$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: IGuJ58Wz1On4b2JlCqHsaObaXC9mXxJqP6LWqidVH2o= Subject key identifier: 41:17:3C:0A:65:F0:98:5F:52:D7:79:D1:9E:D5:4B:69:4A:6F:5D:40 Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 6CEBFBA7A4648382DA002BCDB7BA861192175F55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 04A7 Signing time: Mon 21 Jul 2025 10:51:32 +0000 Manifest this update: Mon 21 Jul 2025 10:46:32 +0000 Manifest next update: Thu 24 Jul 2025 12:29:32 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: 00Mzp0U4C3I/jsOp4iZAB6pTGUnhH/e4HZ8ivGyfedA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:29:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:eb:fb:a7:a4:64:83:82:da:00:2b:cd:b7:ba:86:11:92:17:5f:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Jul 21 10:46:32 2025 GMT Not After : Jul 24 12:29:32 2025 GMT Subject: CN=41173C0A65F0985F52D779D19ED54B694A6F5D40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:c9:79:17:c7:8a:0a:a3:cb:b1:fb:74:6c: a8:d8:a3:7b:e1:8d:5e:22:3c:f7:aa:96:e2:5c:a0: bf:30:ba:b6:94:bb:3d:c9:0c:e7:87:ae:ea:2c:78: 9d:71:a0:89:6a:e4:6d:70:a9:bb:7b:cf:db:bc:1e: da:54:89:2e:bb:e7:30:e3:a0:06:ae:69:d8:8f:d5: 55:3b:26:78:7d:65:ed:54:54:81:5c:48:ef:30:2f: 6f:ca:38:3a:bc:06:5e:5b:7d:38:ed:2b:90:f1:2b: f2:07:1c:42:60:88:28:3b:61:4a:0d:bb:84:76:ce: 33:7d:dc:f5:e5:99:62:70:93:38:ac:b6:2f:18:1d: f8:46:7b:e8:ed:5b:9d:d0:4a:25:4a:5c:fb:54:d0: 15:1e:fe:7f:4d:b1:db:8a:9d:4f:fd:73:90:cc:66: c4:c9:75:0d:9a:f0:68:5b:3c:ef:75:cc:34:b6:9e: 95:c1:9b:6a:e3:f8:8d:43:5d:6a:8e:bb:e8:57:9c: 67:b7:37:02:57:63:a8:ad:62:fd:fa:bd:fe:50:b3: 29:a1:38:0a:8b:55:49:21:ea:13:b4:82:c8:2f:2f: bf:52:e4:70:91:60:34:43:bc:20:0a:93:71:41:ef: a2:da:05:fa:64:1b:90:36:ef:59:67:b4:cf:f2:a0: fb:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:17:3C:0A:65:F0:98:5F:52:D7:79:D1:9E:D5:4B:69:4A:6F:5D:40 X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d1:3e:b0:f4:65:37:f7:eb:93:3a:3a:55:8c:1a:e4:06:72: b7:b9:87:0c:f0:83:98:29:d9:32:47:8e:07:f7:89:4a:f9:f7: cb:51:dd:ed:a6:11:8a:45:24:01:4d:88:95:8a:5d:31:b8:94: 98:99:23:98:f3:9b:f4:c1:5b:9a:64:51:f6:9a:47:85:de:cf: c6:0f:a0:39:b4:02:89:80:b6:22:a8:60:6a:f4:a2:77:4a:78: 94:e0:87:ff:b4:4d:03:96:3c:9c:e5:9e:fc:27:02:51:a6:a1: 96:12:3a:d6:12:e4:ba:23:3a:a5:38:16:18:79:9b:b5:11:4c: 2c:cd:c9:18:ce:fb:74:09:db:38:82:c0:ea:30:08:c5:04:a3: 80:0f:5b:56:67:11:a1:d6:8b:c1:82:f6:8e:c5:63:4b:39:83: ab:7d:25:91:71:01:f6:d8:fc:c0:8b:a6:80:18:d6:57:33:2e: b8:46:88:41:57:fb:96:eb:9f:4c:28:a5:4d:1a:f4:af:14:3e: 8b:02:16:4a:a3:fb:b4:6f:22:77:37:6d:0b:0d:d6:28:59:8c: 2d:8d:da:7e:5c:2c:d4:55:1a:ed:a2:af:f8:9a:3d:c4:71:28: 63:5f:96:e5:7b:5d:cd:ec:da:dd:38:f4:63:85:a7:0a:45:58: 6b:dd:7f:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbOv7p6Rkg4LaACvNt7qGEZIXX1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTA3MjExMDQ2MzJaFw0yNTA3MjQxMjI5MzJaMDMxMTAvBgNV BAMTKDQxMTczQzBBNjVGMDk4NUY1MkQ3NzlEMTlFRDU0QjY5NEE2RjVENDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2Ml5F8eKCqPLsft0bKjYo3vh jV4iPPeqluJcoL8wuraUuz3JDOeHruoseJ1xoIlq5G1wqbt7z9u8HtpUiS675zDj oAauadiP1VU7Jnh9Ze1UVIFcSO8wL2/KODq8Bl5bfTjtK5DxK/IHHEJgiCg7YUoN u4R2zjN93PXlmWJwkzisti8YHfhGe+jtW53QSiVKXPtU0BUe/n9NsduKnU/9c5DM ZsTJdQ2a8GhbPO91zDS2npXBm2rj+I1DXWqOu+hXnGe3NwJXY6itYv36vf5Qsymh OAqLVUkh6hO0gsgvL79S5HCRYDRDvCAKk3FB76LaBfpkG5A271lntM/yoPvhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQRc8CmXwmF9S13nRntVLaUpvXUAwHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXRPrD0ZTf365M6OlWMGuQGcre5hwzwg5gp 2TJHjgf3iUr598tR3e2mEYpFJAFNiJWKXTG4lJiZI5jzm/TBW5pkUfaaR4Xez8YP oDm0AomAtiKoYGr0ondKeJTgh/+0TQOWPJzlnvwnAlGmoZYSOtYS5LojOqU4Fhh5 m7URTCzNyRjO+3QJ2ziCwOowCMUEo4APW1ZnEaHWi8GC9o7FY0s5g6t9JZFxAfbY /MCLpoAY1lczLrhGiEFX+5brn0wopU0a9K8UPosCFkqj+7RvInc3bQsN1ihZjC2N 2n5cLNRVGu2ir/iaPcRxKGNfluV7Xc3s2t049GOFpwpFWGvdf98= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:30 2025 by rpki-client