$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: K4Mfk5esTaZfoueFrMY7E9yM4jS03PcvXgnGYyHu9iU= Subject key identifier: FA:53:05:44:80:E2:4D:A6:5A:1C:13:8B:16:99:F6:24:2C:64:6C:A0 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 4B7BA800123EE2EC0F33D11C3BF26F499FCC4AC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 016F Signing time: Mon 05 May 2025 06:50:45 +0000 Manifest this update: Mon 05 May 2025 06:45:45 +0000 Manifest next update: Thu 08 May 2025 16:54:45 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: hvVIaVVSUBK7SOpUPsTDVc0xG+2xV+AK87somocNVCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7b:a8:00:12:3e:e2:ec:0f:33:d1:1c:3b:f2:6f:49:9f:cc:4a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: May 5 06:45:45 2025 GMT Not After : May 8 16:54:45 2025 GMT Subject: CN=FA53054480E24DA65A1C138B1699F6242C646CA0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ca:2d:eb:94:ab:43:13:f9:7c:ca:fa:bb:24: 86:87:e4:88:06:9e:99:b4:55:e9:5f:21:1e:d0:15: 19:19:60:83:20:c9:ee:97:7c:4f:5c:b6:16:87:3c: d1:2c:53:7c:b4:48:34:7c:d9:9e:a2:ea:c9:36:da: 29:48:bc:d3:e9:77:06:49:09:e5:da:bd:c5:af:a4: 6e:6e:8e:e0:e1:64:ba:9d:97:96:d6:e7:5d:ac:1b: 81:66:a7:9b:f3:58:47:e5:4d:9e:06:f9:cd:10:b1: 4f:d2:9a:12:63:e2:59:6a:f7:84:6c:1f:f8:32:95: d9:c2:70:6c:78:78:ed:39:04:67:38:c0:3b:87:c3: 82:ee:dd:d2:12:58:ab:f3:4f:27:95:90:e2:2b:b4: 7f:1f:12:e6:82:2d:24:62:5a:07:16:62:07:a9:d3: e7:8e:12:8b:2c:da:6b:66:87:d0:63:1c:7c:d9:67: ad:3b:8a:19:e2:25:fd:0f:2a:36:b0:3e:c1:d7:82: 0e:78:18:bf:3f:92:9c:04:8e:1b:9c:b9:a1:7c:a0: d0:9b:0f:67:2d:e2:86:65:c0:60:7b:9c:bf:5c:98: a0:d1:73:d2:27:26:27:81:e3:ed:25:02:18:d8:38: 18:9c:3e:72:2f:fb:59:17:2e:c2:03:b1:53:87:71: 6d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:53:05:44:80:E2:4D:A6:5A:1C:13:8B:16:99:F6:24:2C:64:6C:A0 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:d7:18:30:2c:7c:b4:39:b5:8b:5f:e2:93:5a:84:2b:10:80: 0d:11:ce:af:f2:c3:3c:ec:0e:eb:48:51:e1:67:b1:2d:35:46: a0:24:b7:f4:31:f5:8f:e6:b4:b1:d4:54:9e:85:dd:b2:1d:73: 8a:f8:87:d3:e1:51:c0:f1:31:e7:1e:63:e4:1f:61:5c:e2:aa: 82:fc:68:16:0b:b5:11:2d:0b:86:e8:ad:2d:a7:44:8a:d0:7b: 2d:e1:9a:6a:24:4b:48:11:17:fe:df:6a:bd:bb:8f:ce:e3:c0: c6:59:f3:67:91:1d:4b:04:72:e1:ab:cc:ff:ba:29:96:44:d9: 7c:7f:ad:14:40:9d:32:08:97:54:24:b9:b5:ad:22:50:f0:c1: bd:1e:81:ae:4f:b5:48:d2:72:a1:a8:db:f8:66:46:77:21:c4: d3:9e:82:78:25:65:93:ed:ae:ec:c2:37:d4:d8:88:33:e8:63: f1:69:6f:38:c0:7f:a7:14:2c:33:00:54:8f:4c:86:3e:a2:36: 0a:76:6b:ca:1e:32:6f:a7:38:f1:bb:71:b2:2e:f3:e0:71:56: 7e:59:64:cb:16:36:ff:99:f1:de:b2:4b:20:41:5e:0c:71:d3: ac:49:32:c8:09:c0:e9:f7:63:b7:55:de:c2:e9:0c:b9:de:81: 44:e1:22:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3uoABI+4uwPM9EcO/JvSZ/MSsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA1MDUwNjQ1NDVaFw0yNTA1MDgxNjU0NDVaMDMxMTAvBgNV BAMTKEZBNTMwNTQ0ODBFMjREQTY1QTFDMTM4QjE2OTlGNjI0MkM2NDZDQTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3yi3rlKtDE/l8yvq7JIaH5IgG npm0VelfIR7QFRkZYIMgye6XfE9cthaHPNEsU3y0SDR82Z6i6sk22ilIvNPpdwZJ CeXavcWvpG5ujuDhZLqdl5bW512sG4Fmp5vzWEflTZ4G+c0QsU/SmhJj4llq94Rs H/gyldnCcGx4eO05BGc4wDuHw4Lu3dISWKvzTyeVkOIrtH8fEuaCLSRiWgcWYgep 0+eOEoss2mtmh9BjHHzZZ607ihniJf0PKjawPsHXgg54GL8/kpwEjhucuaF8oNCb D2ct4oZlwGB7nL9cmKDRc9InJieB4+0lAhjYOBicPnIv+1kXLsIDsVOHcW37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lMFRIDiTaZaHBOLFpn2JCxkbKAwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7XGDAsfLQ5tYtf4pNahCsQgA0Rzq/ywzzs DutIUeFnsS01RqAkt/Qx9Y/mtLHUVJ6F3bIdc4r4h9PhUcDxMeceY+QfYVziqoL8 aBYLtREtC4borS2nRIrQey3hmmokS0gRF/7far27j87jwMZZ82eRHUsEcuGrzP+6 KZZE2Xx/rRRAnTIIl1QkubWtIlDwwb0ega5PtUjScqGo2/hmRnchxNOegnglZZPt ruzCN9TYiDPoY/FpbzjAf6cULDMAVI9Mhj6iNgp2a8oeMm+nOPG7cbIu8+BxVn5Z ZMsWNv+Z8d6ySyBBXgxx06xJMsgJwOn3Y7dV3sLpDLnegUThIqY= -----END CERTIFICATE-----Generated at Wed May 7 06:50:44 2025 by rpki-client