$ rpki-client -vvf repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft File: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft (raw, json) Hash identifier: huvw1UA+dTwhgvQBRhNUpaOdquYdj87NUSq2Jb1S6Ts= Subject key identifier: 63:37:15:46:FB:08:17:B1:2A:F6:09:84:22:EC:D9:0D:86:71:86:C1 Authority key identifier: 98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F Certificate issuer: /CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Certificate serial: 170DF54F9AD3CBA6AA69CD31D97C9C76A0A9565B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft Manifest number: 04E6 Signing time: Tue 01 Jul 2025 01:31:34 +0000 Manifest this update: Tue 01 Jul 2025 01:26:34 +0000 Manifest next update: Fri 04 Jul 2025 08:59:34 +0000 Files and hashes: 1: 986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl (hash: k+PeYU86E5Y/N7QoN3iQgiSJY83OLbtE+9KNEMm8sMw=) 2: 323030313a6466373a336230303a3a2f34382d3438203d3e20313338313037.roa (hash: 5ZMFCFB2Z2k1wsOQD3WlLnfBqmNmCDqFjaN+cKeJCYg=) 3: 3130332e3132362e35362e302f32322d3234203d3e20313338313037.roa (hash: PNy2Ky9qBufKbv/f4p4dFdjvMCRYXe8YTpQCXZbAHQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 08:59:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:0d:f5:4f:9a:d3:cb:a6:aa:69:cd:31:d9:7c:9c:76:a0:a9:56:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F Validity Not Before: Jul 1 01:26:34 2025 GMT Not After : Jul 4 08:59:34 2025 GMT Subject: CN=63371546FB0817B12AF6098422ECD90D867186C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:2d:67:cc:10:65:1f:b6:28:fe:67:1d:0e: 25:83:54:1e:c6:86:b2:ea:e8:4b:19:0c:a7:e4:40: ef:e7:74:ea:bf:e1:72:a9:43:27:af:ce:69:85:5c: d6:74:d8:de:f4:e3:e9:3f:ac:02:56:89:19:21:8e: 22:e8:c8:73:7f:d5:8e:bc:dc:fe:96:b3:ea:04:f0: f6:88:f1:c9:d3:f9:82:be:06:34:bd:47:96:6a:05: cb:ee:95:bf:e7:a8:30:7b:90:14:1e:6c:d5:5a:c1: d6:bc:4a:db:e6:28:1c:bc:07:3c:03:bf:71:6c:8a: 3a:8b:89:30:ed:22:1f:1a:ee:22:7c:f6:34:76:25: 8f:17:3a:5e:46:2f:0b:7a:5c:f5:1a:4d:ee:e0:ee: bc:6f:d7:8f:1d:29:d6:d2:61:53:04:5b:ec:fc:3a: 2c:c3:aa:24:f5:5b:9e:f8:e4:26:13:d2:47:c7:0f: e4:03:1d:2e:0d:10:6c:f7:bd:31:2b:9c:95:e3:4d: 3b:b2:d8:f1:35:da:10:a0:4b:60:57:2a:1f:76:d9: f4:ac:bd:cf:e2:c1:00:80:68:d2:c0:bf:56:2a:a0: 9d:74:1a:c4:d4:20:de:6e:f9:77:09:ee:3f:ed:a5: 16:56:a6:bb:71:f1:32:c8:9e:cc:50:d1:80:fb:6c: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:37:15:46:FB:08:17:B1:2A:F6:09:84:22:EC:D9:0D:86:71:86:C1 X509v3 Authority Key Identifier: