$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: v9LHEOSmPYAbduowoJMcmW/RZVmYtogmDQBplDtOe8U= Subject key identifier: 09:C0:95:7D:4F:E8:E4:C1:B5:24:49:43:87:1B:FD:CC:BC:35:A4:A7 Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 76AB870B7EC9CD9E51F3F5DB50541452BDABAA2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: CE Signing time: Wed 07 May 2025 18:12:54 +0000 Manifest this update: Wed 07 May 2025 18:07:54 +0000 Manifest next update: Sun 11 May 2025 04:15:54 +0000 Files and hashes: 1: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: ZOincbBjZAeQf1Bjg5c52HYCfcHdJUBE9ECbLO+Fg8A=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 04:15:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:ab:87:0b:7e:c9:cd:9e:51:f3:f5:db:50:54:14:52:bd:ab:aa:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: May 7 18:07:54 2025 GMT Not After : May 11 04:15:54 2025 GMT Subject: CN=09C0957D4FE8E4C1B5244943871BFDCCBC35A4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c4:84:ce:29:17:c4:18:d0:0f:50:65:1a:48: 97:37:95:1f:fb:6a:83:51:8c:34:1c:8a:32:a1:41: 9a:22:39:12:81:e9:4a:7d:21:59:3a:da:f2:de:1e: 02:1a:02:f3:39:24:c5:42:67:f3:d0:a1:0f:ad:2b: f5:23:66:ad:e7:4f:24:ca:21:d8:af:01:17:a8:f0: 7a:bb:e2:d4:1e:45:ad:31:6e:5f:3a:03:c0:20:ff: 3a:5f:13:21:64:94:64:45:6f:0c:bc:a6:f7:bf:38: 58:7c:bb:31:72:a1:43:2f:10:8e:38:ae:e6:c1:fc: 27:39:30:55:e1:85:64:3a:25:5a:d4:b1:2b:2a:f2: 0b:ba:ce:59:74:f6:17:a6:36:1e:4f:97:5f:0a:95: f2:a1:bc:f0:8f:40:35:7d:dc:92:7e:72:93:c3:37: 4e:d2:f4:d3:ce:ee:ea:1a:85:74:ba:e1:4c:45:87: 14:17:0e:e1:2b:bd:64:2f:44:26:dd:92:04:ce:84: 64:ad:28:c6:4a:83:55:bc:f1:8b:d0:f9:2c:02:db: fa:58:57:c3:95:ef:1d:10:f7:1a:88:34:f4:79:03: 7b:c6:5c:37:29:2f:bf:53:a2:85:c2:a1:8d:03:5c: af:82:f7:84:af:cf:b7:e5:5c:50:06:22:e3:06:b6: dd:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C0:95:7D:4F:E8:E4:C1:B5:24:49:43:87:1B:FD:CC:BC:35:A4:A7 X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a3:f9:b1:a2:ee:43:c7:0b:1f:6b:a0:33:68:05:fc:4b:3a: 16:21:fc:69:d1:c9:e0:34:1e:91:64:d5:ba:47:14:0e:66:1b: 97:a0:42:93:c6:3e:88:f3:91:73:42:85:84:02:77:ac:ed:49: b1:f2:30:6e:18:66:b5:65:a2:ba:40:c9:d7:18:37:76:e8:75: 31:30:f6:d8:ee:8b:41:89:fa:c9:4a:24:0c:8f:bf:ad:eb:18: 10:71:87:13:52:41:4f:00:1a:a0:57:70:97:b5:f8:50:d6:b7: 97:b9:db:73:0a:0b:0d:e2:bb:b0:23:3f:30:29:c3:51:51:9f: ff:26:d1:01:00:ed:25:10:85:78:d2:a9:a5:05:ac:a8:e7:40: 6f:84:5c:9f:ec:84:fc:4a:de:10:76:3d:a6:9e:fe:cb:2d:d2: 8a:95:d2:a1:b7:be:ff:97:c7:f0:07:a2:b1:8d:5c:64:4d:bd: 83:56:2b:47:72:6b:2a:0e:c3:18:39:55:87:5f:84:ce:f7:8c: 1a:2f:97:b6:ec:72:66:11:63:8f:dd:cc:1f:5a:7e:60:65:54: 86:6f:b5:23:2c:1a:c7:d9:89:11:2d:d8:38:d5:38:a9:05:98: d3:d3:f0:0b:24:80:b3:a9:66:c1:5c:a5:44:33:30:5a:d6:ae: ea:9b:e8:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdquHC37JzZ5R8/XbUFQUUr2rqi0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTA1MDcxODA3NTRaFw0yNTA1MTEwNDE1NTRaMDMxMTAvBgNV BAMTKDA5QzA5NTdENEZFOEU0QzFCNTI0NDk0Mzg3MUJGRENDQkMzNUE0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxITOKRfEGNAPUGUaSJc3lR/7 aoNRjDQcijKhQZoiORKB6Up9IVk62vLeHgIaAvM5JMVCZ/PQoQ+tK/UjZq3nTyTK IdivAReo8Hq74tQeRa0xbl86A8Ag/zpfEyFklGRFbwy8pve/OFh8uzFyoUMvEI44 rubB/Cc5MFXhhWQ6JVrUsSsq8gu6zll09hemNh5Pl18KlfKhvPCPQDV93JJ+cpPD N07S9NPO7uoahXS64UxFhxQXDuErvWQvRCbdkgTOhGStKMZKg1W88YvQ+SwC2/pY V8OV7x0Q9xqINPR5A3vGXDcpL79TooXCoY0DXK+C94Svz7flXFAGIuMGtt3VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCcCVfU/o5MG1JElDhxv9zLw1pKcwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6j+bGi7kPHCx9roDNoBfxLOhYh/GnRyeA0 HpFk1bpHFA5mG5egQpPGPojzkXNChYQCd6ztSbHyMG4YZrVlorpAydcYN3bodTEw 9tjui0GJ+slKJAyPv63rGBBxhxNSQU8AGqBXcJe1+FDWt5e523MKCw3iu7AjPzAp w1FRn/8m0QEA7SUQhXjSqaUFrKjnQG+EXJ/shPxK3hB2Paae/sst0oqV0qG3vv+X x/AHorGNXGRNvYNWK0dyayoOwxg5VYdfhM73jBovl7bscmYRY4/dzB9afmBlVIZv tSMsGsfZiREt2DjVOKkFmNPT8AskgLOpZsFcpUQzMFrWruqb6Cs= -----END CERTIFICATE-----Generated at Fri May 9 12:46:47 2025 by rpki-client