$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: xuhRtIfSdazaA16vjnDxv+TQdttmRH4zLVcj9BA4opU= Subject key identifier: 4D:08:BE:80:DE:3F:98:CF:DB:5E:B2:41:D2:86:92:37:B7:DD:81:4F Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 29CA6EF5C99E12F88F68CD7684EBC1F97AB4C76F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01B9 Signing time: Sun 19 Oct 2025 01:50:46 +0000 Manifest this update: Sun 19 Oct 2025 01:45:46 +0000 Manifest next update: Wed 22 Oct 2025 11:37:46 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: 7WVDssgUg2lfKhkA57YSD4+qYVil8Uk/Y2JWwne4BP8=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: JvfGRjIFJl/HTsYOlSOBixYJSY6lzYK4Wt/+W3xreYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 11:37:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ca:6e:f5:c9:9e:12:f8:8f:68:cd:76:84:eb:c1:f9:7a:b4:c7:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Oct 19 01:45:46 2025 GMT Not After : Oct 22 11:37:46 2025 GMT Subject: CN=4D08BE80DE3F98CFDB5EB241D2869237B7DD814F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:91:45:59:d4:27:57:2d:44:ac:bd:9b:49:6b: 85:30:d4:0c:1e:b4:9c:5f:31:4c:60:70:c4:81:72: 69:34:4f:91:e5:e0:00:db:66:bf:41:d2:64:7d:3c: e0:22:af:7c:71:a5:86:70:37:42:47:3e:d1:07:c1: 48:50:60:1c:de:40:79:cc:8e:2f:68:02:af:5e:6b: b3:0c:7b:2f:cd:17:d5:fc:52:fa:b5:e6:31:ef:a6: 4d:e4:24:2c:d8:96:b4:09:f8:15:a6:4a:29:c3:1d: 5f:d0:8e:7a:97:72:f9:ec:9d:b6:f9:dd:97:80:6e: 16:1d:c4:24:e7:18:57:96:0d:99:00:3b:6b:e5:99: 21:aa:cb:56:db:5e:72:2e:84:44:23:89:ff:98:58: aa:ff:7f:af:07:91:21:47:3f:f4:4d:56:c8:3b:15: 4b:08:a4:a6:98:5c:4d:78:a8:6a:d6:97:e1:99:7d: 0b:97:67:82:ad:a5:c3:c8:a0:03:33:6b:dc:2f:b5: 36:0a:e5:6a:3e:5c:4b:7b:39:4f:be:f4:bd:b7:1e: 38:6b:0f:51:fb:35:40:56:46:55:e9:f8:60:32:e2: 36:d2:ed:d4:60:f0:55:d9:15:a2:22:a5:89:87:b1: cd:e3:11:ed:60:0e:b4:9f:14:b1:80:4e:2b:9a:a6: e7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:08:BE:80:DE:3F:98:CF:DB:5E:B2:41:D2:86:92:37:B7:DD:81:4F X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:df:5e:a6:5f:55:8b:3c:2c:44:6f:8d:28:f6:c3:e8:cf:f9: 28:bb:68:fe:b5:c3:97:27:b9:a7:20:d1:ff:50:e4:ab:d6:0b: 54:a5:1c:2f:67:a0:8d:d8:8d:06:be:e4:45:ae:4b:89:42:36: 5a:7f:73:cf:e9:d7:64:ea:5a:99:65:53:52:e7:3c:06:75:cb: 84:fc:57:d5:fc:a2:cf:fd:7b:d2:b9:d1:0e:08:fa:c9:38:4e: af:c7:9b:f7:03:91:9a:8a:9a:c2:4d:f8:a9:d3:bf:0f:0c:84: 25:65:fa:9c:34:3a:45:9c:07:75:4d:d1:4b:13:54:1f:03:91: 63:af:a9:74:44:9b:23:ca:84:98:b8:88:5d:cf:c1:5f:14:7a: a2:4c:55:3c:9f:73:08:be:87:37:46:37:4a:be:c1:a5:48:d1: 60:c9:2d:7b:e8:63:fe:c9:af:2f:4b:d3:61:f6:46:4f:65:b6: 74:8a:28:63:dc:2d:0d:9c:f6:cc:ec:a0:06:33:d4:9a:0d:95: 67:af:de:4c:f2:ec:f1:e6:c8:d9:64:f3:50:fb:a2:8b:a1:4f: ed:3a:a6:52:d5:96:08:5e:a8:2e:54:59:1f:20:45:97:1c:c3: e2:12:2a:45:f4:3c:a3:1e:ad:3f:c3:d5:8f:8e:10:e8:b8:e7: a2:c6:9c:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKcpu9cmeEviPaM12hOvB+Xq0x28wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNTEwMTkwMTQ1NDZaFw0yNTEwMjIxMTM3NDZaMDMxMTAvBgNV BAMTKDREMDhCRTgwREUzRjk4Q0ZEQjVFQjI0MUQyODY5MjM3QjdERDgxNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDckUVZ1CdXLUSsvZtJa4Uw1Awe tJxfMUxgcMSBcmk0T5Hl4ADbZr9B0mR9POAir3xxpYZwN0JHPtEHwUhQYBzeQHnM ji9oAq9ea7MMey/NF9X8Uvq15jHvpk3kJCzYlrQJ+BWmSinDHV/QjnqXcvnsnbb5 3ZeAbhYdxCTnGFeWDZkAO2vlmSGqy1bbXnIuhEQjif+YWKr/f68HkSFHP/RNVsg7 FUsIpKaYXE14qGrWl+GZfQuXZ4KtpcPIoAMza9wvtTYK5Wo+XEt7OU++9L23Hjhr D1H7NUBWRlXp+GAy4jbS7dRg8FXZFaIipYmHsc3jEe1gDrSfFLGATiuapudnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTQi+gN4/mM/bXrJB0oaSN7fdgU8wHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7fXqZfVYs8LERvjSj2w+jP+Si7aP61w5cn uacg0f9Q5KvWC1SlHC9noI3YjQa+5EWuS4lCNlp/c8/p12TqWpllU1LnPAZ1y4T8 V9X8os/9e9K50Q4I+sk4Tq/Hm/cDkZqKmsJN+KnTvw8MhCVl+pw0OkWcB3VN0UsT VB8DkWOvqXREmyPKhJi4iF3PwV8UeqJMVTyfcwi+hzdGN0q+waVI0WDJLXvoY/7J ry9L02H2Rk9ltnSKKGPcLQ2c9szsoAYz1JoNlWev3kzy7PHmyNlk81D7oouhT+06 plLVlgheqC5UWR8gRZccw+ISKkX0PKMerT/D1Y+OEOi456LGnNQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:29 2025 by rpki-client