$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: gp1yLD9692W/ou4QBPli78oX7wpU/isn2KOGU8T89yw= Subject key identifier: CE:3D:37:D7:AD:54:FF:71:95:5D:25:17:A0:16:B0:EF:CB:35:7B:29 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 02CE3600E066C139ABFF90442BA7F6E7FEA2F9EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 0508 Signing time: Fri 05 Sep 2025 07:12:15 +0000 Manifest this update: Fri 05 Sep 2025 07:07:15 +0000 Manifest next update: Mon 08 Sep 2025 15:29:15 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: CZvC/o9RlZbkJAVDr8D5V7sw2RQFHqYuquR9YYMeJbc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:29:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ce:36:00:e0:66:c1:39:ab:ff:90:44:2b:a7:f6:e7:fe:a2:f9:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Sep 5 07:07:15 2025 GMT Not After : Sep 8 15:29:15 2025 GMT Subject: CN=CE3D37D7AD54FF71955D2517A016B0EFCB357B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:d5:93:1e:ee:f2:8f:34:6a:51:40:a1:59: 23:2c:56:b7:76:62:94:c3:7d:d0:e6:1c:e1:e7:9b: e9:15:a9:06:2e:14:71:55:70:1c:fb:6a:ea:3d:8c: 11:4a:1d:a8:0a:0b:85:43:b4:71:30:29:d6:d3:cd: e0:1b:20:7a:7f:63:eb:28:20:3e:19:fc:06:8c:a8: 71:70:69:9f:05:7f:20:c5:92:bf:b0:4c:81:7a:38: a3:5e:fd:5d:d9:9b:60:08:f4:a5:de:ba:5b:0b:05: c3:d0:c3:33:27:c8:cf:81:4b:5a:c1:d0:e0:51:85: f9:fb:63:09:40:08:a2:d8:8c:35:3d:e6:88:2d:dc: c6:86:1e:85:e0:e6:b3:38:e3:01:84:95:4a:56:9f: 8a:ae:c3:1b:20:5a:f9:0e:cc:42:45:53:05:29:eb: 89:d1:36:d8:ce:1c:72:87:59:8a:2c:93:d5:d9:f2: ea:8d:12:11:88:11:3e:18:af:1b:cf:ea:50:dd:f4: 12:f5:2c:0a:1b:94:5f:fc:a5:14:6e:0c:d7:ff:ad: b0:cf:73:25:a0:e6:72:35:3b:22:a9:b3:82:0a:5c: 48:55:c6:53:8f:a9:d2:4d:a9:7a:ca:a5:be:0c:b8: c3:1c:c4:f9:2b:ce:b1:3b:54:14:39:cc:c4:3f:a9: 38:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:3D:37:D7:AD:54:FF:71:95:5D:25:17:A0:16:B0:EF:CB:35:7B:29 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:64:51:e0:88:f2:f8:e0:dd:8d:5c:ad:bb:bb:25:ce:1f:62: fe:65:37:c0:19:5f:77:9c:54:12:54:fe:34:89:bd:b6:1f:30: 3d:b5:e8:8c:78:73:bd:a4:e0:5f:8c:07:17:d9:96:6d:89:7c: 7b:6e:24:91:bf:92:13:b0:3c:8e:20:fb:1b:7c:90:00:da:87: 7a:7c:94:8a:d9:4a:2a:67:f5:12:37:8c:43:3c:65:e3:97:6c: 37:ca:2e:e6:54:78:0c:ef:86:24:29:d2:a3:a9:ae:51:50:d0: e9:f0:df:8f:49:f5:0c:0c:72:c3:71:05:6d:f6:7e:b6:e3:07: af:c7:b8:46:2b:56:cf:28:90:86:72:0e:d8:2a:1f:37:23:1b: fb:a0:ba:f6:9c:3d:c1:fe:94:b9:29:91:1a:70:67:32:02:0c: de:1f:89:1a:47:19:00:f3:f5:78:74:71:9f:9d:70:61:e2:2a: d8:52:cf:90:bc:4e:34:94:fb:bf:98:25:42:60:c7:51:20:3b: f7:21:64:68:dd:d0:df:98:15:f1:3e:c4:c3:99:a7:1a:55:1b: 4f:f6:07:11:76:59:7f:1c:8b:75:89:31:02:22:a3:eb:99:f1: 9a:54:4b:5f:e8:34:fc:2a:21:7f:62:42:3e:d1:07:5e:3a:78: 7a:ef:04:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAs42AOBmwTmr/5BEK6f25/6i+e8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA5MDUwNzA3MTVaFw0yNTA5MDgxNTI5MTVaMDMxMTAvBgNV BAMTKENFM0QzN0Q3QUQ1NEZGNzE5NTVEMjUxN0EwMTZCMEVGQ0IzNTdCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBtWTHu7yjzRqUUChWSMsVrd2 YpTDfdDmHOHnm+kVqQYuFHFVcBz7auo9jBFKHagKC4VDtHEwKdbTzeAbIHp/Y+so ID4Z/AaMqHFwaZ8FfyDFkr+wTIF6OKNe/V3Zm2AI9KXeulsLBcPQwzMnyM+BS1rB 0OBRhfn7YwlACKLYjDU95ogt3MaGHoXg5rM44wGElUpWn4quwxsgWvkOzEJFUwUp 64nRNtjOHHKHWYosk9XZ8uqNEhGIET4YrxvP6lDd9BL1LAoblF/8pRRuDNf/rbDP cyWg5nI1OyKps4IKXEhVxlOPqdJNqXrKpb4MuMMcxPkrzrE7VBQ5zMQ/qTgxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzj03161U/3GVXSUXoBaw78s1eykwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlkUeCI8vjg3Y1crbu7Jc4fYv5lN8AZX3ec VBJU/jSJvbYfMD216Ix4c72k4F+MBxfZlm2JfHtuJJG/khOwPI4g+xt8kADah3p8 lIrZSipn9RI3jEM8ZeOXbDfKLuZUeAzvhiQp0qOprlFQ0Onw349J9QwMcsNxBW32 frbjB6/HuEYrVs8okIZyDtgqHzcjG/uguvacPcH+lLkpkRpwZzICDN4fiRpHGQDz 9Xh0cZ+dcGHiKthSz5C8TjSU+7+YJUJgx1EgO/chZGjd0N+YFfE+xMOZpxpVG0/2 BxF2WX8ci3WJMQIio+uZ8ZpUS1/oNPwqIX9iQj7RB146eHrvBPM= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:49 2025 by rpki-client