$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: /ji6iMAw//jbPxxsYNPM19YRAGwRc0IBTh9ay9++CGw= Subject key identifier: 06:75:A0:E9:BB:E8:BC:51:9F:38:A9:6B:CB:07:58:70:41:AF:B7:BF Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 0C91156585132CBD844CEF7D665EF9974DB442A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01FA Signing time: Fri 22 Aug 2025 07:21:27 +0000 Manifest this update: Fri 22 Aug 2025 07:16:27 +0000 Manifest next update: Mon 25 Aug 2025 10:20:27 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: dO4QCTx3O1LZ4NV4hCP4nF9C7351Y1BqEhtvBqMt8oI=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 10:20:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:91:15:65:85:13:2c:bd:84:4c:ef:7d:66:5e:f9:97:4d:b4:42:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Aug 22 07:16:27 2025 GMT Not After : Aug 25 10:20:27 2025 GMT Subject: CN=0675A0E9BBE8BC519F38A96BCB07587041AFB7BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:77:69:f1:95:6b:a2:31:5b:78:9e:fe:a9:67: 54:cf:5c:6b:d7:64:a5:41:af:64:b6:5d:26:22:22: f2:1e:ce:0b:f5:b2:0a:92:20:76:b8:2c:9f:36:45: df:d5:f1:55:57:c3:1f:6a:3a:7a:16:0d:7d:f6:a4: 19:26:51:1a:f0:b0:cc:2a:12:bc:50:f5:f5:f4:8f: aa:7a:18:01:3c:6b:6e:e5:25:00:9e:47:9c:77:43: f7:ef:ca:9e:d5:f2:41:cf:8b:2b:40:c8:ac:a0:32: b0:91:23:6e:f5:a3:e5:4a:d7:82:5d:af:3c:0f:a0: 6c:f3:46:5b:9b:b1:35:61:20:c4:76:72:c2:e0:96: e3:82:d5:75:dd:21:49:e6:2c:d8:fa:42:a5:09:c5: 20:59:15:04:13:1c:10:2d:4b:55:23:36:33:8c:13: 96:b8:27:71:b3:67:54:78:32:1b:e1:26:72:28:dc: e0:1d:9a:75:45:f3:21:06:0a:3a:a8:2b:74:1d:51: 6b:50:a8:b1:47:e3:eb:22:30:c6:8b:86:4f:54:d7: 18:12:55:3b:fb:7f:c9:91:1e:fe:98:7b:48:54:02: 76:4c:e1:48:ee:c3:11:57:ea:6e:e6:ff:48:88:48: 65:6b:c2:83:bb:73:f8:2b:a5:88:04:62:3d:bb:b9: 88:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:75:A0:E9:BB:E8:BC:51:9F:38:A9:6B:CB:07:58:70:41:AF:B7:BF X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a3:90:34:f1:d5:c1:2b:76:16:35:b4:ae:f2:76:4e:51:d4: cb:3f:2a:ed:a3:dc:f2:0e:f6:66:1a:00:b0:73:32:3b:63:b3: 3c:3b:4a:04:72:b0:1e:c7:73:35:9f:2c:a4:ca:2a:ec:c2:93: 0c:91:da:9b:dd:2c:66:95:ce:1c:f5:fa:61:37:f9:1f:73:d6: 96:99:6a:17:f9:66:95:ab:da:26:dc:cc:4c:92:c3:70:01:07: 0d:14:36:32:5b:0a:2e:37:87:52:3a:35:4b:28:38:4f:15:a6: fe:2f:58:9f:29:65:8b:c6:d9:16:f7:cd:b6:a5:86:f6:80:d9: 0c:1e:25:ab:b9:2b:b4:f8:25:82:ff:fe:65:5f:86:7b:61:80: bc:10:df:97:05:21:bc:3e:20:02:a3:14:b7:b7:5c:18:1e:94: 7d:8a:5b:cc:e2:b2:bc:f3:83:30:87:66:eb:e8:d5:61:17:44: 55:76:55:09:52:f4:b8:ef:bf:c4:17:08:dc:c8:ad:6a:9f:f0: df:0f:52:70:d0:4d:57:1e:e6:db:6a:ac:54:32:fb:b1:55:7c: 8f:a6:37:8c:85:b1:34:bd:5f:fa:21:02:b9:0f:e4:13:17:64: 2c:13:d7:8f:e5:7e:3b:8e:e3:dd:91:e2:cf:56:f6:7d:19:4c: ba:4c:00:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJEVZYUTLL2ETO99Zl75l020QqQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA4MjIwNzE2MjdaFw0yNTA4MjUxMDIwMjdaMDMxMTAvBgNV BAMTKDA2NzVBMEU5QkJFOEJDNTE5RjM4QTk2QkNCMDc1ODcwNDFBRkI3QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxd2nxlWuiMVt4nv6pZ1TPXGvX ZKVBr2S2XSYiIvIezgv1sgqSIHa4LJ82Rd/V8VVXwx9qOnoWDX32pBkmURrwsMwq ErxQ9fX0j6p6GAE8a27lJQCeR5x3Q/fvyp7V8kHPiytAyKygMrCRI271o+VK14Jd rzwPoGzzRlubsTVhIMR2csLgluOC1XXdIUnmLNj6QqUJxSBZFQQTHBAtS1UjNjOM E5a4J3GzZ1R4MhvhJnIo3OAdmnVF8yEGCjqoK3QdUWtQqLFH4+siMMaLhk9U1xgS VTv7f8mRHv6Ye0hUAnZM4UjuwxFX6m7m/0iISGVrwoO7c/grpYgEYj27uYi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBnWg6bvovFGfOKlrywdYcEGvt78wHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKjkDTx1cErdhY1tK7ydk5R1Ms/Ku2j3PIO 9mYaALBzMjtjszw7SgRysB7HczWfLKTKKuzCkwyR2pvdLGaVzhz1+mE3+R9z1paZ ahf5ZpWr2ibczEySw3ABBw0UNjJbCi43h1I6NUsoOE8Vpv4vWJ8pZYvG2Rb3zbal hvaA2QweJau5K7T4JYL//mVfhnthgLwQ35cFIbw+IAKjFLe3XBgelH2KW8zisrzz gzCHZuvo1WEXRFV2VQlS9Ljvv8QXCNzIrWqf8N8PUnDQTVce5ttqrFQy+7FVfI+m N4yFsTS9X/ohArkP5BMXZCwT14/lfjuO492R4s9W9n0ZTLpMAHE= -----END CERTIFICATE-----Generated at Sat Aug 23 12:01:36 2025 by rpki-client