$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: Zf9+a58zDnXpjgNUzYYkJHch9tX1jIc5K0F2zLxh6uw= Subject key identifier: D1:4C:7B:59:B8:72:C6:57:CB:90:D7:BF:91:CC:2C:06:04:B3:CA:A0 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 3AC9FE43D1920AD7F7BC11EA2B80EF6ED005E5DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01C0 Signing time: Mon 03 Nov 2025 22:32:09 +0000 Manifest this update: Mon 03 Nov 2025 22:27:09 +0000 Manifest next update: Fri 07 Nov 2025 08:26:09 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: C4n6+7SeNhIrsKvNGjsuRHhbHeDY3iUqKJJ0sh46UgQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 08:26:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:c9:fe:43:d1:92:0a:d7:f7:bc:11:ea:2b:80:ef:6e:d0:05:e5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Nov 3 22:27:09 2025 GMT Not After : Nov 7 08:26:09 2025 GMT Subject: CN=D14C7B59B872C657CB90D7BF91CC2C0604B3CAA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3f:9d:09:71:29:f2:5a:d9:83:46:85:f7:92: 34:c8:0a:ad:e5:e9:78:9b:ed:85:05:39:62:d8:41: fd:d1:9d:fb:72:01:bf:c0:a8:77:42:4b:fe:04:82: 39:77:67:c4:2e:4f:4f:97:9d:2a:7c:85:80:aa:91: 94:0a:33:7b:65:f3:7a:d5:15:30:d2:42:6f:08:0f: 43:a0:85:5a:51:e8:22:de:7c:b5:ad:61:f6:d6:cc: d5:65:9a:44:93:45:27:b7:a3:87:06:5a:86:c9:1a: 95:84:42:02:09:85:5e:fe:8f:36:8e:63:9d:55:ff: e7:e9:31:94:a7:a6:22:3a:bd:ec:a2:ed:e3:74:74: 92:7c:e4:a9:60:ad:20:ce:30:de:b7:b5:54:0f:72: 0b:cd:33:fa:89:8d:2a:e6:7d:e8:20:3f:50:9d:42: 3e:4b:5b:b4:ee:0c:39:4d:5e:44:52:cb:9d:39:8d: 48:25:cb:c4:c7:de:38:83:0b:f0:23:93:bd:df:63: 08:fa:5c:8c:7a:00:11:75:a1:5e:f3:57:5b:94:36: c6:e0:1a:c9:5e:8e:f4:c1:24:ef:33:70:8f:c9:c4: 10:50:95:f1:00:5f:32:63:86:63:05:72:1d:da:92: 70:e9:07:7b:cc:9b:dc:81:2c:6d:61:e8:11:c4:43: 89:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:4C:7B:59:B8:72:C6:57:CB:90:D7:BF:91:CC:2C:06:04:B3:CA:A0 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:74:d6:ff:e6:db:3c:38:97:7f:34:8c:37:26:ce:66:8d:34: 6b:aa:8f:43:4b:36:b6:d9:40:60:da:49:7d:99:7a:b8:3f:bd: 3c:49:f9:e1:f1:46:7b:ea:08:1b:ea:1e:8f:ee:25:1f:9f:47: 02:b8:df:03:37:88:52:4f:90:8b:5a:38:1e:7a:20:25:ca:84: 40:46:e5:10:b4:40:c8:bd:12:7c:4a:b2:f7:ab:08:e0:81:c4: a5:58:0d:2f:82:e6:85:13:40:a5:2d:92:4d:9d:cc:f6:2e:61: 68:9d:98:c7:58:da:a2:8b:40:bc:0d:ab:f1:44:72:13:1d:48: da:42:8f:10:a3:42:37:87:5b:a1:96:bb:d9:ce:78:6f:3d:b7: 3c:20:26:8d:84:c0:7e:e7:4d:f1:93:4b:4c:36:56:8f:6e:b1: 56:13:e1:f4:57:0d:da:70:fa:50:6b:d9:e5:79:7f:2d:7b:09: ae:38:49:b6:a8:a4:15:18:e1:ed:50:e6:0c:79:e7:1f:ba:a7: 8a:a1:76:eb:07:62:2a:53:fd:cd:fe:b7:3c:e6:3b:f2:cb:d9: b8:09:f6:b9:6a:56:1e:5a:4f:74:24:f6:ea:22:94:4d:d7:ca: 80:29:92:dc:4d:6c:92:80:00:21:80:24:9a:59:cb:4a:79:7a: 2b:72:fb:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOsn+Q9GSCtf3vBHqK4DvbtAF5d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTExMDMyMjI3MDlaFw0yNTExMDcwODI2MDlaMDMxMTAvBgNV BAMTKEQxNEM3QjU5Qjg3MkM2NTdDQjkwRDdCRjkxQ0MyQzA2MDRCM0NBQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHP50JcSnyWtmDRoX3kjTICq3l 6Xib7YUFOWLYQf3RnftyAb/AqHdCS/4Egjl3Z8QuT0+XnSp8hYCqkZQKM3tl83rV FTDSQm8ID0OghVpR6CLefLWtYfbWzNVlmkSTRSe3o4cGWobJGpWEQgIJhV7+jzaO Y51V/+fpMZSnpiI6veyi7eN0dJJ85KlgrSDOMN63tVQPcgvNM/qJjSrmfeggP1Cd Qj5LW7TuDDlNXkRSy505jUgly8TH3jiDC/Ajk73fYwj6XIx6ABF1oV7zV1uUNsbg GslejvTBJO8zcI/JxBBQlfEAXzJjhmMFch3aknDpB3vMm9yBLG1h6BHEQ4lbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0Ux7WbhyxlfLkNe/kcwsBgSzyqAwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt01v/m2zw4l380jDcmzmaNNGuqj0NLNrbZ QGDaSX2Zerg/vTxJ+eHxRnvqCBvqHo/uJR+fRwK43wM3iFJPkItaOB56ICXKhEBG 5RC0QMi9EnxKsverCOCBxKVYDS+C5oUTQKUtkk2dzPYuYWidmMdY2qKLQLwNq/FE chMdSNpCjxCjQjeHW6GWu9nOeG89tzwgJo2EwH7nTfGTS0w2Vo9usVYT4fRXDdpw +lBr2eV5fy17Ca44SbaopBUY4e1Q5gx55x+6p4qhdusHYipT/c3+tzzmO/LL2bgJ 9rlqVh5aT3Qk9uoilE3XyoApktxNbJKAACGAJJpZy0p5eity+2Q= -----END CERTIFICATE-----Generated at Wed Nov 5 12:55:03 2025 by rpki-client