$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: NK7ybuzhJNq6SeaEODedwLymqirwBzA2UyKMvhFUaGQ= Subject key identifier: 6D:B7:B5:56:80:D9:F2:95:26:BC:28:BA:E4:2D:9E:6A:0B:8E:02:79 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 36F62A160FBF7343AF8719E6AD1495FBC6EE5FD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 0191 Signing time: Sun 20 Jul 2025 23:40:47 +0000 Manifest this update: Sun 20 Jul 2025 23:35:47 +0000 Manifest next update: Thu 24 Jul 2025 03:01:47 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: u1L/eNF2ueMnkHW/Ut+L0fB//mTP8AyLNUXWXzIY7xE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:f6:2a:16:0f:bf:73:43:af:87:19:e6:ad:14:95:fb:c6:ee:5f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Jul 20 23:35:47 2025 GMT Not After : Jul 24 03:01:47 2025 GMT Subject: CN=6DB7B55680D9F29526BC28BAE42D9E6A0B8E0279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:6d:9c:a7:c5:52:c9:3d:4b:c2:34:bc:10: 76:53:9a:5b:04:ee:39:80:7d:4f:c8:96:18:9b:c3: 27:51:a9:3a:5b:c1:6b:1e:36:70:38:2f:76:2e:3c: 3d:87:1c:ef:7c:60:3c:db:d1:45:8e:0b:78:8d:cd: d3:db:eb:bf:3e:fb:b2:8e:42:d6:44:1d:b9:91:ef: 0b:3f:9b:fb:f5:c5:5c:e3:6c:c0:89:91:a7:34:2e: 76:3b:13:4e:fe:cf:6c:0f:d8:18:06:df:03:0d:6c: 4a:c2:6d:50:76:29:c8:84:c2:d6:0b:fb:be:24:30: 3b:9d:fc:3e:4a:66:aa:05:2d:56:09:39:78:d1:48: 8f:a8:df:81:3e:62:bb:5b:56:01:78:8a:63:97:7a: 1b:cc:b6:ba:01:79:ca:a0:4d:84:e1:89:7b:d8:8a: a7:65:55:93:67:a4:27:77:e7:e6:9a:19:3a:c4:6c: 6a:c8:2a:05:b8:3b:2e:5c:95:61:f9:26:75:03:67: 4d:a8:14:d3:28:0d:72:ae:cb:c2:c6:2d:0f:6f:0f: b1:c3:87:56:4b:5a:d0:94:03:71:ef:32:69:e6:29: e5:a8:44:1c:1b:c3:10:ba:20:00:1f:b5:f5:20:b4: 23:20:ae:47:87:07:e4:c1:ca:e9:6b:01:9d:37:95: 80:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B7:B5:56:80:D9:F2:95:26:BC:28:BA:E4:2D:9E:6A:0B:8E:02:79 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:52:99:b4:7d:03:5d:72:99:59:89:7c:51:f2:64:27:e8:cf: 9b:6c:8e:6e:71:d6:82:2e:fa:69:3e:dc:07:8d:1e:75:8b:f5: 6d:9c:79:cc:64:42:c4:75:dc:7e:97:1f:70:da:e6:d6:9e:e6: 5d:85:cb:24:c8:01:04:8c:92:27:15:ae:82:1e:1c:7e:bd:dd: 0a:6b:27:64:e3:06:30:9a:75:93:27:6b:a1:af:b6:2c:02:70: 0c:70:b8:43:67:c7:e2:2f:dd:f3:67:87:39:49:41:4e:c6:36: c3:cb:7c:e3:b1:a8:9b:2c:8b:3d:b2:c6:cb:bb:3d:f9:82:3b: ec:8c:79:7e:a6:20:21:4b:20:d6:c0:62:45:33:12:52:0e:87: a1:93:82:4e:e7:d0:84:c5:cb:a2:5d:94:f9:dd:52:f8:d6:cf: 9c:c2:66:ae:06:11:75:da:34:e3:07:b1:36:1e:9d:a2:74:51: 77:43:22:7f:5b:f8:ba:8e:92:c0:5f:18:4c:46:8f:69:48:a0: 3a:d0:e0:81:12:50:74:4f:a3:2a:ea:26:6d:14:d9:64:7e:d8: 95:6f:21:98:4e:d3:35:4f:9f:92:9c:93:7a:39:82:a6:31:e2: 85:e9:23:11:d9:4e:c8:4c:78:58:ee:b9:8c:c7:ae:ac:f0:c8: 24:43:b4:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNvYqFg+/c0OvhxnmrRSV+8buX9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA3MjAyMzM1NDdaFw0yNTA3MjQwMzAxNDdaMDMxMTAvBgNV BAMTKDZEQjdCNTU2ODBEOUYyOTUyNkJDMjhCQUU0MkQ5RTZBMEI4RTAyNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6y22cp8VSyT1LwjS8EHZTmlsE 7jmAfU/IlhibwydRqTpbwWseNnA4L3YuPD2HHO98YDzb0UWOC3iNzdPb678++7KO QtZEHbmR7ws/m/v1xVzjbMCJkac0LnY7E07+z2wP2BgG3wMNbErCbVB2KciEwtYL +74kMDud/D5KZqoFLVYJOXjRSI+o34E+YrtbVgF4imOXehvMtroBecqgTYThiXvY iqdlVZNnpCd35+aaGTrEbGrIKgW4Oy5clWH5JnUDZ02oFNMoDXKuy8LGLQ9vD7HD h1ZLWtCUA3HvMmnmKeWoRBwbwxC6IAAftfUgtCMgrkeHB+TByulrAZ03lYCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbbe1VoDZ8pUmvCi65C2eaguOAnkwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVSmbR9A11ymVmJfFHyZCfoz5tsjm5x1oIu +mk+3AeNHnWL9W2cecxkQsR13H6XH3Da5tae5l2FyyTIAQSMkicVroIeHH693Qpr J2TjBjCadZMna6GvtiwCcAxwuENnx+Iv3fNnhzlJQU7GNsPLfOOxqJssiz2yxsu7 PfmCO+yMeX6mICFLINbAYkUzElIOh6GTgk7n0ITFy6JdlPndUvjWz5zCZq4GEXXa NOMHsTYenaJ0UXdDIn9b+LqOksBfGExGj2lIoDrQ4IESUHRPoyrqJm0U2WR+2JVv IZhO0zVPn5Kck3o5gqYx4oXpIxHZTshMeFjuuYzHrqzwyCRDtDQ= -----END CERTIFICATE-----Generated at Mon Jul 21 01:32:10 2025 by rpki-client