$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: Ymgq9US6ei2I2iGWAjEkzwzstDE+ErleS5mZvfUQLAI= Subject key identifier: 88:6D:D0:C2:C8:F9:82:82:A8:36:3C:99:80:59:EB:29:E6:DF:AD:BC Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 3D861F31FD5D2B39636D9EDFECAB859E2B753667 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01BA Signing time: Thu 05 Jun 2025 10:42:15 +0000 Manifest this update: Thu 05 Jun 2025 10:37:14 +0000 Manifest next update: Sun 08 Jun 2025 19:25:14 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: bRj58frR6v+C0wQWMO3xDsfZmeYIOwKZ2cEJdElAfA4=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:86:1f:31:fd:5d:2b:39:63:6d:9e:df:ec:ab:85:9e:2b:75:36:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Jun 5 10:37:14 2025 GMT Not After : Jun 8 19:25:14 2025 GMT Subject: CN=886DD0C2C8F98282A8363C998059EB29E6DFADBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8c:ca:d2:d4:47:24:a4:fb:c2:7d:49:0c:f8: aa:23:75:8b:53:43:f5:f5:b7:77:85:4d:d4:0d:04: 47:0f:68:c1:f6:86:e8:e7:97:67:fc:59:9d:f9:b1: 3b:88:eb:f3:fc:9f:21:58:fd:4b:be:a6:2d:96:df: ae:09:24:4b:8d:23:6b:2c:39:49:4e:1d:3a:15:c1: 16:f6:9f:77:f3:66:e1:9a:db:27:e6:b9:f0:8d:46: 53:ec:4e:f8:b2:07:6a:8f:c0:16:4c:af:c8:43:0e: e4:24:4b:71:59:2d:c7:d1:00:4c:1a:ab:8c:3b:3f: 2a:33:7e:a5:a9:f4:ec:b7:da:4e:76:f0:a0:d6:0c: d8:c5:76:23:57:64:7d:31:ff:8f:a0:34:0a:8b:d1: cc:06:86:79:9a:2f:99:85:c8:2d:c3:1b:10:87:88: 67:25:93:12:d3:95:5a:eb:ed:21:62:8c:fa:9a:da: 4c:c8:91:04:e3:c5:fa:f4:71:bf:46:6d:ec:72:cd: 11:4f:d0:ab:71:f0:91:40:18:f8:8e:52:f4:d6:33: 30:dd:a2:cc:57:1c:7d:69:9f:79:fc:25:90:b1:0c: da:58:da:4b:d1:30:54:aa:4f:5a:38:72:ba:3e:c7: 5e:6d:c4:72:ed:8c:d1:b1:ff:54:5f:7e:21:aa:cc: a6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:6D:D0:C2:C8:F9:82:82:A8:36:3C:99:80:59:EB:29:E6:DF:AD:BC X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7e:d2:66:64:68:42:2a:bc:9e:02:21:77:e7:51:88:c7:71: 8a:b4:ef:d3:55:c6:74:5d:ba:a5:79:59:c1:e3:47:9a:b5:b7: 54:70:b8:86:c2:56:f8:bd:7d:17:f9:43:b7:20:01:81:06:0c: b9:06:44:a8:7b:6a:cc:96:4a:9d:03:cd:67:2b:ae:02:51:fd: 73:9b:e3:2f:d6:6f:46:9d:30:8a:45:06:5b:29:c5:69:c3:8d: 9e:ee:3f:a9:38:35:36:c2:93:82:05:86:b9:21:d9:d2:2b:1d: 22:2c:c6:a8:91:9b:ba:3b:a8:4c:41:dd:bb:91:9a:23:97:6c: 23:e2:40:b7:56:2e:43:7f:4d:8f:83:7f:f3:db:06:d0:2e:3c: 14:df:c4:95:1d:06:a9:94:f5:07:08:09:54:ff:53:13:bc:d1: 05:d5:43:4e:65:e5:c1:8f:51:a3:18:7d:17:7c:32:bb:1c:7e: 6c:78:60:32:77:18:af:3f:09:69:4c:d2:15:60:07:85:15:0d: 4c:8b:66:5a:4b:c4:78:27:ee:b0:72:a5:42:42:b1:ef:1f:cd: c9:9a:54:57:c6:6a:f5:30:1d:44:5d:4d:21:84:cf:3b:e1:11: d8:ab:d5:39:43:db:56:dc:d3:50:07:0e:8f:6a:63:e1:3e:e9: 66:22:3a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPYYfMf1dKzljbZ7f7KuFnit1NmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA2MDUxMDM3MTRaFw0yNTA2MDgxOTI1MTRaMDMxMTAvBgNV BAMTKDg4NkREMEMyQzhGOTgyODJBODM2M0M5OTgwNTlFQjI5RTZERkFEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGjMrS1EckpPvCfUkM+KojdYtT Q/X1t3eFTdQNBEcPaMH2hujnl2f8WZ35sTuI6/P8nyFY/Uu+pi2W364JJEuNI2ss OUlOHToVwRb2n3fzZuGa2yfmufCNRlPsTviyB2qPwBZMr8hDDuQkS3FZLcfRAEwa q4w7PyozfqWp9Oy32k528KDWDNjFdiNXZH0x/4+gNAqL0cwGhnmaL5mFyC3DGxCH iGclkxLTlVrr7SFijPqa2kzIkQTjxfr0cb9GbexyzRFP0Ktx8JFAGPiOUvTWMzDd osxXHH1pn3n8JZCxDNpY2kvRMFSqT1o4cro+x15txHLtjNGx/1RffiGqzKb1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiG3Qwsj5goKoNjyZgFnrKebfrbwwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ+0mZkaEIqvJ4CIXfnUYjHcYq079NVxnRd uqV5WcHjR5q1t1RwuIbCVvi9fRf5Q7cgAYEGDLkGRKh7asyWSp0DzWcrrgJR/XOb 4y/Wb0adMIpFBlspxWnDjZ7uP6k4NTbCk4IFhrkh2dIrHSIsxqiRm7o7qExB3buR miOXbCPiQLdWLkN/TY+Df/PbBtAuPBTfxJUdBqmU9QcICVT/UxO80QXVQ05l5cGP UaMYfRd8Mrscfmx4YDJ3GK8/CWlM0hVgB4UVDUyLZlpLxHgn7rBypUJCse8fzcma VFfGavUwHURdTSGEzzvhEdir1TlD21bc01AHDo9qY+E+6WYiOkk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:25 2025 by rpki-client