$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: fu0Jn1MCXnR6AgIcd4XtpJEjAxqR0/mYAGO10FpQk5Y= Subject key identifier: 57:1A:63:DC:F9:53:F5:84:81:76:FC:F1:07:52:98:C7:E6:8C:C0:C0 Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 197E843E1DC6C150C5CED794D909FB6C72A0D3C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 04AF Signing time: Thu 07 Aug 2025 15:01:34 +0000 Manifest this update: Thu 07 Aug 2025 14:56:34 +0000 Manifest next update: Mon 11 Aug 2025 01:23:34 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: L1LTWd2WaqEzLvKSUJ0sff6gsfUbG2Sus5mBKn0iFaQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 23:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:7e:84:3e:1d:c6:c1:50:c5:ce:d7:94:d9:09:fb:6c:72:a0:d3:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Aug 7 14:56:34 2025 GMT Not After : Aug 11 01:23:34 2025 GMT Subject: CN=571A63DCF953F5848176FCF1075298C7E68CC0C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:14:ed:ff:1e:ae:c7:d1:b4:ce:3a:6c:bf:9e: 2e:57:6a:50:bd:45:dc:2d:3a:62:18:36:8b:32:85: 15:66:37:68:fc:cc:2a:0e:b3:74:c5:28:cd:2f:3f: b1:df:f7:5e:93:95:25:03:01:1f:ee:f5:09:17:f3: 0c:56:01:39:be:58:06:43:39:39:f2:c1:6e:b3:7c: fc:07:b6:64:dd:de:6e:10:87:95:ba:03:78:a3:12: 96:7e:df:e7:47:89:b4:4b:4c:1c:1f:2c:ba:6b:84: a6:dd:32:18:60:27:00:fc:0d:80:80:60:49:55:10: ad:3d:7f:56:45:58:ce:3a:e7:60:89:fb:0b:51:d1: 5b:27:24:0b:84:07:bf:27:e8:ef:9b:63:37:81:8c: 28:1a:17:94:df:ef:7a:9c:b8:bb:f0:72:b2:45:2e: df:69:10:f7:65:4b:2d:bd:a9:50:b4:25:88:ab:06: 5c:35:f8:a1:4c:e9:97:e1:af:cc:0f:9b:e9:19:4d: 22:0c:b6:1b:35:70:45:7b:17:67:65:9d:aa:4f:9d: 6c:62:68:7d:5f:27:a8:35:c4:fe:41:d3:7f:ab:d8: 64:96:ae:c4:d1:f6:22:45:18:09:a8:3d:8f:d4:4a: 4c:de:5b:d4:09:d3:36:2c:0d:78:1c:2b:a7:69:12: b8:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:1A:63:DC:F9:53:F5:84:81:76:FC:F1:07:52:98:C7:E6:8C:C0:C0 X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e8:11:f5:ce:36:48:fe:ec:f2:e1:88:08:05:f0:09:42:3a:d8: 15:90:1e:bd:e3:aa:7f:6f:12:ec:50:e7:ac:05:ad:fb:68:a5: b6:42:d8:c8:5b:6e:c7:1c:c0:ba:ae:ee:a3:d8:34:8b:81:2b: c8:b4:8c:56:68:b6:31:05:08:82:ab:a2:73:bd:3f:34:27:f3: c3:59:c7:db:26:d6:d9:72:63:12:92:f9:02:23:e3:0f:d4:5d: e2:0c:8b:e7:79:31:17:95:a1:f0:29:3a:7b:88:1a:13:47:71: af:d6:ec:69:7a:2c:06:e7:36:e5:88:69:86:df:e1:29:0d:fa: a2:53:fd:6e:c0:68:38:86:08:cc:54:cf:60:22:a5:2f:ee:f5: 58:a6:5e:35:e4:e1:bf:0b:48:fc:ff:2a:80:9a:ca:3f:52:23: 51:1c:05:13:25:de:a8:e7:79:0c:8e:7a:67:7a:3d:9f:03:44: 5b:9e:88:e2:98:0d:43:d0:e0:02:e9:d5:a6:f5:68:53:91:e6: 84:38:97:a7:17:57:9c:35:64:0e:95:59:94:c3:79:d7:a7:16: 05:58:ac:9b:69:2f:33:d1:43:54:a3:65:28:bf:eb:c6:1a:1e: 80:15:93:3a:c2:8c:e2:97:11:9e:23:86:3c:3e:95:1f:fa:a2: a7:c1:ea:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGX6EPh3GwVDFzteU2Qn7bHKg08MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTA4MDcxNDU2MzRaFw0yNTA4MTEwMTIzMzRaMDMxMTAvBgNV BAMTKDU3MUE2M0RDRjk1M0Y1ODQ4MTc2RkNGMTA3NTI5OEM3RTY4Q0MwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSFO3/Hq7H0bTOOmy/ni5XalC9 RdwtOmIYNosyhRVmN2j8zCoOs3TFKM0vP7Hf916TlSUDAR/u9QkX8wxWATm+WAZD OTnywW6zfPwHtmTd3m4Qh5W6A3ijEpZ+3+dHibRLTBwfLLprhKbdMhhgJwD8DYCA YElVEK09f1ZFWM4652CJ+wtR0VsnJAuEB78n6O+bYzeBjCgaF5Tf73qcuLvwcrJF Lt9pEPdlSy29qVC0JYirBlw1+KFM6Zfhr8wPm+kZTSIMths1cEV7F2dlnapPnWxi aH1fJ6g1xP5B03+r2GSWrsTR9iJFGAmoPY/USkzeW9QJ0zYsDXgcK6dpEri3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVxpj3PlT9YSBdvzxB1KYx+aMwMAwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOgR9c42SP7s8uGICAXwCUI62BWQHr3jqn9v EuxQ56wFrftopbZC2MhbbsccwLqu7qPYNIuBK8i0jFZotjEFCIKronO9PzQn88NZ x9sm1tlyYxKS+QIj4w/UXeIMi+d5MReVofApOnuIGhNHca/W7Gl6LAbnNuWIaYbf 4SkN+qJT/W7AaDiGCMxUz2AipS/u9VimXjXk4b8LSPz/KoCayj9SI1EcBRMl3qjn eQyOemd6PZ8DRFueiOKYDUPQ4ALp1ab1aFOR5oQ4l6cXV5w1ZA6VWZTDedenFgVY rJtpLzPRQ1SjZSi/68YaHoAVkzrCjOKXEZ4jhjw+lR/6oqfB6nw= -----END CERTIFICATE-----Generated at Thu Aug 7 20:25:52 2025 by rpki-client