$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: AXPTy7tluTXbYx+m5v1Of1dhVfGnzfTx7GfvWbzMBqc= Subject key identifier: 87:A1:EE:E9:3B:54:B3:A9:6A:FE:26:98:10:EE:87:21:A8:62:3F:5D Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 3E74CB0D2945749E5E512241E32CE2D0F00D77C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 051B Signing time: Sun 19 Oct 2025 22:22:16 +0000 Manifest this update: Sun 19 Oct 2025 22:17:16 +0000 Manifest next update: Wed 22 Oct 2025 23:52:16 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: GSHAEUxqXbHU7qitVkvaxA/VWsI+b2Knyb2e1puSVwU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 23:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:74:cb:0d:29:45:74:9e:5e:51:22:41:e3:2c:e2:d0:f0:0d:77:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Oct 19 22:17:16 2025 GMT Not After : Oct 22 23:52:16 2025 GMT Subject: CN=87A1EEE93B54B3A96AFE269810EE8721A8623F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f3:60:92:d4:fe:f8:75:5c:e4:ea:3c:b3:d9: ea:dd:7a:9c:56:22:8c:d4:b6:1f:a5:4c:e0:7e:c9: 17:38:e1:17:1b:19:f7:39:be:a0:c6:e3:d4:ca:05: b5:7d:f9:a6:20:1a:1a:a7:a2:59:9a:a9:86:32:db: fa:07:0b:20:8b:58:eb:d5:3d:b8:7f:6a:1d:81:dc: 4a:d9:b7:7c:b0:88:52:68:32:e4:7d:70:4c:e8:da: 23:4f:5f:9a:5f:08:7d:b5:2b:2e:c2:a5:92:26:37: e7:96:30:a5:79:77:99:da:03:03:a8:8d:08:e0:e7: 35:88:50:5b:3c:a6:81:27:63:a9:ca:ca:2d:b5:fc: 0e:41:e6:bd:5e:c0:6b:a3:ee:29:89:fe:5f:a2:34: e7:ca:da:9a:33:9c:11:0b:2b:8a:9e:91:35:94:6c: 8a:9e:89:f5:05:68:ba:19:d9:15:ef:4d:2c:66:b2: cb:31:9b:65:ac:2c:07:84:11:bb:97:71:e6:01:b7: c8:bd:4c:1a:8c:3d:f2:8a:c0:7b:3e:48:3e:3c:cb: 4a:e1:e6:8e:9c:f6:be:20:3d:5f:4a:a1:fb:17:bb: 08:d9:22:89:1f:a0:9f:a7:c2:fc:e7:01:ef:b6:42: e2:27:71:9b:a3:2a:fd:ce:72:4b:28:1a:9f:73:23: 4a:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:A1:EE:E9:3B:54:B3:A9:6A:FE:26:98:10:EE:87:21:A8:62:3F:5D X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:04:96:92:e2:aa:b3:e6:9e:25:a9:99:8b:70:76:2f:61:36: 87:a6:66:1e:b7:b0:58:15:47:77:0f:76:f7:47:47:3c:96:47: 26:44:ec:3a:e5:4a:49:a4:7b:dc:a2:70:1d:55:b9:1b:ae:26: f5:09:eb:ad:9f:1f:aa:90:56:15:96:4e:18:01:28:9f:da:49: e1:74:56:11:b1:a2:e9:1a:25:7d:b7:8d:cb:5a:4a:90:84:89: 0c:d8:97:83:3c:25:44:8c:c9:73:e4:64:db:90:3b:fb:f2:3c: 43:e3:fa:05:75:fe:63:e0:fa:d9:8e:a2:f1:8c:63:27:af:97: 2d:4e:0b:3b:9e:4e:61:05:02:03:b7:2e:32:7d:f0:fc:d6:f2: a5:05:1d:2f:4c:ce:bd:f4:66:aa:0c:c2:d1:30:23:b2:77:3b: af:05:b8:00:aa:28:2f:29:9b:32:47:3e:e6:0b:0f:31:9b:10: 4c:d7:8b:f4:29:a9:a8:13:3d:62:06:ea:6c:e8:76:20:3f:d1: 4a:22:5c:2a:2c:bc:23:54:b0:39:a7:33:6a:5e:94:45:94:ef: 20:43:7c:f7:3d:c4:6d:62:19:55:23:4f:68:ec:fb:08:fe:1d: 23:e2:41:1f:56:ae:b5:65:1f:2b:f5:de:8e:db:43:3b:a8:bf: 65:e2:2f:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPnTLDSlFdJ5eUSJB4yzi0PANd8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTEwMTkyMjE3MTZaFw0yNTEwMjIyMzUyMTZaMDMxMTAvBgNV BAMTKDg3QTFFRUU5M0I1NEIzQTk2QUZFMjY5ODEwRUU4NzIxQTg2MjNGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd82CS1P74dVzk6jyz2erdepxW IozUth+lTOB+yRc44RcbGfc5vqDG49TKBbV9+aYgGhqnolmaqYYy2/oHCyCLWOvV Pbh/ah2B3ErZt3ywiFJoMuR9cEzo2iNPX5pfCH21Ky7CpZImN+eWMKV5d5naAwOo jQjg5zWIUFs8poEnY6nKyi21/A5B5r1ewGuj7imJ/l+iNOfK2poznBELK4qekTWU bIqeifUFaLoZ2RXvTSxmsssxm2WsLAeEEbuXceYBt8i9TBqMPfKKwHs+SD48y0rh 5o6c9r4gPV9KofsXuwjZIokfoJ+nwvznAe+2QuIncZujKv3OcksoGp9zI0o1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh6Hu6TtUs6lq/iaYEO6HIahiP10wHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoElpLiqrPmniWpmYtwdi9hNoemZh63sFgV R3cPdvdHRzyWRyZE7DrlSkmke9yicB1VuRuuJvUJ662fH6qQVhWWThgBKJ/aSeF0 VhGxoukaJX23jctaSpCEiQzYl4M8JUSMyXPkZNuQO/vyPEPj+gV1/mPg+tmOovGM Yyevly1OCzueTmEFAgO3LjJ98PzW8qUFHS9Mzr30ZqoMwtEwI7J3O68FuACqKC8p mzJHPuYLDzGbEEzXi/QpqagTPWIG6mzodiA/0UoiXCosvCNUsDmnM2pelEWU7yBD fPc9xG1iGVUjT2js+wj+HSPiQR9WrrVlHyv13o7bQzuov2XiL9k= -----END CERTIFICATE-----Generated at Mon Oct 20 20:41:47 2025 by rpki-client