$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: /6GgOm972ub9ZdChhI1iKIZnB6i9p9SuA0vitTRYLS8= Subject key identifier: B2:8F:58:90:83:97:51:C3:62:68:22:62:6E:4D:21:F0:FA:63:B6:E4 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 51EC280B833B0E4E7EE2999B7C2B87CB50D6CC67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 017C Signing time: Wed 04 Jun 2025 07:40:45 +0000 Manifest this update: Wed 04 Jun 2025 07:35:45 +0000 Manifest next update: Sat 07 Jun 2025 10:42:45 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: edIKIjiYvqFHE+geuGyLqi2UEqTS3MI2kDzsesk9VX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 10:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ec:28:0b:83:3b:0e:4e:7e:e2:99:9b:7c:2b:87:cb:50:d6:cc:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Jun 4 07:35:45 2025 GMT Not After : Jun 7 10:42:45 2025 GMT Subject: CN=B28F5890839751C3626822626E4D21F0FA63B6E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b2:0f:98:3f:b0:d4:65:6b:ac:50:12:83:33: d7:41:36:0c:f9:98:7a:22:0b:db:ed:fb:9c:7f:24: 86:1e:19:61:93:33:c9:5b:a5:94:36:89:93:86:89: af:67:03:87:7b:fb:40:1f:d6:b3:27:35:d9:ee:73: 1a:ad:3b:4c:08:90:bf:43:95:48:8a:bb:4e:f0:c8: ba:1c:94:16:31:ec:e4:84:ba:0a:7b:eb:5d:79:4c: 2a:47:1e:1d:b5:3e:fb:63:d6:71:e9:4c:b1:b4:a2: 77:ea:64:03:9d:40:18:17:c6:76:c0:d1:b5:41:50: 54:70:f2:72:04:e2:e2:d5:c3:b0:ff:6f:30:0c:fc: e6:fa:dd:89:89:dc:17:b9:7c:cd:99:d2:fb:ce:41: 23:42:b1:09:f2:82:cb:24:d0:f8:13:88:5d:1f:e3: 3d:61:d7:34:51:71:5d:3d:ca:b4:ad:4e:4e:10:48: 7a:86:68:c3:bf:dd:40:ee:df:3f:d6:c3:b5:08:38: 1c:66:53:d9:e4:22:35:bc:25:43:d5:68:74:28:de: d5:1e:55:ee:3f:f2:c8:4a:07:c0:e2:81:f1:e6:96: da:85:92:dc:b9:a9:21:e3:9e:0c:75:59:ef:ed:a9: d0:11:e8:1c:33:fc:fe:5d:51:11:47:63:7f:6b:ec: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:8F:58:90:83:97:51:C3:62:68:22:62:6E:4D:21:F0:FA:63:B6:E4 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:8f:0d:1e:13:49:34:cc:95:ab:26:8b:4b:1a:d3:8e:e2:67: c8:ff:31:95:31:4e:f3:f4:46:d2:c0:4e:3f:27:3d:0c:e7:13: da:a4:94:0a:f3:0c:c8:99:ae:07:cb:39:d0:88:ba:b0:4e:42: 61:8d:fe:96:cd:0d:0b:9d:34:2f:09:a1:67:a8:2e:57:1e:e0: 98:35:f1:4c:91:ce:34:5c:ed:53:f7:ff:87:30:67:ec:db:33: e6:9e:c4:a6:1e:3f:69:cd:61:fb:f8:4d:d6:61:40:da:9c:b4: d1:dc:11:74:12:59:d3:83:4a:ff:b0:54:88:2d:e9:7c:7e:e2: 15:64:30:e8:30:a0:5c:3f:e4:dc:19:29:da:b4:c7:cb:b2:31: 98:66:c3:21:06:c8:fb:71:b4:01:3b:ff:a8:8c:3c:63:6f:ee: dc:67:a6:52:a4:ae:b0:79:a5:f0:4c:04:92:0b:8a:2a:1b:7a: f3:2d:26:83:94:e2:09:0b:e9:f9:25:3f:8e:ed:ab:1d:54:08: 42:19:47:af:ae:ca:9a:36:78:57:a2:eb:e9:85:a4:7b:e0:03: 6c:36:ec:ea:08:ab:db:04:35:7a:2d:75:4f:56:12:e9:4d:26: 54:5c:bd:5e:e9:ad:f1:6b:ec:4e:1b:b0:29:e2:c1:64:03:7a: f6:81:c2:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUewoC4M7Dk5+4pmbfCuHy1DWzGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA2MDQwNzM1NDVaFw0yNTA2MDcxMDQyNDVaMDMxMTAvBgNV BAMTKEIyOEY1ODkwODM5NzUxQzM2MjY4MjI2MjZFNEQyMUYwRkE2M0I2RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUsg+YP7DUZWusUBKDM9dBNgz5 mHoiC9vt+5x/JIYeGWGTM8lbpZQ2iZOGia9nA4d7+0Af1rMnNdnucxqtO0wIkL9D lUiKu07wyLoclBYx7OSEugp76115TCpHHh21Pvtj1nHpTLG0onfqZAOdQBgXxnbA 0bVBUFRw8nIE4uLVw7D/bzAM/Ob63YmJ3Be5fM2Z0vvOQSNCsQnygssk0PgTiF0f 4z1h1zRRcV09yrStTk4QSHqGaMO/3UDu3z/Ww7UIOBxmU9nkIjW8JUPVaHQo3tUe Ve4/8shKB8DigfHmltqFkty5qSHjngx1We/tqdAR6Bwz/P5dURFHY39r7IkPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUso9YkIOXUcNiaCJibk0h8PpjtuQwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+PDR4TSTTMlasmi0sa047iZ8j/MZUxTvP0 RtLATj8nPQznE9qklArzDMiZrgfLOdCIurBOQmGN/pbNDQudNC8JoWeoLlce4Jg1 8UyRzjRc7VP3/4cwZ+zbM+aexKYeP2nNYfv4TdZhQNqctNHcEXQSWdODSv+wVIgt 6Xx+4hVkMOgwoFw/5NwZKdq0x8uyMZhmwyEGyPtxtAE7/6iMPGNv7txnplKkrrB5 pfBMBJILiiobevMtJoOU4gkL6fklP47tqx1UCEIZR6+uypo2eFei6+mFpHvgA2w2 7OoIq9sENXotdU9WEulNJlRcvV7prfFr7E4bsCniwWQDevaBwv8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:19 2025 by rpki-client