9D:15:8F X509v3 Authority Key Identifier: keyid:85:EA:86:75:63:71:BA:89:BB:1A:E8:46:B5:C3:0D:DB:81:6A:CD:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbc6da19-84be-4a50-b466-1e86ddbcc35f/0/85EA86756371BA89BB1AE846B5C30DDB816ACDB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:56:2e:8b:2b:03:b7:86:28:3a:38:0e:23:ac:fc:03:ea:a6: 0f:39:3e:51:fe:b1:1e:42:28:b6:2b:55:ca:d4:55:12:ab:7a: a3:1d:f9:ee:c6:30:96:87:56:f1:91:f2:c7:01:11:5a:68:f2: 76:0c:b5:e0:f2:d8:42:e6:1e:8f:cf:aa:00:f5:27:08:26:0b: ad:28:a7:10:2b:55:a3:fe:5f:a7:21:f9:d9:d8:03:2d:ef:e4: 69:39:60:b5:e5:d0:64:87:f0:95:48:cf:3a:2e:cc:22:9d:01: a1:39:d3:41:24:96:11:92:36:ce:f7:ff:f0:2c:6c:6a:08:3b: a3:63:3e:51:af:74:02:52:88:dc:e4:16:dc:63:e5:46:c1:74: 26:87:65:d9:e0:31:2d:4b:de:ba:eb:ce:c3:7e:d5:83:e6:a8: 27:a6:47:34:5a:9b:d0:6e:68:bf:7e:23:9f:3d:7f:4d:01:e3: 60:48:70:ff:bd:ad:a2:72:e8:c7:61:eb:72:07:ff:22:1d:0a: a8:18:a2:58:86:89:8d:90:6d:f0:55:ec:16:7f:26:2c:52:31: dd:33:00:a3:e6:4d:29:0e:dd:8f:38:47:14:89:cb:9d:8a:7c: 2d:f0:63:f2:57:6f:44:c7:1a:eb:38:b0:74:f7:a9:3d:a6:56: 39:cc:ad:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqu2xMU60NakCAFrG5N9iSQLvbAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4 MTZBQ0RCOTAeFw0yNTA0MjUyMjM1MDNaFw0yNTA0MjkwNDQ2MDNaMDMxMTAvBgNV BAMTKDJENEU0QTc3REZBQkI2RkM3RUQ2RjJFNDJFOTIzRkUxQUQ5RDE1OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCixk3/NOkQKe552y1+/XEuMhS5 NTC2h0dQNak4JH1hjI1Eoitl/n2iyMay5tEpqw7EmJI3YML6O6L3R0vLMrzc6EXe aCOztuKzF/l8Vfpkz801ZHTfw6ce6EPYBrhun9mN1hLnCACY2PRUdJRezQcTbWh4 FMXDcyRfVazzSuEab0QFmx4TGSrKwmUBm5sKums7Sn/TUfGHsZU0424nsBmMeKKh vgR2BoaIZv7QR87/imnbEv+lYWZ/OObwhSb2kjujYY8/PT2S4wsg0c68Rr95WVh1 Nj8F+eI2/H+Zg48WiPkIZ8KYAxZBTFMNmq4DrhApPtqxAjyn02W4u9e/yXVTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULU5Kd9+rtvx+1vLkLpI/4a2dFY8wHwYDVR0j BBgwFoAUheqGdWNxuom7GuhGtcMN24FqzbkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YmM2ZGExOS04NGJlLTRhNTAtYjQ2Ni0xZTg2ZGRiY2MzNWYvMC84NUVBODY3NTYz NzFCQTg5QkIxQUU4NDZCNUMzMEREQjgxNkFDREI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBEREI4MTZB Q0RCOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGJjNmRhMTktODRiZS00YTUwLWI0 NjYtMWU4NmRkYmNjMzVmLzAvODVFQTg2NzU2MzcxQkE4OUJCMUFFODQ2QjVDMzBE REI4MTZBQ0RCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdWLosrA7eGKDo4DiOs/APqpg85PlH+sR5C KLYrVcrUVRKreqMd+e7GMJaHVvGR8scBEVpo8nYMteDy2ELmHo/PqgD1JwgmC60o pxArVaP+X6ch+dnYAy3v5Gk5YLXl0GSH8JVIzzouzCKdAaE500EklhGSNs73//As bGoIO6NjPlGvdAJSiNzkFtxj5UbBdCaHZdngMS1L3rrrzsN+1YPmqCemRzRam9Bu aL9+I589f00B42BIcP+9raJy6Mdh63IH/yIdCqgYoliGiY2QbfBV7BZ/JixSMd0z AKPmTSkO3Y84RxSJy52KfC3wY/JXb0THGus4sHT3qT2mVjnMrXo= -----END CERTIFICATE-----Generated at Mon Apr 28 01:45:26 2025 by rpki-client