$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: axFYBtS8XieVvLN5v81wVG0Jlvhxivg5p0bjxMb6Gsw= Subject key identifier: 09:2D:5B:3F:63:BD:07:84:21:5B:67:0C:19:FB:EF:CD:0C:46:20:FB Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 6A7F4798E511219F6C62926ED9F9B1B512B55D33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01EC Signing time: Mon 21 Jul 2025 13:31:28 +0000 Manifest this update: Mon 21 Jul 2025 13:26:28 +0000 Manifest next update: Thu 24 Jul 2025 23:39:28 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: DwsZUBUA+UbpRgoJ7gAJSS4iC+KwwGfFRbYM5Ip/oNs=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 22:22:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7f:47:98:e5:11:21:9f:6c:62:92:6e:d9:f9:b1:b5:12:b5:5d:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Jul 21 13:26:28 2025 GMT Not After : Jul 24 23:39:28 2025 GMT Subject: CN=092D5B3F63BD0784215B670C19FBEFCD0C4620FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:65:ed:5b:a5:61:e3:1e:a4:77:a5:f2:69:14: 92:d2:e4:0c:ec:65:6a:bd:d7:39:2c:9e:95:f4:45: a7:44:ad:a1:5c:11:09:a1:c0:9d:1a:46:0c:96:3e: bb:ca:76:22:1c:e5:65:22:4a:89:45:a8:85:b9:f0: 32:83:b5:80:87:c0:6c:29:c2:c3:11:f4:e4:fd:a0: e0:fe:df:5f:00:b4:2c:04:2e:74:f0:aa:6f:4c:f9: bf:d1:c0:09:ee:bf:21:ec:cd:5e:9c:ff:26:73:1c: 6e:89:69:e7:87:8c:12:8d:dd:ef:f5:1a:2e:ac:51: 53:bb:00:f9:76:1a:37:f8:48:ee:73:45:96:70:79: 34:22:aa:d8:21:2d:09:8b:78:0a:40:4e:d7:27:61: e5:fd:d8:42:e6:69:e4:f3:96:37:83:7e:a8:1c:f7: de:3d:4d:3e:0d:04:f1:d8:5c:80:7c:e0:ff:52:d8: f0:fe:5b:29:82:ee:7e:49:0e:84:78:65:8a:cb:f0: cb:4b:a1:95:00:38:e0:c3:2d:92:56:6b:58:a0:3a: 1f:63:e9:53:89:0c:4c:ea:77:41:db:73:f3:79:1b: 6b:02:47:e4:57:47:fd:4a:d2:84:ee:3f:23:ab:c2: 24:6d:96:ca:33:15:d0:17:f6:7c:9e:c8:fd:16:3f: 11:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:2D:5B:3F:63:BD:07:84:21:5B:67:0C:19:FB:EF:CD:0C:46:20:FB X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:8a:ff:f3:44:c6:1d:04:e4:7d:c1:1b:c6:08:52:c2:54:7e: 8a:a5:4a:89:18:e2:be:5e:b7:97:66:08:da:27:b6:2a:c7:23: 2b:94:87:1b:ca:82:36:e5:f5:6e:c8:13:0d:cb:1f:9b:fa:1b: 50:81:b0:ad:08:04:31:43:5b:22:66:7e:f7:f5:3c:3e:11:96: 42:3c:83:61:22:3b:66:42:21:de:a2:19:ea:d4:6c:98:4f:f7: 0e:ed:38:7f:3f:b3:59:46:06:f0:a9:a8:b7:af:94:2e:3f:e4: d9:87:cb:c5:b8:e6:25:14:7c:f8:e5:83:8b:ac:77:50:62:4f: a9:1e:f7:7c:1d:12:b4:20:04:5b:f2:32:dd:96:d2:a7:43:fd: 19:54:2a:4e:7a:54:30:ba:8a:fc:c8:c0:a7:e8:b0:19:f7:f3: 39:4e:27:72:09:5b:0f:9a:c1:11:1b:dd:8d:4a:28:74:31:83: ab:00:27:2a:46:f0:99:b3:14:1f:0c:f5:bb:4b:92:ed:ed:3d: 3c:59:11:80:ec:f7:d1:09:60:e1:07:28:b2:2c:7e:66:3b:03: 5b:b5:3d:21:c2:10:ed:a1:35:3c:cf:85:f2:75:9e:ad:d0:2f: e0:57:ee:89:50:bf:ee:0c:6e:d4:67:17:56:95:82:ab:91:d5: 34:08:da:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUan9HmOURIZ9sYpJu2fmxtRK1XTMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA3MjExMzI2MjhaFw0yNTA3MjQyMzM5MjhaMDMxMTAvBgNV BAMTKDA5MkQ1QjNGNjNCRDA3ODQyMTVCNjcwQzE5RkJFRkNEMEM0NjIwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCZe1bpWHjHqR3pfJpFJLS5Azs ZWq91zksnpX0RadEraFcEQmhwJ0aRgyWPrvKdiIc5WUiSolFqIW58DKDtYCHwGwp wsMR9OT9oOD+318AtCwELnTwqm9M+b/RwAnuvyHszV6c/yZzHG6JaeeHjBKN3e/1 Gi6sUVO7APl2Gjf4SO5zRZZweTQiqtghLQmLeApATtcnYeX92ELmaeTzljeDfqgc 9949TT4NBPHYXIB84P9S2PD+WymC7n5JDoR4ZYrL8MtLoZUAOODDLZJWa1igOh9j 6VOJDEzqd0Hbc/N5G2sCR+RXR/1K0oTuPyOrwiRtlsozFdAX9nyeyP0WPxGxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCS1bP2O9B4QhW2cMGfvvzQxGIPswHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADiK//NExh0E5H3BG8YIUsJUfoqlSokY4r5e t5dmCNontirHIyuUhxvKgjbl9W7IEw3LH5v6G1CBsK0IBDFDWyJmfvf1PD4RlkI8 g2EiO2ZCId6iGerUbJhP9w7tOH8/s1lGBvCpqLevlC4/5NmHy8W45iUUfPjlg4us d1BiT6ke93wdErQgBFvyMt2W0qdD/RlUKk56VDC6ivzIwKfosBn38zlOJ3IJWw+a wREb3Y1KKHQxg6sAJypG8JmzFB8M9btLku3tPTxZEYDs99EJYOEHKLIsfmY7A1u1 PSHCEO2hNTzPhfJ1nq3QL+BX7olQv+4MbtRnF1aVgquR1TQI2ps= -----END CERTIFICATE-----Generated at Mon Jul 21 23:57:28 2025 by rpki-client