$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: wSu8YdkMl3xxUQXgkUd+DiwNlu6DHbdt6Z1DW5vxJJ8= Subject key identifier: 0D:05:C1:96:DA:82:C1:5E:CB:4A:AA:C5:DB:07:1B:FF:01:F5:26:7C Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 169268D3151377C76D811CC8A84068D91EEC1B9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0220 Signing time: Wed 12 Nov 2025 03:42:37 +0000 Manifest this update: Wed 12 Nov 2025 03:37:37 +0000 Manifest next update: Sat 15 Nov 2025 07:40:37 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: M+GaDRGdI2VDTERJLWERjG7NMI8gLnbtjr3v/JA2IBM=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 15 Nov 2025 07:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:92:68:d3:15:13:77:c7:6d:81:1c:c8:a8:40:68:d9:1e:ec:1b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Nov 12 03:37:37 2025 GMT Not After : Nov 15 07:40:37 2025 GMT Subject: CN=0D05C196DA82C15ECB4AAAC5DB071BFF01F5267C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:1b:8e:21:0b:fd:20:e1:99:52:e7:50:e9:86: 9e:31:01:0e:c1:f3:ec:fa:a9:01:8b:22:7d:62:87: 5f:09:02:c4:70:52:d0:11:f2:28:46:88:1a:e8:7d: 6e:63:58:4b:0b:51:d5:ad:a6:70:89:93:e5:37:48: da:f4:c0:b6:1e:c7:cb:cd:fa:4a:7a:18:64:eb:b8: 7f:b2:2a:81:73:e8:82:a2:c3:ad:7f:58:61:d8:9f: e4:b4:5e:16:a1:22:b7:aa:a0:77:b5:65:c6:b7:1e: f4:2f:4c:25:8a:91:c0:16:c7:55:92:03:ce:3e:d0: 45:62:e2:6c:f8:50:28:48:da:df:3f:20:8b:fc:eb: 5f:53:41:cd:26:f0:3d:d8:90:74:d3:10:ab:f6:95: 11:f3:1c:a7:19:d7:fd:3b:0d:56:fa:01:f0:90:51: 2f:42:63:a2:5c:5e:45:1b:2b:1f:74:d8:ef:9b:75: 26:da:16:85:9a:07:4d:cb:44:3e:32:5c:65:f5:65: 4c:28:53:77:ef:50:e1:c8:cc:5e:0d:31:39:8e:d5: 7c:ad:38:51:cf:63:db:84:57:28:3e:36:5c:ea:c1: 80:7f:bc:2e:9f:53:7d:5a:3e:a1:d1:f1:ef:ed:a9: 7c:d1:1b:fe:c6:4a:ae:7b:e1:25:66:c4:04:4d:e8: 13:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:05:C1:96:DA:82:C1:5E:CB:4A:AA:C5:DB:07:1B:FF:01:F5:26:7C X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:99:b0:65:83:38:ec:58:35:0f:99:ed:cc:6f:0f:6f:7a:4f: 36:b1:a9:ab:33:2b:6e:39:b8:68:ee:07:29:82:5c:c8:1d:7e: 8b:6b:92:b4:b3:12:81:df:b0:30:13:3e:14:4a:55:2d:ff:6f: 45:6a:15:34:9a:51:54:49:ba:e1:b5:b5:f7:b8:e7:8e:25:4b: 0b:3c:b3:fb:02:ad:23:ad:89:30:ec:8d:3c:0c:5a:3a:23:8a: cd:e9:b3:c1:8b:0b:7f:3c:94:50:7e:ab:9c:2d:62:7d:e2:a0: 13:27:23:03:8e:67:f9:af:f3:12:d1:a7:ca:c7:eb:ff:9b:4a: 14:a6:f0:40:95:45:e8:1d:fb:43:e5:1a:a7:63:15:fc:cd:b6: fa:df:f6:dc:28:43:00:5a:7d:ca:0a:95:2e:3d:5c:bd:50:9c: 67:c4:92:55:01:a9:6f:6f:34:8a:a4:61:d8:bd:79:f2:f0:22: 5a:39:67:bd:b8:d3:7c:57:f1:2a:7e:47:69:b4:a8:2f:e9:1e: f8:99:c2:24:76:27:14:5b:72:9d:b3:ae:00:d2:1b:94:59:a1: 03:70:54:05:1e:0e:4e:c6:f6:ed:c5:37:ee:78:4e:c6:bc:51: 60:38:b0:9a:78:fd:84:fb:06:8d:bc:f2:fb:69:64:40:92:3b: 2d:7f:5e:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFpJo0xUTd8dtgRzIqEBo2R7sG50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTExMTIwMzM3MzdaFw0yNTExMTUwNzQwMzdaMDMxMTAvBgNV BAMTKDBEMDVDMTk2REE4MkMxNUVDQjRBQUFDNURCMDcxQkZGMDFGNTI2N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2G44hC/0g4ZlS51Dphp4xAQ7B 8+z6qQGLIn1ih18JAsRwUtAR8ihGiBrofW5jWEsLUdWtpnCJk+U3SNr0wLYex8vN +kp6GGTruH+yKoFz6IKiw61/WGHYn+S0XhahIreqoHe1Zca3HvQvTCWKkcAWx1WS A84+0EVi4mz4UChI2t8/IIv8619TQc0m8D3YkHTTEKv2lRHzHKcZ1/07DVb6AfCQ US9CY6JcXkUbKx902O+bdSbaFoWaB03LRD4yXGX1ZUwoU3fvUOHIzF4NMTmO1Xyt OFHPY9uEVyg+NlzqwYB/vC6fU31aPqHR8e/tqXzRG/7GSq574SVmxARN6BPZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDQXBltqCwV7LSqrF2wcb/wH1JnwwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGZsGWDOOxYNQ+Z7cxvD296TzaxqaszK245 uGjuBymCXMgdfotrkrSzEoHfsDATPhRKVS3/b0VqFTSaUVRJuuG1tfe4544lSws8 s/sCrSOtiTDsjTwMWjojis3ps8GLC388lFB+q5wtYn3ioBMnIwOOZ/mv8xLRp8rH 6/+bShSm8ECVRegd+0PlGqdjFfzNtvrf9twoQwBafcoKlS49XL1QnGfEklUBqW9v NIqkYdi9efLwIlo5Z72403xX8Sp+R2m0qC/pHviZwiR2JxRbcp2zrgDSG5RZoQNw VAUeDk7G9u3FN+54Tsa8UWA4sJp4/YT7Bo288vtpZECSOy1/Xu4= -----END CERTIFICATE-----Generated at Thu Nov 13 19:51:48 2025 by rpki-client