$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: P1BLFjPauR1bsE1YSyCHyM9N0r4DIlZDRkCmTLT/cVs= Subject key identifier: 73:12:9D:D9:D2:22:1F:71:64:E0:F3:1B:F0:B3:F3:D6:C1:30:AD:B0 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 41342FB0C002EA28DA9094C0B3A3B21A5ACBA773 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0216 Signing time: Mon 20 Oct 2025 05:11:28 +0000 Manifest this update: Mon 20 Oct 2025 05:06:28 +0000 Manifest next update: Thu 23 Oct 2025 16:16:28 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: 9meGxVY2M0oFsUGicgpbY1ZmOxu3G9CuwAh5qxGHwrI=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:34:2f:b0:c0:02:ea:28:da:90:94:c0:b3:a3:b2:1a:5a:cb:a7:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Oct 20 05:06:28 2025 GMT Not After : Oct 23 16:16:28 2025 GMT Subject: CN=73129DD9D2221F7164E0F31BF0B3F3D6C130ADB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:35:10:e4:86:ae:07:f1:24:6b:1d:81:ed:7b: 82:30:27:fc:c5:6b:6e:1e:53:51:42:59:04:7a:e6: 44:98:45:be:26:77:24:ef:24:61:3a:0c:52:2b:30: 20:a0:67:1f:29:23:49:97:52:d1:83:7a:cf:11:04: bc:07:d4:de:c6:a3:e3:f0:2c:b9:e6:b7:d6:b9:46: e4:e4:02:12:4e:fe:5f:41:7b:1e:bc:2d:ab:66:01: 6a:01:9e:33:21:d4:05:dd:3a:df:a1:f3:fd:c3:1b: 87:c4:4a:07:8a:0d:3d:11:82:c2:bd:d9:0f:19:a8: 99:85:fb:9d:e6:20:6c:a0:52:d7:2b:bf:54:70:b4: e2:b3:1d:5d:c5:29:96:63:06:92:4d:6a:3d:73:aa: 8a:b1:cc:97:1f:77:8a:32:50:00:ad:76:02:fc:3f: 51:94:8d:dc:69:b7:d8:91:ad:04:04:49:f0:1d:71: d1:67:67:20:62:3e:93:5e:ce:da:01:8f:34:8c:e8: b6:77:23:e2:d6:bc:b5:bf:3c:7c:06:4f:ac:d8:41: 4f:22:cf:1d:7e:73:f1:05:e4:92:41:7c:4b:f3:7f: 45:f6:aa:87:2e:5c:7b:07:50:15:e3:3f:b8:a1:39: a7:bf:b7:9d:e2:f8:54:16:de:6c:1c:7f:35:7c:22: 06:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:12:9D:D9:D2:22:1F:71:64:E0:F3:1B:F0:B3:F3:D6:C1:30:AD:B0 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3d:1b:59:33:5a:0d:73:f8:81:86:d6:44:74:23:7e:40:f5: 85:c4:b0:5d:70:32:f5:53:df:43:d8:42:11:cb:83:66:b3:82: 33:9c:91:18:ad:f2:b8:e6:15:d7:d4:81:54:19:ef:a2:c2:f2: 43:f4:21:05:b6:b4:44:20:c0:8a:54:f3:e5:3d:1c:65:68:ed: cf:f4:ab:f2:f3:58:2a:28:39:4e:6d:43:d3:44:ff:42:85:78: 29:05:ef:59:6d:3d:b2:cf:14:4a:fb:db:f5:76:14:52:2c:7e: 1e:ee:c4:07:6b:0c:17:f6:79:fa:40:14:e8:54:29:9a:7e:e3: 70:6a:3b:bb:f7:76:06:ff:6c:a3:f1:46:53:c5:f9:87:be:f0: 06:9f:81:40:b3:6d:ad:79:9d:2d:46:bb:27:6b:09:0b:b2:07: 05:88:63:0b:41:59:57:7b:ec:bb:b2:56:91:98:4e:13:be:d8: 54:6d:ef:b4:c0:44:5f:f2:1f:85:14:b4:5a:24:9a:f2:a0:bb: 3d:9b:91:6a:ef:3e:1b:f3:de:c7:7a:1b:1c:93:1b:3c:57:b7: 4e:12:6c:10:72:eb:d8:4d:35:d8:ca:d7:e6:51:4d:46:e0:6a: 08:46:20:a7:fe:d3:1f:b9:dd:d7:6e:62:0e:7d:d4:f4:d5:0a: e3:8e:e2:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQTQvsMAC6ijakJTAs6OyGlrLp3MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTEwMjAwNTA2MjhaFw0yNTEwMjMxNjE2MjhaMDMxMTAvBgNV BAMTKDczMTI5REQ5RDIyMjFGNzE2NEUwRjMxQkYwQjNGM0Q2QzEzMEFEQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNRDkhq4H8SRrHYHte4IwJ/zF a24eU1FCWQR65kSYRb4mdyTvJGE6DFIrMCCgZx8pI0mXUtGDes8RBLwH1N7Go+Pw LLnmt9a5RuTkAhJO/l9Bex68LatmAWoBnjMh1AXdOt+h8/3DG4fESgeKDT0RgsK9 2Q8ZqJmF+53mIGygUtcrv1RwtOKzHV3FKZZjBpJNaj1zqoqxzJcfd4oyUACtdgL8 P1GUjdxpt9iRrQQESfAdcdFnZyBiPpNeztoBjzSM6LZ3I+LWvLW/PHwGT6zYQU8i zx1+c/EF5JJBfEvzf0X2qocuXHsHUBXjP7ihOae/t53i+FQW3mwcfzV8IgZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcxKd2dIiH3Fk4PMb8LPz1sEwrbAwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs9G1kzWg1z+IGG1kR0I35A9YXEsF1wMvVT 30PYQhHLg2azgjOckRit8rjmFdfUgVQZ76LC8kP0IQW2tEQgwIpU8+U9HGVo7c/0 q/LzWCooOU5tQ9NE/0KFeCkF71ltPbLPFEr72/V2FFIsfh7uxAdrDBf2efpAFOhU KZp+43BqO7v3dgb/bKPxRlPF+Ye+8AafgUCzba15nS1GuydrCQuyBwWIYwtBWVd7 7LuyVpGYThO+2FRt77TARF/yH4UUtFokmvKguz2bkWrvPhvz3sd6GxyTGzxXt04S bBBy69hNNdjK1+ZRTUbgaghGIKf+0x+53dduYg591PTVCuOO4v8= -----END CERTIFICATE-----Generated at Mon Oct 20 23:21:57 2025 by rpki-client