$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: 2LdVUomK8URfLSvvb4IWwNkPPROdTG/i/5ssFaiXQ3Q= Subject key identifier: 05:C8:17:46:0C:69:69:BA:A0:AC:B2:D0:CD:57:0F:2D:1C:5D:2E:54 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 2D89576F40AE4D9F0971180E0341C24A60057900 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01BE Signing time: Thu 30 Oct 2025 17:10:47 +0000 Manifest this update: Thu 30 Oct 2025 17:05:47 +0000 Manifest next update: Sun 02 Nov 2025 17:14:47 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: JU8lldxUq5F9I5V9MCMDmYPHRzP0Nb8XNfn5G7Ov1gE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 02 Nov 2025 17:14:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:89:57:6f:40:ae:4d:9f:09:71:18:0e:03:41:c2:4a:60:05:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Oct 30 17:05:47 2025 GMT Not After : Nov 2 17:14:47 2025 GMT Subject: CN=05C817460C6969BAA0ACB2D0CD570F2D1C5D2E54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:74:b7:98:49:9b:26:f8:26:ab:38:36:c7:38: 39:1c:27:65:a9:7f:37:c2:fd:c5:9f:ce:b6:61:bb: d5:2e:e3:4a:9b:06:c7:17:66:45:29:25:89:e6:bd: 4a:b2:d6:5f:d4:20:a0:bb:f2:00:0b:0b:e1:05:7b: 84:fd:7b:b7:cc:37:42:07:ab:25:0e:a6:18:1c:8e: d3:3a:03:ad:2e:cf:95:44:c1:ca:5e:9c:d4:d2:af: bf:19:72:80:30:62:14:09:71:93:75:a9:16:34:98: 06:92:3b:f4:94:2b:77:45:8e:26:39:49:81:9a:cc: c7:4c:f0:8a:79:14:88:e7:80:68:44:ff:47:aa:51: d6:23:79:cd:f7:66:97:9e:24:63:f6:f6:8a:b4:19: 65:90:19:b0:95:5d:30:f6:03:01:1d:58:b7:13:47: eb:70:8a:bf:d5:cd:7e:9c:9f:f8:58:e8:e1:a0:4e: 55:0e:e7:0e:22:3a:d2:c1:d5:0d:d7:77:05:16:2e: 1b:8f:ee:ac:e4:df:17:b8:52:78:0a:c4:db:df:42: a4:c1:65:f5:3b:b8:36:0d:97:a6:d0:09:6e:30:e4: c9:df:86:bb:66:37:ea:47:c5:45:84:58:7c:57:f1: 3e:38:59:97:e1:be:9c:47:39:75:2f:d3:a4:cf:44: e3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:C8:17:46:0C:69:69:BA:A0:AC:B2:D0:CD:57:0F:2D:1C:5D:2E:54 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:73:f3:0a:a7:52:db:02:1e:48:50:ad:20:69:d8:84:58:11: 51:6d:9a:6d:0a:b1:40:99:99:39:c2:3b:15:95:89:20:66:1b: 1d:70:fa:e4:9b:17:50:7a:ac:62:d2:a2:08:ed:59:e7:5a:3c: 27:01:03:49:d6:eb:69:b1:72:b8:dd:ab:81:b6:e1:d4:09:08: e1:d8:b4:6c:9c:d2:2c:99:cc:80:4a:6d:0b:dc:64:8b:ce:e0: d8:36:a6:c9:83:c6:98:e5:d5:77:10:d9:2a:37:32:8d:30:c7: 66:94:59:ec:d2:1d:2c:c0:ce:50:74:d9:97:6c:48:0b:20:f1: 4a:af:ec:8e:05:53:65:f2:0b:0d:dc:30:2c:40:f2:15:0f:0b: c9:0c:3a:98:0a:ab:05:cd:f3:25:db:e7:8f:ac:7e:17:cc:71: 5a:9e:67:d6:85:0b:25:e3:2a:59:8b:7a:19:1e:c4:dc:54:19: 13:fd:2f:02:eb:21:2a:3a:1b:ad:d6:34:aa:d4:e6:f1:dc:e2: 6c:b7:94:e9:d7:15:5a:88:0f:2d:a3:d5:20:f3:06:fc:a0:c5: b0:4d:42:33:4d:86:fc:f0:ff:1c:76:21:f8:0a:e3:d1:37:39: 4f:e8:03:d5:ac:10:4a:1f:31:67:c8:e5:28:b9:55:21:40:b5: 95:a0:8a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULYlXb0CuTZ8JcRgOA0HCSmAFeQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTEwMzAxNzA1NDdaFw0yNTExMDIxNzE0NDdaMDMxMTAvBgNV BAMTKDA1QzgxNzQ2MEM2OTY5QkFBMEFDQjJEMENENTcwRjJEMUM1RDJFNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPdLeYSZsm+CarODbHODkcJ2Wp fzfC/cWfzrZhu9Uu40qbBscXZkUpJYnmvUqy1l/UIKC78gALC+EFe4T9e7fMN0IH qyUOphgcjtM6A60uz5VEwcpenNTSr78ZcoAwYhQJcZN1qRY0mAaSO/SUK3dFjiY5 SYGazMdM8Ip5FIjngGhE/0eqUdYjec33ZpeeJGP29oq0GWWQGbCVXTD2AwEdWLcT R+twir/VzX6cn/hY6OGgTlUO5w4iOtLB1Q3XdwUWLhuP7qzk3xe4UngKxNvfQqTB ZfU7uDYNl6bQCW4w5MnfhrtmN+pHxUWEWHxX8T44WZfhvpxHOXUv06TPROOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBcgXRgxpabqgrLLQzVcPLRxdLlQwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdz8wqnUtsCHkhQrSBp2IRYEVFtmm0KsUCZ mTnCOxWViSBmGx1w+uSbF1B6rGLSogjtWedaPCcBA0nW62mxcrjdq4G24dQJCOHY tGyc0iyZzIBKbQvcZIvO4Ng2psmDxpjl1XcQ2So3Mo0wx2aUWezSHSzAzlB02Zds SAsg8Uqv7I4FU2XyCw3cMCxA8hUPC8kMOpgKqwXN8yXb54+sfhfMcVqeZ9aFCyXj KlmLehkexNxUGRP9LwLrISo6G63WNKrU5vHc4my3lOnXFVqIDy2j1SDzBvygxbBN QjNNhvzw/xx2IfgK49E3OU/oA9WsEEofMWfI5Si5VSFAtZWgimA= -----END CERTIFICATE-----Generated at Sat Nov 1 13:51:32 2025 by rpki-client