$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: EIXq6tAq1J5WR8fvzq6EqneaeBqfd1DEO0TED/vS2EI= Subject key identifier: 93:80:94:B1:2F:D8:D4:0B:FD:11:7E:DA:69:B0:28:17:47:56:4E:33 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 2B59C5282ED8A33995A4E29924DE82DB49474911 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01E4 Signing time: Sun 07 Sep 2025 11:42:16 +0000 Manifest this update: Sun 07 Sep 2025 11:37:16 +0000 Manifest next update: Wed 10 Sep 2025 14:14:16 +0000 Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) 2: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: vFRLoPjqMtLJwT/u5M47T5rVVZ9ZhzntLrwkObd2QUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:59:c5:28:2e:d8:a3:39:95:a4:e2:99:24:de:82:db:49:47:49:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Sep 7 11:37:16 2025 GMT Not After : Sep 10 14:14:16 2025 GMT Subject: CN=938094B12FD8D40BFD117EDA69B0281747564E33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:df:57:3d:ae:1d:a6:3b:86:0b:29:03:e3: 55:a4:74:34:f2:5d:4b:0d:92:ac:6d:af:c0:d2:cc: 89:5a:91:d4:3a:9e:b8:a2:80:8b:cd:99:65:70:c3: 35:16:1f:3f:df:f9:d9:44:ab:5a:86:09:b6:c9:54: d2:d5:91:da:40:fb:52:63:85:4f:44:17:d5:06:7a: 26:3a:4d:32:67:d8:36:25:ac:c5:ad:d3:28:10:59: 48:e9:e1:8b:cd:5e:46:5f:ee:44:e6:12:c5:0c:df: ce:9c:97:26:0d:ff:32:a6:69:c5:46:6a:be:3a:8b: 65:96:48:47:c0:92:12:04:ed:83:47:5b:96:84:75: 19:45:b8:f7:92:0f:42:2f:99:0c:b9:75:56:cf:11: 83:d1:c9:c6:41:65:0e:7e:92:8c:7e:0a:ec:e7:d8: a5:0b:9e:e7:75:02:5a:29:38:b3:3f:54:64:22:43: cc:c8:55:39:f1:4a:4b:e0:f2:12:8f:7f:e8:65:d5: 5c:ec:0b:2e:95:8f:96:6a:e7:5c:71:e0:0b:04:8f: 25:82:fc:ae:72:86:11:3e:ed:68:4f:d4:3b:d8:90: 52:03:c4:c3:c0:03:6b:ea:32:5e:20:21:81:bf:e9: bc:8b:b1:13:ff:6e:49:6e:0b:33:f1:54:30:e9:57: 04:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:80:94:B1:2F:D8:D4:0B:FD:11:7E:DA:69:B0:28:17:47:56:4E:33 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:b7:44:69:c5:cf:cb:38:a8:d3:28:7c:70:42:1f:83:e8:ae: 4a:8b:8a:eb:23:01:e1:2b:b2:47:b6:fe:d1:fc:d7:9f:94:28: 18:78:cf:8f:0c:a8:bc:ab:2e:a3:5d:65:f4:1e:5e:ed:a3:df: f8:e4:f0:60:13:c0:96:15:d9:d8:2b:3d:20:ed:4d:a4:7b:4b: f7:74:06:ce:ea:a4:a6:3f:4c:1f:51:d3:12:9d:31:9a:26:57: 35:ed:32:27:3b:2a:07:22:7d:6f:1c:f2:65:3c:bb:ee:e0:f9: 08:6c:5d:02:0f:3c:e8:ab:3c:ec:a6:3f:65:a4:09:1f:27:95: 53:b4:01:8c:8c:53:ac:f8:b4:1e:6b:a1:85:aa:6d:c2:44:49: 78:be:36:d7:42:04:d4:49:d7:df:85:fd:6e:8e:8e:f7:9e:34: ff:6e:fa:7d:41:ee:70:b7:09:3d:6b:1a:e2:87:3e:8f:f0:9b: 41:d3:2a:76:81:4a:c2:74:0d:50:b9:73:f2:12:ca:a5:4f:34: 19:88:42:81:67:ff:fd:7c:5e:59:9c:27:e5:24:89:23:71:f2: 4a:66:c4:a6:d0:0c:90:ab:27:38:52:80:f9:2c:8e:91:59:e9: 75:01:80:77:d8:05:cd:4a:79:35:19:55:5f:ef:46:03:65:46: 07:4b:50:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK1nFKC7YozmVpOKZJN6C20lHSREwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA5MDcxMTM3MTZaFw0yNTA5MTAxNDE0MTZaMDMxMTAvBgNV BAMTKDkzODA5NEIxMkZEOEQ0MEJGRDExN0VEQTY5QjAyODE3NDc1NjRFMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuvd9XPa4dpjuGCykD41WkdDTy XUsNkqxtr8DSzIlakdQ6nriigIvNmWVwwzUWHz/f+dlEq1qGCbbJVNLVkdpA+1Jj hU9EF9UGeiY6TTJn2DYlrMWt0ygQWUjp4YvNXkZf7kTmEsUM386clyYN/zKmacVG ar46i2WWSEfAkhIE7YNHW5aEdRlFuPeSD0IvmQy5dVbPEYPRycZBZQ5+kox+Cuzn 2KULnud1AlopOLM/VGQiQ8zIVTnxSkvg8hKPf+hl1VzsCy6Vj5Zq51xx4AsEjyWC /K5yhhE+7WhP1DvYkFIDxMPAA2vqMl4gIYG/6byLsRP/bkluCzPxVDDpVwTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk4CUsS/Y1Av9EX7aabAoF0dWTjMwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACm3RGnFz8s4qNMofHBCH4PorkqLiusjAeEr ske2/tH815+UKBh4z48MqLyrLqNdZfQeXu2j3/jk8GATwJYV2dgrPSDtTaR7S/d0 Bs7qpKY/TB9R0xKdMZomVzXtMic7KgcifW8c8mU8u+7g+QhsXQIPPOirPOymP2Wk CR8nlVO0AYyMU6z4tB5roYWqbcJESXi+NtdCBNRJ19+F/W6OjveeNP9u+n1B7nC3 CT1rGuKHPo/wm0HTKnaBSsJ0DVC5c/ISyqVPNBmIQoFn//18XlmcJ+UkiSNx8kpm xKbQDJCrJzhSgPksjpFZ6XUBgHfYBc1KeTUZVV/vRgNlRgdLUK4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:14 2025 by rpki-client