$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: C/ljZEfwM+OltkABOQtD5WsPmWEBfzuXNfOY3QEU250= Subject key identifier: BE:0C:4C:0E:61:21:BD:DE:D9:15:9B:93:B2:CC:08:70:E7:77:EC:CF Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 0B981758A1945633EFB2ECBF3C39C01D32D60FE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 0187 Signing time: Sun 29 Jun 2025 06:30:45 +0000 Manifest this update: Sun 29 Jun 2025 06:25:45 +0000 Manifest next update: Wed 02 Jul 2025 11:34:45 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: OUt/qmO1F/ZgdtU3cu9WMs4rPnN4xaJ+xulr4tmCer0=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:98:17:58:a1:94:56:33:ef:b2:ec:bf:3c:39:c0:1d:32:d6:0f:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Jun 29 06:25:45 2025 GMT Not After : Jul 2 11:34:45 2025 GMT Subject: CN=BE0C4C0E6121BDDED9159B93B2CC0870E777ECCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:cc:2d:18:c7:08:75:ed:af:d0:67:f3:cf: d9:72:92:28:8f:3e:44:ea:fb:db:db:d8:ca:59:c8: b9:72:bf:e8:08:df:cc:2b:bb:c0:5e:32:9f:35:be: 14:31:32:d9:01:a2:5c:d9:68:d8:f7:b4:c2:19:35: 37:d9:da:28:37:0c:69:06:9a:53:ad:e3:39:53:cb: 7e:21:7e:ee:77:7e:5b:01:f2:59:15:44:90:59:c3: 14:61:b3:59:48:c0:43:36:93:50:d3:fe:8b:75:bb: d7:59:59:26:cc:1b:48:24:c4:f6:12:f0:a1:aa:ad: 6c:ac:e0:2a:7f:6f:a1:de:60:a8:10:d6:e5:a8:01: 15:62:eb:8c:36:14:5d:a8:18:53:da:2e:c3:f9:c5: 83:f8:1d:ca:98:d0:bd:a7:3e:2b:16:6d:cd:8c:d1: ac:cb:4e:c8:15:ec:28:3c:2e:98:64:d0:7b:10:20: 04:16:d1:9a:e1:20:70:f5:40:75:08:dd:a1:bc:a0: ae:c8:f0:71:2a:ad:63:b0:16:66:90:2d:c6:ba:39: 66:fb:ff:3a:26:e4:c9:7b:23:68:5b:bb:cc:f4:e4: 76:4a:4c:99:02:a7:f0:e3:a6:01:76:75:ca:16:08: 9f:3c:c0:c4:93:3f:6c:de:07:30:e3:c7:28:5d:f9: 00:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:0C:4C:0E:61:21:BD:DE:D9:15:9B:93:B2:CC:08:70:E7:77:EC:CF X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3d:c7:3f:b1:7e:13:03:7c:96:28:ef:75:96:5a:47:cd:c8: 9f:d3:78:31:90:6f:d1:8c:5c:80:c4:b1:05:c6:b0:a4:bf:86: 48:1b:85:ea:54:82:36:02:f9:aa:da:a6:11:8c:a6:cb:55:e0: 51:35:c5:bb:7d:88:41:b8:32:04:49:8f:cd:39:16:c9:e2:8f: bb:0e:df:73:cb:4a:27:aa:d6:4d:f6:ee:c1:e5:d7:18:65:fd: de:22:6b:21:a1:23:ba:e8:e6:20:9a:fb:9f:16:eb:91:21:40: 4c:0f:8f:2c:6d:86:ee:1c:e6:5a:7d:20:4f:41:e2:da:49:5d: e1:71:73:dc:6d:7b:de:f2:be:20:a1:f2:c1:be:df:37:c1:c0: c4:a4:d0:7a:60:36:86:8b:22:29:ab:82:11:ab:5f:37:f2:91: b4:e4:38:a2:ca:9f:b3:18:d9:1b:7f:f5:d4:33:55:b9:59:4f: 90:0e:49:c9:14:c8:c4:00:71:d8:0a:39:53:fa:f2:4f:d7:54: dd:d9:2c:7e:b0:38:62:c8:87:ca:ff:2d:21:01:c8:71:78:94: 6f:19:30:ce:8e:d3:a7:a0:7f:76:4a:14:9e:45:e7:0a:38:e2: 30:0a:d3:63:81:eb:6c:1f:94:99:c3:79:8d:93:29:4a:b3:88: a4:62:0c:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC5gXWKGUVjPvsuy/PDnAHTLWD+UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA2MjkwNjI1NDVaFw0yNTA3MDIxMTM0NDVaMDMxMTAvBgNV BAMTKEJFMEM0QzBFNjEyMUJEREVEOTE1OUI5M0IyQ0MwODcwRTc3N0VDQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoeMwtGMcIde2v0Gfzz9lykiiP PkTq+9vb2MpZyLlyv+gI38wru8BeMp81vhQxMtkBolzZaNj3tMIZNTfZ2ig3DGkG mlOt4zlTy34hfu53flsB8lkVRJBZwxRhs1lIwEM2k1DT/ot1u9dZWSbMG0gkxPYS 8KGqrWys4Cp/b6HeYKgQ1uWoARVi64w2FF2oGFPaLsP5xYP4HcqY0L2nPisWbc2M 0azLTsgV7Cg8Lphk0HsQIAQW0ZrhIHD1QHUI3aG8oK7I8HEqrWOwFmaQLca6OWb7 /zom5Ml7I2hbu8z05HZKTJkCp/DjpgF2dcoWCJ88wMSTP2zeBzDjxyhd+QAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvgxMDmEhvd7ZFZuTsswIcOd37M8wHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA9xz+xfhMDfJYo73WWWkfNyJ/TeDGQb9GM XIDEsQXGsKS/hkgbhepUgjYC+araphGMpstV4FE1xbt9iEG4MgRJj805Fsnij7sO 33PLSieq1k327sHl1xhl/d4iayGhI7ro5iCa+58W65EhQEwPjyxthu4c5lp9IE9B 4tpJXeFxc9xte97yviCh8sG+3zfBwMSk0HpgNoaLIimrghGrXzfykbTkOKLKn7MY 2Rt/9dQzVblZT5AOSckUyMQAcdgKOVP68k/XVN3ZLH6wOGLIh8r/LSEByHF4lG8Z MM6O06egf3ZKFJ5F5wo44jAK02OB62wflJnDeY2TKUqziKRiDJ4= -----END CERTIFICATE-----Generated at Mon Jun 30 00:32:20 2025 by rpki-client