$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: Audit2T8gdmojnc9yZsZshdjkgIJM5DTLOsjd6s+VmE= Subject key identifier: 56:45:69:22:F4:C3:C8:25:F9:E3:BB:4C:D8:EE:B3:26:CB:56:EE:76 Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 0145A3ECB4BB18F42DA41707C4767F51FCD472C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 0204 Signing time: Tue 03 Jun 2025 08:24:13 +0000 Manifest this update: Tue 03 Jun 2025 08:19:13 +0000 Manifest next update: Fri 06 Jun 2025 18:25:13 +0000 Files and hashes: 1: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: aaGr3nGiAK9ksn6v7idfNxlaibRvS2TfrwaPa7tNu/w=) 2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: pI4Ee2HOCQgHXKn0phpNZPvS39KAXUpqkjdsByhi1e8=) 3: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: scqosPwH5BL2/2imBhyJZEPHHItlqeTByFILkve6Gxg=) 4: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: yvcS+4k20Y8iRZaWxf96+9kxISErdYY6WtdAGoUwpMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:25:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:45:a3:ec:b4:bb:18:f4:2d:a4:17:07:c4:76:7f:51:fc:d4:72:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Jun 3 08:19:13 2025 GMT Not After : Jun 6 18:25:13 2025 GMT Subject: CN=56456922F4C3C825F9E3BB4CD8EEB326CB56EE76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:d5:6c:24:a0:df:36:fa:f2:de:2c:f7:a5:33: a0:54:c3:0b:c9:99:5e:3f:f7:c7:3c:f1:5f:9a:60: f6:6d:15:9a:e4:43:39:07:37:8f:b8:b8:d7:34:6c: 82:0a:02:1d:59:31:a4:fa:72:0c:19:c1:66:eb:8e: 3a:30:e7:a8:e7:d6:ae:65:0b:57:70:ad:aa:92:c0: 32:93:ee:c7:00:d0:6c:c1:49:8c:f0:2e:45:de:60: af:d5:f6:8b:30:f3:a3:c8:a5:ca:b6:b3:5a:86:a5: 69:26:0b:19:9e:de:4b:5e:79:d4:c4:a6:38:24:3b: 61:bf:a8:e8:56:21:67:c7:1b:a4:18:b7:0d:9b:71: 6a:58:29:9d:29:19:5a:70:8c:3b:26:4c:c0:64:99: a5:5f:b6:d0:b2:b1:05:71:6f:0d:ac:38:fc:95:82: 21:d0:80:c4:c9:20:7d:98:85:c6:16:fa:f0:05:6c: 60:df:a1:bc:9b:4c:43:23:4d:4e:2d:98:8d:a3:4d: d1:d8:a6:5e:1a:fd:83:c8:93:72:9b:07:12:d6:9b: 72:8f:ed:1d:a7:35:02:d1:d1:d7:1b:5f:5c:a9:76: be:30:d1:e8:79:64:2a:88:55:ce:95:82:c5:e5:6a: a2:a8:c9:94:dd:d1:5b:9e:76:f4:c4:d4:cc:13:c0: 9a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:45:69:22:F4:C3:C8:25:F9:E3:BB:4C:D8:EE:B3:26:CB:56:EE:76 X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:f0:74:ed:43:51:f9:cd:6d:1a:9a:66:e0:cb:75:df:68:42: ed:39:df:4c:f7:21:15:3d:63:94:24:dd:da:7d:79:dd:e5:04: 70:bf:bb:c2:a7:08:de:68:e2:14:73:ad:c4:8a:8d:1f:b8:4f: b3:73:7b:8c:89:15:fe:83:4d:2d:f6:2c:c7:a2:1e:00:64:5b: c9:d4:0a:30:9a:ba:b9:15:34:97:68:7c:7a:a6:15:cb:02:f5: f2:b8:65:50:eb:9a:ae:02:d3:d6:c7:b2:c2:16:22:55:39:46: d5:ee:36:a5:b7:8f:4e:2d:51:3d:73:70:0d:09:16:28:9c:ae: b5:b2:a4:60:dc:e0:37:ee:14:bc:82:e6:b8:2e:fc:74:07:de: b5:51:c6:62:a0:82:a6:7a:64:41:9a:8d:c5:7b:22:63:fe:43: 5f:39:d7:fc:34:ac:9c:0a:8f:e9:72:bf:d2:ad:80:49:b9:3e: 25:0a:a3:b9:36:ce:db:35:3a:e6:aa:de:25:e7:6c:75:9f:2d: 55:81:24:79:cd:f9:45:dc:8a:f6:ab:f4:4b:6b:81:d4:37:9e: 92:14:4e:cd:f3:d7:7b:63:9d:fa:2d:cf:b9:59:8d:d3:c1:43: 04:51:f9:e7:a2:c1:7e:7e:46:ce:80:b9:5b:97:05:76:63:98: 4a:e1:0d:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAUWj7LS7GPQtpBcHxHZ/UfzUcsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNTA2MDMwODE5MTNaFw0yNTA2MDYxODI1MTNaMDMxMTAvBgNV BAMTKDU2NDU2OTIyRjRDM0M4MjVGOUUzQkI0Q0Q4RUVCMzI2Q0I1NkVFNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu1WwkoN82+vLeLPelM6BUwwvJ mV4/98c88V+aYPZtFZrkQzkHN4+4uNc0bIIKAh1ZMaT6cgwZwWbrjjow56jn1q5l C1dwraqSwDKT7scA0GzBSYzwLkXeYK/V9osw86PIpcq2s1qGpWkmCxme3kteedTE pjgkO2G/qOhWIWfHG6QYtw2bcWpYKZ0pGVpwjDsmTMBkmaVfttCysQVxbw2sOPyV giHQgMTJIH2YhcYW+vAFbGDfobybTEMjTU4tmI2jTdHYpl4a/YPIk3KbBxLWm3KP 7R2nNQLR0dcbX1ypdr4w0eh5ZCqIVc6VgsXlaqKoyZTd0VuedvTE1MwTwJo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVkVpIvTDyCX547tM2O6zJstW7nYwHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7wdO1DUfnNbRqaZuDLdd9oQu0530z3IRU9 Y5Qk3dp9ed3lBHC/u8KnCN5o4hRzrcSKjR+4T7Nze4yJFf6DTS32LMeiHgBkW8nU CjCaurkVNJdofHqmFcsC9fK4ZVDrmq4C09bHssIWIlU5RtXuNqW3j04tUT1zcA0J FiicrrWypGDc4DfuFLyC5rgu/HQH3rVRxmKggqZ6ZEGajcV7ImP+Q1851/w0rJwK j+lyv9KtgEm5PiUKo7k2zts1Ouaq3iXnbHWfLVWBJHnN+UXcivar9EtrgdQ3npIU Ts3z13tjnfotz7lZjdPBQwRR+eeiwX5+Rs6AuVuXBXZjmErhDd4= -----END CERTIFICATE-----Generated at Thu Jun 5 18:09:45 2025 by rpki-client