$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: rB3bRwCKwUOqZ03rA7S2qkdkAErUxveCcDw0AFcAT2A= Subject key identifier: 82:43:5C:75:91:45:82:E0:B3:C4:15:24:02:71:2A:78:72:05:27:48 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 56CA54231963D6380AC4286BEF23C842E3F4C4AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01D6 Signing time: Mon 02 Jun 2025 18:41:27 +0000 Manifest this update: Mon 02 Jun 2025 18:36:27 +0000 Manifest next update: Fri 06 Jun 2025 03:58:27 +0000 Files and hashes: 1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) 3: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: 00ixM30dTf4wojNooSnBZbbMypE2GbRNC4cTFsdnhrQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ca:54:23:19:63:d6:38:0a:c4:28:6b:ef:23:c8:42:e3:f4:c4:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Jun 2 18:36:27 2025 GMT Not After : Jun 6 03:58:27 2025 GMT Subject: CN=82435C75914582E0B3C4152402712A7872052748 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:30:60:46:e4:f9:1b:46:8c:36:6d:52:82:58: 5a:42:ad:84:3c:df:96:9d:f4:89:dd:55:af:2c:39: 17:82:b8:c8:69:b6:d1:66:91:7c:c0:e0:e9:20:38: 72:28:88:4b:43:7d:77:2f:1e:11:f0:66:65:8e:7e: 7b:2c:b9:1e:3d:45:0d:64:da:29:72:66:53:7f:8f: 23:26:57:ff:61:c3:10:2a:26:f3:98:7e:da:45:57: a0:9c:d9:02:8f:cc:80:ff:e2:23:80:10:58:7e:ad: 02:e2:77:81:e2:47:fc:04:4c:3b:57:a5:b1:bc:64: 45:6c:6f:49:c9:62:0b:68:be:d4:a1:8f:6d:93:1a: c2:26:38:d7:53:3b:62:ee:10:78:8b:2c:6a:3f:c8: 00:bc:af:c7:c3:43:be:0d:a6:e6:e9:6a:e0:d5:9b: ef:02:6c:48:c0:68:5a:30:48:07:76:a6:fd:e0:65: e5:0e:2d:87:a1:80:3c:a8:fe:3a:30:68:16:08:8d: a9:c5:1d:3a:84:de:0e:fd:d8:aa:93:40:98:70:18: 0a:29:28:ca:47:34:9d:b6:f7:3b:7c:6c:bd:e8:f1: 9d:08:b0:2c:03:95:9e:6e:4c:f2:b0:c7:78:4b:b0: d6:6c:78:48:eb:87:13:7e:10:95:a2:9c:fb:17:de: 34:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:43:5C:75:91:45:82:E0:B3:C4:15:24:02:71:2A:78:72:05:27:48 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:1a:5a:6e:b1:7a:26:39:98:b5:68:b8:94:ac:f1:2f:5b:01: 32:6d:01:a5:fd:e1:4e:c4:e2:02:d8:1d:05:a1:59:d1:6e:f7: 04:0f:cb:f6:e8:f9:0e:4a:af:b8:0d:24:e0:8f:56:ca:cb:b4: ad:6a:e5:37:56:ba:01:45:94:6e:98:f2:90:65:25:98:b8:87: 5c:11:ec:fa:88:75:4a:3a:0f:3a:54:ee:b2:fa:2f:2e:c8:9f: cf:8b:17:23:41:00:2f:c6:a8:87:ff:27:32:30:6d:1c:fe:cb: ee:22:8f:c8:9d:41:96:73:c7:15:15:13:1d:51:2e:18:f3:ab: 75:93:cb:a0:ed:ee:08:a5:96:92:69:6f:2b:d1:2e:1c:6a:77: 71:e2:b0:32:a9:86:d0:f5:bb:2e:c0:67:b3:b3:7d:d4:43:c8: 4b:fa:f2:fc:35:d4:09:85:52:35:3e:ae:85:6e:0b:79:8f:af: 40:a8:19:ae:28:51:3c:b3:81:c1:e1:b5:47:6b:6a:97:21:14: da:c1:7e:ca:81:ca:6d:2b:71:92:b5:e8:c7:3a:85:e7:7e:86: fc:11:73:e7:32:25:bd:a3:39:2d:22:a2:fc:e9:f9:06:04:ef: 2e:86:ac:28:c2:3f:82:26:c5:b0:a6:99:6f:dc:ce:ab:3a:e3: 45:f7:2f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVspUIxlj1jgKxChr7yPIQuP0xK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA2MDIxODM2MjdaFw0yNTA2MDYwMzU4MjdaMDMxMTAvBgNV BAMTKDgyNDM1Qzc1OTE0NTgyRTBCM0M0MTUyNDAyNzEyQTc4NzIwNTI3NDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMGBG5PkbRow2bVKCWFpCrYQ8 35ad9IndVa8sOReCuMhpttFmkXzA4OkgOHIoiEtDfXcvHhHwZmWOfnssuR49RQ1k 2ilyZlN/jyMmV/9hwxAqJvOYftpFV6Cc2QKPzID/4iOAEFh+rQLid4HiR/wETDtX pbG8ZEVsb0nJYgtovtShj22TGsImONdTO2LuEHiLLGo/yAC8r8fDQ74NpubpauDV m+8CbEjAaFowSAd2pv3gZeUOLYehgDyo/jowaBYIjanFHTqE3g792KqTQJhwGAop KMpHNJ229zt8bL3o8Z0IsCwDlZ5uTPKwx3hLsNZseEjrhxN+EJWinPsX3jRlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkNcdZFFguCzxBUkAnEqeHIFJ0gwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkaWm6xeiY5mLVouJSs8S9bATJtAaX94U7E 4gLYHQWhWdFu9wQPy/bo+Q5Kr7gNJOCPVsrLtK1q5TdWugFFlG6Y8pBlJZi4h1wR 7PqIdUo6DzpU7rL6Ly7In8+LFyNBAC/GqIf/JzIwbRz+y+4ij8idQZZzxxUVEx1R Lhjzq3WTy6Dt7gillpJpbyvRLhxqd3HisDKphtD1uy7AZ7OzfdRDyEv68vw11AmF UjU+roVuC3mPr0CoGa4oUTyzgcHhtUdrapchFNrBfsqBym0rcZK16Mc6hed+hvwR c+cyJb2jOS0iovzp+QYE7y6GrCjCP4ImxbCmmW/czqs640X3L/4= -----END CERTIFICATE-----Generated at Tue Jun 3 23:10:58 2025 by rpki-client