$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: q1GFcJi8h65atOWOu8YSTstVXsHbTWyC98bAY/shB0o= Subject key identifier: F9:A7:2D:A1:1B:D2:4A:00:30:AA:2A:C5:5D:01:F1:88:B1:36:6A:AF Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 4B9A97BD12BC5464BC79553C7AF32502136CEE70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01A0 Signing time: Fri 22 Aug 2025 17:40:45 +0000 Manifest this update: Fri 22 Aug 2025 17:35:45 +0000 Manifest next update: Mon 25 Aug 2025 20:13:45 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: UqKCBPGcjKCHkwKmm67TkI8o40KqHHSE4aw7NMpFXBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:13:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9a:97:bd:12:bc:54:64:bc:79:55:3c:7a:f3:25:02:13:6c:ee:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Aug 22 17:35:45 2025 GMT Not After : Aug 25 20:13:45 2025 GMT Subject: CN=F9A72DA11BD24A0030AA2AC55D01F188B1366AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:86:90:f5:ef:2d:0b:99:17:a6:b8:88:8f: 48:56:02:fb:0d:2a:04:7d:c3:3f:1d:33:48:91:b4: b2:6b:89:5f:a7:d0:09:b5:8f:2d:40:5c:b7:43:19: 56:c0:2f:57:15:be:ca:3f:56:c2:0e:93:bb:5c:3f: c7:93:7b:0b:eb:d3:c6:f4:78:9f:3a:8b:5e:04:1e: 89:a4:6e:ab:c7:92:0f:5b:41:07:9e:b4:6a:9b:33: c6:9d:56:9a:6e:8b:59:64:27:33:b0:06:5e:2f:44: 06:cc:c4:d6:0b:ef:e6:4c:70:d6:51:29:66:9d:62: ba:c7:66:9d:0b:5d:48:1d:73:2c:c8:45:58:ae:36: 64:1a:d5:13:6f:3d:94:bc:46:76:0f:02:b0:53:67: a4:d9:82:bd:e5:d1:22:38:45:2a:85:b0:49:6b:2a: 09:fd:da:92:49:0e:67:15:eb:f6:42:7c:f2:ac:21: 16:00:64:53:8c:50:79:cb:96:00:72:3c:ba:5c:68: 19:06:4b:c0:4e:13:12:00:11:fb:2e:da:75:14:76: cc:d0:6b:3e:60:47:b7:a6:4d:5b:b7:85:a4:23:6c: 4b:bd:37:53:13:00:13:12:57:12:b9:c4:0e:f3:60: 0c:1b:51:b4:19:28:e0:7e:8c:d3:25:0a:7d:2c:aa: 81:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:A7:2D:A1:1B:D2:4A:00:30:AA:2A:C5:5D:01:F1:88:B1:36:6A:AF X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:eb:97:a7:36:42:50:4c:3b:d7:5c:eb:e1:cb:7a:c7:8b:15: 07:c1:53:48:2b:fa:08:73:8e:33:3c:c7:b5:ac:31:db:48:77: 6a:94:14:24:8e:ad:48:64:a9:0a:81:fd:f9:0b:1f:45:80:5e: 58:0c:f8:e4:99:78:dc:9e:de:24:36:aa:83:fc:96:a9:7f:09: 17:f9:b7:58:f7:43:43:25:35:c5:46:91:92:b7:f0:8a:35:32: 86:ba:1d:fc:42:84:9b:55:62:a1:2d:d1:5c:ac:fb:24:53:81: 66:cc:05:b6:35:f5:a7:88:1f:bc:26:95:ee:67:34:a8:d4:c7: df:b7:ce:30:2c:ac:e8:c4:c2:de:09:f6:0e:a5:b4:e9:f1:34: eb:7e:ad:28:11:14:ff:a7:67:28:d8:3e:b6:35:7d:48:e9:f9: 31:82:00:e5:bc:94:ef:01:23:37:ce:cc:f1:c5:00:9f:a1:b3: dd:83:a5:de:d4:11:59:5c:67:45:20:79:07:55:21:c4:14:4e: 03:dc:b0:07:93:09:c2:92:ee:e7:79:fc:8e:fc:83:11:fa:7c: 41:7c:7c:f1:6b:c8:92:6e:cf:aa:25:68:95:70:9f:a3:cd:72: 9e:ea:2e:d0:bc:a1:2c:fe:55:93:0f:87:d6:bc:3c:91:5f:1c: 73:61:01:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5qXvRK8VGS8eVU8evMlAhNs7nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTA4MjIxNzM1NDVaFw0yNTA4MjUyMDEzNDVaMDMxMTAvBgNV BAMTKEY5QTcyREExMUJEMjRBMDAzMEFBMkFDNTVEMDFGMTg4QjEzNjZBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2bIaQ9e8tC5kXpriIj0hWAvsN KgR9wz8dM0iRtLJriV+n0Am1jy1AXLdDGVbAL1cVvso/VsIOk7tcP8eTewvr08b0 eJ86i14EHomkbqvHkg9bQQeetGqbM8adVppui1lkJzOwBl4vRAbMxNYL7+ZMcNZR KWadYrrHZp0LXUgdcyzIRViuNmQa1RNvPZS8RnYPArBTZ6TZgr3l0SI4RSqFsElr Kgn92pJJDmcV6/ZCfPKsIRYAZFOMUHnLlgByPLpcaBkGS8BOExIAEfsu2nUUdszQ az5gR7emTVu3haQjbEu9N1MTABMSVxK5xA7zYAwbUbQZKOB+jNMlCn0sqoHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+actoRvSSgAwqirFXQHxiLE2aq8wHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLrl6c2QlBMO9dc6+HLeseLFQfBU0gr+ghz jjM8x7WsMdtId2qUFCSOrUhkqQqB/fkLH0WAXlgM+OSZeNye3iQ2qoP8lql/CRf5 t1j3Q0MlNcVGkZK38Io1Moa6HfxChJtVYqEt0Vys+yRTgWbMBbY19aeIH7wmle5n NKjUx9+3zjAsrOjEwt4J9g6ltOnxNOt+rSgRFP+nZyjYPrY1fUjp+TGCAOW8lO8B IzfOzPHFAJ+hs92Dpd7UEVlcZ0UgeQdVIcQUTgPcsAeTCcKS7ud5/I78gxH6fEF8 fPFryJJuz6olaJVwn6PNcp7qLtC8oSz+VZMPh9a8PJFfHHNhAZk= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:03 2025 by rpki-client