$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft File: 85D232B96AB560AF91A1D8CFA996C519460662C6.mft (raw, json) Hash identifier: TNiRKyhoN2xPlo3qA4WgvtIdbu9/XaHgwpCU+iHzGEo= Subject key identifier: 5E:DA:20:1C:B9:47:31:EB:F2:B9:7C:8B:59:0D:EF:BE:FB:D5:A1:2B Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Certificate serial: 3EEEA6EB1691BF865091CEB69BD0673B4FDCC5E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft Manifest number: 04D2 Signing time: Tue 06 May 2025 19:42:13 +0000 Manifest this update: Tue 06 May 2025 19:37:13 +0000 Manifest next update: Fri 09 May 2025 23:39:13 +0000 Files and hashes: 1: 85D232B96AB560AF91A1D8CFA996C519460662C6.crl (hash: Hgby8UvYxWpitJSOWsHi4c5tETayOp9uAZckHli9tqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 23:39:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ee:a6:eb:16:91:bf:86:50:91:ce:b6:9b:d0:67:3b:4f:dc:c5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6 Validity Not Before: May 6 19:37:13 2025 GMT Not After : May 9 23:39:13 2025 GMT Subject: CN=5EDA201CB94731EBF2B97C8B590DEFBEFBD5A12B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a0:c5:2e:d0:29:65:a1:e2:e5:86:df:21:74: a7:ee:99:71:d9:e1:b9:90:7f:56:fe:59:c6:16:95: 15:e8:5f:f8:7e:28:88:88:f0:a4:b0:3c:96:14:7c: 44:d8:6d:c0:4d:8c:ab:20:8c:b6:f6:59:51:21:b2: 3a:f4:f9:39:d8:f6:ab:7a:cf:d1:fb:a0:a9:ba:27: 42:fd:ee:b1:53:0b:f8:1a:27:51:92:ea:63:61:45: eb:4b:26:c7:4f:cd:43:11:a3:ad:29:94:2f:72:b7: 63:55:9e:47:27:0a:86:b7:45:66:af:40:e3:b1:e2: df:d7:c4:d5:53:6f:7d:7f:9b:d8:85:58:d1:c2:4e: f2:00:1f:c0:0f:5d:80:43:42:b4:fb:40:a0:5f:ef: 7a:73:94:2a:1f:dd:55:fd:25:35:4e:b2:63:30:a3: 78:97:34:4e:0f:ce:5e:d5:89:28:2c:12:fe:55:0e: 36:6e:83:98:b1:e1:8f:5c:8d:e6:75:ab:e0:08:30: 81:94:64:39:e5:ac:ab:ef:42:bd:0e:12:c4:38:83: 5c:6f:14:21:41:1a:8e:02:af:b7:b0:c9:5a:af:d9: 9c:a0:00:d3:6d:99:fa:43:ce:fd:6c:3c:80:b2:d7: 68:26:8f:98:5d:a3:23:89:4a:2e:15:72:97:8f:1e: 2c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DA:20:1C:B9:47:31:EB:F2:B9:7C:8B:59:0D:EF:BE:FB:D5:A1:2B X509v3 Authority Key Identifier: keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:fb:f2:3e:b7:83:74:0b:28:93:dc:cb:a5:8f:a5:86:e9:27: 94:8d:fa:b1:97:6c:3b:7a:b8:1c:c3:05:f0:04:47:49:36:6e: 9b:e0:b0:2a:01:23:ea:ea:06:2b:84:ce:50:52:8c:4f:b0:fa: 9b:33:5f:10:11:2d:d6:86:c7:65:cd:92:72:7b:a5:46:aa:23: 7d:20:a2:d3:7f:70:2c:0e:25:a9:ad:da:41:75:af:b3:e3:9d: 6e:19:3d:cf:0c:1b:39:72:7a:a5:88:c6:cf:54:aa:d2:5e:32: f9:b9:0b:e1:3c:55:d8:24:7e:a8:6b:cf:e7:56:2a:46:c7:8b: 9d:12:fe:91:0c:9d:5b:b0:e1:c9:23:38:87:d3:bc:8f:07:dc: df:52:ab:a9:59:2c:e1:0f:ac:16:74:be:17:ee:91:b7:cf:e3: db:7e:72:68:fc:3f:9e:5b:65:37:e5:b6:52:af:ae:9a:0f:9a: ad:70:26:c8:21:bd:f8:20:51:ce:75:0d:43:ed:4c:60:3e:94: b8:de:af:d0:ab:4e:63:ff:24:6c:33:ca:85:9a:07:30:07:34: 3d:0f:41:12:95:b1:a9:61:44:70:f1:0d:8f:f2:0b:bc:f8:dd: f7:9e:13:bd:15:86:6a:f6:cc:e5:75:63:75:5b:11:df:77:19: 9b:84:a6:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPu6m6xaRv4ZQkc62m9BnO0/cxecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0 NjA2NjJDNjAeFw0yNTA1MDYxOTM3MTNaFw0yNTA1MDkyMzM5MTNaMDMxMTAvBgNV BAMTKDVFREEyMDFDQjk0NzMxRUJGMkI5N0M4QjU5MERFRkJFRkJENUExMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuoMUu0ClloeLlht8hdKfumXHZ 4bmQf1b+WcYWlRXoX/h+KIiI8KSwPJYUfETYbcBNjKsgjLb2WVEhsjr0+TnY9qt6 z9H7oKm6J0L97rFTC/gaJ1GS6mNhRetLJsdPzUMRo60plC9yt2NVnkcnCoa3RWav QOOx4t/XxNVTb31/m9iFWNHCTvIAH8APXYBDQrT7QKBf73pzlCof3VX9JTVOsmMw o3iXNE4Pzl7ViSgsEv5VDjZug5ix4Y9cjeZ1q+AIMIGUZDnlrKvvQr0OEsQ4g1xv FCFBGo4Cr7ewyVqv2ZygANNtmfpDzv1sPICy12gmj5hdoyOJSi4VcpePHixvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtogHLlHMevyuXyLWQ3vvvvVoSswHwYDVR0j BBgwFoAUhdIyuWq1YK+RodjPqZbFGUYGYsYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1NmEzMS05MzdlLTRhZmUtYjk5YS0yNzRjOTUyNGY5ODEvMC84NUQyMzJCOTZB QjU2MEFGOTFBMUQ4Q0ZBOTk2QzUxOTQ2MDY2MkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1MTk0NjA2 NjJDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTZhMzEtOTM3ZS00YWZlLWI5 OWEtMjc0Yzk1MjRmOTgxLzAvODVEMjMyQjk2QUI1NjBBRjkxQTFEOENGQTk5NkM1 MTk0NjA2NjJDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL78j63g3QLKJPcy6WPpYbpJ5SN+rGXbDt6 uBzDBfAER0k2bpvgsCoBI+rqBiuEzlBSjE+w+pszXxARLdaGx2XNknJ7pUaqI30g otN/cCwOJamt2kF1r7PjnW4ZPc8MGzlyeqWIxs9UqtJeMvm5C+E8Vdgkfqhrz+dW KkbHi50S/pEMnVuw4ckjOIfTvI8H3N9Sq6lZLOEPrBZ0vhfukbfP49t+cmj8P55b ZTfltlKvrpoPmq1wJsghvfggUc51DUPtTGA+lLjer9CrTmP/JGwzyoWaBzAHND0P QRKVsalhRHDxDY/yC7z43feeE70Vhmr2zOV1Y3VbEd93GZuEpjY= -----END CERTIFICATE-----Generated at Thu May 8 06:35:15 2025 by rpki-client