$ rpki-client -vvf repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft File: 861DE86D91E4C7508D388EDBC70834681B43B5CA.mft (raw, json) Hash identifier: Nvj+ctD85O71QAsW438GBPC5Iq8afzzJ0h6bwvz/abQ= Subject key identifier: A3:54:B6:58:68:35:76:98:36:8F:3A:D7:1D:B0:76:06:6D:04:20:1F Authority key identifier: 86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA Certificate issuer: /CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Certificate serial: 7C3C7F0F6A2716C51A5BE3CFE280E97B88F87847 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft Manifest number: 04BC Signing time: Sat 06 Sep 2025 02:51:33 +0000 Manifest this update: Sat 06 Sep 2025 02:46:33 +0000 Manifest next update: Tue 09 Sep 2025 03:53:33 +0000 Files and hashes: 1: 861DE86D91E4C7508D388EDBC70834681B43B5CA.crl (hash: S18/wtfCrdv78cb2lX43RcFdux4HI0t6tY6jeMj///I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:53:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3c:7f:0f:6a:27:16:c5:1a:5b:e3:cf:e2:80:e9:7b:88:f8:78:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=861DE86D91E4C7508D388EDBC70834681B43B5CA Validity Not Before: Sep 6 02:46:33 2025 GMT Not After : Sep 9 03:53:33 2025 GMT Subject: CN=A354B65868357698368F3AD71DB076066D04201F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:c8:f8:c0:58:1d:1d:b1:a5:65:4d:e9:84: f4:e6:9b:91:57:1a:e3:8f:8a:21:cc:d1:ac:05:02: d4:e5:0c:6a:50:73:de:5f:12:6d:f0:48:9e:0d:5c: d9:8b:e4:03:39:2a:03:f8:25:c6:88:87:66:14:32: 70:37:43:21:68:d2:cf:bd:62:5a:88:f4:a7:2f:60: 9b:71:bd:bd:76:4c:a8:ec:97:df:be:2d:26:10:53: bc:6e:60:77:ab:e4:ab:4d:b6:30:3c:cd:18:7b:d6: d2:a5:0d:ce:91:4c:4c:c3:ef:31:0f:b8:40:42:ab: 28:3c:f5:ca:33:c2:09:29:9b:e6:45:2d:da:1d:4b: 6e:7f:c2:9c:b9:c6:52:62:29:36:3e:a4:0f:06:0b: bd:cf:58:ac:94:ca:e1:10:1c:ff:f1:49:40:70:1b: b5:b8:5d:da:2d:5e:fa:cf:ca:bf:65:49:06:0c:60: a0:c1:b2:f1:63:38:47:ef:c3:47:f6:49:d1:fb:d6: 8c:e1:7c:e3:0d:68:24:bb:81:6b:ec:d9:94:ee:e8: 96:e9:f6:75:64:d9:40:ed:17:5f:85:01:0a:37:4e: a8:c9:de:f7:dc:5f:73:ef:81:dc:0b:f6:f8:97:ae: a6:e5:ea:ff:c5:77:7a:55:f7:6b:d0:49:01:e6:0c: 33:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:54:B6:58:68:35:76:98:36:8F:3A:D7:1D:B0:76:06:6D:04:20:1F X509v3 Authority Key Identifier: keyid:86:1D:E8:6D:91:E4:C7:50:8D:38:8E:DB:C7:08:34:68:1B:43:B5:CA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/861DE86D91E4C7508D388EDBC70834681B43B5CA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/869f2988-cab3-45aa-97e5-6385f07ff1cd/0/861DE86D91E4C7508D388EDBC70834681B43B5CA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ae:95:7b:c5:d0:05:c2:8b:f1:fd:f2:e5:70:7d:57:5c:47: 