$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: FHS6MTlUKiRRzujPPi8Y6ALlNBMsPjxtKGJ0tleZcrY= Subject key identifier: 76:68:25:7A:95:6E:8D:BB:60:CE:DF:ED:CF:DB:E2:99:A9:19:AA:96 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 6F032E934D1660E5B472BBF6CCF1279F6A3B2E42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 01CC Signing time: Sat 10 May 2025 04:21:26 +0000 Manifest this update: Sat 10 May 2025 04:16:26 +0000 Manifest next update: Tue 13 May 2025 14:40:26 +0000 Files and hashes: 1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: PlBGFcTpMVCZPELNTrEPn9zi/dt4FX9v2WIPCvlxQ2c=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: iYjxNGaGfSAxa5AZ+nxdu3I0npf9epSQeWhp6Aeu2W8=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: qSLOmmKQbpUJFsyDR7s4vV7U7BrxlvPKm9Mtz4l1D8c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 14:40:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:03:2e:93:4d:16:60:e5:b4:72:bb:f6:cc:f1:27:9f:6a:3b:2e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: May 10 04:16:26 2025 GMT Not After : May 13 14:40:26 2025 GMT Subject: CN=7668257A956E8DBB60CEDFEDCFDBE299A919AA96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:a1:f5:0a:71:73:25:4d:59:68:0b:46:cd:43: 8c:c0:81:a1:b9:32:ba:87:6e:3e:97:3f:0c:be:b1: 10:f1:4d:30:da:7a:1b:15:29:87:6c:23:7b:a5:6b: 11:ab:75:ee:f2:1e:0c:e2:cc:26:31:fc:da:a2:85: bf:36:a3:d1:c1:9c:03:07:52:35:fd:71:0b:ba:8b: e8:91:68:35:98:dd:74:bb:63:e1:88:93:82:1d:6b: a9:02:58:6e:d4:9d:e4:dc:75:70:2c:c7:b9:8d:f1: 5b:45:f9:a1:b2:88:9a:e6:49:19:b0:aa:d7:7d:da: e5:e2:07:76:fd:cb:c7:3e:02:86:bb:c4:de:a9:e6: ec:0a:cc:8f:7a:b6:7e:7f:79:7b:5d:c6:43:65:fa: 8a:41:87:f7:a3:36:40:eb:6b:b8:07:40:2e:22:dd: df:89:ef:05:86:22:39:10:dd:0b:fa:38:11:f6:ab: 9a:6f:0c:25:5c:a4:d2:27:03:05:4e:a4:1c:ec:77: 87:12:55:4e:29:c4:4b:37:1b:9d:c4:22:90:03:ca: e6:f9:be:95:55:ba:c5:8d:9c:6a:cc:10:b3:19:bb: 32:eb:95:2f:ec:4a:77:a4:87:ea:ed:8b:74:0d:12: a4:e9:f5:63:2a:7b:69:d5:03:2e:84:f3:6a:47:95: 43:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:68:25:7A:95:6E:8D:BB:60:CE:DF:ED:CF:DB:E2:99:A9:19:AA:96 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c8:99:3c:c4:f9:cb:26:f1:31:fc:be:1a:9a:d1:5d:d1:5e: 2a:e6:ae:ba:6c:bf:cd:64:5b:13:99:38:80:45:ad:35:74:65: 67:b8:b8:4e:82:22:e0:4d:53:9a:75:21:ff:55:c4:44:86:4c: d4:0d:e2:0e:06:b1:4d:a3:b3:95:f0:9c:16:08:68:da:06:64: 47:cf:1b:e2:0f:53:06:ec:d2:04:76:b7:7a:d0:36:23:b0:81: 80:b0:c1:fa:f2:ab:2d:cf:66:27:b7:8c:b6:64:e9:7a:bb:78: 9f:c9:06:1a:7f:4d:b5:00:fb:21:4d:ae:5f:03:f3:af:9d:e9: fc:58:5e:da:51:1e:dc:83:f3:e4:21:e2:c6:29:81:90:36:b9: b1:34:5a:2c:99:5f:a8:96:59:b9:36:51:c3:d2:c1:e6:df:97: bb:26:00:ac:fb:16:15:1f:47:a9:15:44:cb:86:ff:a7:14:fd: 22:3b:18:43:63:21:74:fa:cb:86:aa:73:1a:ec:59:40:a3:52: fe:4f:43:42:f7:16:c4:2f:a2:f0:2e:6f:47:e8:e6:b4:49:35: 11:a8:01:69:ef:f3:e0:03:3d:7a:44:6b:b0:6e:3f:dc:72:97: d5:80:c0:e2:56:b1:b4:ff:b6:f1:38:71:aa:3d:a7:2c:40:85: f9:74:87:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbwMuk00WYOW0crv2zPEnn2o7LkIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNTA1MTAwNDE2MjZaFw0yNTA1MTMxNDQwMjZaMDMxMTAvBgNV BAMTKDc2NjgyNTdBOTU2RThEQkI2MENFREZFRENGREJFMjk5QTkxOUFBOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYofUKcXMlTVloC0bNQ4zAgaG5 MrqHbj6XPwy+sRDxTTDaehsVKYdsI3ulaxGrde7yHgzizCYx/Nqihb82o9HBnAMH UjX9cQu6i+iRaDWY3XS7Y+GIk4Ida6kCWG7UneTcdXAsx7mN8VtF+aGyiJrmSRmw qtd92uXiB3b9y8c+Aoa7xN6p5uwKzI96tn5/eXtdxkNl+opBh/ejNkDra7gHQC4i 3d+J7wWGIjkQ3Qv6OBH2q5pvDCVcpNInAwVOpBzsd4cSVU4pxEs3G53EIpADyub5 vpVVusWNnGrMELMZuzLrlS/sSnekh+rti3QNEqTp9WMqe2nVAy6E82pHlUPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdmglepVujbtgzt/tz9vimakZqpYwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzImTzE+csm8TH8vhqa0V3RXirmrrpsv81k WxOZOIBFrTV0ZWe4uE6CIuBNU5p1If9VxESGTNQN4g4GsU2js5XwnBYIaNoGZEfP G+IPUwbs0gR2t3rQNiOwgYCwwfryqy3PZie3jLZk6Xq7eJ/JBhp/TbUA+yFNrl8D 86+d6fxYXtpRHtyD8+Qh4sYpgZA2ubE0WiyZX6iWWbk2UcPSwebfl7smAKz7FhUf R6kVRMuG/6cU/SI7GENjIXT6y4aqcxrsWUCjUv5PQ0L3FsQvovAub0fo5rRJNRGo AWnv8+ADPXpEa7BuP9xyl9WAwOJWsbT/tvE4cao9pyxAhfl0h/I= -----END CERTIFICATE-----Generated at Mon May 12 07:42:41 2025 by rpki-client