$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: 7+EjzyrOQd53Kwr3QfE2RcVniZXMmpKnQ5YWpFZW+eY= Subject key identifier: E2:C7:7F:3C:67:6D:68:37:1F:A0:7E:4F:52:EA:AC:40:2B:65:8F:7B Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 1048F0DA725C6678527F1BA050D5C09BAEB7FAC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04F3 Signing time: Sun 20 Jul 2025 16:02:11 +0000 Manifest this update: Sun 20 Jul 2025 15:57:11 +0000 Manifest next update: Wed 23 Jul 2025 21:14:11 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: vF2vgXBN7nXFOQ5C5ibwSb689NzLrQKo3Wr7++f0+pk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 21:14:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:48:f0:da:72:5c:66:78:52:7f:1b:a0:50:d5:c0:9b:ae:b7:fa:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Jul 20 15:57:11 2025 GMT Not After : Jul 23 21:14:11 2025 GMT Subject: CN=E2C77F3C676D68371FA07E4F52EAAC402B658F7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c9:dd:c2:0e:f6:df:46:76:f0:fc:dd:e7:09: 1a:e9:00:02:7d:ce:70:3f:6f:c8:52:11:a5:9a:db: dc:13:a6:24:c9:24:04:15:76:f9:48:30:46:4b:59: b1:73:5e:f8:af:a6:c9:4b:b8:e2:00:c2:0f:50:7c: d5:cc:b1:e3:d5:b5:cc:41:d6:32:19:e1:9e:7b:9a: 1c:78:85:16:06:e0:87:62:eb:30:dc:7c:8c:57:b7: 05:55:75:3b:16:a5:19:fc:f1:24:62:a7:c6:99:73: 54:0a:36:a5:e5:a5:67:5d:1f:c6:fc:83:be:0a:d9: d9:3a:24:be:14:e3:4b:9b:45:d3:a1:19:2a:f8:54: a6:86:06:57:d9:6c:63:b6:e4:08:1f:60:38:d3:86: d3:fd:35:62:9b:a4:17:f7:37:4e:57:77:99:cc:2d: 38:7c:09:22:d0:fa:43:2d:f7:13:8f:e0:01:04:73: 2e:5f:f6:6c:73:08:6f:de:07:e9:25:85:57:42:6c: 38:d1:d1:34:39:bd:46:ea:83:e6:c1:31:1c:11:21: d9:68:32:35:f6:68:c9:50:9e:5d:b5:f0:71:3f:91: ee:9c:bf:cf:25:c8:f4:25:5b:86:44:9e:2b:bf:80: cc:d5:72:2e:a4:78:b2:85:57:95:22:08:7e:60:3b: f6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:C7:7F:3C:67:6D:68:37:1F:A0:7E:4F:52:EA:AC:40:2B:65:8F:7B X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:6e:44:15:55:10:80:71:98:cf:2f:1f:ad:32:dd:80:34:d5: 58:7b:39:c7:d5:52:39:c3:85:a4:56:c1:61:66:dc:4c:54:62: d3:7f:01:ca:d0:60:ee:9e:4a:bf:f9:9c:4f:d5:eb:05:fe:da: b2:b8:7b:7a:44:62:e7:aa:67:e3:e2:c7:b6:6f:d0:39:d7:c8: 55:ed:89:7c:50:02:61:42:45:98:b2:90:76:fa:3c:24:40:dc: 10:88:68:f6:f7:1c:11:c2:b2:39:e3:70:3b:bc:cb:e1:b6:73: 55:24:22:f7:3d:8b:f7:5a:55:97:c5:b7:75:98:13:25:c8:a8: 8d:a0:72:b4:0f:cd:86:bd:03:3c:5d:ad:c2:e7:53:9e:8a:2c: d5:f6:c9:e6:10:cf:ae:e7:30:da:47:56:cf:f0:92:9f:62:6c: 52:44:2e:da:c6:d6:42:a0:e8:c3:b6:3d:c9:22:a2:77:d4:56: 7f:33:97:48:3f:7c:02:fe:9d:7a:8d:e9:4b:4f:7f:cb:0c:6d: e0:bc:71:9a:6b:c8:3d:e4:36:83:21:d4:5a:f8:04:01:ad:90: a9:0c:cf:d6:10:28:fa:89:6a:d1:1d:27:1c:ba:2a:49:49:c7: 64:00:d0:ce:c4:9e:61:af:a4:a5:b5:fb:9b:61:17:f3:e0:d4: 87:8d:96:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEjw2nJcZnhSfxugUNXAm663+sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA3MjAxNTU3MTFaFw0yNTA3MjMyMTE0MTFaMDMxMTAvBgNV BAMTKEUyQzc3RjNDNjc2RDY4MzcxRkEwN0U0RjUyRUFBQzQwMkI2NThGN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkyd3CDvbfRnbw/N3nCRrpAAJ9 znA/b8hSEaWa29wTpiTJJAQVdvlIMEZLWbFzXvivpslLuOIAwg9QfNXMsePVtcxB 1jIZ4Z57mhx4hRYG4Idi6zDcfIxXtwVVdTsWpRn88SRip8aZc1QKNqXlpWddH8b8 g74K2dk6JL4U40ubRdOhGSr4VKaGBlfZbGO25AgfYDjThtP9NWKbpBf3N05Xd5nM LTh8CSLQ+kMt9xOP4AEEcy5f9mxzCG/eB+klhVdCbDjR0TQ5vUbqg+bBMRwRIdlo MjX2aMlQnl218HE/ke6cv88lyPQlW4ZEniu/gMzVci6keLKFV5UiCH5gO/ZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4sd/PGdtaDcfoH5PUuqsQCtlj3swHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGNuRBVVEIBxmM8vH60y3YA01Vh7OcfVUjnD haRWwWFm3ExUYtN/AcrQYO6eSr/5nE/V6wX+2rK4e3pEYueqZ+Pix7Zv0DnXyFXt iXxQAmFCRZiykHb6PCRA3BCIaPb3HBHCsjnjcDu8y+G2c1UkIvc9i/daVZfFt3WY EyXIqI2gcrQPzYa9AzxdrcLnU56KLNX2yeYQz67nMNpHVs/wkp9ibFJELtrG1kKg 6MO2PckionfUVn8zl0g/fAL+nXqN6UtPf8sMbeC8cZpryD3kNoMh1Fr4BAGtkKkM z9YQKPqJatEdJxy6KklJx2QA0M7EnmGvpKW1+5thF/Pg1IeNlts= -----END CERTIFICATE-----Generated at Mon Jul 21 18:07:57 2025 by rpki-client