$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: AVSqCDDdJO+Pm7G9GF2NpNZxdMmThjMM3Ph/QisD2/w= Subject key identifier: E7:5A:27:E6:F6:F2:76:12:94:92:2D:C2:22:07:7B:7B:70:8E:CB:ED Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 082CA1D1665C67F0FDC82CF6A76814FEA9B7ADFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 0161 Signing time: Fri 04 Apr 2025 16:00:44 +0000 Manifest this update: Fri 04 Apr 2025 15:55:44 +0000 Manifest next update: Tue 08 Apr 2025 01:55:44 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: uEhNr3fctxGrg8DQNM362sAkJB1Zsi+C/MamiqZ2dLY=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:2c:a1:d1:66:5c:67:f0:fd:c8:2c:f6:a7:68:14:fe:a9:b7:ad:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Apr 4 15:55:44 2025 GMT Not After : Apr 8 01:55:44 2025 GMT Subject: CN=E75A27E6F6F2761294922DC222077B7B708ECBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f7:6d:32:34:f3:c4:25:14:a9:c5:b4:b2:92: 4a:14:7b:29:77:99:0b:e6:44:c5:65:c4:03:53:2d: e2:e5:7b:43:3a:1d:14:94:b5:6c:c8:86:eb:f1:01: f0:c8:2d:79:61:4f:40:8d:e8:38:b6:ea:8f:48:1c: 42:61:98:87:10:79:d3:10:df:d7:a0:d7:b6:d8:ae: d7:5d:bf:31:ef:4d:3f:3d:ec:6b:1a:18:d6:9f:33: 02:25:68:b8:fa:1f:f0:d2:99:05:e1:8a:56:bd:fb: 7a:9e:ec:59:b5:8d:1a:83:82:c5:0d:4c:f5:dd:68: e1:53:5c:76:61:b5:4f:0c:2c:a1:b1:88:fb:64:30: eb:4a:c2:20:52:9b:c1:23:d6:72:66:60:d7:4b:3b: 19:93:a3:56:b4:03:63:d1:96:53:52:42:b5:a5:93: c5:ce:8f:06:0b:16:94:42:f1:8c:66:f5:d2:b1:af: e8:34:79:45:3b:fe:2e:c1:df:a6:3f:8f:a9:43:4d: ed:1d:de:98:31:bb:5a:3f:34:3b:17:7b:1b:7e:12: 5d:b5:9a:c1:49:e6:b0:fc:a7:e9:8a:92:bd:df:f2: f0:c8:a7:a1:9a:fe:67:fe:3d:d1:11:2c:db:87:98: ed:94:15:34:69:07:4c:b0:88:3b:ad:98:d4:34:82: 03:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:5A:27:E6:F6:F2:76:12:94:92:2D:C2:22:07:7B:7B:70:8E:CB:ED X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f3:ad:1d:32:d2:60:ba:c4:06:10:c6:e5:f0:05:c2:4d:d9: eb:8b:8d:11:cc:a8:a4:d3:5e:69:20:8e:42:b1:19:45:9a:4c: 9a:5c:64:72:ad:c1:76:33:fc:9d:86:db:cc:6a:85:19:48:96: 0b:7d:10:d3:ff:42:09:7d:71:23:33:e6:8d:9c:d4:db:cf:36: 1b:dc:f0:4a:73:4f:a7:3a:21:90:e3:01:60:e1:dc:f8:c4:ab: 12:7e:fe:e7:fd:ab:4c:b0:4f:c4:4e:66:9b:a3:c0:07:db:14: 9d:1e:b1:a2:f1:18:47:a8:0e:66:3e:a7:32:69:85:7f:79:b0: 5d:02:a2:d0:12:cd:57:5f:9c:b5:d7:42:a1:6d:0c:01:55:ce: 7f:6d:f2:32:cf:80:75:19:9a:26:23:96:0d:37:57:a0:df:bb: c4:a7:17:4c:20:a6:1e:71:16:ef:65:39:25:0c:48:10:39:09: 09:e6:e9:23:08:74:4a:96:8e:50:f0:88:bd:1b:48:f8:7e:fd: 83:82:b2:83:4a:46:35:64:12:40:f0:9f:28:52:f8:60:7e:9f: 0c:84:e4:3c:51:58:60:f9:c1:05:cd:f7:9d:f3:75:26:34:5d: 43:4b:48:a6:3b:e2:44:2a:87:ff:df:d6:a1:b4:dc:b3:fa:e2: 2b:5e:c5:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCCyh0WZcZ/D9yCz2p2gU/qm3rfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA0MDQxNTU1NDRaFw0yNTA0MDgwMTU1NDRaMDMxMTAvBgNV BAMTKEU3NUEyN0U2RjZGMjc2MTI5NDkyMkRDMjIyMDc3QjdCNzA4RUNCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2920yNPPEJRSpxbSykkoUeyl3 mQvmRMVlxANTLeLle0M6HRSUtWzIhuvxAfDILXlhT0CN6Di26o9IHEJhmIcQedMQ 39eg17bYrtddvzHvTT897GsaGNafMwIlaLj6H/DSmQXhila9+3qe7Fm1jRqDgsUN TPXdaOFTXHZhtU8MLKGxiPtkMOtKwiBSm8Ej1nJmYNdLOxmTo1a0A2PRllNSQrWl k8XOjwYLFpRC8Yxm9dKxr+g0eUU7/i7B36Y/j6lDTe0d3pgxu1o/NDsXext+El21 msFJ5rD8p+mKkr3f8vDIp6Ga/mf+PdERLNuHmO2UFTRpB0ywiDutmNQ0ggN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU51on5vbydhKUki3CIgd7e3COy+0wHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzzrR0y0mC6xAYQxuXwBcJN2euLjRHMqKTT XmkgjkKxGUWaTJpcZHKtwXYz/J2G28xqhRlIlgt9ENP/Qgl9cSMz5o2c1NvPNhvc 8EpzT6c6IZDjAWDh3PjEqxJ+/uf9q0ywT8ROZpujwAfbFJ0esaLxGEeoDmY+pzJp hX95sF0CotASzVdfnLXXQqFtDAFVzn9t8jLPgHUZmiYjlg03V6Dfu8SnF0wgph5x Fu9lOSUMSBA5CQnm6SMIdEqWjlDwiL0bSPh+/YOCsoNKRjVkEkDwnyhS+GB+nwyE 5DxRWGD5wQXN953zdSY0XUNLSKY74kQqh//f1qG03LP64itexQQ= -----END CERTIFICATE-----Generated at Sat Apr 5 17:50:52 2025 by rpki-client