$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: zzaZYheRx6+UtvHXMY6+ADR8fNqvHk5f7yrhDpNCtbg= Subject key identifier: D1:B9:FC:92:0A:3B:45:4E:91:F6:F5:71:3F:5D:2A:8A:CF:1C:87:C1 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 4FBDEC349C2E1AFC902A7C77E9462D69D700B010 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01DC Signing time: Mon 16 Jun 2025 03:51:26 +0000 Manifest this update: Mon 16 Jun 2025 03:46:26 +0000 Manifest next update: Thu 19 Jun 2025 04:28:26 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: wKgIMQ5LjVpn44uuJ3CeMCd/cKr2y6zydKuq78yRLHs=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 04:28:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:bd:ec:34:9c:2e:1a:fc:90:2a:7c:77:e9:46:2d:69:d7:00:b0:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Jun 16 03:46:26 2025 GMT Not After : Jun 19 04:28:26 2025 GMT Subject: CN=D1B9FC920A3B454E91F6F5713F5D2A8ACF1C87C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ab:71:18:17:f9:84:db:69:7f:c4:6c:38:9e: 60:78:9a:cd:22:57:d5:70:4a:15:44:2b:f4:71:87: 7f:de:48:d1:ec:a6:ad:9a:7b:db:0e:c0:5f:3f:4c: 59:58:27:5f:e3:c2:cf:b1:29:44:77:1a:ec:92:89: 6d:bd:fd:e4:81:1d:c6:48:40:58:19:b5:36:f8:b6: 7d:65:3e:ce:d3:ac:30:90:d9:f6:33:f9:36:b4:e5: 99:f2:ca:83:2d:83:45:cf:28:97:9e:77:df:17:95: af:81:3e:16:17:45:12:7a:c4:e7:fe:94:36:ab:e1: aa:05:6f:32:b7:01:6e:e3:ca:fb:72:0b:59:a3:b6: 40:98:c3:bf:5b:79:bc:b1:73:c7:3e:81:20:dc:c6: 87:53:9c:a8:fa:86:41:50:2a:8e:38:4c:06:4c:bb: 55:2a:4e:e8:c1:18:0c:ea:d2:e1:f1:a8:63:63:6a: e1:19:30:53:54:e4:72:01:c3:75:cf:1a:d1:6b:d3: f0:b0:d7:15:61:67:70:62:8b:1e:f2:24:bb:99:fc: 32:ed:b9:fa:41:d1:28:58:42:e5:63:cb:5e:ce:e0: 4c:98:13:0e:c4:a1:d7:31:a6:d0:7f:75:05:e7:44: 2c:d1:14:cf:ff:41:51:31:2d:c7:43:db:7f:ec:f8: 59:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:B9:FC:92:0A:3B:45:4E:91:F6:F5:71:3F:5D:2A:8A:CF:1C:87:C1 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:30:97:d3:f0:c0:a6:c2:a6:88:fd:4a:23:d6:79:aa:81:bc: e7:f4:bd:2c:d0:72:ec:f1:9e:2d:cb:9a:fe:66:08:9d:d3:6d: 00:c7:a1:89:f9:b4:df:8d:56:bf:2f:9f:17:a3:e8:58:9a:59: 82:52:8b:64:cc:dc:8d:a2:78:53:2c:fa:87:0a:40:20:14:f6: 3a:1c:81:ce:f8:f5:22:0a:2e:d7:a5:30:79:7e:63:72:61:3c: e2:c7:2b:d7:0f:d6:c5:2e:b4:d6:18:d1:d5:aa:55:22:19:26: 23:dd:5c:8f:c3:bd:6f:71:66:41:f5:48:cc:5e:d2:cc:1b:c1: 7d:e7:0b:70:96:4e:ca:4c:db:62:0e:be:99:36:98:5a:f9:79: f1:e5:cd:5a:4b:df:23:95:e1:aa:4a:d9:36:8a:96:a1:e4:fb: cb:48:ab:5b:ba:3c:8c:bb:66:7d:6f:15:6e:a5:aa:4a:e8:a0: a5:0a:a2:d7:ce:6e:b7:10:81:d7:2f:98:fd:51:e2:58:ea:e9: a0:61:aa:4b:4c:39:43:3f:b3:05:c0:e4:15:08:f0:b3:de:57: 16:b2:52:e3:19:43:46:df:ef:17:18:47:22:8c:93:13:fa:2b: 5a:a6:bc:02:7b:43:9f:10:1e:c7:b8:f2:14:a8:d2:bd:3c:04: b3:cf:4d:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT73sNJwuGvyQKnx36UYtadcAsBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA2MTYwMzQ2MjZaFw0yNTA2MTkwNDI4MjZaMDMxMTAvBgNV BAMTKEQxQjlGQzkyMEEzQjQ1NEU5MUY2RjU3MTNGNUQyQThBQ0YxQzg3QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3q3EYF/mE22l/xGw4nmB4ms0i V9VwShVEK/Rxh3/eSNHspq2ae9sOwF8/TFlYJ1/jws+xKUR3GuySiW29/eSBHcZI QFgZtTb4tn1lPs7TrDCQ2fYz+Ta05ZnyyoMtg0XPKJeed98Xla+BPhYXRRJ6xOf+ lDar4aoFbzK3AW7jyvtyC1mjtkCYw79bebyxc8c+gSDcxodTnKj6hkFQKo44TAZM u1UqTujBGAzq0uHxqGNjauEZMFNU5HIBw3XPGtFr0/Cw1xVhZ3Biix7yJLuZ/DLt ufpB0ShYQuVjy17O4EyYEw7EodcxptB/dQXnRCzRFM//QVExLcdD23/s+FkDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0bn8kgo7RU6R9vVxP10qis8ch8EwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcwl9PwwKbCpoj9SiPWeaqBvOf0vSzQcuzx ni3Lmv5mCJ3TbQDHoYn5tN+NVr8vnxej6FiaWYJSi2TM3I2ieFMs+ocKQCAU9joc gc749SIKLtelMHl+Y3JhPOLHK9cP1sUutNYY0dWqVSIZJiPdXI/DvW9xZkH1SMxe 0swbwX3nC3CWTspM22IOvpk2mFr5efHlzVpL3yOV4apK2TaKlqHk+8tIq1u6PIy7 Zn1vFW6lqkrooKUKotfObrcQgdcvmP1R4ljq6aBhqktMOUM/swXA5BUI8LPeVxay UuMZQ0bf7xcYRyKMkxP6K1qmvAJ7Q58QHse48hSo0r08BLPPTSI= -----END CERTIFICATE-----Generated at Tue Jun 17 15:38:43 2025 by rpki-client