keyid:98:6E:FE:1C:2B:B8:B0:E4:E1:47:2E:9D:AA:5B:77:5A:A4:F6:68:9F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3162d15b-102b-431f-a539-0a932b31366c/0/986EFE1C2BB8B0E4E1472E9DAA5B775AA4F6689F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:b9:22:c3:80:bf:67:b8:f1:fc:c9:4f:5b:9c:78:f2:77:6c: 66:b4:ed:33:a2:3e:1a:9b:d3:ad:63:9f:36:60:6e:9c:ca:ee: f6:d3:9c:cb:22:89:e1:ec:c1:d0:8c:cb:e7:59:4c:ce:24:0d: 0d:3b:f5:ea:bf:ee:cd:c1:c9:3b:41:23:bb:14:5e:6b:49:1f: 2b:61:69:3c:e4:41:0e:b3:03:62:81:80:29:e6:8c:74:65:07: 13:36:fb:62:af:34:f9:43:cb:03:f0:e8:72:79:df:1c:f7:9d: 7d:8e:2b:5f:14:70:aa:71:90:cf:65:f2:7f:2a:31:3e:62:e6: dc:37:ce:e5:f6:dc:88:70:53:0d:f4:9d:e9:f7:a5:fc:80:72: 19:a5:ab:d5:ea:11:6d:dd:dd:2e:4c:ea:0d:45:87:b8:d7:bb: 45:88:bb:ee:3a:4b:95:62:26:a4:4c:11:55:3b:69:d6:23:0b: f1:d6:13:17:47:16:81:6e:bb:d7:54:c5:34:6b:18:12:e7:97: ae:8a:aa:c2:c3:a5:10:f8:26:23:8f:68:cb:96:a5:85:61:dc: 4a:1d:c8:3c:4e:f7:01:e0:82:b7:5b:7d:6e:de:6b:69:8e:00: 29:1b:3e:04:fc:5f:b9:e5:98:43:2e:c8:38:3e:4d:f8:ab:80: 3e:82:03:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFw31T5rTy6aqac0x2XycdqCpVlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFB NEY2Njg5RjAeFw0yNTA3MDEwMTI2MzRaFw0yNTA3MDQwODU5MzRaMDMxMTAvBgNV BAMTKDYzMzcxNTQ2RkIwODE3QjEyQUY2MDk4NDIyRUNEOTBEODY3MTg2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1CC1nzBBlH7Yo/mcdDiWDVB7G hrLq6EsZDKfkQO/ndOq/4XKpQyevzmmFXNZ02N704+k/rAJWiRkhjiLoyHN/1Y68 3P6Ws+oE8PaI8cnT+YK+BjS9R5ZqBcvulb/nqDB7kBQebNVawda8StvmKBy8BzwD v3FsijqLiTDtIh8a7iJ89jR2JY8XOl5GLwt6XPUaTe7g7rxv148dKdbSYVMEW+z8 OizDqiT1W5745CYT0kfHD+QDHS4NEGz3vTErnJXjTTuy2PE12hCgS2BXKh922fSs vc/iwQCAaNLAv1YqoJ10GsTUIN5u+XcJ7j/tpRZWprtx8TLInsxQ0YD7bDBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYzcVRvsIF7Eq9gmEIuzZDYZxhsEwHwYDVR0j BBgwFoAUmG7+HCu4sOThRy6dqlt3WqT2aJ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MTYyZDE1Yi0xMDJiLTQzMWYtYTUzOS0wYTkzMmIzMTM2NmMvMC85ODZFRkUxQzJC QjhCMEU0RTE0NzJFOURBQTVCNzc1QUE0RjY2ODlGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3NUFBNEY2 Njg5Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzE2MmQxNWItMTAyYi00MzFmLWE1 MzktMGE5MzJiMzEzNjZjLzAvOTg2RUZFMUMyQkI4QjBFNEUxNDcyRTlEQUE1Qjc3 NUFBNEY2Njg5Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMC5IsOAv2e48fzJT1ucePJ3bGa07TOiPhqb 061jnzZgbpzK7vbTnMsiieHswdCMy+dZTM4kDQ079eq/7s3ByTtBI7sUXmtJHyth aTzkQQ6zA2KBgCnmjHRlBxM2+2KvNPlDywPw6HJ53xz3nX2OK18UcKpxkM9l8n8q MT5i5tw3zuX23IhwUw30nen3pfyAchmlq9XqEW3d3S5M6g1Fh7jXu0WIu+46S5Vi JqRMEVU7adYjC/HWExdHFoFuu9dUxTRrGBLnl66KqsLDpRD4JiOPaMuWpYVh3Eod yDxO9wHggrdbfW7ea2mOACkbPgT8X7nlmEMuyDg+TfirgD6CA6I= -----END CERTIFICATE-----Generated at Thu Jul 3 06:50:46 2025 by rpki-client