$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: DnUqQ+oudI59YbnCqBUoWCzZJ2w85q5gOMZIywbSJeA= Subject key identifier: DD:AE:83:49:0A:F8:92:B1:24:55:0E:A1:52:C9:53:19:19:4C:62:DE Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 578EBE7AD5F64DBF4C70F6B481DFB9C9655E687B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 022E Signing time: Fri 05 Sep 2025 16:21:50 +0000 Manifest this update: Fri 05 Sep 2025 16:16:50 +0000 Manifest next update: Mon 08 Sep 2025 21:13:50 +0000 Files and hashes: 1: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: pI4Ee2HOCQgHXKn0phpNZPvS39KAXUpqkjdsByhi1e8=) 2: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: scqosPwH5BL2/2imBhyJZEPHHItlqeTByFILkve6Gxg=) 3: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: G2qgmB4aK5h/W3KpZ/neupxBx4qyl/LBSIIBtQddi1M=) 4: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: yvcS+4k20Y8iRZaWxf96+9kxISErdYY6WtdAGoUwpMc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:8e:be:7a:d5:f6:4d:bf:4c:70:f6:b4:81:df:b9:c9:65:5e:68:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Sep 5 16:16:50 2025 GMT Not After : Sep 8 21:13:50 2025 GMT Subject: CN=DDAE83490AF892B124550EA152C95319194C62DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:5f:a8:5d:2c:60:29:de:0f:0b:7f:22:99: 97:9d:1b:01:44:33:6d:bf:ca:89:cc:ec:e3:a0:da: a5:5e:85:19:bf:a8:93:af:56:f2:b0:c3:a1:7f:d3: a1:c9:55:02:2d:8e:b3:57:4b:e1:8a:1b:b5:68:a3: 0e:59:b1:12:96:5d:57:44:9c:eb:73:34:56:3d:8b: 0a:7f:f8:f7:83:9d:63:f6:68:8f:05:88:73:dd:78: 8a:46:99:ab:8e:c4:f0:c2:6e:55:db:48:d0:60:5f: 0f:b7:32:b8:96:a8:e0:0f:ed:42:c3:3f:a9:07:80: 46:49:78:a4:75:9e:64:3e:e1:35:50:05:52:03:5f: 59:45:30:fb:33:f6:b5:53:23:e9:ab:09:1c:82:42: fe:8c:89:1f:9f:89:8a:b4:f8:76:fe:39:4b:00:8c: 25:6a:94:a2:d9:90:16:ad:2d:b1:16:82:25:30:35: d4:9b:cb:17:d6:96:3d:82:d6:59:21:f3:d8:42:cf: 57:27:1b:09:a0:56:74:a0:76:3e:76:8d:5d:ef:9e: e6:9a:ca:7c:7e:31:b1:a6:02:f4:e4:e2:e9:1d:29: ad:6c:08:29:69:c7:5e:c8:1d:b5:73:9f:43:2c:fc: 8a:9c:ef:b0:43:0f:f9:c3:b7:d8:06:40:4b:ff:60: 50:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AE:83:49:0A:F8:92:B1:24:55:0E:A1:52:C9:53:19:19:4C:62:DE X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:80:e4:57:08:c7:95:50:53:a1:12:4d:e1:63:e0:16:5a:01: d6:c6:e0:5a:4c:cb:19:ac:fe:2f:3b:1e:c3:0e:36:ff:ad:ac: 24:45:af:f5:6c:6f:3e:f4:43:05:16:b1:72:f5:5f:a7:26:3d: c6:09:ac:35:c0:87:27:5d:f6:90:b9:39:b2:74:e5:84:5f:e7: f3:9b:85:b8:dd:51:29:46:34:7d:04:c3:d4:1f:60:1b:86:47: e2:e8:48:b8:db:e3:1f:95:ad:0d:aa:c5:55:83:5f:ec:88:af: 3d:88:7a:cc:4e:a5:b2:c0:ce:a6:2e:b8:39:01:e9:f9:81:7b: ed:06:78:98:3b:08:68:46:c3:ff:be:c1:a4:d9:88:83:02:81: 82:fc:4b:83:91:95:b0:51:e9:d5:f1:4d:29:79:28:f2:df:e8: 98:d0:b0:d3:f2:df:02:62:2c:f2:39:1e:c8:ac:19:d7:7a:c3: 44:5e:42:b7:cc:88:0f:90:b7:a0:6c:5f:05:ed:2a:bc:cc:58: c3:f6:df:e4:d8:02:86:94:25:f3:87:9c:2f:11:b4:43:ec:85: 8c:b8:db:91:b8:b4:8a:5a:8b:15:0e:08:c1:b2:f1:7a:4b:19: bd:b3:83:39:0c:2b:2f:c7:6d:24:e5:6b:53:8b:b1:71:c0:9f: d1:70:f1:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV46+etX2Tb9McPa0gd+5yWVeaHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNTA5MDUxNjE2NTBaFw0yNTA5MDgyMTEzNTBaMDMxMTAvBgNV BAMTKEREQUU4MzQ5MEFGODkyQjEyNDU1MEVBMTUyQzk1MzE5MTk0QzYyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNw1+oXSxgKd4PC38imZedGwFE M22/yonM7OOg2qVehRm/qJOvVvKww6F/06HJVQItjrNXS+GKG7Voow5ZsRKWXVdE nOtzNFY9iwp/+PeDnWP2aI8FiHPdeIpGmauOxPDCblXbSNBgXw+3MriWqOAP7ULD P6kHgEZJeKR1nmQ+4TVQBVIDX1lFMPsz9rVTI+mrCRyCQv6MiR+fiYq0+Hb+OUsA jCVqlKLZkBatLbEWgiUwNdSbyxfWlj2C1lkh89hCz1cnGwmgVnSgdj52jV3vnuaa ynx+MbGmAvTk4ukdKa1sCClpx17IHbVzn0Ms/Iqc77BDD/nDt9gGQEv/YFCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3a6DSQr4krEkVQ6hUslTGRlMYt4wHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqA5FcIx5VQU6ESTeFj4BZaAdbG4FpMyxms /i87HsMONv+trCRFr/Vsbz70QwUWsXL1X6cmPcYJrDXAhydd9pC5ObJ05YRf5/Ob hbjdUSlGNH0Ew9QfYBuGR+LoSLjb4x+VrQ2qxVWDX+yIrz2IesxOpbLAzqYuuDkB 6fmBe+0GeJg7CGhGw/++waTZiIMCgYL8S4ORlbBR6dXxTSl5KPLf6JjQsNPy3wJi LPI5HsisGdd6w0ReQrfMiA+Qt6BsXwXtKrzMWMP23+TYAoaUJfOHnC8RtEPshYy4 25G4tIpaixUOCMGy8XpLGb2zgzkMKy/HbSTla1OLsXHAn9Fw8Tw= -----END CERTIFICATE-----Generated at Sun Sep 7 13:55:52 2025 by rpki-client