$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: I2RgCJcDxH6NVbhHTZczZNi7IdpaupZqpzEDoc/4Rt0= Subject key identifier: AE:31:59:BF:70:07:4F:F9:AF:05:14:AC:FB:3A:88:E2:A4:F9:90:07 Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 1D70D75540377401D03D5C5D2C43F0E8ABE1B3DC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01A3 Signing time: Fri 22 Aug 2025 22:12:13 +0000 Manifest this update: Fri 22 Aug 2025 22:07:13 +0000 Manifest next update: Tue 26 Aug 2025 08:28:13 +0000 Files and hashes: 1: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: hJb47Cih3yK2ughpevnMJU/IHmzWp3j4uIzblFeg3/4=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: IVJ0b0O0UGWFb8DQACwVWHuzImwsy85XwTmxoeLCF2Q=) 3: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: wksXLQVoBNKj85wVINVkfrUxVAhp1vaD/zYeBfKp7nc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 08:28:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:70:d7:55:40:37:74:01:d0:3d:5c:5d:2c:43:f0:e8:ab:e1:b3:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Aug 22 22:07:13 2025 GMT Not After : Aug 26 08:28:13 2025 GMT Subject: CN=AE3159BF70074FF9AF0514ACFB3A88E2A4F99007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a3:25:d9:c5:6f:5c:05:ce:e9:09:ed:d3:a1: 16:09:60:ac:17:84:2f:ed:99:98:7e:f8:e3:89:ac: d5:ff:d5:ff:3f:82:05:69:5b:22:df:08:e3:7f:6e: a1:98:27:fa:dc:9c:09:c0:02:4e:d7:b8:bb:22:de: 8f:ea:ea:0d:57:ef:ea:96:d6:67:c6:bd:5a:b3:f4: 03:0e:7e:57:eb:ad:08:fc:58:42:9d:71:42:14:b8: 9d:2a:6b:7a:16:72:05:1b:3b:fd:d9:22:14:ed:7c: f6:50:81:67:fc:26:f6:cc:54:60:0c:4d:d7:e5:16: 74:42:3f:1f:fb:1c:4f:d4:c0:28:39:17:0c:dd:3c: 1a:a6:8c:13:46:00:f2:d8:2d:36:75:fd:0d:90:4f: 9a:1c:b3:84:76:a9:dd:9a:79:eb:f6:c6:44:9c:a5: 9d:f8:17:d5:02:9b:38:b2:01:5b:33:5d:a1:00:f8: 8a:f5:ff:27:b8:6d:7d:68:68:ad:79:04:74:a3:9c: e3:90:55:8f:3f:d5:8f:5d:58:bb:5b:be:ac:83:fc: 33:ca:2e:51:89:13:2e:c4:51:e7:49:a4:b1:c6:99: e1:27:6e:44:8e:e3:f2:c4:7e:9a:b0:b1:61:b6:27: 53:e7:17:df:af:43:01:38:a1:cb:9b:3d:6b:0f:48: b8:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:31:59:BF:70:07:4F:F9:AF:05:14:AC:FB:3A:88:E2:A4:F9:90:07 X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5f:87:8e:c7:33:d5:e4:a4:7b:f1:b3:c8:0a:94:a7:00:cb: a2:49:d4:58:6d:f9:0a:be:74:11:55:f6:9f:62:ec:62:e1:85: a7:c8:39:a4:b5:e3:4a:c2:32:cc:19:b4:0f:26:3a:6b:b7:fc: 14:a0:c0:91:c8:73:cc:3c:5b:16:4e:9d:93:73:7e:7d:10:21: 66:ea:fd:36:6f:13:74:b4:f4:82:5b:c1:ea:76:a0:af:66:c0: 5c:57:77:5a:a6:a0:d1:d7:1d:6b:bf:bd:d4:8b:6c:89:b7:6d: 37:ac:ec:99:84:25:e2:0e:93:a3:85:d4:cd:81:2f:9a:25:98: f0:a2:e9:7b:31:85:58:aa:1e:a0:2c:c6:db:b2:f5:28:c0:67: 89:d7:e3:6f:3e:3c:58:19:93:e9:17:17:37:3a:1b:89:43:3d: ce:bc:69:01:a6:a7:bd:45:78:d1:56:25:95:63:65:f0:38:3c: c3:6f:a7:43:51:52:f2:9b:cc:65:3e:5e:b9:b0:0a:31:cb:9a: 55:b2:3c:72:ab:95:39:28:f2:c9:5e:d5:5b:30:e5:2d:0f:6d: a4:de:02:d4:be:17:e2:f1:23:3d:37:29:1a:59:d6:e0:21:83: 13:c6:05:9f:aa:bd:29:e6:06:f8:6d:29:89:ca:94:ca:7d:93: e0:2f:c1:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHXDXVUA3dAHQPVxdLEPw6Kvhs9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTA4MjIyMjA3MTNaFw0yNTA4MjYwODI4MTNaMDMxMTAvBgNV BAMTKEFFMzE1OUJGNzAwNzRGRjlBRjA1MTRBQ0ZCM0E4OEUyQTRGOTkwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOoyXZxW9cBc7pCe3ToRYJYKwX hC/tmZh++OOJrNX/1f8/ggVpWyLfCON/bqGYJ/rcnAnAAk7XuLsi3o/q6g1X7+qW 1mfGvVqz9AMOflfrrQj8WEKdcUIUuJ0qa3oWcgUbO/3ZIhTtfPZQgWf8JvbMVGAM TdflFnRCPx/7HE/UwCg5FwzdPBqmjBNGAPLYLTZ1/Q2QT5ocs4R2qd2aeev2xkSc pZ34F9UCmziyAVszXaEA+Ir1/ye4bX1oaK15BHSjnOOQVY8/1Y9dWLtbvqyD/DPK LlGJEy7EUedJpLHGmeEnbkSO4/LEfpqwsWG2J1PnF9+vQwE4ocubPWsPSLiNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrjFZv3AHT/mvBRSs+zqI4qT5kAcwHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFfh47HM9XkpHvxs8gKlKcAy6JJ1Fht+Qq+ dBFV9p9i7GLhhafIOaS140rCMswZtA8mOmu3/BSgwJHIc8w8WxZOnZNzfn0QIWbq /TZvE3S09IJbwep2oK9mwFxXd1qmoNHXHWu/vdSLbIm3bTes7JmEJeIOk6OF1M2B L5olmPCi6XsxhViqHqAsxtuy9SjAZ4nX428+PFgZk+kXFzc6G4lDPc68aQGmp71F eNFWJZVjZfA4PMNvp0NRUvKbzGU+XrmwCjHLmlWyPHKrlTko8sle1Vsw5S0PbaTe AtS+F+LxIz03KRpZ1uAhgxPGBZ+qvSnmBvhtKYnKlMp9k+Avwa4= -----END CERTIFICATE-----Generated at Sat Aug 23 10:38:17 2025 by rpki-client