$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: K3f0NcrJ+IUI5apRe6BseeE8ASR1tLXc0OpPy2btQME= Subject key identifier: E6:1C:84:1F:06:C9:85:74:DB:79:93:C4:8A:BD:43:22:DD:04:73:4D Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 69743EFEA710C465DE6D76575F8021909C11A01F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 0502 Signing time: Sat 23 Aug 2025 03:42:14 +0000 Manifest this update: Sat 23 Aug 2025 03:37:14 +0000 Manifest next update: Tue 26 Aug 2025 04:27:14 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: THANj2hR5GmYPhA6fhLXNsmtbzMNXPaQ9LQbne+1GyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:27:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:74:3e:fe:a7:10:c4:65:de:6d:76:57:5f:80:21:90:9c:11:a0:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: Aug 23 03:37:14 2025 GMT Not After : Aug 26 04:27:14 2025 GMT Subject: CN=E61C841F06C98574DB7993C48ABD4322DD04734D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:f0:98:47:c6:c3:98:f0:0f:16:64:8d:ac:47: ec:1f:9a:11:93:a7:89:cf:17:31:b8:81:c3:87:ae: 18:7d:ae:2c:a1:6d:f2:b2:11:c8:7e:a9:59:3d:0c: 3c:0d:dc:19:80:c3:b2:7b:cb:d5:29:a7:bb:d9:b9: 80:eb:33:bc:b6:8e:94:e9:5d:93:d7:a8:32:83:88: 63:1f:d2:a3:c0:c2:64:6d:4f:ed:4e:05:4d:73:e9: f0:ef:5c:34:f6:df:af:13:3a:87:c8:4c:44:50:2c: dd:ea:24:53:26:b5:0d:7d:7a:68:ee:a8:19:bf:ef: 34:2b:71:80:7a:32:1c:66:7e:24:ba:a4:92:b6:f5: d8:8d:64:f0:a6:21:32:5a:b2:b1:0f:cd:9e:bc:56: af:73:db:cc:c6:57:56:da:da:e6:c6:cc:82:f5:53: 87:1d:a0:da:bc:3c:24:56:4c:e9:78:63:73:1e:42: 12:8e:18:c9:37:cf:71:86:c1:a4:76:cc:89:7a:91: 99:3d:7b:01:7d:25:2e:27:09:c2:93:6e:b2:82:0d: fe:b3:0e:05:37:1d:17:48:96:a4:3d:45:56:f9:ed: 28:03:49:ab:6a:15:a3:48:80:db:5b:14:eb:ee:7a: 5e:eb:ad:e9:26:a2:06:a2:07:03:17:25:9d:29:e6: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1C:84:1F:06:C9:85:74:DB:79:93:C4:8A:BD:43:22:DD:04:73:4D X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:89:20:dd:ff:eb:81:4e:3f:01:b4:ee:bd:b2:55:eb:56:37: 99:ac:10:b3:6e:8b:05:6d:c2:c7:bf:e9:c4:66:bc:4d:4b:98: 6b:8a:dc:24:6a:92:e9:35:28:52:74:ef:bf:33:98:4b:b6:5f: 06:ef:21:6f:d7:4a:21:c9:ef:e5:9a:1b:1d:4b:ff:24:44:96: f9:49:e7:29:96:ba:85:27:b5:bc:b3:58:ab:74:a2:41:15:fb: 46:f1:39:35:00:93:d4:c0:62:8b:43:03:ed:56:ad:d1:46:a9: 57:9e:2f:49:6e:8e:f1:48:21:5b:dd:b8:29:ef:e9:c6:5a:48: 8f:9e:8a:f7:53:99:a2:d5:74:ec:a9:47:56:92:ed:e3:e7:b4: a2:01:c2:94:3b:ba:15:7b:ef:a7:44:c8:71:11:df:77:17:fe: 1b:fe:b9:43:76:0d:0c:b7:03:0d:25:e5:8a:3a:bb:c7:f2:f9: 43:71:d7:1d:d2:5b:f7:23:92:e7:16:9d:3b:6e:36:f7:98:bd: 88:c3:c7:86:62:b7:b1:e8:3c:7b:7e:a4:11:da:73:09:97:81: ff:8c:10:c9:03:2b:16:f4:f8:fa:d0:e2:0a:70:2d:5b:99:d7: 43:3c:2a:95:35:c2:42:4c:76:3a:15:0d:bf:6e:21:cd:47:8b: d4:f6:33:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXQ+/qcQxGXebXZXX4AhkJwRoB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA4MjMwMzM3MTRaFw0yNTA4MjYwNDI3MTRaMDMxMTAvBgNV BAMTKEU2MUM4NDFGMDZDOTg1NzREQjc5OTNDNDhBQkQ0MzIyREQwNDczNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd8JhHxsOY8A8WZI2sR+wfmhGT p4nPFzG4gcOHrhh9riyhbfKyEch+qVk9DDwN3BmAw7J7y9Upp7vZuYDrM7y2jpTp XZPXqDKDiGMf0qPAwmRtT+1OBU1z6fDvXDT2368TOofITERQLN3qJFMmtQ19emju qBm/7zQrcYB6MhxmfiS6pJK29diNZPCmITJasrEPzZ68Vq9z28zGV1ba2ubGzIL1 U4cdoNq8PCRWTOl4Y3MeQhKOGMk3z3GGwaR2zIl6kZk9ewF9JS4nCcKTbrKCDf6z DgU3HRdIlqQ9RVb57SgDSatqFaNIgNtbFOvuel7rrekmogaiBwMXJZ0p5jmJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5hyEHwbJhXTbeZPEir1DIt0Ec00wHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCJIN3/64FOPwG07r2yVetWN5msELNuiwVt wse/6cRmvE1LmGuK3CRqkuk1KFJ0778zmEu2XwbvIW/XSiHJ7+WaGx1L/yRElvlJ 5ymWuoUntbyzWKt0okEV+0bxOTUAk9TAYotDA+1WrdFGqVeeL0lujvFIIVvduCnv 6cZaSI+eivdTmaLVdOypR1aS7ePntKIBwpQ7uhV776dEyHER33cX/hv+uUN2DQy3 Aw0l5Yo6u8fy+UNx1x3SW/cjkucWnTtuNveYvYjDx4Zit7HoPHt+pBHacwmXgf+M EMkDKxb0+PrQ4gpwLVuZ10M8KpU1wkJMdjoVDb9uIc1Hi9T2M4Y= -----END CERTIFICATE-----Generated at Sat Aug 23 12:57:47 2025 by rpki-client