$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: hROigL14k6V6SzyXMakKG1Plr8BIcU3vOtBuV/KRO8A= Subject key identifier: C3:93:3C:B6:BC:5C:D1:66:75:2A:1D:99:47:31:07:3C:AD:04:97:24 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 460A3BFFA7BAE1718EBF36387473B30CD4D66D3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01BC Signing time: Fri 04 Apr 2025 07:21:26 +0000 Manifest this update: Fri 04 Apr 2025 07:16:26 +0000 Manifest next update: Mon 07 Apr 2025 14:07:26 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) 3: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: G6acHByHSvyYjO1QVaZ1Ocd3SZo+OP3j5Vi8DplEHxU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:0a:3b:ff:a7:ba:e1:71:8e:bf:36:38:74:73:b3:0c:d4:d6:6d:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Apr 4 07:16:26 2025 GMT Not After : Apr 7 14:07:26 2025 GMT Subject: CN=C3933CB6BC5CD166752A1D994731073CAD049724 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fe:f3:bb:b0:77:b9:24:ee:84:88:34:23:3a: 27:99:87:61:ad:f5:94:a9:cb:7d:c8:e8:39:6a:78: 9c:16:89:43:76:95:b1:e6:a1:1b:ca:93:62:46:4a: 1c:d0:ac:39:c1:62:36:80:56:c0:e4:c7:b9:e7:fa: 0c:61:ae:f2:b7:41:e6:f6:37:b1:e1:a3:d2:35:56: 3e:32:58:d7:71:18:65:f4:50:b1:9b:56:93:b4:97: 34:92:ef:17:ad:21:c2:25:9f:77:ca:4f:53:67:78: 08:95:23:58:97:bd:d7:d6:30:3e:f8:0d:10:e4:42: eb:55:15:3b:43:2f:63:92:cb:dd:f7:62:d4:4a:27: 6d:3f:b1:95:a0:5e:47:1b:2a:e2:ba:bf:3d:ba:75: 36:2c:8b:a6:11:3d:89:42:ae:fa:8a:e8:0d:22:a9: cc:32:a3:16:9f:b9:58:62:39:cb:80:41:78:7e:a2: 26:f0:c6:8e:30:71:f3:8e:34:e2:5a:bd:f1:0e:4e: 42:92:bc:c5:68:9e:9e:71:e8:75:aa:65:83:c5:33: 3b:be:10:74:d3:e7:d2:d4:de:9b:dd:c3:07:39:03: a9:fc:d0:a4:ab:49:59:43:c0:20:60:ff:08:37:12: b8:08:c9:f9:ec:e3:0e:b1:ce:61:68:99:b8:9b:15: d7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:93:3C:B6:BC:5C:D1:66:75:2A:1D:99:47:31:07:3C:AD:04:97:24 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:8c:fb:54:31:e5:59:90:b4:21:2c:82:4f:7b:07:bb:3a:5d: 8b:da:94:d9:3c:11:66:07:31:71:91:a6:13:bf:70:27:6f:a7: 18:9f:f3:ea:cd:23:a4:96:e5:29:46:2a:c6:14:7f:1f:76:ce: a2:70:f1:b4:06:10:93:3b:c4:ca:3e:4a:3b:d8:78:80:53:1c: 3f:f0:b3:af:46:ae:15:f7:67:c1:7f:7e:aa:39:7a:09:91:64: 30:f8:77:f0:48:6a:64:5b:43:9d:c0:3e:55:0b:62:cf:35:c4: c0:fd:a7:b7:82:e3:54:ef:f7:14:f3:f7:0f:cb:90:a0:4d:77: 6a:43:a7:98:0b:32:49:1e:a5:cd:00:a4:59:b9:aa:1f:39:d9: 2e:50:ea:3f:43:45:2d:93:c2:d9:f1:2b:80:d2:b3:32:81:db: e4:43:ea:f6:e9:ac:ea:e7:e5:07:e9:f6:76:80:9c:bf:d4:f2: de:83:a6:de:8b:69:a4:7b:10:d1:d8:ed:37:fb:fb:3e:02:13: b6:d2:ff:4a:d4:2b:ec:79:31:a4:a3:88:00:0b:04:4c:9c:23: 19:34:80:da:84:d1:d8:16:b6:07:9a:39:fc:20:dd:93:b2:d3: 7c:cb:bd:02:47:94:04:3d:27:a4:5f:c5:f6:61:74:2b:9a:09: 07:34:47:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURgo7/6e64XGOvzY4dHOzDNTWbTswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA0MDQwNzE2MjZaFw0yNTA0MDcxNDA3MjZaMDMxMTAvBgNV BAMTKEMzOTMzQ0I2QkM1Q0QxNjY3NTJBMUQ5OTQ3MzEwNzNDQUQwNDk3MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/vO7sHe5JO6EiDQjOieZh2Gt 9ZSpy33I6DlqeJwWiUN2lbHmoRvKk2JGShzQrDnBYjaAVsDkx7nn+gxhrvK3Qeb2 N7Hho9I1Vj4yWNdxGGX0ULGbVpO0lzSS7xetIcIln3fKT1NneAiVI1iXvdfWMD74 DRDkQutVFTtDL2OSy933YtRKJ20/sZWgXkcbKuK6vz26dTYsi6YRPYlCrvqK6A0i qcwyoxafuVhiOcuAQXh+oibwxo4wcfOONOJavfEOTkKSvMVonp5x6HWqZYPFMzu+ EHTT59LU3pvdwwc5A6n80KSrSVlDwCBg/wg3ErgIyfns4w6xzmFombibFddVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw5M8trxc0WZ1Kh2ZRzEHPK0ElyQwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH+M+1Qx5VmQtCEsgk97B7s6XYvalNk8EWYH MXGRphO/cCdvpxif8+rNI6SW5SlGKsYUfx92zqJw8bQGEJM7xMo+SjvYeIBTHD/w s69GrhX3Z8F/fqo5egmRZDD4d/BIamRbQ53APlULYs81xMD9p7eC41Tv9xTz9w/L kKBNd2pDp5gLMkkepc0ApFm5qh852S5Q6j9DRS2TwtnxK4DSszKB2+RD6vbprOrn 5Qfp9naAnL/U8t6Dpt6LaaR7ENHY7Tf7+z4CE7bS/0rUK+x5MaSjiAALBEycIxk0 gNqE0dgWtgeaOfwg3ZOy03zLvQJHlAQ9J6RfxfZhdCuaCQc0R1c= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:37 2025 by rpki-client