$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: /GQF5/pbesTqX3milvX4qdY/3cAVFlo2dmwe4iMtCjI= Subject key identifier: D0:16:C6:0D:BF:6B:B3:80:8C:9D:FF:7E:81:D7:5E:C7:C5:34:67:52 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 5C0D15C769B369D5197585D6E1F63A4E17938F08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01C7 Signing time: Tue 29 Apr 2025 12:11:25 +0000 Manifest this update: Tue 29 Apr 2025 12:06:25 +0000 Manifest next update: Fri 02 May 2025 12:23:25 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) 3: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: Txp8GX/CWRLzQ6VNb9RTrWWYeC7E4UqXYAzPFItxow4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 12:23:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:0d:15:c7:69:b3:69:d5:19:75:85:d6:e1:f6:3a:4e:17:93:8f:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Apr 29 12:06:25 2025 GMT Not After : May 2 12:23:25 2025 GMT Subject: CN=D016C60DBF6BB3808C9DFF7E81D75EC7C5346752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:96:2c:87:e5:1d:3a:83:62:5c:ef:46:95: 50:34:70:3d:b9:ca:31:8c:fe:ff:83:37:12:3d:ba: 1e:5a:38:d3:d9:12:42:d0:de:b6:1b:0f:ed:00:1f: ad:81:6c:4e:40:b0:d4:ce:e8:f9:b7:d1:eb:0c:5d: 76:31:93:d1:a3:77:f5:86:2b:dc:3f:a0:80:c2:16: 7f:90:1b:cb:ff:03:79:8c:09:6a:b3:0c:ad:8b:fd: e9:25:79:b5:c0:46:38:fb:3b:48:4e:bf:44:da:68: a5:b3:8b:68:e7:67:ad:21:6b:ad:9e:c3:a2:1a:e2: 2a:ec:5a:7c:85:f9:8b:5a:16:1c:fd:78:8e:ae:1a: 14:0d:b5:e7:aa:a6:45:d9:e8:7a:a3:fa:fd:25:4e: b0:ba:84:19:66:c2:d4:3b:1b:41:f2:7a:06:bd:08: fb:dc:7a:b9:7b:57:5b:2e:a2:90:a1:71:e6:97:3b: ac:0a:a7:22:4d:2c:dd:ae:49:e7:11:15:fb:05:33: 0a:c9:05:ab:ed:b3:18:89:0c:4d:68:37:5b:ba:dd: a1:c1:b7:2b:a4:e8:c9:4e:68:05:ff:a5:0d:20:31: 20:b6:81:b8:b7:ab:d6:cf:99:ad:17:b7:d7:a8:54: 39:1a:68:0e:18:f8:b9:3c:f1:c4:ee:5e:0e:c5:9a: 5e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:16:C6:0D:BF:6B:B3:80:8C:9D:FF:7E:81:D7:5E:C7:C5:34:67:52 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:88:a6:1d:d1:a4:19:83:4c:28:8d:21:42:27:1e:16:1c:50: d9:e0:2a:ef:c9:c9:ea:16:f2:7f:ae:fd:69:12:81:23:cb:26: a2:00:58:bc:81:d1:c5:1e:e3:b3:c3:fc:71:fd:f2:c1:a9:16: c1:42:c1:74:93:b9:85:4b:06:e9:ca:4a:22:84:70:33:26:14: cb:8c:4a:ab:d7:71:97:52:9c:cb:11:d7:57:65:31:d4:68:d0: 70:f6:fa:5b:22:c1:a8:9b:1b:5a:ed:57:ea:3e:ed:09:bf:b1: ff:e8:86:2a:d6:82:f5:e2:17:d4:b2:20:ac:85:fd:61:6a:37: 52:80:6a:03:f5:53:6f:a4:12:10:cf:20:11:ec:d4:4f:7b:e5: b3:6e:f5:2e:cb:8f:a9:94:a8:67:ab:45:3b:e1:05:61:12:ed: 30:81:de:0c:b8:2d:d3:67:f9:17:2c:1c:31:10:63:7f:1c:75: 11:dd:2b:92:3c:c8:44:75:e6:29:24:e8:56:1f:5d:28:2d:d8: ea:64:dc:3b:f1:02:d1:87:e2:d3:9b:85:7b:9f:10:ee:9e:5e: 7c:a1:cf:b2:90:f7:ab:00:70:e9:1e:df:7a:a4:34:ac:b0:8c: 12:cf:29:cc:0e:e1:42:e8:5f:90:17:46:e1:a1:d2:59:f7:7a: 46:70:45:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXA0Vx2mzadUZdYXW4fY6TheTjwgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA0MjkxMjA2MjVaFw0yNTA1MDIxMjIzMjVaMDMxMTAvBgNV BAMTKEQwMTZDNjBEQkY2QkIzODA4QzlERkY3RTgxRDc1RUM3QzUzNDY3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUZJYsh+UdOoNiXO9GlVA0cD25 yjGM/v+DNxI9uh5aONPZEkLQ3rYbD+0AH62BbE5AsNTO6Pm30esMXXYxk9Gjd/WG K9w/oIDCFn+QG8v/A3mMCWqzDK2L/eklebXARjj7O0hOv0TaaKWzi2jnZ60ha62e w6Ia4irsWnyF+YtaFhz9eI6uGhQNteeqpkXZ6Hqj+v0lTrC6hBlmwtQ7G0Hyega9 CPvcerl7V1suopChceaXO6wKpyJNLN2uSecRFfsFMwrJBavtsxiJDE1oN1u63aHB tyuk6MlOaAX/pQ0gMSC2gbi3q9bPma0Xt9eoVDkaaA4Y+Lk88cTuXg7Fml69AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0BbGDb9rs4CMnf9+gddex8U0Z1IwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKIph3RpBmDTCiNIUInHhYcUNngKu/JyeoW 8n+u/WkSgSPLJqIAWLyB0cUe47PD/HH98sGpFsFCwXSTuYVLBunKSiKEcDMmFMuM SqvXcZdSnMsR11dlMdRo0HD2+lsiwaibG1rtV+o+7Qm/sf/ohirWgvXiF9SyIKyF /WFqN1KAagP1U2+kEhDPIBHs1E975bNu9S7Lj6mUqGerRTvhBWES7TCB3gy4LdNn +RcsHDEQY38cdRHdK5I8yER15ikk6FYfXSgt2Opk3DvxAtGH4tObhXufEO6eXnyh z7KQ96sAcOke33qkNKywjBLPKcwO4ULoX5AXRuGh0ln3ekZwRdM= -----END CERTIFICATE-----Generated at Wed Apr 30 14:58:46 2025 by rpki-client