$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: LYOzucTh7rp/H2cJXTBhtwqMAfMl8iQ+mX0iV6S8qrA= Subject key identifier: 68:17:BA:AC:15:0C:2F:D0:54:59:71:AD:00:34:69:85:B7:E1:F7:28 Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 3A2036BF97380A05161719138F8CC825C258C4C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 0118 Signing time: Sun 19 Oct 2025 07:51:28 +0000 Manifest this update: Sun 19 Oct 2025 07:46:28 +0000 Manifest next update: Wed 22 Oct 2025 14:03:28 +0000 Files and hashes: 1: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: R0CV3qabPX0uVUHWiVPf7ki1S7nlox3jbtXIfDGTtrc=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:20:36:bf:97:38:0a:05:16:17:19:13:8f:8c:c8:25:c2:58:c4:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Oct 19 07:46:28 2025 GMT Not After : Oct 22 14:03:28 2025 GMT Subject: CN=6817BAAC150C2FD0545971AD00346985B7E1F728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:48:48:13:82:e6:39:33:3e:26:c4:34:dc:77: 3c:de:36:0c:24:e7:77:5d:87:b2:37:92:f0:86:7e: 9a:52:69:36:ba:ab:e4:3c:9a:af:1a:f7:88:cc:63: 23:dd:58:82:3f:70:f6:20:06:18:e8:10:54:5a:b9: b5:9f:a8:25:d9:63:46:e6:22:cd:87:ed:f8:48:5e: 4a:a5:47:20:d1:17:fc:95:17:cb:13:27:ae:b6:3e: ca:a4:cc:ea:4f:1a:48:51:c1:88:f3:86:5a:19:8e: ce:49:8d:dd:cd:d4:2c:85:b4:53:a4:88:9f:c2:5e: 37:e6:b4:06:46:1f:ad:5e:37:0d:3f:55:84:2a:11: f9:68:48:07:b8:0c:d5:e8:98:90:ae:01:1b:17:4f: 8c:06:a5:8d:5a:6f:3c:30:f5:12:c1:94:2e:ab:be: b7:44:9c:df:34:5e:44:90:2c:43:7d:28:b3:cc:83: 99:d2:54:2e:80:f5:ac:81:88:4a:37:1b:2b:09:43: dd:76:44:7d:a8:2d:ae:2e:9f:63:db:bf:40:aa:6d: dc:56:62:3f:57:ee:f6:f6:b7:3e:86:88:f0:c8:a1: ed:ca:2d:63:90:67:2f:e0:69:a9:43:27:46:0d:1d: 9e:0f:91:08:b7:4c:5f:b8:a0:8b:04:c4:29:74:ea: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:17:BA:AC:15:0C:2F:D0:54:59:71:AD:00:34:69:85:B7:E1:F7:28 X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:96:fc:ca:7f:67:d4:8f:98:02:ea:30:c4:2d:67:59:30:1c: a5:b9:c2:97:18:a1:f0:b8:fe:12:3e:45:01:53:97:26:d5:36: 0c:40:e2:02:b1:38:37:f3:3d:44:58:20:61:d2:34:d2:a4:13: 15:d6:78:d1:fa:56:12:f4:3f:3b:08:25:07:54:26:0c:2a:59: ff:dc:f0:46:ce:11:25:9c:ce:9b:28:dc:12:8e:76:75:66:b5: 71:10:d3:dd:5a:cf:ca:56:b6:60:ef:63:55:7a:35:b3:74:89: 77:6e:2c:ca:10:9c:79:6e:ff:bc:8e:09:3b:74:6e:92:b3:d5: 4f:66:6d:a9:51:72:1b:db:50:20:63:4e:9c:1a:3a:70:8f:2d: d7:5a:04:02:0f:dc:32:46:27:3d:7d:a4:75:ce:16:ba:3a:36: 79:67:e0:32:f1:df:59:05:f7:52:c9:f5:a3:e0:17:43:01:34: b0:97:2d:01:2f:53:2c:66:5e:9f:7a:49:55:a4:f0:ea:d6:89: a0:1a:97:11:63:e9:08:fc:e1:2c:b1:5f:2c:86:69:7e:c6:8a: f1:49:db:a1:cb:f2:2c:ce:3d:38:c0:a5:8c:a5:4c:c3:c8:a9: 1f:31:5d:45:89:e3:3b:30:70:d0:e1:4e:16:20:90:a0:73:0e: 5d:ab:00:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOiA2v5c4CgUWFxkTj4zIJcJYxMgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTEwMTkwNzQ2MjhaFw0yNTEwMjIxNDAzMjhaMDMxMTAvBgNV BAMTKDY4MTdCQUFDMTUwQzJGRDA1NDU5NzFBRDAwMzQ2OTg1QjdFMUY3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHSEgTguY5Mz4mxDTcdzzeNgwk 53ddh7I3kvCGfppSaTa6q+Q8mq8a94jMYyPdWII/cPYgBhjoEFRaubWfqCXZY0bm Is2H7fhIXkqlRyDRF/yVF8sTJ662PsqkzOpPGkhRwYjzhloZjs5Jjd3N1CyFtFOk iJ/CXjfmtAZGH61eNw0/VYQqEfloSAe4DNXomJCuARsXT4wGpY1abzww9RLBlC6r vrdEnN80XkSQLEN9KLPMg5nSVC6A9ayBiEo3GysJQ912RH2oLa4un2Pbv0CqbdxW Yj9X7vb2tz6GiPDIoe3KLWOQZy/gaalDJ0YNHZ4PkQi3TF+4oIsExCl06u5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaBe6rBUML9BUWXGtADRphbfh9ygwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+W/Mp/Z9SPmALqMMQtZ1kwHKW5wpcYofC4 /hI+RQFTlybVNgxA4gKxODfzPURYIGHSNNKkExXWeNH6VhL0PzsIJQdUJgwqWf/c 8EbOESWczpso3BKOdnVmtXEQ091az8pWtmDvY1V6NbN0iXduLMoQnHlu/7yOCTt0 bpKz1U9mbalRchvbUCBjTpwaOnCPLddaBAIP3DJGJz19pHXOFro6Nnln4DLx31kF 91LJ9aPgF0MBNLCXLQEvUyxmXp96SVWk8OrWiaAalxFj6Qj84SyxXyyGaX7GivFJ 26HL8izOPTjApYylTMPIqR8xXUWJ4zswcNDhThYgkKBzDl2rAHo= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:44 2025 by rpki-client