$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: BPSbPs2auXmonl4xIqk1pSKWlxDpNl4v+0gkr96p+Ww= Subject key identifier: 52:5D:6A:42:DB:8F:80:92:E5:9C:DD:A6:0D:D2:97:0D:7B:EC:80:DC Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 0DD7FBE17511EF35C3F2D8BC278D1E249D34FF2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 01E9 Signing time: Fri 04 Apr 2025 18:41:49 +0000 Manifest this update: Fri 04 Apr 2025 18:36:49 +0000 Manifest next update: Tue 08 Apr 2025 01:51:49 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: hIMnQPggRl/A4s6mlKVqz6cYpD+s0WdNhVv+CTnK11g=) 2: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: pI4Ee2HOCQgHXKn0phpNZPvS39KAXUpqkjdsByhi1e8=) 3: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: T9okG082dqQEWnVe0CuEJOwnFrJlDZQKcdgcbwieJtA=) 4: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: scqosPwH5BL2/2imBhyJZEPHHItlqeTByFILkve6Gxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d7:fb:e1:75:11:ef:35:c3:f2:d8:bc:27:8d:1e:24:9d:34:ff:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Apr 4 18:36:49 2025 GMT Not After : Apr 8 01:51:49 2025 GMT Subject: CN=525D6A42DB8F8092E59CDDA60DD2970D7BEC80DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ca:ab:8b:6f:d3:ee:b9:fa:a2:37:8d:92:c0: f6:f6:a7:2d:5e:c2:6e:66:ad:f7:52:aa:03:4e:24: 04:28:cf:95:d7:77:8a:c2:56:18:fb:e2:51:f9:5f: ed:83:a7:8f:c3:0a:b6:7d:13:aa:40:36:94:0c:ad: d1:15:0b:6f:a5:70:bf:f2:19:5a:03:27:42:91:b2: 23:e9:06:0c:f4:5d:32:c3:79:70:fb:ff:e6:3e:36: 63:73:7b:4a:14:56:f8:af:be:f5:b5:17:94:58:00: 96:74:08:ff:b2:63:67:2f:cd:9f:b1:63:d9:54:38: 9d:c0:e6:b4:21:03:23:69:7e:44:0c:95:f0:f2:9b: eb:16:9b:24:3b:74:df:ab:e4:1b:db:c1:3b:3b:65: aa:94:45:7a:0f:b4:ec:aa:e5:44:fb:a0:78:91:9c: 99:c3:45:e8:8f:7e:22:bb:38:1c:7c:73:ad:8c:b7: 59:9c:90:22:39:06:34:59:e8:49:87:92:72:f8:93: f4:04:32:33:d8:90:11:ee:aa:cc:9d:e1:3a:5a:78: f3:b1:30:ec:f3:21:c3:dd:1b:cd:36:9b:ac:67:d9: 12:f6:a1:48:1f:d2:f4:c6:52:a1:5b:b4:9f:09:9f: 69:d9:a3:0f:97:7f:78:2c:2c:12:36:be:52:96:55: ac:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:5D:6A:42:DB:8F:80:92:E5:9C:DD:A6:0D:D2:97:0D:7B:EC:80:DC X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c6:f7:2e:f2:eb:0f:5e:c1:46:c6:ab:05:09:b7:a1:5f:3c: 54:76:2c:27:fb:b6:11:b3:5c:95:0f:91:2f:0d:a6:15:f0:79: f3:88:1f:51:cc:60:57:10:ab:21:a2:66:19:9d:48:3b:02:d6: 6b:ed:32:e6:a9:e2:f9:1a:25:5d:c6:76:c4:74:38:b3:75:c6: 4e:db:bf:ee:19:d8:32:57:9e:0f:57:23:45:40:37:1f:61:1f: 97:96:4c:83:e3:f0:d1:ad:dd:3f:93:a3:f0:9d:42:bb:5e:f8: 6f:a3:5a:56:1d:b2:d3:3d:dd:75:39:f1:22:c5:7a:83:41:bc: 2b:70:df:8d:f6:28:79:56:8f:62:0b:da:cf:54:51:4d:62:e9: 27:6a:ba:15:91:ba:c3:37:34:78:6e:3c:e5:d1:3b:72:5b:2b: 0f:4c:f5:88:5f:c2:26:b4:ce:db:c1:6f:5c:53:83:5d:be:b9: 86:e6:6a:bb:ec:cb:ec:2d:5e:16:03:f0:a6:a6:75:9e:66:4a: cc:23:db:95:e9:a5:68:48:a6:05:a7:85:a9:45:05:6e:97:fc: 5f:17:cf:7c:c2:f9:0a:2f:97:23:15:9a:42:65:eb:27:bd:4b: 7c:8b:18:7b:d6:0f:ef:31:4b:c1:2e:85:22:1e:4d:24:57:23: 58:93:d2:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdf74XUR7zXD8ti8J40eJJ00/ywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNTA0MDQxODM2NDlaFw0yNTA0MDgwMTUxNDlaMDMxMTAvBgNV BAMTKDUyNUQ2QTQyREI4RjgwOTJFNTlDRERBNjBERDI5NzBEN0JFQzgwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9yquLb9PuufqiN42SwPb2py1e wm5mrfdSqgNOJAQoz5XXd4rCVhj74lH5X+2Dp4/DCrZ9E6pANpQMrdEVC2+lcL/y GVoDJ0KRsiPpBgz0XTLDeXD7/+Y+NmNze0oUVvivvvW1F5RYAJZ0CP+yY2cvzZ+x Y9lUOJ3A5rQhAyNpfkQMlfDym+sWmyQ7dN+r5BvbwTs7ZaqURXoPtOyq5UT7oHiR nJnDReiPfiK7OBx8c62Mt1mckCI5BjRZ6EmHknL4k/QEMjPYkBHuqsyd4TpaePOx MOzzIcPdG802m6xn2RL2oUgf0vTGUqFbtJ8Jn2nZow+Xf3gsLBI2vlKWVaxHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUl1qQtuPgJLlnN2mDdKXDXvsgNwwHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvG9y7y6w9ewUbGqwUJt6FfPFR2LCf7thGz XJUPkS8NphXwefOIH1HMYFcQqyGiZhmdSDsC1mvtMuap4vkaJV3GdsR0OLN1xk7b v+4Z2DJXng9XI0VANx9hH5eWTIPj8NGt3T+To/CdQrte+G+jWlYdstM93XU58SLF eoNBvCtw3432KHlWj2IL2s9UUU1i6SdquhWRusM3NHhuPOXRO3JbKw9M9Yhfwia0 ztvBb1xTg12+uYbmarvsy+wtXhYD8KamdZ5mSswj25XppWhIpgWnhalFBW6X/F8X z3zC+QovlyMVmkJl6ye9S3yLGHvWD+8xS8EuhSIeTSRXI1iT0l4= -----END CERTIFICATE-----Generated at Sat Apr 5 15:31:25 2025 by rpki-client