$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: 9y4Yh4cDTjNABinw4T8PAEWnI0YtB8cdBQyyFhhsERw= Subject key identifier: AE:6F:65:56:02:4F:47:4C:E3:84:12:AB:55:4D:19:86:1B:7F:0B:70 Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 6641EE8E79F814D69016854415B6B92FAA0C4D62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04E9 Signing time: Fri 27 Jun 2025 16:12:10 +0000 Manifest this update: Fri 27 Jun 2025 16:07:10 +0000 Manifest next update: Tue 01 Jul 2025 00:37:10 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: E5JH6j6/3ORa8D/iEbJCEdJ4dK96AjlGIioZnKqeTl4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 00:37:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:41:ee:8e:79:f8:14:d6:90:16:85:44:15:b6:b9:2f:aa:0c:4d:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Jun 27 16:07:10 2025 GMT Not After : Jul 1 00:37:10 2025 GMT Subject: CN=AE6F6556024F474CE38412AB554D19861B7F0B70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e2:a5:dc:c7:36:71:f7:64:df:2e:cf:01:c4: 44:e5:39:a6:f8:13:f4:d1:2a:e0:df:ee:a1:45:06: a9:17:07:30:0f:53:f8:9a:da:7c:c7:8e:2e:40:09: ea:73:da:15:ac:f9:a3:b2:03:84:16:09:88:e5:f6: d2:33:ea:32:ed:ff:85:68:4c:13:b1:d5:a8:8a:46: a5:7f:99:0c:89:70:0a:e2:92:ac:28:d6:0f:4c:e9: 64:9a:12:06:ee:ba:1f:5b:6b:70:b7:39:86:4a:ea: a4:af:af:4d:2c:31:f2:34:ba:ce:63:c0:8d:9b:fb: 5e:fa:35:d8:32:5e:97:dd:81:d5:58:d7:ad:fb:cf: 57:93:2f:9c:1b:b2:31:4a:8e:ef:88:ae:06:fc:c8: e3:79:14:47:75:6e:59:f1:1d:f2:37:1f:03:0e:d6: 08:c8:7f:97:0d:5b:18:62:46:b7:3e:83:70:f8:b6: 27:40:68:06:4a:6b:fe:41:8c:ba:6d:ac:bb:f8:5c: a6:d4:46:06:b8:2e:cb:aa:53:ed:62:fb:ab:d0:de: 38:1f:a2:85:b1:ad:b6:1d:85:d5:30:bd:75:77:73: 89:a8:4c:1d:bd:bc:c9:e0:df:4b:83:10:0f:22:5b: c9:2e:f3:e4:57:13:6c:63:ed:e2:f9:e6:2e:17:ac: 13:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:6F:65:56:02:4F:47:4C:E3:84:12:AB:55:4D:19:86:1B:7F:0B:70 X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:48:93:c8:87:a4:41:53:fa:6a:50:32:56:50:0d:70:48:c2: 57:9d:f5:ea:19:ea:47:6f:42:ba:e5:61:90:31:87:55:61:b6: c5:3e:07:17:b6:38:30:0a:22:1f:a0:26:2c:c1:5c:35:90:97: 0d:78:19:9a:65:52:de:71:55:a2:fc:61:fc:bf:9b:a4:c3:28: f2:f7:e4:47:0b:fe:26:5e:8c:a3:f2:b9:68:ef:da:55:3a:12: 0d:b0:47:17:6a:b8:35:09:30:ce:a3:38:1e:51:84:a6:03:60: 1d:89:42:e5:20:31:6b:d6:21:74:56:2c:9f:e9:d3:31:a6:3f: f7:ad:5a:2f:5e:0a:69:87:37:e3:ae:3b:de:a1:de:95:d6:4b: 7e:d1:6f:c1:6d:0d:40:d6:05:ed:e6:ed:de:c2:e9:df:c6:56: 3b:9b:bd:a8:36:ee:a1:e6:4a:86:0e:af:ae:aa:b6:50:50:a8: 09:ac:9e:ca:7e:76:99:d6:07:a1:9e:4d:8a:37:f6:bc:15:45: d7:66:e4:72:0a:dd:96:dc:01:64:8d:a9:9d:a1:b6:b8:3c:24: 89:10:de:ba:eb:2c:00:fe:84:d0:46:23:72:20:7a:2d:c2:3b: 02:62:3e:59:4a:45:ff:0e:81:36:0c:f0:c9:5c:f5:b4:7e:87: dc:0c:ad:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZkHujnn4FNaQFoVEFba5L6oMTWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA2MjcxNjA3MTBaFw0yNTA3MDEwMDM3MTBaMDMxMTAvBgNV BAMTKEFFNkY2NTU2MDI0RjQ3NENFMzg0MTJBQjU1NEQxOTg2MUI3RjBCNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP4qXcxzZx92TfLs8BxETlOab4 E/TRKuDf7qFFBqkXBzAPU/ia2nzHji5ACepz2hWs+aOyA4QWCYjl9tIz6jLt/4Vo TBOx1aiKRqV/mQyJcArikqwo1g9M6WSaEgbuuh9ba3C3OYZK6qSvr00sMfI0us5j wI2b+176NdgyXpfdgdVY1637z1eTL5wbsjFKju+Irgb8yON5FEd1blnxHfI3HwMO 1gjIf5cNWxhiRrc+g3D4tidAaAZKa/5BjLptrLv4XKbURga4LsuqU+1i+6vQ3jgf ooWxrbYdhdUwvXV3c4moTB29vMng30uDEA8iW8ku8+RXE2xj7eL55i4XrBO3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrm9lVgJPR0zjhBKrVU0Zhht/C3AwHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5Ik8iHpEFT+mpQMlZQDXBIwled9eoZ6kdv QrrlYZAxh1VhtsU+Bxe2ODAKIh+gJizBXDWQlw14GZplUt5xVaL8Yfy/m6TDKPL3 5EcL/iZejKPyuWjv2lU6Eg2wRxdquDUJMM6jOB5RhKYDYB2JQuUgMWvWIXRWLJ/p 0zGmP/etWi9eCmmHN+OuO96h3pXWS37Rb8FtDUDWBe3m7d7C6d/GVjubvag27qHm SoYOr66qtlBQqAmsnsp+dpnWB6GeTYo39rwVRddm5HIK3ZbcAWSNqZ2htrg8JIkQ 3rrrLAD+hNBGI3Igei3COwJiPllKRf8OgTYM8Mlc9bR+h9wMrbI= -----END CERTIFICATE-----Generated at Sun Jun 29 22:55:41 2025 by rpki-client