$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: nCEvxCAtdQxumW5Flp6RCdctdKnxP4NEuvU/g72RLAs= Subject key identifier: 85:A1:E1:E9:89:27:4E:C0:B3:F0:2F:C4:FA:C2:3E:C3:F3:50:2D:F5 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 1024A0D6177088ED65DFE54D8C533FDD464E6588 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 01C4 Signing time: Sun 29 Jun 2025 00:02:14 +0000 Manifest this update: Sat 28 Jun 2025 23:57:14 +0000 Manifest next update: Wed 02 Jul 2025 09:59:14 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: dKaFZrpHxeM9Opn7nZbbrTtRm8haf5iGfRQEp49/5Fo=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: Bx1b38fbUxJjhjrxeEuROMcN+gxdeGCZuXwCivK7OCQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:24:a0:d6:17:70:88:ed:65:df:e5:4d:8c:53:3f:dd:46:4e:65:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Jun 28 23:57:14 2025 GMT Not After : Jul 2 09:59:14 2025 GMT Subject: CN=85A1E1E989274EC0B3F02FC4FAC23EC3F3502DF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:b4:46:8e:ff:1c:dd:ce:0d:7a:9b:c3:60:7a: f3:90:ad:fe:11:5d:95:99:0d:ec:f4:6e:7b:e1:ed: 7b:57:d4:9c:08:82:19:b7:af:14:fe:28:b6:7b:41: 94:2d:7c:af:30:c9:78:e7:fb:f6:e7:4c:09:60:e5: fd:93:c7:8b:6d:df:e9:a5:ff:a5:a1:87:b1:1f:83: 84:c9:50:b6:de:c3:a4:d8:7a:2a:27:c6:8b:3c:61: 8e:4c:ef:3b:41:8e:b7:40:8b:50:d6:af:2a:3e:9a: b8:84:04:f7:25:61:e3:87:a9:c8:17:de:75:cf:ac: 64:64:2c:c8:2d:6f:44:67:6e:6c:65:3c:4a:e7:20: be:17:b3:e7:12:5f:b0:96:91:34:68:49:1d:06:e9: 1c:27:13:a2:47:4a:cd:16:6b:7c:fa:7d:d5:ae:5c: 15:f2:93:eb:51:8b:9e:11:3e:e8:e9:61:5c:27:28: 70:b0:70:f6:b4:50:0b:36:94:fd:c4:d6:60:ea:64: 75:87:99:a5:a4:62:68:27:5e:22:23:5d:d7:6e:1d: fd:0a:a5:86:1e:ea:b3:b2:76:10:41:ab:65:8a:bd: 11:0d:6c:6b:cf:ca:27:68:15:07:60:8d:22:80:d8: 54:f5:30:87:e4:36:bb:51:22:31:86:a9:45:61:52: 5f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:A1:E1:E9:89:27:4E:C0:B3:F0:2F:C4:FA:C2:3E:C3:F3:50:2D:F5 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:6d:a7:26:b9:48:46:c2:26:b6:0c:49:4b:62:dc:11:53:74: 2f:8b:c6:82:df:b9:3f:d5:76:3e:eb:ab:54:a2:9a:3f:58:cc: b1:94:ad:75:a8:87:4c:b3:86:2f:3d:1c:12:ec:cc:44:5e:85: 47:59:2e:b9:8e:69:c4:aa:f6:27:07:9f:11:fa:8f:90:c5:71: f9:9d:9d:7c:fb:61:39:09:ca:cf:ab:45:f6:9e:c9:1e:0f:45: e6:c3:49:70:43:75:07:5f:37:c0:8f:c6:5e:e2:cc:4b:e4:80: a4:b5:fc:c2:26:7f:0f:bc:15:81:2d:98:5f:9c:10:9c:50:a1: 8d:fc:fd:0e:28:e2:cd:16:5d:7a:2d:70:7a:de:ee:b2:30:53: 89:0e:4f:11:08:74:3b:b2:1f:26:d6:10:32:64:a0:64:d5:3a: 05:c4:b8:28:c9:68:93:ef:17:bb:2a:f8:23:84:9e:9c:a3:1a: a7:0b:1c:31:2a:09:6e:53:46:f6:ad:dd:fd:cc:4b:fa:cc:ec: 9a:89:1c:de:2d:b5:f0:44:12:ff:9d:48:55:77:e8:e8:90:8c: 19:67:ad:67:45:21:a9:a0:ef:60:24:5c:0d:42:0e:0f:b0:1a: cd:8c:08:0b:63:57:55:1e:0a:af:ea:76:6a:6a:37:a2:9f:da: 6e:83:47:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECSg1hdwiO1l3+VNjFM/3UZOZYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNTA2MjgyMzU3MTRaFw0yNTA3MDIwOTU5MTRaMDMxMTAvBgNV BAMTKDg1QTFFMUU5ODkyNzRFQzBCM0YwMkZDNEZBQzIzRUMzRjM1MDJERjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWtEaO/xzdzg16m8NgevOQrf4R XZWZDez0bnvh7XtX1JwIghm3rxT+KLZ7QZQtfK8wyXjn+/bnTAlg5f2Tx4tt3+ml /6Whh7Efg4TJULbew6TYeionxos8YY5M7ztBjrdAi1DWryo+mriEBPclYeOHqcgX 3nXPrGRkLMgtb0RnbmxlPErnIL4Xs+cSX7CWkTRoSR0G6RwnE6JHSs0Wa3z6fdWu XBXyk+tRi54RPujpYVwnKHCwcPa0UAs2lP3E1mDqZHWHmaWkYmgnXiIjXdduHf0K pYYe6rOydhBBq2WKvRENbGvPyidoFQdgjSKA2FT1MIfkNrtRIjGGqUVhUl8RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhaHh6YknTsCz8C/E+sI+w/NQLfUwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9tpya5SEbCJrYMSUti3BFTdC+LxoLfuT/V dj7rq1Simj9YzLGUrXWoh0yzhi89HBLszERehUdZLrmOacSq9icHnxH6j5DFcfmd nXz7YTkJys+rRfaeyR4PRebDSXBDdQdfN8CPxl7izEvkgKS1/MImfw+8FYEtmF+c EJxQoY38/Q4o4s0WXXotcHre7rIwU4kOTxEIdDuyHybWEDJkoGTVOgXEuCjJaJPv F7sq+COEnpyjGqcLHDEqCW5TRvat3f3MS/rM7JqJHN4ttfBEEv+dSFV36OiQjBln rWdFIamg72AkXA1CDg+wGs2MCAtjV1UeCq/qdmpqN6Kf2m6DRwI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:43 2025 by rpki-client