$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: C74zgXLbukvmZ9b6i/VWiu9Amohj1LVANc745CoYxRs= Subject key identifier: 30:F0:63:6B:07:CC:3D:CD:3B:08:F7:60:54:8B:D3:7E:A0:91:EA:24 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 050B5910008073851E6A5E5933DE6C3BA80EF31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01A6 Signing time: Fri 05 Sep 2025 15:40:45 +0000 Manifest this update: Fri 05 Sep 2025 15:35:45 +0000 Manifest next update: Tue 09 Sep 2025 00:32:45 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: a7ypcT9zzrA0TMKhtMHz158A+INMeSK439WaeGn6pxc=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:0b:59:10:00:80:73:85:1e:6a:5e:59:33:de:6c:3b:a8:0e:f3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Sep 5 15:35:45 2025 GMT Not After : Sep 9 00:32:45 2025 GMT Subject: CN=30F0636B07CC3DCD3B08F760548BD37EA091EA24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:0c:2f:bf:3e:16:3b:5b:43:16:9e:2e:05:5e: 35:10:a6:36:e4:32:12:c6:a0:e6:8d:18:94:2e:10: 71:67:3e:12:6e:1e:38:20:f6:22:1d:49:b0:13:fc: a2:77:8f:35:0b:f3:92:86:f7:aa:cc:8e:ea:4a:9e: 7f:ae:db:13:3d:c3:30:70:72:4a:6e:bc:e8:55:3c: d0:0b:46:96:fb:80:58:65:a6:13:0c:25:81:5a:f3: 9f:26:72:d9:b5:02:7b:fd:b2:3c:9e:ce:20:45:81: 63:07:01:f1:40:1f:47:a1:30:42:eb:5e:9b:99:f7: 14:cb:e0:7a:e0:ae:65:62:99:a7:c4:ad:a7:64:4b: 37:30:26:dc:b0:a6:dd:04:21:96:e6:01:27:c1:c3: b4:cb:cc:8b:04:85:8c:46:60:7c:4a:e0:10:22:3d: 52:8b:eb:1a:a1:b8:ae:4a:e8:7a:0c:02:60:55:48: 08:e2:cb:a9:13:28:47:53:ac:01:3e:d3:f2:5c:63: e5:20:cf:da:c6:56:93:52:f0:ef:d0:73:72:ef:dc: e7:55:d1:60:b2:fd:e3:e8:72:93:33:fe:3e:df:be: 16:cb:e7:c6:1b:99:38:69:bc:1d:72:f0:46:04:78: c6:53:cb:1d:eb:1d:c7:fb:78:82:17:6f:b7:8f:9f: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:F0:63:6B:07:CC:3D:CD:3B:08:F7:60:54:8B:D3:7E:A0:91:EA:24 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0e:3d:e5:05:73:4c:89:ea:44:b7:83:50:9d:7b:89:20:6f: 1d:26:dc:4c:70:7d:2e:9e:6b:2e:ee:60:a4:c7:ec:f1:ca:ad: ca:68:d7:62:a4:9e:c2:8d:ff:64:64:c9:89:63:28:70:0c:d5: ef:23:da:f8:92:19:6c:8f:d3:c7:92:60:4a:ab:36:9d:26:da: 77:04:4c:73:f2:fa:55:ee:35:54:9b:d4:4b:16:af:b3:24:f9: 0c:33:b2:86:01:d9:35:ff:bd:42:2a:d8:c9:90:38:e0:81:cb: dd:95:a3:53:2d:1c:3c:34:2c:04:ff:0e:e2:ef:55:bc:2c:19: e4:0b:b8:9e:95:52:96:98:33:40:f8:df:0e:91:45:e2:b7:b2: 23:29:83:77:b2:f3:d3:e9:90:f1:8b:87:0f:61:91:b3:4d:31: 5c:a6:6a:8a:37:86:42:6f:bb:19:f8:28:a5:a3:be:5b:fe:45: 5f:e9:33:8d:c2:b3:57:0e:0a:61:88:07:99:bd:19:51:48:5e: bb:87:3d:1d:70:2f:d6:6f:cd:bd:c0:af:45:ea:6d:75:dd:ab: 50:22:e1:6a:03:d9:04:b8:1e:39:c6:e6:97:22:8f:6d:f2:e2: 10:ef:78:41:20:40:1b:e6:b1:7d:e7:db:29:47:c6:2c:be:ed: 92:40:c8:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQtZEACAc4Ueal5ZM95sO6gO8x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA5MDUxNTM1NDVaFw0yNTA5MDkwMDMyNDVaMDMxMTAvBgNV BAMTKDMwRjA2MzZCMDdDQzNEQ0QzQjA4Rjc2MDU0OEJEMzdFQTA5MUVBMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMDC+/PhY7W0MWni4FXjUQpjbk MhLGoOaNGJQuEHFnPhJuHjgg9iIdSbAT/KJ3jzUL85KG96rMjupKnn+u2xM9wzBw ckpuvOhVPNALRpb7gFhlphMMJYFa858mctm1Anv9sjyeziBFgWMHAfFAH0ehMELr XpuZ9xTL4HrgrmVimafEradkSzcwJtywpt0EIZbmASfBw7TLzIsEhYxGYHxK4BAi PVKL6xqhuK5K6HoMAmBVSAjiy6kTKEdTrAE+0/JcY+Ugz9rGVpNS8O/Qc3Lv3OdV 0WCy/ePocpMz/j7fvhbL58YbmThpvB1y8EYEeMZTyx3rHcf7eIIXb7ePn9THAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMPBjawfMPc07CPdgVIvTfqCR6iQwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8OPeUFc0yJ6kS3g1Cde4kgbx0m3ExwfS6e ay7uYKTH7PHKrcpo12KknsKN/2RkyYljKHAM1e8j2viSGWyP08eSYEqrNp0m2ncE THPy+lXuNVSb1EsWr7Mk+QwzsoYB2TX/vUIq2MmQOOCBy92Vo1MtHDw0LAT/DuLv VbwsGeQLuJ6VUpaYM0D43w6RReK3siMpg3ey89PpkPGLhw9hkbNNMVymaoo3hkJv uxn4KKWjvlv+RV/pM43Cs1cOCmGIB5m9GVFIXruHPR1wL9Zvzb3Ar0XqbXXdq1Ai 4WoD2QS4HjnG5pcij23y4hDveEEgQBvmsX3n2ylHxiy+7ZJAyLM= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:21 2025 by rpki-client