$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: ToFVh/04elwxTxtk1gu/daYpMvktOWRaq9uR2zj8ebM= Subject key identifier: 6B:B0:6C:D2:17:23:FB:D4:8E:72:A4:B2:C8:2C:F8:4C:39:B3:88:32 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 17399104BE7C844FC38C01DB9294ED3716E782BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01CE Signing time: Sun 20 Jul 2025 10:52:13 +0000 Manifest this update: Sun 20 Jul 2025 10:47:13 +0000 Manifest next update: Wed 23 Jul 2025 16:16:13 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: ijmDH0NNW4Tvxvg1U8sMzfSczwnQfVEa/j9sePmasRA=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:39:91:04:be:7c:84:4f:c3:8c:01:db:92:94:ed:37:16:e7:82:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Jul 20 10:47:13 2025 GMT Not After : Jul 23 16:16:13 2025 GMT Subject: CN=6BB06CD21723FBD48E72A4B2C82CF84C39B38832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:65:f5:97:51:97:8b:a0:00:77:15:a5:94:ff: b8:44:45:e4:53:a7:a0:39:94:be:30:41:78:33:5a: 11:2c:8e:1f:2d:27:fc:eb:ae:43:63:25:3e:2f:ed: 49:80:62:c8:02:1e:1b:11:6c:84:83:48:8c:29:d2: 08:5c:19:c4:5e:92:dd:d8:40:1a:1d:39:f0:fc:0c: 55:29:f8:3a:64:4b:88:7f:d3:a5:21:66:b9:fa:fd: 2e:ee:d0:15:d1:9f:c7:6a:6c:df:41:45:93:e5:67: 30:b5:a9:60:10:dc:f5:4f:b3:d4:37:2c:de:ca:22: a5:0b:bd:95:44:f1:d7:b2:ae:0f:f2:cc:97:95:40: 97:0e:fc:e1:96:0a:2f:53:f5:c9:bf:b5:f2:51:80: 7f:c9:03:4a:84:17:04:c4:51:47:14:7b:31:1a:5b: 31:54:b6:cd:93:56:6a:c3:73:5e:bd:bc:24:5f:cc: 80:7f:c3:75:5d:51:f5:2a:3c:41:38:6b:5c:99:41: 2a:66:d4:77:15:8d:58:e1:2c:2a:ef:ad:bf:a6:39: 61:e2:f1:1f:cc:56:29:5d:60:bd:4d:a5:37:06:1e: 92:28:b3:61:c4:64:37:2b:88:3c:04:62:62:e4:56: d6:e3:df:06:78:92:d1:82:5e:97:55:c1:8a:4e:78: 43:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B0:6C:D2:17:23:FB:D4:8E:72:A4:B2:C8:2C:F8:4C:39:B3:88:32 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9d:b4:c0:f5:72:c5:57:d8:bf:91:c0:6c:27:1e:d7:7a:72: 4f:ff:16:60:98:8c:12:03:eb:86:ab:e2:fe:d4:30:09:7d:74: da:75:3d:aa:74:88:67:91:30:3a:b1:9b:c3:c5:96:75:f4:f5: 2d:22:81:80:53:cc:e8:64:31:a1:d3:60:ad:ce:98:57:45:b0: c5:c0:08:d3:63:28:0c:5c:db:b1:3f:c6:ef:31:bc:a8:e5:57: a4:4f:2c:99:6c:7f:e0:64:22:3c:36:d8:bf:e8:b8:9d:16:17: 2b:20:05:31:fb:92:29:a7:41:db:df:bc:dc:f5:c4:b1:8f:c2: ad:d4:bf:48:1a:94:28:2c:f2:dc:c6:17:77:bc:72:a8:cb:48: db:2f:3e:dd:13:4a:8a:62:20:cf:9f:f9:06:d7:e2:41:35:08: e0:1c:f8:98:b8:d2:4b:56:91:04:32:83:80:18:8f:1e:8f:67: 5c:53:e6:27:23:6d:b2:ef:1a:92:0e:df:87:f1:cb:d0:ea:7b: 78:e3:1b:ea:9e:de:1d:25:6e:c4:ca:d5:81:c5:d4:35:23:c2: b7:89:fd:77:80:7d:69:90:ab:35:6a:71:a3:c2:fa:7a:d4:07: fd:3d:2f:ea:b0:d8:72:ca:ca:bf:e9:de:9a:53:01:bd:00:69: f1:3e:39:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzmRBL58hE/DjAHbkpTtNxbngr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA3MjAxMDQ3MTNaFw0yNTA3MjMxNjE2MTNaMDMxMTAvBgNV BAMTKDZCQjA2Q0QyMTcyM0ZCRDQ4RTcyQTRCMkM4MkNGODRDMzlCMzg4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ZfWXUZeLoAB3FaWU/7hEReRT p6A5lL4wQXgzWhEsjh8tJ/zrrkNjJT4v7UmAYsgCHhsRbISDSIwp0ghcGcRekt3Y QBodOfD8DFUp+DpkS4h/06UhZrn6/S7u0BXRn8dqbN9BRZPlZzC1qWAQ3PVPs9Q3 LN7KIqULvZVE8deyrg/yzJeVQJcO/OGWCi9T9cm/tfJRgH/JA0qEFwTEUUcUezEa WzFUts2TVmrDc169vCRfzIB/w3VdUfUqPEE4a1yZQSpm1HcVjVjhLCrvrb+mOWHi 8R/MVildYL1NpTcGHpIos2HEZDcriDwEYmLkVtbj3wZ4ktGCXpdVwYpOeEPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa7Bs0hcj+9SOcqSyyCz4TDmziDIwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6dtMD1csVX2L+RwGwnHtd6ck//FmCYjBID 64ar4v7UMAl9dNp1Pap0iGeRMDqxm8PFlnX09S0igYBTzOhkMaHTYK3OmFdFsMXA CNNjKAxc27E/xu8xvKjlV6RPLJlsf+BkIjw22L/ouJ0WFysgBTH7kimnQdvfvNz1 xLGPwq3Uv0galCgs8tzGF3e8cqjLSNsvPt0TSopiIM+f+QbX4kE1COAc+Ji40ktW kQQyg4AYjx6PZ1xT5icjbbLvGpIO34fxy9Dqe3jjG+qe3h0lbsTK1YHF1DUjwreJ /XeAfWmQqzVqcaPC+nrUB/09L+qw2HLKyr/p3ppTAb0AafE+OXg= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:44 2025 by rpki-client