$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: loEuPwOJSj1eVk3YB1yd2EYtCT1vLvHl+f72WvHnc2E= Subject key identifier: 83:34:9A:54:30:1D:B5:9C:67:A6:30:90:23:08:83:44:DF:79:01:AE Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 49C3A08A16F4169D0F19F4B10DD994A5A9FC58FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 0492 Signing time: Mon 02 Jun 2025 22:31:33 +0000 Manifest this update: Mon 02 Jun 2025 22:26:33 +0000 Manifest next update: Fri 06 Jun 2025 01:18:33 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: EMKER7anw2rvALFU+4lt5zr3ISQFXQYLhbpO5P1Niq8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 01:18:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:c3:a0:8a:16:f4:16:9d:0f:19:f4:b1:0d:d9:94:a5:a9:fc:58:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Jun 2 22:26:33 2025 GMT Not After : Jun 6 01:18:33 2025 GMT Subject: CN=83349A54301DB59C67A6309023088344DF7901AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:50:71:62:31:a9:c2:b9:4a:8c:0b:07:e2:12: 2b:29:bb:dc:4d:42:cf:90:92:84:ab:29:fb:b6:2b: 99:8f:c8:46:0c:f9:4a:ee:e8:44:42:06:a2:f0:4b: 87:5a:13:b1:7b:ce:97:25:4e:d3:67:a0:92:1f:b2: ac:bb:a8:af:6b:43:f0:05:e2:05:89:8a:be:8d:ee: 6e:8f:19:25:86:f0:f5:8a:d1:85:82:a3:ad:f5:38: eb:9e:a9:a6:81:ae:20:db:e3:80:8e:aa:df:44:3a: 55:8a:47:5c:1d:77:44:f7:01:60:ce:41:fd:6e:04: 90:8c:4d:88:d2:16:1f:6c:6f:96:1f:0d:b8:50:3b: d2:c8:91:be:c6:f4:b7:82:d9:03:6d:4a:64:37:6e: e2:15:47:98:3b:e1:07:cc:1e:d8:a2:91:2f:74:95: 3e:b4:5a:cc:0d:a9:6f:6c:46:e7:3d:53:24:1e:d7: 15:a8:fe:88:43:a2:33:fa:b9:ec:91:5d:71:73:d5: 65:e9:1d:0c:ad:9f:3f:99:20:0c:f9:00:7b:cd:4d: 41:d0:96:89:aa:42:fa:58:87:4c:fa:12:65:5c:1d: 71:cf:84:54:67:63:fc:64:6f:b9:13:a2:ce:19:67: ea:1f:2b:0c:97:fe:56:e0:e6:75:11:67:e4:ce:d2: c9:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:34:9A:54:30:1D:B5:9C:67:A6:30:90:23:08:83:44:DF:79:01:AE X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:50:fb:76:9d:57:42:79:41:d0:7f:32:c3:6e:30:13:44:35: db:55:19:c5:02:60:85:8f:02:d0:84:9c:23:3d:7b:b2:44:7b: 24:77:1b:27:73:e6:2c:23:62:83:cd:d1:b9:b0:d0:6d:10:0e: ae:7c:03:b4:66:30:60:b5:d3:d4:f9:89:cc:6c:c0:3d:f8:f2: 14:27:72:08:f7:5e:19:0a:59:22:f7:6c:0a:46:21:fe:83:22: 3c:d2:6c:e8:43:a5:2c:3d:37:04:d1:74:f5:2a:79:b0:5d:cd: 80:ea:8a:1d:42:9f:bb:4a:7a:32:24:20:98:d3:a5:4b:27:61: 59:f0:a6:b8:ee:67:db:3d:4e:a1:76:95:23:ab:23:09:8e:ae: 85:f2:88:33:be:e2:a7:6c:06:41:65:88:be:59:f2:ed:5d:27: 90:c1:26:4d:6b:a9:8a:20:af:89:97:a5:72:6f:7d:34:1b:09: c7:04:75:a3:02:b3:f8:74:2c:4e:da:c2:6b:bd:46:48:bc:9f: 5d:5d:f3:dc:36:48:2f:ab:75:3d:4e:b3:f7:36:66:36:87:cc: a0:43:07:30:7c:b7:4a:77:b5:6a:51:4e:b5:19:f3:41:7b:02: a9:c9:8c:45:e0:69:b9:ec:c4:3d:83:17:20:6a:7a:91:75:9c: 05:05:a5:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUScOgihb0Fp0PGfSxDdmUpan8WP4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTA2MDIyMjI2MzNaFw0yNTA2MDYwMTE4MzNaMDMxMTAvBgNV BAMTKDgzMzQ5QTU0MzAxREI1OUM2N0E2MzA5MDIzMDg4MzQ0REY3OTAxQUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKUHFiManCuUqMCwfiEispu9xN Qs+QkoSrKfu2K5mPyEYM+Uru6ERCBqLwS4daE7F7zpclTtNnoJIfsqy7qK9rQ/AF 4gWJir6N7m6PGSWG8PWK0YWCo631OOueqaaBriDb44COqt9EOlWKR1wdd0T3AWDO Qf1uBJCMTYjSFh9sb5YfDbhQO9LIkb7G9LeC2QNtSmQ3buIVR5g74QfMHtiikS90 lT60WswNqW9sRuc9UyQe1xWo/ohDojP6ueyRXXFz1WXpHQytnz+ZIAz5AHvNTUHQ lomqQvpYh0z6EmVcHXHPhFRnY/xkb7kTos4ZZ+ofKwyX/lbg5nURZ+TO0sn9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgzSaVDAdtZxnpjCQIwiDRN95Aa4wHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOVQ+3adV0J5QdB/MsNuMBNENdtVGcUCYIWP AtCEnCM9e7JEeyR3Gydz5iwjYoPN0bmw0G0QDq58A7RmMGC109T5icxswD348hQn cgj3XhkKWSL3bApGIf6DIjzSbOhDpSw9NwTRdPUqebBdzYDqih1Cn7tKejIkIJjT pUsnYVnwprjuZ9s9TqF2lSOrIwmOroXyiDO+4qdsBkFliL5Z8u1dJ5DBJk1rqYog r4mXpXJvfTQbCccEdaMCs/h0LE7awmu9Rki8n11d89w2SC+rdT1Os/c2ZjaHzKBD BzB8t0p3tWpRTrUZ80F7AqnJjEXgabnsxD2DFyBqepF1nAUFpQY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:09 2025 by rpki-client