$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: 2HoHJUOCKmg8mErIK5vYKBE7p2FgQqdZr0w5xK5sw4Q= Subject key identifier: 71:2B:0C:CB:60:CD:F0:00:C1:AF:63:31:B9:BD:80:C5:E3:5A:B3:48 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 787CEA6284E39353BBF2BBA1C71CD4797C84A472 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01F4 Signing time: Fri 08 Aug 2025 11:31:30 +0000 Manifest this update: Fri 08 Aug 2025 11:26:30 +0000 Manifest next update: Mon 11 Aug 2025 18:09:30 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: AJauDGkHNVWyja3+bOOZzy6gm+yPpkJmOoRxsBRYNPQ=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 18:09:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:7c:ea:62:84:e3:93:53:bb:f2:bb:a1:c7:1c:d4:79:7c:84:a4:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Aug 8 11:26:30 2025 GMT Not After : Aug 11 18:09:30 2025 GMT Subject: CN=712B0CCB60CDF000C1AF6331B9BD80C5E35AB348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:3e:26:65:42:d0:6f:cb:81:50:b7:13:17:19: 76:3c:23:ed:50:ab:9f:de:ed:32:f6:78:ea:67:5c: e7:6c:5c:fc:50:42:44:80:91:fe:10:d7:22:c8:a7: e0:f9:19:de:7d:5a:8e:6e:a7:09:0c:62:f8:d4:82: 00:85:85:ea:f7:a9:81:6c:0e:cb:f5:e1:7e:1e:d0: c1:1c:63:3e:b5:8d:b6:46:69:2c:15:70:d2:8c:8f: d9:de:b3:54:5f:43:66:55:35:9b:62:77:2d:4b:6c: 21:40:30:43:c3:26:31:50:df:96:36:a1:1d:3e:16: ef:7b:25:5a:84:eb:a0:87:e0:6c:8f:92:45:19:1a: 69:0a:2f:9d:5c:e6:22:f9:3d:72:e4:2b:0c:12:4d: ea:28:c4:14:66:fe:b9:12:7d:55:9a:42:ea:a8:83: 6d:6e:30:4e:30:91:80:04:a1:e6:25:76:84:a1:95: 3b:29:15:60:bb:b5:ea:95:75:5c:50:a2:91:8f:1b: 9f:05:ec:9e:8d:54:ee:9c:88:24:30:63:41:4d:10: dc:84:89:15:07:bd:75:9b:3c:96:59:ed:67:ba:e5: 0b:f9:13:f5:40:2a:f4:d7:90:bb:33:84:b0:3d:1c: 78:d0:a3:91:23:c2:28:d5:ac:9a:d2:38:0a:a5:3f: 7f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:2B:0C:CB:60:CD:F0:00:C1:AF:63:31:B9:BD:80:C5:E3:5A:B3:48 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:4d:85:5e:81:68:da:4c:7f:91:df:ce:99:b3:82:20:09:b6: 25:3b:9f:fb:4e:92:35:5d:fb:0a:5c:ed:41:40:64:2a:8c:e8: f8:49:cf:45:33:2b:59:71:9b:58:3f:7a:aa:d5:89:7f:53:e7: ac:c5:e8:d8:90:3f:77:53:e2:6b:d9:ce:3b:26:eb:ac:ff:05: 7d:1a:0d:00:4e:54:31:4b:52:f8:35:54:9d:e7:53:ac:71:0e: 63:c3:7a:d6:f4:53:4e:37:97:eb:f5:83:ef:a2:40:77:24:82: f8:a8:2c:c9:2f:b8:f5:82:75:f2:bb:fd:d8:bf:26:d9:1d:f7: cc:eb:0c:a7:90:ca:4c:b9:60:3d:71:b1:55:42:4f:56:df:88: a1:bb:af:6d:74:c0:46:d2:de:42:98:d7:ba:59:f9:9f:b5:38: 4f:b4:87:3d:bb:f3:98:61:bb:b8:93:ea:68:5d:35:58:ca:06: 19:a7:9b:d0:2a:b1:29:26:0f:bf:47:48:6b:c3:d6:e7:c6:99: 8a:b7:53:af:ea:76:a9:73:f9:67:42:fa:74:f8:d3:f2:fe:c3: 38:14:92:77:a7:b0:a9:75:5f:9b:59:55:9b:a9:e2:b6:56:e2: 8a:21:7d:ad:05:15:90:6a:53:40:c8:cd:bb:0c:56:40:44:68: c0:f1:c9:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeHzqYoTjk1O78ruhxxzUeXyEpHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA4MDgxMTI2MzBaFw0yNTA4MTExODA5MzBaMDMxMTAvBgNV BAMTKDcxMkIwQ0NCNjBDREYwMDBDMUFGNjMzMUI5QkQ4MEM1RTM1QUIzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOPiZlQtBvy4FQtxMXGXY8I+1Q q5/e7TL2eOpnXOdsXPxQQkSAkf4Q1yLIp+D5Gd59Wo5upwkMYvjUggCFher3qYFs Dsv14X4e0MEcYz61jbZGaSwVcNKMj9nes1RfQ2ZVNZtidy1LbCFAMEPDJjFQ35Y2 oR0+Fu97JVqE66CH4GyPkkUZGmkKL51c5iL5PXLkKwwSTeooxBRm/rkSfVWaQuqo g21uME4wkYAEoeYldoShlTspFWC7teqVdVxQopGPG58F7J6NVO6ciCQwY0FNENyE iRUHvXWbPJZZ7We65Qv5E/VAKvTXkLszhLA9HHjQo5EjwijVrJrSOAqlP39zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcSsMy2DN8ADBr2Mxub2AxeNas0gwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEZNhV6BaNpMf5HfzpmzgiAJtiU7n/tOkjVd +wpc7UFAZCqM6PhJz0UzK1lxm1g/eqrViX9T56zF6NiQP3dT4mvZzjsm66z/BX0a DQBOVDFLUvg1VJ3nU6xxDmPDetb0U043l+v1g++iQHckgvioLMkvuPWCdfK7/di/ Jtkd98zrDKeQyky5YD1xsVVCT1bfiKG7r210wEbS3kKY17pZ+Z+1OE+0hz2785hh u7iT6mhdNVjKBhmnm9AqsSkmD79HSGvD1ufGmYq3U6/qdqlz+WdC+nT40/L+wzgU knensKl1X5tZVZup4rZW4oohfa0FFZBqU0DIzbsMVkBEaMDxyXc= -----END CERTIFICATE-----Generated at Sat Aug 9 20:32:45 2025 by rpki-client