$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: IMbIFnXx4RiSNDTZyGReMDkxQx/MXTZvdNWT5TirvxM= Subject key identifier: C8:4D:1D:DC:99:C9:3E:71:F6:19:33:17:9F:82:C2:1B:8C:CC:C5:82 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 395DA54CBF268D32F0C0DCFA85BD83DB616C4191 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01F6 Signing time: Fri 17 Oct 2025 23:42:14 +0000 Manifest this update: Fri 17 Oct 2025 23:37:14 +0000 Manifest next update: Tue 21 Oct 2025 07:36:14 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: J3WRn341YJH2VhFcduW8ZC65bqLLUC2zOhhOD3k2+YM=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 07:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:5d:a5:4c:bf:26:8d:32:f0:c0:dc:fa:85:bd:83:db:61:6c:41:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Oct 17 23:37:14 2025 GMT Not After : Oct 21 07:36:14 2025 GMT Subject: CN=C84D1DDC99C93E71F61933179F82C21B8CCCC582 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:17:71:c1:36:3b:dc:18:62:be:55:63:05:c0: 35:80:06:3b:12:c8:8f:8b:12:4d:75:93:76:88:47: 19:07:2e:ad:ec:40:ef:03:48:bb:f3:0a:c9:5a:c2: d6:d2:34:a7:4c:86:17:17:74:4c:8e:81:eb:6f:e8: e1:c9:d6:63:fd:56:1d:11:34:77:33:72:4c:ff:60: 75:e1:77:53:f2:37:03:ea:5b:b2:8f:d4:c9:a4:64: ae:26:cf:19:40:7c:3f:36:02:dc:94:2f:95:d1:18: ff:32:05:3a:4b:1f:84:29:82:3e:c4:4f:6c:b5:d8: d0:fe:78:3e:be:21:59:17:10:f7:f0:16:b1:73:3d: 60:5c:25:32:64:b1:19:9e:81:5d:30:77:a2:7f:8b: ef:88:91:f3:e4:29:7e:cd:7f:4c:a6:a3:ab:4b:20: 03:7d:6c:f9:1c:44:f3:49:ab:f4:b1:15:22:17:71: ee:26:c3:6c:f0:09:a3:c0:d1:2e:5a:a4:3c:2c:32: 98:8e:3a:b9:48:e1:54:8e:b8:9e:da:cf:05:6a:fe: a2:cd:3b:18:0d:20:aa:0f:a0:a9:ad:1d:6a:58:97: b6:79:d9:91:6d:33:fd:dc:26:43:37:bc:7d:4c:b2: 09:b4:f3:15:ec:f9:b1:44:25:32:d7:18:29:95:c9: d2:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:4D:1D:DC:99:C9:3E:71:F6:19:33:17:9F:82:C2:1B:8C:CC:C5:82 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:37:45:eb:13:4f:a0:fb:bc:27:ba:be:24:df:a8:db:24:4b: 0e:f5:f4:ba:00:9d:c1:14:67:6e:09:d5:8d:33:ae:4a:2b:a0: b3:3a:8a:4c:e1:a0:9a:67:4c:37:0b:d2:c3:8d:75:39:46:bd: a0:45:7e:0e:f1:cf:4d:64:05:c0:37:65:13:94:34:da:07:e7: f4:77:49:2b:95:17:6a:2b:19:d8:07:4e:36:e8:a8:53:1b:02: 8a:b1:f6:0f:be:5c:34:b7:f9:05:cf:0a:2b:64:a8:3c:b0:3d: 90:6f:b7:42:3e:c5:80:7c:8f:5e:46:2c:44:2b:f9:57:ab:e7: d5:0f:b9:f7:33:2b:7b:ac:28:c0:40:33:73:00:1a:5d:a9:ab: ac:a5:bd:6e:50:81:a2:ba:9b:50:f2:aa:d9:fb:78:a7:44:bd: f6:72:87:ce:fd:32:3e:9d:51:c3:20:02:1b:30:0e:4d:d4:4e: c2:87:d4:03:c6:32:b0:76:34:85:7c:8f:dc:06:c5:6a:c5:12: f7:e2:7e:1a:0c:58:e2:df:eb:8b:f2:a5:98:97:7b:59:ee:48: 28:e2:0d:59:28:54:0b:cf:f4:32:48:e6:9e:24:2b:9c:07:67: 57:28:cf:51:b9:be:f7:5e:69:06:fc:10:91:b9:0b:25:4c:4c: 14:53:3b:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOV2lTL8mjTLwwNz6hb2D22FsQZEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTEwMTcyMzM3MTRaFw0yNTEwMjEwNzM2MTRaMDMxMTAvBgNV BAMTKEM4NEQxRERDOTlDOTNFNzFGNjE5MzMxNzlGODJDMjFCOENDQ0M1ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZF3HBNjvcGGK+VWMFwDWABjsS yI+LEk11k3aIRxkHLq3sQO8DSLvzCslawtbSNKdMhhcXdEyOgetv6OHJ1mP9Vh0R NHczckz/YHXhd1PyNwPqW7KP1MmkZK4mzxlAfD82AtyUL5XRGP8yBTpLH4Qpgj7E T2y12ND+eD6+IVkXEPfwFrFzPWBcJTJksRmegV0wd6J/i++IkfPkKX7Nf0ymo6tL IAN9bPkcRPNJq/SxFSIXce4mw2zwCaPA0S5apDwsMpiOOrlI4VSOuJ7azwVq/qLN OxgNIKoPoKmtHWpYl7Z52ZFtM/3cJkM3vH1Msgm08xXs+bFEJTLXGCmVydLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyE0d3JnJPnH2GTMXn4LCG4zMxYIwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ3ResTT6D7vCe6viTfqNskSw719LoAncEU Z24J1Y0zrkoroLM6ikzhoJpnTDcL0sONdTlGvaBFfg7xz01kBcA3ZROUNNoH5/R3 SSuVF2orGdgHTjboqFMbAoqx9g++XDS3+QXPCitkqDywPZBvt0I+xYB8j15GLEQr +Ver59UPufczK3usKMBAM3MAGl2pq6ylvW5QgaK6m1Dyqtn7eKdEvfZyh879Mj6d UcMgAhswDk3UTsKH1APGMrB2NIV8j9wGxWrFEvfifhoMWOLf64vypZiXe1nuSCji DVkoVAvP9DJI5p4kK5wHZ1coz1G5vvdeaQb8EJG5CyVMTBRTO5M= -----END CERTIFICATE-----Generated at Mon Oct 20 09:45:05 2025 by rpki-client