$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: /LIGxYUGf96LDVVwzfgrczfgJBfQmsVQhO29wVhvm4s= Subject key identifier: 40:D3:88:08:73:92:04:02:9F:60:B6:73:49:AE:24:22:9A:4C:C8:A2 Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 68C8916E0A3B12B51FEB5A316EF6CA5EDCEC1EE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 0220 Signing time: Mon 04 Aug 2025 21:01:50 +0000 Manifest this update: Mon 04 Aug 2025 20:56:50 +0000 Manifest next update: Fri 08 Aug 2025 08:25:50 +0000 Files and hashes: 1: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: 1oazwhS6VytG9hoAXlwqGh4+bISlEC+wTE42AY7ZGek=) 2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: pI4Ee2HOCQgHXKn0phpNZPvS39KAXUpqkjdsByhi1e8=) 3: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: scqosPwH5BL2/2imBhyJZEPHHItlqeTByFILkve6Gxg=) 4: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: yvcS+4k20Y8iRZaWxf96+9kxISErdYY6WtdAGoUwpMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 08:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c8:91:6e:0a:3b:12:b5:1f:eb:5a:31:6e:f6:ca:5e:dc:ec:1e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Aug 4 20:56:50 2025 GMT Not After : Aug 8 08:25:50 2025 GMT Subject: CN=40D38808739204029F60B67349AE24229A4CC8A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:66:ea:f1:fb:14:0a:d5:d9:a3:10:f2:95:a3: 59:72:b6:e9:dd:96:a8:bd:df:6c:80:38:3d:39:63: 60:31:bc:55:dd:1d:b3:e2:fa:f8:50:63:9d:2f:32: 13:c9:75:1c:93:2c:81:e2:1b:68:04:41:d3:ae:c8: 01:1c:39:56:10:32:80:7d:a6:03:36:fb:d1:76:a8: c2:92:96:be:77:f8:01:ac:4f:8d:f4:9e:c2:52:2f: a2:ce:87:0d:16:63:4f:71:79:ed:e9:e6:b3:ed:bd: 40:ea:44:5d:73:59:7c:7f:0a:b0:d1:e6:cd:80:2b: 0c:d9:8e:6c:b6:1c:bc:1e:bc:88:55:18:a0:92:84: 3e:a3:a4:7d:a5:c4:57:5c:71:4e:c2:0f:6b:e2:ae: b7:83:87:96:fe:fd:7c:e6:69:56:0d:fa:7b:14:84: a5:2e:64:09:ad:b4:5a:d3:84:3d:f5:07:31:11:e2: b3:67:6f:6e:a9:41:45:df:10:6e:a0:00:71:76:6f: 78:0c:be:5a:4c:c0:78:b4:94:52:95:b9:23:d6:49: f3:18:b9:f0:7a:c2:96:98:96:37:db:3e:26:2c:c8: b4:7b:07:ee:37:35:6f:9f:c8:a7:b4:ad:b2:73:a1: a1:96:87:6d:59:2b:3f:f4:d3:2b:74:0d:6b:4e:02: 53:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D3:88:08:73:92:04:02:9F:60:B6:73:49:AE:24:22:9A:4C:C8:A2 X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:f0:c8:76:ca:ee:6c:7d:76:3f:0f:c5:00:90:35:c3:55:f9: fe:22:6b:05:b4:87:76:f3:aa:5c:d9:51:23:ee:9d:fe:73:a2: b7:94:88:12:85:cb:3c:9c:f2:4a:2b:2e:f3:08:fa:32:66:ac: 87:be:a0:33:3e:58:41:3e:4b:e9:f0:d4:91:56:bd:3e:1c:ab: c0:d8:7c:88:d8:ce:67:65:82:08:11:27:1b:1c:51:b8:52:54: f4:d1:70:94:9d:07:0b:91:30:0b:5d:92:e8:e1:de:76:14:d7: 94:f2:57:d5:f6:eb:f1:75:78:cb:b6:ee:c6:31:09:10:0c:50: 04:a8:e5:ec:f7:c0:4c:67:a5:e8:be:12:a5:cd:d0:6c:94:3f: 74:24:d7:fc:32:63:6e:32:05:2e:7e:5a:b4:e6:f5:0e:a6:94: d8:11:2d:0a:55:89:19:66:b6:1e:92:39:94:d4:01:d6:91:fc: ab:ff:51:c0:7b:95:4e:6d:2e:06:ab:f6:86:a5:d2:34:db:1c: b3:1e:36:68:30:4e:a4:6e:3d:21:17:6f:64:ab:34:e1:de:de: 47:19:b3:eb:5e:b0:cc:07:72:7d:d4:f5:c1:27:72:ac:db:f8: 54:37:2b:3d:e0:e3:74:59:b6:77:0f:9e:8b:59:21:c5:43:73: 35:ac:fa:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMiRbgo7ErUf61oxbvbKXtzsHuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNTA4MDQyMDU2NTBaFw0yNTA4MDgwODI1NTBaMDMxMTAvBgNV BAMTKDQwRDM4ODA4NzM5MjA0MDI5RjYwQjY3MzQ5QUUyNDIyOUE0Q0M4QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzZurx+xQK1dmjEPKVo1lytund lqi932yAOD05Y2AxvFXdHbPi+vhQY50vMhPJdRyTLIHiG2gEQdOuyAEcOVYQMoB9 pgM2+9F2qMKSlr53+AGsT430nsJSL6LOhw0WY09xee3p5rPtvUDqRF1zWXx/CrDR 5s2AKwzZjmy2HLwevIhVGKCShD6jpH2lxFdccU7CD2virreDh5b+/XzmaVYN+nsU hKUuZAmttFrThD31BzER4rNnb26pQUXfEG6gAHF2b3gMvlpMwHi0lFKVuSPWSfMY ufB6wpaYljfbPiYsyLR7B+43NW+fyKe0rbJzoaGWh21ZKz/00yt0DWtOAlOxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNOICHOSBAKfYLZzSa4kIppMyKIwHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnwyHbK7mx9dj8PxQCQNcNV+f4iawW0h3bz qlzZUSPunf5zoreUiBKFyzyc8korLvMI+jJmrIe+oDM+WEE+S+nw1JFWvT4cq8DY fIjYzmdlgggRJxscUbhSVPTRcJSdBwuRMAtdkujh3nYU15TyV9X26/F1eMu27sYx CRAMUASo5ez3wExnpei+EqXN0GyUP3Qk1/wyY24yBS5+WrTm9Q6mlNgRLQpViRlm th6SOZTUAdaR/Kv/UcB7lU5tLgar9oal0jTbHLMeNmgwTqRuPSEXb2SrNOHe3kcZ s+tesMwHcn3U9cEncqzb+FQ3Kz3g43RZtncPnotZIcVDczWs+vM= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:17 2025 by rpki-client