$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: +4Kg2ZPoH0MVw+M9+89yBgJln84JqsluUjc7NixgEQU= Subject key identifier: EC:CB:37:58:45:92:8A:5F:98:12:1E:5A:C8:20:3C:B9:DF:86:70:18 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 1A1AD1450CDA977AF07064DA2A1BB8B9C20FED27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04C4 Signing time: Sat 05 Apr 2025 14:52:10 +0000 Manifest this update: Sat 05 Apr 2025 14:47:10 +0000 Manifest next update: Tue 08 Apr 2025 17:29:10 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: xopo4jUySZ0jbiX4up1yJ0s0P8YH0dS3J6/vH1fLCM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1a:d1:45:0c:da:97:7a:f0:70:64:da:2a:1b:b8:b9:c2:0f:ed:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Apr 5 14:47:10 2025 GMT Not After : Apr 8 17:29:10 2025 GMT Subject: CN=ECCB375845928A5F98121E5AC8203CB9DF867018 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:d5:e6:98:47:50:84:03:84:a9:23:15:9e:44: 0f:b4:46:a2:28:5d:80:be:48:77:b1:40:a4:61:57: e9:dc:ef:0a:0a:7d:9e:e8:1d:c5:4f:61:fa:46:4c: 8e:e5:df:be:b3:bc:82:79:17:ec:84:17:71:04:6e: 84:73:b9:ea:37:84:8c:c0:f1:34:11:54:b8:6b:23: 1a:12:2f:e7:10:d4:a6:cf:e5:65:f7:71:b0:c4:24: f7:83:8c:7a:d2:f8:f4:6f:96:f5:a7:6e:45:ca:53: ff:10:a1:19:a6:92:43:47:17:9d:8b:7f:2f:22:c3: c0:33:86:df:41:68:a5:8f:61:03:f3:bc:24:dc:15: 10:5c:bf:cb:d1:e8:e7:ca:b7:16:49:a0:9c:88:aa: d4:58:e0:c5:b9:a4:98:04:7a:70:28:51:bf:d6:91: f5:36:e6:86:98:04:5d:71:5d:e0:67:a5:ca:2b:31: 5a:87:2a:e8:96:28:6f:51:d9:61:d3:5b:d5:6e:d4: 74:0f:94:f7:19:d0:67:0c:9b:b6:1c:45:f7:2d:71: 20:83:1d:3d:11:49:f6:d8:47:4f:8e:d4:54:20:a1: cb:8b:c4:1c:16:fa:4c:39:78:f4:9a:a2:c2:a4:17: d0:f6:ef:26:76:b2:2d:ad:36:a3:32:05:64:36:24: ec:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:CB:37:58:45:92:8A:5F:98:12:1E:5A:C8:20:3C:B9:DF:86:70:18 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:e0:6a:10:8c:33:45:23:0c:e0:4c:b7:55:01:7b:3f:53:51: 73:f9:42:66:c7:3b:7f:34:19:b9:d9:78:e2:35:fa:be:c3:f4: 59:f4:3c:7b:b6:30:98:03:35:f0:fb:2a:f2:a7:6e:16:f8:81: 55:9f:5b:c7:33:d4:5d:6d:35:c6:26:54:3c:ca:56:57:94:be: 49:bf:ec:6e:3e:e9:d4:36:b8:1c:a4:15:86:e3:a0:c2:3f:8e: 4a:b5:5a:5f:0b:14:67:35:88:1f:5e:2c:ab:31:e3:4a:b9:26: 53:bf:ab:5b:d1:17:f9:39:2b:65:f4:d7:51:8c:e0:e3:56:2c: 30:22:b5:4e:4b:1c:9e:05:e0:1c:06:e9:7d:60:8e:5f:10:0f: 45:dd:dc:a5:66:43:88:37:51:55:4e:7a:78:65:47:e9:14:5d: b4:2f:30:b0:74:ac:01:b8:cd:da:a4:20:1b:24:f6:83:e9:3f: c2:b4:63:88:98:2f:d3:5b:76:b4:7e:b2:98:59:7b:74:cd:e0: 51:23:f0:41:ea:33:28:31:78:74:23:6e:34:9b:7e:fb:ad:6a: 9c:06:9d:3b:b8:dc:36:30:f2:77:63:2d:8b:b0:0a:6d:47:9e: 7b:7b:15:0d:d0:43:99:fd:87:09:f8:e9:6b:50:7a:11:3d:fe: 70:64:ef:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhrRRQzal3rwcGTaKhu4ucIP7ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA0MDUxNDQ3MTBaFw0yNTA0MDgxNzI5MTBaMDMxMTAvBgNV BAMTKEVDQ0IzNzU4NDU5MjhBNUY5ODEyMUU1QUM4MjAzQ0I5REY4NjcwMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf1eaYR1CEA4SpIxWeRA+0RqIo XYC+SHexQKRhV+nc7woKfZ7oHcVPYfpGTI7l376zvIJ5F+yEF3EEboRzueo3hIzA 8TQRVLhrIxoSL+cQ1KbP5WX3cbDEJPeDjHrS+PRvlvWnbkXKU/8QoRmmkkNHF52L fy8iw8Azht9BaKWPYQPzvCTcFRBcv8vR6OfKtxZJoJyIqtRY4MW5pJgEenAoUb/W kfU25oaYBF1xXeBnpcorMVqHKuiWKG9R2WHTW9Vu1HQPlPcZ0GcMm7YcRfctcSCD HT0RSfbYR0+O1FQgocuLxBwW+kw5ePSaosKkF9D27yZ2si2tNqMyBWQ2JOwNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Ms3WEWSil+YEh5ayCA8ud+GcBgwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMHgahCMM0UjDOBMt1UBez9TUXP5QmbHO380 GbnZeOI1+r7D9Fn0PHu2MJgDNfD7KvKnbhb4gVWfW8cz1F1tNcYmVDzKVleUvkm/ 7G4+6dQ2uBykFYbjoMI/jkq1Wl8LFGc1iB9eLKsx40q5JlO/q1vRF/k5K2X011GM 4ONWLDAitU5LHJ4F4BwG6X1gjl8QD0Xd3KVmQ4g3UVVOenhlR+kUXbQvMLB0rAG4 zdqkIBsk9oPpP8K0Y4iYL9NbdrR+sphZe3TN4FEj8EHqMygxeHQjbjSbfvutapwG nTu43DYw8ndjLYuwCm1Hnnt7FQ3QQ5n9hwn46WtQehE9/nBk7z4= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:13 2025 by rpki-client