$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: lF++/XJ5xiW8Xt84llvO05mKTnYRwoJOZ+VEQtBLc00= Subject key identifier: BA:28:7B:62:FF:AC:CF:BD:A6:BB:C4:92:24:70:AB:D0:38:F6:DC:86 Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 63E95631B6357F815B25ED06DA4770476D69FFFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 0503 Signing time: Thu 04 Sep 2025 09:11:35 +0000 Manifest this update: Thu 04 Sep 2025 09:06:35 +0000 Manifest next update: Sun 07 Sep 2025 13:46:35 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: N/3levtX8O7x5P+PxNPZrtQ4vUQ650UIQ8lFMuG1xik=) 2: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) 3: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 13:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e9:56:31:b6:35:7f:81:5b:25:ed:06:da:47:70:47:6d:69:ff:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Sep 4 09:06:35 2025 GMT Not After : Sep 7 13:46:35 2025 GMT Subject: CN=BA287B62FFACCFBDA6BBC4922470ABD038F6DC86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f9:a0:6a:39:c9:e1:6e:80:ad:24:61:53:2b: f7:88:41:44:5d:0c:1a:55:5d:5f:b3:67:59:b4:be: a8:03:57:13:d7:42:b7:1a:05:00:97:27:7d:1c:88: f0:02:f9:e7:bf:29:b7:1b:5e:1f:c1:3e:1f:7b:cf: 27:86:b7:32:4f:48:13:3c:53:19:4d:17:b3:72:61: 2e:58:d4:a1:cb:00:7d:f7:12:be:3d:14:b4:fc:ca: 40:2c:4e:a4:9e:08:1e:c3:c3:81:ed:3a:2d:85:fa: 5c:0c:09:b5:09:9c:41:88:88:02:6d:e6:82:ec:5f: e4:76:51:c5:c8:b4:22:9e:a9:34:ca:e7:1e:20:46: ac:37:4d:cd:3a:15:26:eb:1d:f8:50:cb:b2:67:a7: a7:20:b4:34:c5:62:a9:6c:3c:03:bf:32:47:84:61: 25:be:2b:26:6c:30:8e:dd:07:cb:4f:84:de:30:73: 43:fa:ef:d6:7b:0d:b0:5e:a3:35:cd:21:bd:9b:93: cd:c4:01:03:6b:59:29:c6:3c:7f:70:e7:89:e2:ca: b3:4a:c2:f6:25:af:fe:ce:06:d7:3f:a6:47:05:da: 6e:bb:a7:c7:35:23:3d:75:ee:01:5e:1b:f7:f5:76: 1e:83:eb:0c:97:6e:a0:6f:64:f9:fe:6b:94:e3:67: c2:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:28:7B:62:FF:AC:CF:BD:A6:BB:C4:92:24:70:AB:D0:38:F6:DC:86 X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:c0:d0:da:54:d8:e0:d6:63:26:44:f4:93:cb:1a:21:42:d7: 41:c4:d2:0d:57:a4:92:ed:95:ce:f5:0e:c8:c9:24:f5:db:bb: 04:52:1f:d3:ad:8f:d3:70:03:81:41:5a:01:5a:95:5c:65:c8: 1f:16:50:64:22:3e:19:1c:6d:7b:49:45:ac:8a:bf:c8:03:0a: df:c8:e3:7d:e0:d2:01:ae:79:8b:af:ea:a4:bd:7e:dc:a7:64: 3d:af:63:c6:2c:1f:6c:d3:26:83:5e:c2:5e:ad:7a:b5:ce:10: 8c:16:1d:e9:fd:ca:e7:d5:79:41:c6:80:68:27:49:36:3f:53: 32:6f:73:0f:81:dc:34:18:9a:e1:0a:60:a8:a6:0d:c5:18:7b: 44:2b:20:02:0d:a7:af:d1:88:60:06:63:69:5b:9b:b5:14:a9: 89:08:5c:c7:40:4b:ca:93:91:9d:04:31:1c:a8:b1:4d:08:ed: 2b:ea:27:b4:73:d1:d8:f8:9d:6b:02:a1:0d:c4:ab:a2:5a:0b: 57:b6:21:1a:b7:60:c1:3a:0e:5a:aa:9b:e1:42:bb:c1:31:71: b3:8e:29:5d:7c:ca:ac:eb:08:a9:bd:53:d3:ab:20:36:23:35: ad:91:fe:20:30:ca:82:33:da:af:26:3c:47:e9:0f:7d:62:96: 74:c0:58:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY+lWMbY1f4FbJe0G2kdwR21p//wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNTA5MDQwOTA2MzVaFw0yNTA5MDcxMzQ2MzVaMDMxMTAvBgNV BAMTKEJBMjg3QjYyRkZBQ0NGQkRBNkJCQzQ5MjI0NzBBQkQwMzhGNkRDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP+aBqOcnhboCtJGFTK/eIQURd DBpVXV+zZ1m0vqgDVxPXQrcaBQCXJ30ciPAC+ee/KbcbXh/BPh97zyeGtzJPSBM8 UxlNF7NyYS5Y1KHLAH33Er49FLT8ykAsTqSeCB7Dw4HtOi2F+lwMCbUJnEGIiAJt 5oLsX+R2UcXItCKeqTTK5x4gRqw3Tc06FSbrHfhQy7Jnp6cgtDTFYqlsPAO/MkeE YSW+KyZsMI7dB8tPhN4wc0P679Z7DbBeozXNIb2bk83EAQNrWSnGPH9w54niyrNK wvYlr/7OBtc/pkcF2m67p8c1Iz117gFeG/f1dh6D6wyXbqBvZPn+a5TjZ8IdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuih7Yv+sz72mu8SSJHCr0Dj23IYwHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvA0NpU2ODWYyZE9JPLGiFC10HE0g1XpJLt lc71DsjJJPXbuwRSH9Otj9NwA4FBWgFalVxlyB8WUGQiPhkcbXtJRayKv8gDCt/I 433g0gGueYuv6qS9ftynZD2vY8YsH2zTJoNewl6terXOEIwWHen9yufVeUHGgGgn STY/UzJvcw+B3DQYmuEKYKimDcUYe0QrIAINp6/RiGAGY2lbm7UUqYkIXMdAS8qT kZ0EMRyosU0I7SvqJ7Rz0dj4nWsCoQ3Eq6JaC1e2IRq3YME6Dlqqm+FCu8ExcbOO KV18yqzrCKm9U9OrIDYjNa2R/iAwyoIz2q8mPEfpD31ilnTAWFg= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:51 2025 by rpki-client