$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: nx0xfiYWPzH8BIpt6487ZZ+B0FeMw77JTPt7y7tFTAk= Subject key identifier: 97:4B:7D:EC:F1:E9:39:10:A4:33:AF:B6:A4:F8:06:E8:35:59:55:E4 Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 1FA1807478671AEF59FFE69CAD58DDDFA0E6ED08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 04D6 Signing time: Mon 03 Nov 2025 22:33:27 +0000 Manifest this update: Mon 03 Nov 2025 22:28:27 +0000 Manifest next update: Fri 07 Nov 2025 06:46:27 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: z8QEpeGQymXxAUYVsXIG+/IwXPnY5Psz2Tv+rAkR/A8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 06:46:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a1:80:74:78:67:1a:ef:59:ff:e6:9c:ad:58:dd:df:a0:e6:ed:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Nov 3 22:28:27 2025 GMT Not After : Nov 7 06:46:27 2025 GMT Subject: CN=974B7DECF1E93910A433AFB6A4F806E8355955E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:06:6b:50:19:59:cc:48:f8:01:21:f1:3d:da: 30:5e:62:6b:3f:3e:de:d7:25:eb:dc:7a:7e:d7:6e: 3f:b0:e0:0f:2b:bd:f7:d6:71:e4:87:34:71:2b:87: 06:15:8a:29:8d:c6:9f:4d:28:8f:a4:64:79:e9:9a: e9:49:ef:2a:8d:b1:95:45:b8:d7:29:40:b0:70:78: 59:f2:31:8b:32:27:8d:09:3b:3c:70:b4:9f:8c:f4: 50:24:57:20:e9:77:13:a8:84:30:04:0a:ef:8a:03: 8c:17:c5:62:6c:92:45:c3:a7:50:45:d3:c7:e2:62: e8:3c:62:2e:6a:c0:7b:e2:01:d1:c5:f3:8f:2d:d5: a8:6b:d6:b4:fe:af:30:8b:b7:23:08:fd:cf:83:01: fa:c9:12:09:5b:6d:0f:3f:a1:45:38:68:85:65:a5: 97:79:87:91:e5:6e:69:af:c1:8b:73:16:99:f7:ce: 55:cc:8a:e6:d6:b5:3b:7e:e0:93:ab:74:cd:12:7d: f7:dc:58:48:19:1b:43:5c:2e:f0:c1:21:db:72:de: 92:dc:b7:08:ac:9d:30:cc:6c:ec:57:fc:dd:13:9b: 78:70:01:a9:c8:d7:7d:b3:01:6d:23:8e:b8:16:b0: 26:be:a2:20:77:08:21:86:17:76:56:25:7f:7a:2a: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4B:7D:EC:F1:E9:39:10:A4:33:AF:B6:A4:F8:06:E8:35:59:55:E4 X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:f3:0a:a9:81:51:27:ff:b8:18:12:67:97:30:67:26:a3:6a: 78:5b:df:56:36:28:53:47:0d:be:89:29:1f:ac:37:e4:2a:1e: 18:56:22:5a:9f:5f:f3:96:c2:e1:3b:ec:55:31:0d:a8:30:21: 93:56:37:d1:9d:6c:4d:1c:dc:71:69:13:1e:ae:96:26:a9:65: f3:74:2e:ca:e5:02:08:a0:0a:f6:71:65:cb:9a:43:fc:d9:7f: 9b:88:b7:d7:2c:af:9a:3e:a1:ae:6c:ff:5c:d0:d1:42:14:cb: 47:28:c5:d9:fb:f2:c7:aa:7b:7d:e2:32:67:4d:08:7c:aa:40: ac:a5:27:79:e7:ee:d4:f8:7f:fb:35:8d:e7:cb:89:41:cb:9c: 16:4d:22:e7:c5:8c:62:b7:68:74:56:d4:57:7c:4b:11:81:84: f1:d1:59:e4:a1:4e:ac:83:45:0c:b2:69:6a:07:e4:59:b6:8a: 7b:2c:e7:27:07:61:93:36:ed:32:70:4b:9b:53:f7:67:0f:94: 4b:3f:4e:df:17:7a:4b:00:79:95:8d:80:4e:77:75:85:bc:ab: 5f:73:89:8b:ec:cf:08:fe:15:4a:36:84:8c:cb:06:56:77:f1: 9a:17:f5:f0:6d:66:0d:46:c1:bf:7d:26:17:21:1a:cf:da:56: ce:b4:a1:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6GAdHhnGu9Z/+acrVjd36Dm7QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTExMDMyMjI4MjdaFw0yNTExMDcwNjQ2MjdaMDMxMTAvBgNV BAMTKDk3NEI3REVDRjFFOTM5MTBBNDMzQUZCNkE0RjgwNkU4MzU1OTU1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBBmtQGVnMSPgBIfE92jBeYms/ Pt7XJevcen7Xbj+w4A8rvffWceSHNHErhwYViimNxp9NKI+kZHnpmulJ7yqNsZVF uNcpQLBweFnyMYsyJ40JOzxwtJ+M9FAkVyDpdxOohDAECu+KA4wXxWJskkXDp1BF 08fiYug8Yi5qwHviAdHF848t1ahr1rT+rzCLtyMI/c+DAfrJEglbbQ8/oUU4aIVl pZd5h5HlbmmvwYtzFpn3zlXMiubWtTt+4JOrdM0SfffcWEgZG0NcLvDBIdty3pLc twisnTDMbOxX/N0Tm3hwAanI132zAW0jjrgWsCa+oiB3CCGGF3ZWJX96KqrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0t97PHpORCkM6+2pPgG6DVZVeQwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALTzCqmBUSf/uBgSZ5cwZyajanhb31Y2KFNH Db6JKR+sN+QqHhhWIlqfX/OWwuE77FUxDagwIZNWN9GdbE0c3HFpEx6uliapZfN0 LsrlAgigCvZxZcuaQ/zZf5uIt9csr5o+oa5s/1zQ0UIUy0coxdn78seqe33iMmdN CHyqQKylJ3nn7tT4f/s1jefLiUHLnBZNIufFjGK3aHRW1Fd8SxGBhPHRWeShTqyD RQyyaWoH5Fm2inss5ycHYZM27TJwS5tT92cPlEs/Tt8XeksAeZWNgE53dYW8q19z iYvszwj+FUo2hIzLBlZ38ZoX9fBtZg1Gwb99JhchGs/aVs60oWM= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:35 2025 by rpki-client