$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: w/cLW3kCCUC2eyNcfqD3/ujcUCJiJS7rLVGJtvns42Q= Subject key identifier: EE:F1:79:10:25:39:E1:64:AC:FA:A8:C5:FC:31:FA:FA:DE:77:AC:0D Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 07FCA33FCF6791CF328B68A878A4C3220D8C318D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 021C Signing time: Sun 02 Nov 2025 19:11:28 +0000 Manifest this update: Sun 02 Nov 2025 19:06:28 +0000 Manifest next update: Thu 06 Nov 2025 02:25:28 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: RZNjKJQn8MNIqUeRzmqtbdCsJSXKbwaHUIpmxy1Yb68=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 02:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:fc:a3:3f:cf:67:91:cf:32:8b:68:a8:78:a4:c3:22:0d:8c:31:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Nov 2 19:06:28 2025 GMT Not After : Nov 6 02:25:28 2025 GMT Subject: CN=EEF179102539E164ACFAA8C5FC31FAFADE77AC0D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f5:e6:07:7f:a6:e2:6e:71:d9:a9:83:06:63: c2:46:0f:19:b5:2a:c0:62:53:5c:b4:92:38:5b:b1: 4b:f6:e3:9b:64:4c:6d:0f:17:4a:17:b3:72:42:bd: 6f:df:cb:2e:be:42:a0:98:7f:bb:e0:87:e4:37:d7: ff:bc:6d:56:ad:1b:00:e0:19:c6:e1:20:a3:1d:2f: 45:c8:05:22:27:93:36:bc:41:4e:f6:0d:bf:91:aa: 88:4a:ce:a9:47:d0:2b:f4:b1:6d:39:74:c0:30:fd: 0b:f9:5e:c5:a8:4d:6d:5a:9a:36:eb:cd:05:c1:a8: e0:b9:8b:e2:ea:c3:3d:84:fc:79:de:8c:cd:a0:72: f9:cc:ed:41:23:9e:7a:c8:39:95:1b:87:61:67:9c: ff:ed:c6:d5:5e:77:fc:e7:dc:79:70:b3:13:42:e1: e2:c2:d4:67:cf:0c:3f:73:6e:eb:eb:ea:f2:ee:66: a6:6a:d8:4e:61:5f:3e:77:94:12:a2:0e:2c:d5:f8: a0:2c:41:38:c6:5e:79:b6:6e:c2:5a:bd:69:26:54: 60:c7:6d:28:2e:27:d4:81:5b:8d:7c:9c:49:5d:65: df:d6:05:ff:6d:ba:18:60:87:11:e2:b5:68:70:65: ab:4c:5c:20:cc:94:f9:bc:6d:8c:6e:cd:8a:f6:6a: fc:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:F1:79:10:25:39:E1:64:AC:FA:A8:C5:FC:31:FA:FA:DE:77:AC:0D X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:e2:bf:18:9f:9f:90:d4:6a:e8:ca:1e:3e:93:3c:89:fb:1f: aa:3d:5a:8c:16:84:56:6e:eb:1c:7b:98:2e:10:2f:03:30:0e: 9b:0e:76:6e:2a:7e:52:ff:54:ea:e4:49:66:a7:9b:62:79:c7: 79:47:e5:db:8d:53:32:c7:dc:b2:90:46:fb:f2:62:ae:1a:36: ad:69:48:d6:8c:12:5f:76:4c:3f:9f:a4:06:c0:7d:5f:ee:2f: 91:9a:17:83:69:17:b7:5c:28:88:f5:c2:bb:93:0f:25:02:2f: 55:0d:8e:f8:cb:ed:89:ae:16:d6:1b:42:f4:25:c2:56:59:bd: aa:a6:9d:ef:86:ad:8b:53:f0:77:a0:a3:ee:a3:20:35:6f:d0: f6:18:c7:d1:54:6b:95:6f:72:91:5b:67:ee:52:f5:ec:ed:24: fd:7d:23:d3:6e:05:8c:76:6c:51:c4:a5:0b:23:73:1c:3d:53: 48:16:cc:38:3d:5d:39:f9:ca:f3:a0:b7:07:21:15:51:bd:5b: df:ed:95:c5:01:28:f2:a9:0f:d7:ba:68:d1:d1:1f:fe:36:e0: cb:4a:5c:b5:57:08:cb:f2:ce:58:e1:71:9c:5d:9d:0d:42:1f: 16:20:8d:ba:e3:e7:60:fa:a0:0f:98:75:db:56:bc:5a:11:a2: 99:70:84:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB/yjP89nkc8yi2ioeKTDIg2MMY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTExMDIxOTA2MjhaFw0yNTExMDYwMjI1MjhaMDMxMTAvBgNV BAMTKEVFRjE3OTEwMjUzOUUxNjRBQ0ZBQThDNUZDMzFGQUZBREU3N0FDMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9eYHf6bibnHZqYMGY8JGDxm1 KsBiU1y0kjhbsUv245tkTG0PF0oXs3JCvW/fyy6+QqCYf7vgh+Q31/+8bVatGwDg GcbhIKMdL0XIBSInkza8QU72Db+RqohKzqlH0Cv0sW05dMAw/Qv5XsWoTW1amjbr zQXBqOC5i+Lqwz2E/HnejM2gcvnM7UEjnnrIOZUbh2FnnP/txtVed/zn3HlwsxNC 4eLC1GfPDD9zbuvr6vLuZqZq2E5hXz53lBKiDizV+KAsQTjGXnm2bsJavWkmVGDH bSguJ9SBW418nEldZd/WBf9tuhhghxHitWhwZatMXCDMlPm8bYxuzYr2avw7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7vF5ECU54WSs+qjF/DH6+t53rA0wHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFPivxifn5DUaujKHj6TPIn7H6o9WowWhFZu 6xx7mC4QLwMwDpsOdm4qflL/VOrkSWanm2J5x3lH5duNUzLH3LKQRvvyYq4aNq1p SNaMEl92TD+fpAbAfV/uL5GaF4NpF7dcKIj1wruTDyUCL1UNjvjL7YmuFtYbQvQl wlZZvaqmne+GrYtT8Hego+6jIDVv0PYYx9FUa5VvcpFbZ+5S9eztJP19I9NuBYx2 bFHEpQsjcxw9U0gWzDg9XTn5yvOgtwchFVG9W9/tlcUBKPKpD9e6aNHRH/424MtK XLVXCMvyzljhcZxdnQ1CHxYgjbrj52D6oA+YddtWvFoRoplwhOg= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:55 2025 by rpki-client