$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: Up/BXaEl0wADat07Ns4fu4tq8nTgvPBgkM16uuMAZSE= Subject key identifier: 99:F7:0A:3B:FC:C7:4D:3A:FA:90:CC:05:EC:B3:0E:1B:65:CE:9C:EB Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 636C2A041B626554A2F24B3BDF4C900A0CD86669 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 0498 Signing time: Mon 16 Jun 2025 22:01:33 +0000 Manifest this update: Mon 16 Jun 2025 21:56:33 +0000 Manifest next update: Fri 20 Jun 2025 09:28:33 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: h8WXBtHzs7a0XLJ/gHVUTfjA6bHGy4R/++AHWPhqE8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 09:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6c:2a:04:1b:62:65:54:a2:f2:4b:3b:df:4c:90:0a:0c:d8:66:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Jun 16 21:56:33 2025 GMT Not After : Jun 20 09:28:33 2025 GMT Subject: CN=99F70A3BFCC74D3AFA90CC05ECB30E1B65CE9CEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:13:e5:07:b4:e6:0c:bf:5e:a7:6d:ba:b3: 40:55:c6:d2:5a:93:4b:24:3e:48:61:fe:b6:37:68: 32:88:b5:fa:f0:e1:8c:18:e9:8c:0b:f0:2d:57:59: 53:46:e0:c4:d2:4a:e5:de:b2:65:2e:fc:b3:76:66: 90:ac:64:6e:93:12:9b:7c:d3:e2:25:0e:1c:53:9a: 1b:4c:6d:f9:5d:53:84:41:46:23:b1:81:d7:73:97: f7:fc:f5:bf:a7:78:0a:57:de:94:f6:2e:ec:1a:2d: 3c:cb:e7:e0:71:f7:fa:f9:81:d7:bf:21:83:53:31: 47:2a:28:ab:5b:e9:97:f1:83:c7:bf:69:84:c4:29: e1:61:54:b1:95:02:93:08:6f:7b:bc:05:96:51:46: 33:8b:5a:ac:73:75:2e:e8:5e:10:aa:50:dc:ba:d8: 7e:4a:96:00:93:7b:3e:94:26:5d:f9:3e:43:30:93: e2:1e:60:38:5f:06:f4:ee:12:d1:4e:3b:18:6b:8e: f4:a5:ad:11:77:02:cb:67:05:17:73:a9:b6:7a:45: 87:c8:bd:b9:bc:77:ea:92:92:96:d0:3a:8f:ce:b8: f1:9e:91:0b:15:db:ee:14:69:7a:4e:44:01:f7:38: ba:ea:d0:99:16:f4:fe:98:94:e9:13:22:72:da:1e: 0e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:F7:0A:3B:FC:C7:4D:3A:FA:90:CC:05:EC:B3:0E:1B:65:CE:9C:EB X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:7d:2c:a4:ca:1a:69:9e:60:65:c4:24:57:40:ac:07:21:15: 03:75:ca:fb:3f:fc:ae:6c:b6:0b:18:b7:e6:b8:2e:ca:68:11: 3f:77:f1:77:d9:a7:36:3f:f8:9a:12:53:cd:27:05:c3:51:1a: c8:58:74:83:af:85:b3:73:94:d8:71:6e:a3:bf:14:c2:e2:b2: 0b:73:6d:94:f0:40:8f:2e:24:50:45:0a:0c:5c:f4:7f:a6:ad: 85:c7:43:d6:a2:40:d1:68:54:92:da:8e:f5:31:fa:ca:1f:f6: 35:7d:44:fb:02:e1:55:ef:28:ce:31:f5:ac:d9:99:49:17:d4: 6b:cf:2c:2c:db:07:a5:ca:7e:47:6c:19:13:66:75:92:9b:50: 44:c2:d4:80:04:3e:b5:23:06:e1:9a:eb:24:26:1b:75:d3:68: 18:3f:1e:98:d6:63:0c:98:f1:9f:a3:5e:ca:6f:db:eb:66:89: 46:71:82:58:71:b7:3b:dd:af:b8:1e:89:de:6b:80:8f:c1:fb: 94:cb:ac:29:6c:72:b1:ab:1a:42:09:a1:ea:08:29:05:d7:68: 1c:e4:cf:4f:25:04:3f:d0:8a:c3:d3:d1:62:61:8f:c8:43:4e: e8:67:26:2c:81:c6:51:d7:96:31:f6:09:7b:99:b5:08:32:78: b4:1d:de:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY2wqBBtiZVSi8ks730yQCgzYZmkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTA2MTYyMTU2MzNaFw0yNTA2MjAwOTI4MzNaMDMxMTAvBgNV BAMTKDk5RjcwQTNCRkNDNzREM0FGQTkwQ0MwNUVDQjMwRTFCNjVDRTlDRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kRPlB7TmDL9ep226s0BVxtJa k0skPkhh/rY3aDKItfrw4YwY6YwL8C1XWVNG4MTSSuXesmUu/LN2ZpCsZG6TEpt8 0+IlDhxTmhtMbfldU4RBRiOxgddzl/f89b+neApX3pT2LuwaLTzL5+Bx9/r5gde/ IYNTMUcqKKtb6Zfxg8e/aYTEKeFhVLGVApMIb3u8BZZRRjOLWqxzdS7oXhCqUNy6 2H5KlgCTez6UJl35PkMwk+IeYDhfBvTuEtFOOxhrjvSlrRF3AstnBRdzqbZ6RYfI vbm8d+qSkpbQOo/OuPGekQsV2+4UaXpORAH3OLrq0JkW9P6YlOkTInLaHg6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmfcKO/zHTTr6kMwF7LMOG2XOnOswHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMR9LKTKGmmeYGXEJFdArAchFQN1yvs//K5s tgsYt+a4LspoET938XfZpzY/+JoSU80nBcNRGshYdIOvhbNzlNhxbqO/FMLisgtz bZTwQI8uJFBFCgxc9H+mrYXHQ9aiQNFoVJLajvUx+sof9jV9RPsC4VXvKM4x9azZ mUkX1GvPLCzbB6XKfkdsGRNmdZKbUETC1IAEPrUjBuGa6yQmG3XTaBg/HpjWYwyY 8Z+jXspv2+tmiUZxglhxtzvdr7geid5rgI/B+5TLrClscrGrGkIJoeoIKQXXaBzk z08lBD/QisPT0WJhj8hDTuhnJiyBxlHXljH2CXuZtQgyeLQd3ig= -----END CERTIFICATE-----Generated at Wed Jun 18 00:34:25 2025 by rpki-client