19:60:08:90:1d:6e:7f:bf:4f:5d:1e:ce:b1:47:3d:d3:fa:61: 51:cb:9f:ea:44:d0:c6:2b:24:c2:35:e9:2c:3c:78:ed:fb:b9: 2a:cc:54:3b:30:47:60:3c:e3:58:44:76:68:10:30:3e:2e:e9: 66:f7:14:b6:73:6b:ef:f2:a4:72:64:69:75:40:e2:d4:d7:bd: 94:ef:29:15:36:76:1c:d6:6a:5e:d0:41:8a:cb:ce:1a:1f:59: bb:3c:d0:76:46:66:3a:38:db:6b:f7:06:77:b2:19:4e:a5:38: d8:be:c8:ad:2e:0d:f6:2e:bd:c4:ef:1e:c0:13:4d:5c:3d:42: 73:69:1a:dd:16:a4:cd:c9:04:93:a3:4b:c2:78:25:fe:4a:37: 86:19:5e:47:dd:83:8f:f9:6d:87:cd:f7:14:15:29:8a:c0:e3: 98:03:dd:9f:be:29:0a:10:9d:1a:4b:4d:1d:22:91:21:95:a9: f0:fa:b8:cf:23:dc:74:6b:97:9e:42:da:44:54:42:52:ce:b6: 95:82:e0:6b:c3:41:9a:94:b6:f6:a6:66:14:14:b8:07:02:23: 59:23:dd:eb:0f:89:b9:61:e4:90:c5:2b:cc:97:b2:d5:77:ee: 19:6a:59:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDx/D2onFsUaW+PP4oDpe4j4eEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0Njgx QjQzQjVDQTAeFw0yNTA5MDYwMjQ2MzNaFw0yNTA5MDkwMzUzMzNaMDMxMTAvBgNV BAMTKEEzNTRCNjU4NjgzNTc2OTgzNjhGM0FENzFEQjA3NjA2NkQwNDIwMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKcj4wFgdHbGlZU3phPTmm5FX GuOPiiHM0awFAtTlDGpQc95fEm3wSJ4NXNmL5AM5KgP4JcaIh2YUMnA3QyFo0s+9 YlqI9KcvYJtxvb12TKjsl9++LSYQU7xuYHer5KtNtjA8zRh71tKlDc6RTEzD7zEP uEBCqyg89cozwgkpm+ZFLdodS25/wpy5xlJiKTY+pA8GC73PWKyUyuEQHP/xSUBw G7W4XdotXvrPyr9lSQYMYKDBsvFjOEfvw0f2SdH71ozhfOMNaCS7gWvs2ZTu6Jbp 9nVk2UDtF1+FAQo3TqjJ3vfcX3PvgdwL9viXrqbl6v/Fd3pV92vQSQHmDDP9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo1S2WGg1dpg2jzrXHbB2Bm0EIB8wHwYDVR0j BBgwFoAUhh3obZHkx1CNOI7bxwg0aBtDtcowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjlmMjk4OC1jYWIzLTQ1YWEtOTdlNS02Mzg1ZjA3ZmYxY2QvMC84NjFERTg2RDkx RTRDNzUwOEQzODhFREJDNzA4MzQ2ODFCNDNCNUNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0NjgxQjQz QjVDQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY5ZjI5ODgtY2FiMy00NWFhLTk3 ZTUtNjM4NWYwN2ZmMWNkLzAvODYxREU4NkQ5MUU0Qzc1MDhEMzg4RURCQzcwODM0 NjgxQjQzQjVDQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWulXvF0AXCi/H98uVwfVdcRxlgCJAdbn+/ T10ezrFHPdP6YVHLn+pE0MYrJMI16Sw8eO37uSrMVDswR2A841hEdmgQMD4u6Wb3 FLZza+/ypHJkaXVA4tTXvZTvKRU2dhzWal7QQYrLzhofWbs80HZGZjo422v3Bney GU6lONi+yK0uDfYuvcTvHsATTVw9QnNpGt0WpM3JBJOjS8J4Jf5KN4YZXkfdg4/5 bYfN9xQVKYrA45gD3Z++KQoQnRpLTR0ikSGVqfD6uM8j3HRrl55C2kRUQlLOtpWC 4GvDQZqUtvamZhQUuAcCI1kj3esPiblh5JDFK8yXstV37hlqWWo= -----END CERTIFICATE-----Generated at Sun Sep 7 15:31:11 2025 by rpki-client