$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: 3NgJmMf1MIHcwL5WTJoFhQe9eSac5En3DWZrOMJAM6M= Subject key identifier: D0:45:E8:7A:9D:76:9C:E0:9B:D7:18:C6:09:09:E8:92:A9:D9:C0:A1 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 53C6FFCFFD4DCC2D6F78CCC967B8C12AB54AFA7E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04DF Signing time: Thu 05 Jun 2025 07:22:13 +0000 Manifest this update: Thu 05 Jun 2025 07:17:13 +0000 Manifest next update: Sun 08 Jun 2025 08:22:13 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: Miqz4uWKJorFzl2Xyph220Gn3mZFETcZ/VKenmZr5sk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:22:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:c6:ff:cf:fd:4d:cc:2d:6f:78:cc:c9:67:b8:c1:2a:b5:4a:fa:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Jun 5 07:17:13 2025 GMT Not After : Jun 8 08:22:13 2025 GMT Subject: CN=D045E87A9D769CE09BD718C60909E892A9D9C0A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:07:04:02:18:52:55:93:4c:56:66:96:59:ec: 93:f4:91:94:a3:b2:4b:a5:2f:7c:2a:62:8e:a5:6b: b0:6b:35:fc:4f:68:ec:fe:da:5c:15:91:2c:03:71: af:06:33:66:7d:2a:0c:c4:15:76:69:15:62:74:f5: 20:15:61:4f:30:cf:23:90:02:11:f8:19:4b:7a:28: cd:ef:97:a7:dd:19:9f:19:a6:bc:eb:6e:29:33:1d: 7d:27:a9:aa:27:b0:5d:37:ae:75:20:a0:4b:b3:75: b0:c5:68:7a:18:8d:a2:1b:71:e6:13:76:db:af:df: a6:c5:9e:e8:1e:7e:32:28:73:bd:89:60:c2:9a:57: 3d:1e:53:fe:67:ee:e6:8d:d7:ac:8d:7a:e6:c3:9a: 67:5a:3e:c3:e7:92:20:96:09:6b:70:e7:5b:f3:cf: dd:3e:92:26:7e:cb:a7:8c:6c:9a:f4:e8:f5:e6:61: 5a:2b:aa:3b:1e:2d:ef:78:19:dd:02:c6:ee:20:8e: 2f:31:d4:b4:68:9f:1c:b1:bb:15:a7:70:63:0c:f9: 9f:31:11:b2:cd:d2:37:c4:8d:b6:cf:73:86:a3:83: 4d:e9:bc:a9:78:50:d6:23:43:92:83:c7:98:ee:97: 03:3d:80:8b:ba:3c:21:22:cc:c9:a8:e0:cd:68:d4: b5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:45:E8:7A:9D:76:9C:E0:9B:D7:18:C6:09:09:E8:92:A9:D9:C0:A1 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:97:3f:db:b7:49:33:c3:9a:39:83:3c:f6:b6:13:3a:8e:a0: 3d:2d:b5:01:b7:dc:61:c0:e6:ea:f5:81:34:82:53:8a:2b:68: 22:fe:64:b4:cd:0c:8f:33:9d:60:12:67:51:09:eb:ce:73:2e: 8f:46:c6:7b:c4:53:d8:32:e4:4b:28:3f:31:35:34:1c:dd:82: 1c:b2:02:81:5b:8f:6e:da:73:cd:d3:29:13:83:d5:ff:1c:d6: 44:ea:84:e1:85:5a:d5:9b:ef:42:3b:be:70:ce:39:e4:e4:a9: bd:7c:55:29:8b:2a:55:0a:7e:b5:a4:38:49:c2:0b:29:c2:01: 2a:6b:a4:7a:ca:5f:0b:2d:6c:84:35:ad:09:e0:96:18:69:55: 9c:a9:d1:9a:92:09:93:08:f5:37:9d:7a:15:2e:2b:43:40:14: c4:d1:43:13:b9:57:21:99:cd:8b:96:2b:ad:23:b5:50:8c:cc: 92:ca:e3:28:0e:11:be:19:fa:1a:54:99:e9:76:47:2d:fd:74: 6d:44:fc:9a:63:a5:25:e8:95:29:cb:60:d7:00:02:6f:d3:36: 15:18:24:33:8e:9d:42:2b:48:b5:a2:d7:0f:27:fe:31:de:35: be:f5:52:71:14:11:49:5b:32:0d:89:f0:02:af:53:4e:9c:2d: 01:d1:d2:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8b/z/1NzC1veMzJZ7jBKrVK+n4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA2MDUwNzE3MTNaFw0yNTA2MDgwODIyMTNaMDMxMTAvBgNV BAMTKEQwNDVFODdBOUQ3NjlDRTA5QkQ3MThDNjA5MDlFODkyQTlEOUMwQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyBwQCGFJVk0xWZpZZ7JP0kZSj skulL3wqYo6la7BrNfxPaOz+2lwVkSwDca8GM2Z9KgzEFXZpFWJ09SAVYU8wzyOQ AhH4GUt6KM3vl6fdGZ8ZprzrbikzHX0nqaonsF03rnUgoEuzdbDFaHoYjaIbceYT dtuv36bFnugefjIoc72JYMKaVz0eU/5n7uaN16yNeubDmmdaPsPnkiCWCWtw51vz z90+kiZ+y6eMbJr06PXmYVorqjseLe94Gd0Cxu4gji8x1LRonxyxuxWncGMM+Z8x EbLN0jfEjbbPc4ajg03pvKl4UNYjQ5KDx5julwM9gIu6PCEizMmo4M1o1LXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0EXoep12nOCb1xjGCQnokqnZwKEwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6XP9u3STPDmjmDPPa2EzqOoD0ttQG33GHA 5ur1gTSCU4oraCL+ZLTNDI8znWASZ1EJ685zLo9GxnvEU9gy5EsoPzE1NBzdghyy AoFbj27ac83TKROD1f8c1kTqhOGFWtWb70I7vnDOOeTkqb18VSmLKlUKfrWkOEnC CynCASprpHrKXwstbIQ1rQnglhhpVZyp0ZqSCZMI9TedehUuK0NAFMTRQxO5VyGZ zYuWK60jtVCMzJLK4ygOEb4Z+hpUmel2Ry39dG1E/JpjpSXolSnLYNcAAm/TNhUY JDOOnUIrSLWi1w8n/jHeNb71UnEUEUlbMg2J8AKvU06cLQHR0s8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:55 2025 by rpki-client