$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: J56kU3pAbSawG6CkP4pVBYqAziMc0BIxidocFlW2x18= Subject key identifier: A4:B9:D7:2A:41:28:F1:03:BE:9F:22:65:90:88:C8:25:9A:24:A5:E3 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 43F05EEC33696A610FE44E9C5BCFC45BA4A289CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0202 Signing time: Fri 05 Sep 2025 05:31:28 +0000 Manifest this update: Fri 05 Sep 2025 05:26:28 +0000 Manifest next update: Mon 08 Sep 2025 16:18:28 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: muWHx+STrmvrJT/NK3ysKhM4DM3NHphT/8Vad5yAJgA=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:18:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f0:5e:ec:33:69:6a:61:0f:e4:4e:9c:5b:cf:c4:5b:a4:a2:89:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Sep 5 05:26:28 2025 GMT Not After : Sep 8 16:18:28 2025 GMT Subject: CN=A4B9D72A4128F103BE9F22659088C8259A24A5E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:93:4a:65:98:3d:ce:fe:48:63:ee:a2:07:98: 99:1e:ee:bb:28:5c:2c:b8:5d:b7:04:e8:91:0e:a5: b4:98:13:3e:da:41:a5:de:da:be:a1:ab:72:51:c7: ab:97:a5:af:71:fa:a2:8f:bc:b6:23:82:1e:f0:a9: d0:65:74:63:fa:d5:b2:7f:36:77:df:da:29:fe:6a: 99:5d:36:26:c5:95:bc:60:c2:f6:7d:a9:1c:ff:9c: e9:8a:3b:f0:1c:11:6f:b5:23:a5:c8:49:ae:5a:ff: ce:02:eb:70:86:ac:91:f2:9e:4a:75:6e:03:67:30: 35:76:e4:92:95:1b:53:45:78:39:80:ff:7a:1b:86: b5:c2:a4:22:22:21:fe:75:24:1a:14:10:f9:b3:74: e5:a2:02:43:9a:0d:e4:e0:08:95:b7:14:81:e0:91: 6d:fc:c6:b5:16:01:ff:8c:f7:a5:ac:97:9f:3f:61: d3:88:04:09:52:0f:bf:f8:69:3a:c5:fd:02:4c:fb: 24:80:8b:fb:db:d3:3f:51:d3:89:d5:99:1f:89:36: 41:3a:29:7e:e3:75:4d:7d:43:a7:45:c4:d4:f9:53: ac:fd:ea:fa:54:11:54:b4:43:96:18:be:3e:c2:94: 7e:44:e1:45:d8:ca:f5:26:4f:e5:d8:88:36:3d:14: b5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:B9:D7:2A:41:28:F1:03:BE:9F:22:65:90:88:C8:25:9A:24:A5:E3 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:dd:49:b9:96:e2:aa:eb:d7:10:1e:4d:e0:e4:dd:35:bd:15: 84:4b:92:77:e8:e0:e7:3e:f3:0c:64:45:7b:a0:8d:33:ba:85: 74:dd:8e:ae:8e:3a:97:0b:cd:89:fd:28:21:e2:7e:4e:15:75: d4:78:9b:fc:36:5a:6b:b5:0b:9b:d7:bf:12:48:13:8d:73:3d: 28:f9:e2:78:d0:6e:bb:f1:21:ef:1e:a6:36:98:4a:6c:34:73: da:24:77:75:8c:bf:02:45:81:19:55:21:0b:db:76:dd:1f:f6: c3:2c:c2:f2:71:31:c7:31:6e:52:2a:e7:e6:eb:52:96:a8:61: 89:e3:bd:63:ed:f1:75:e9:d9:b8:87:d1:6d:a1:36:b8:d9:7e: bc:fa:9d:76:bd:70:aa:d1:29:72:a8:62:98:0d:96:51:49:ec: 20:df:8c:54:21:77:49:51:ea:11:2e:74:9d:96:f3:85:a5:c6: 47:f3:92:88:bd:da:d9:d0:4e:e4:79:23:07:d2:ba:c6:1b:d9: eb:bf:1e:62:3d:86:e3:f6:55:49:6e:72:01:f8:be:43:23:2a: 27:8f:e5:9a:f8:bf:c8:78:9a:71:50:e4:cf:ad:c1:d9:fa:6c: 5c:14:48:6d:56:08:22:fb:56:19:f0:f5:bf:2c:9b:68:31:07: da:59:e3:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/Be7DNpamEP5E6cW8/EW6Siic4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA5MDUwNTI2MjhaFw0yNTA5MDgxNjE4MjhaMDMxMTAvBgNV BAMTKEE0QjlENzJBNDEyOEYxMDNCRTlGMjI2NTkwODhDODI1OUEyNEE1RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+k0plmD3O/khj7qIHmJke7rso XCy4XbcE6JEOpbSYEz7aQaXe2r6hq3JRx6uXpa9x+qKPvLYjgh7wqdBldGP61bJ/ Nnff2in+apldNibFlbxgwvZ9qRz/nOmKO/AcEW+1I6XISa5a/84C63CGrJHynkp1 bgNnMDV25JKVG1NFeDmA/3obhrXCpCIiIf51JBoUEPmzdOWiAkOaDeTgCJW3FIHg kW38xrUWAf+M96Wsl58/YdOIBAlSD7/4aTrF/QJM+ySAi/vb0z9R04nVmR+JNkE6 KX7jdU19Q6dFxNT5U6z96vpUEVS0Q5YYvj7ClH5E4UXYyvUmT+XYiDY9FLWnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpLnXKkEo8QO+nyJlkIjIJZokpeMwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbdSbmW4qrr1xAeTeDk3TW9FYRLknfo4Oc+ 8wxkRXugjTO6hXTdjq6OOpcLzYn9KCHifk4VddR4m/w2Wmu1C5vXvxJIE41zPSj5 4njQbrvxIe8epjaYSmw0c9okd3WMvwJFgRlVIQvbdt0f9sMswvJxMccxblIq5+br UpaoYYnjvWPt8XXp2biH0W2hNrjZfrz6nXa9cKrRKXKoYpgNllFJ7CDfjFQhd0lR 6hEudJ2W84Wlxkfzkoi92tnQTuR5IwfSusYb2eu/HmI9huP2VUlucgH4vkMjKieP 5Zr4v8h4mnFQ5M+twdn6bFwUSG1WCCL7Vhnw9b8sm2gxB9pZ49w= -----END CERTIFICATE-----Generated at Fri Sep 5 12:12:19 2025 by rpki-client