$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: QORCiJ38LsGGlMnbAO2H4uPTnI1tYBQS3dhkaT9a/5M= Subject key identifier: 2D:16:27:1E:58:B3:91:9E:C0:87:E2:D8:7E:E7:CE:92:21:60:F1:CD Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 5BE649752A17F31DEFEB8CED56E16F76879DED3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 04DF Signing time: Sun 15 Jun 2025 04:11:36 +0000 Manifest this update: Sun 15 Jun 2025 04:06:36 +0000 Manifest next update: Wed 18 Jun 2025 05:28:36 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: uF3QF7yCYkJioj1bxb2say8sloDd2ewT9RtLsmLkm9A=) 2: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) 3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:e6:49:75:2a:17:f3:1d:ef:eb:8c:ed:56:e1:6f:76:87:9d:ed:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Jun 15 04:06:36 2025 GMT Not After : Jun 18 05:28:36 2025 GMT Subject: CN=2D16271E58B3919EC087E2D87EE7CE922160F1CD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b5:ea:83:3c:48:ef:61:0b:db:4c:6d:3c:6b: e3:91:92:f6:23:ed:a8:dd:ba:58:cb:46:5d:df:2b: 69:54:bc:ef:c2:99:8c:89:a6:61:d5:49:a8:fd:b7: 65:6d:bd:4e:dc:05:87:d5:60:f5:b7:38:e2:b8:08: 1e:2a:04:39:fe:92:75:7e:72:db:6c:fe:62:f0:6f: c2:ba:96:99:da:59:7e:58:ca:1a:16:ba:b4:94:cc: f1:d8:16:93:14:20:ee:b5:b9:50:5b:27:11:f8:6d: 60:88:b6:d0:a6:1f:8c:14:c5:13:a3:52:89:63:9c: 7d:56:e3:fd:cb:92:d6:a2:e2:26:7e:bc:17:e7:b2: 73:be:20:30:8e:b6:24:38:f0:97:48:c5:61:98:24: b2:44:20:9f:02:0a:e3:9c:a5:df:05:fc:ff:8c:4d: 08:50:3e:fa:38:0b:b2:41:64:d5:95:17:1f:92:ad: cb:d9:84:18:89:61:81:99:4b:b2:2a:3a:14:62:43: 0f:48:21:c1:f2:fe:b5:5f:54:b4:b9:17:5a:83:96: d4:f5:14:90:c8:b7:69:15:56:af:67:dc:94:e1:e4: 95:73:27:14:0b:70:d6:9c:2c:0c:a4:3c:b2:d5:d9: f5:07:31:3a:fe:4c:ed:9b:c6:0a:d5:5c:c6:37:c2: 3d:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:16:27:1E:58:B3:91:9E:C0:87:E2:D8:7E:E7:CE:92:21:60:F1:CD X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:7a:2f:c9:87:59:8e:28:8a:67:87:68:e1:b7:59:f4:31:8a: 48:21:2d:4c:8f:19:1d:ab:91:0e:0b:97:e0:14:f6:63:b4:05: 58:3c:05:b9:86:04:da:25:52:f6:58:ba:d2:9c:4e:a2:9e:bc: 63:09:b7:d3:4d:b4:52:3b:49:fa:4b:fe:cc:ed:0c:b8:e4:11: e3:77:ff:67:50:79:15:bc:a3:3e:37:02:17:dc:e9:7c:11:55: a8:6d:22:56:54:c0:8e:e6:70:c4:73:f0:98:c8:3e:b1:8e:0d: 8b:69:e7:21:13:1c:bb:3b:db:7c:65:19:d4:20:f0:de:d2:44: c9:ef:00:da:84:50:6d:eb:91:b1:fd:93:aa:1f:57:fc:28:8f: 4e:14:25:1b:12:a7:e7:5a:7b:16:62:b3:d9:24:3d:f0:7e:ac: fb:7e:ab:55:f4:13:12:15:fe:0c:5d:cf:73:42:9e:f8:9b:07: 07:18:3e:22:4b:70:46:94:71:b1:04:cf:c9:60:69:92:35:63: e4:10:1b:d4:d7:cd:e2:6e:d7:c2:f1:f6:7f:d4:f8:98:85:c7: 73:7f:f4:3a:7d:88:4b:1a:69:ac:e5:d6:5c:e7:4d:bf:40:71: cb:83:6c:79:8e:5a:89:47:a1:3f:47:9e:c1:db:a5:a4:a0:ed: a3:57:f0:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW+ZJdSoX8x3v64ztVuFvdoed7TwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNTA2MTUwNDA2MzZaFw0yNTA2MTgwNTI4MzZaMDMxMTAvBgNV BAMTKDJEMTYyNzFFNThCMzkxOUVDMDg3RTJEODdFRTdDRTkyMjE2MEYxQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoteqDPEjvYQvbTG08a+ORkvYj 7ajduljLRl3fK2lUvO/CmYyJpmHVSaj9t2VtvU7cBYfVYPW3OOK4CB4qBDn+knV+ ctts/mLwb8K6lpnaWX5YyhoWurSUzPHYFpMUIO61uVBbJxH4bWCIttCmH4wUxROj UoljnH1W4/3Lktai4iZ+vBfnsnO+IDCOtiQ48JdIxWGYJLJEIJ8CCuOcpd8F/P+M TQhQPvo4C7JBZNWVFx+SrcvZhBiJYYGZS7IqOhRiQw9IIcHy/rVfVLS5F1qDltT1 FJDIt2kVVq9n3JTh5JVzJxQLcNacLAykPLLV2fUHMTr+TO2bxgrVXMY3wj01AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULRYnHlizkZ7Ah+LYfufOkiFg8c0wHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIF6L8mHWY4oimeHaOG3WfQxikghLUyPGR2r kQ4Ll+AU9mO0BVg8BbmGBNolUvZYutKcTqKevGMJt9NNtFI7SfpL/sztDLjkEeN3 /2dQeRW8oz43Ahfc6XwRVahtIlZUwI7mcMRz8JjIPrGODYtp5yETHLs723xlGdQg 8N7SRMnvANqEUG3rkbH9k6ofV/woj04UJRsSp+daexZis9kkPfB+rPt+q1X0ExIV /gxdz3NCnvibBwcYPiJLcEaUcbEEz8lgaZI1Y+QQG9TXzeJu18Lx9n/U+JiFx3N/ 9Dp9iEsaaazl1lznTb9AccuDbHmOWolHoT9HnsHbpaSg7aNX8LA= -----END CERTIFICATE-----Generated at Sun Jun 15 19:14:57 2025 by rpki-client