$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: xXGqX8pD8bXOL2uxM6FBt2uvKVCYb5s2TU799IFY+zU= Subject key identifier: E9:5C:77:C8:76:3A:0C:02:1B:28:08:02:99:A7:00:84:5C:58:3D:58 Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 357197F05FCC7C046D882FFC676B13E2F02C5803 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: FF Signing time: Sat 23 Aug 2025 16:21:28 +0000 Manifest this update: Sat 23 Aug 2025 16:16:28 +0000 Manifest next update: Tue 26 Aug 2025 18:52:28 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: gtZvR1h6D6oNfSSp3ENYOAH1zMMLTax/Rp4dIUCT5Mo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:71:97:f0:5f:cc:7c:04:6d:88:2f:fc:67:6b:13:e2:f0:2c:58:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Aug 23 16:16:28 2025 GMT Not After : Aug 26 18:52:28 2025 GMT Subject: CN=E95C77C8763A0C021B28080299A700845C583D58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:ad:61:2e:c5:ff:72:ca:a2:fa:b9:eb:68: c5:45:09:26:a3:50:cb:2b:56:7b:3d:3f:8a:40:99: ce:07:bf:cb:23:34:df:61:75:84:bf:cf:f8:63:6f: 1e:69:70:dc:bc:8c:26:b6:b8:57:97:98:da:52:64: 70:aa:e9:31:90:06:1e:55:48:ec:9b:e9:e0:4b:9e: 5a:ae:2c:0f:68:0d:99:a1:65:6e:db:e2:bd:12:48: ec:fa:6d:26:e0:d7:1e:92:3b:88:56:e3:8d:f0:d5: a9:f3:64:99:21:d0:1e:04:0f:df:ad:0e:4f:1c:e1: 25:4e:48:25:78:68:7e:76:e6:4d:f5:18:5c:54:ef: ad:0e:ce:ac:5f:1a:f8:a0:2a:0b:89:28:ce:74:c5: d7:ae:8f:12:7b:4b:bb:6a:3e:82:65:ee:ba:9d:db: 20:3d:36:3c:b0:b3:23:3b:46:6b:13:09:ba:88:e8: 27:5e:ed:66:eb:14:a8:09:c2:2e:22:f5:32:66:53: 2e:e5:8e:c0:ca:47:f5:43:1b:28:f9:29:05:88:bd: 41:f8:6a:2b:4b:16:7a:0f:41:eb:1c:fa:96:74:cb: d0:b1:63:5d:8b:53:72:92:6a:4d:5e:48:38:d0:15: de:31:8e:48:bf:e0:de:cf:86:85:09:56:be:3c:64: df:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:5C:77:C8:76:3A:0C:02:1B:28:08:02:99:A7:00:84:5C:58:3D:58 X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:8a:66:5b:71:af:ec:87:aa:14:47:04:25:64:10:a8:c2:1b: 66:22:c3:7d:de:2d:ba:f7:c7:01:f5:5a:b6:4e:c6:a4:f6:d2: 6e:37:0c:a6:9d:24:16:8a:d6:47:b7:7b:26:ca:ef:a5:82:51: 51:d0:df:cb:8e:ad:8d:69:fe:fa:7c:a4:29:6f:a5:59:15:5e: 05:c8:43:ea:77:34:61:52:69:fe:5f:56:3a:b1:43:99:52:8c: 3e:1d:ec:77:d7:64:e7:45:a5:4b:fa:78:17:4f:f1:f4:67:ae: 85:01:1d:ee:23:07:fa:e4:50:7f:9e:20:6f:7d:1f:01:f7:c6: 32:cc:19:bf:5d:6b:1e:07:d5:fb:03:75:ee:74:4b:f3:bf:66: ca:5d:d4:ca:f2:bb:7c:98:31:fb:e4:a3:b5:85:09:e3:8c:be: 58:84:d8:c3:00:70:c8:71:f0:17:1f:51:6b:c5:63:6f:32:35: ae:af:8d:15:56:2f:42:28:1b:21:1e:94:02:70:47:21:fc:c2: e6:36:b5:d7:fe:c3:cd:a9:be:95:c8:87:e3:5e:3a:fe:2d:11: 93:91:49:d0:f7:99:33:a3:b6:f3:2c:d7:f6:78:94:a0:9a:97: e4:f3:04:29:2c:c0:1d:5a:12:92:85:b5:51:19:bc:6f:52:1a: d1:74:6c:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNXGX8F/MfARtiC/8Z2sT4vAsWAMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTA4MjMxNjE2MjhaFw0yNTA4MjYxODUyMjhaMDMxMTAvBgNV BAMTKEU5NUM3N0M4NzYzQTBDMDIxQjI4MDgwMjk5QTcwMDg0NUM1ODNENTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8h61hLsX/csqi+rnraMVFCSaj UMsrVns9P4pAmc4Hv8sjNN9hdYS/z/hjbx5pcNy8jCa2uFeXmNpSZHCq6TGQBh5V SOyb6eBLnlquLA9oDZmhZW7b4r0SSOz6bSbg1x6SO4hW443w1anzZJkh0B4ED9+t Dk8c4SVOSCV4aH525k31GFxU760OzqxfGvigKguJKM50xdeujxJ7S7tqPoJl7rqd 2yA9NjywsyM7RmsTCbqI6Cde7WbrFKgJwi4i9TJmUy7ljsDKR/VDGyj5KQWIvUH4 aitLFnoPQesc+pZ0y9CxY12LU3KSak1eSDjQFd4xjki/4N7PhoUJVr48ZN87AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6Vx3yHY6DAIbKAgCmacAhFxYPVgwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaKZltxr+yHqhRHBCVkEKjCG2Yiw33eLbr3 xwH1WrZOxqT20m43DKadJBaK1ke3eybK76WCUVHQ38uOrY1p/vp8pClvpVkVXgXI Q+p3NGFSaf5fVjqxQ5lSjD4d7HfXZOdFpUv6eBdP8fRnroUBHe4jB/rkUH+eIG99 HwH3xjLMGb9dax4H1fsDde50S/O/Zspd1Mryu3yYMfvko7WFCeOMvliE2MMAcMhx 8BcfUWvFY28yNa6vjRVWL0IoGyEelAJwRyH8wuY2tdf+w82pvpXIh+NeOv4tEZOR SdD3mTOjtvMs1/Z4lKCal+TzBCkswB1aEpKFtVEZvG9SGtF0bJE= -----END CERTIFICATE-----Generated at Sat Aug 23 21:57:19 2025 by rpki-client