$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: 9689pnRCUNlcN9TIoJhbmlLAMHn8lXAFfVT9+avBJ0k= Subject key identifier: C9:FF:02:B5:94:C0:79:86:50:6C:C3:F7:04:D0:C1:B1:AB:C3:1C:4F Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 393C3AB4268091094F422DB71C091C8C290D7A0C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01BD Signing time: Mon 20 Oct 2025 14:52:14 +0000 Manifest this update: Mon 20 Oct 2025 14:47:14 +0000 Manifest next update: Thu 23 Oct 2025 23:11:14 +0000 Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: IVJ0b0O0UGWFb8DQACwVWHuzImwsy85XwTmxoeLCF2Q=) 2: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: VDpil/lO/O6M9w5aGqlNfnlY4VqUFyutuBY/UE8ZtR0=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: hJb47Cih3yK2ughpevnMJU/IHmzWp3j4uIzblFeg3/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:3c:3a:b4:26:80:91:09:4f:42:2d:b7:1c:09:1c:8c:29:0d:7a:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Oct 20 14:47:14 2025 GMT Not After : Oct 23 23:11:14 2025 GMT Subject: CN=C9FF02B594C07986506CC3F704D0C1B1ABC31C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:4a:21:f5:42:82:2e:84:a8:68:6b:86:c5:eb: 53:32:16:b3:4a:88:33:bb:9d:1f:5b:87:2f:f8:3f: 05:7a:7a:f7:fc:d9:47:b3:59:0e:a0:3e:35:4b:16: 30:34:23:53:1a:77:cf:fa:b4:5e:5d:a8:ac:fa:59: 78:1c:20:a7:b8:5d:31:30:f7:d4:f4:d2:0c:a2:86: d0:dc:5d:05:74:f3:e7:93:34:55:23:0d:8b:24:73: 0c:39:a6:51:0a:61:da:98:50:5c:89:ec:16:95:68: d3:ae:d0:de:d1:e8:46:c5:2b:dd:f3:e4:2c:fa:21: f9:8f:08:11:83:0f:f9:95:c3:99:a9:e1:95:55:2a: a8:8d:a1:39:7b:8d:a0:e9:fb:88:95:49:1d:37:81: cc:55:b4:b7:09:ef:78:f7:c3:5f:50:cc:4d:91:f6: 74:b2:08:4b:24:9c:b0:5d:f6:fe:74:d3:d2:37:4f: 53:cf:57:fc:06:fa:0d:3a:0f:83:07:94:64:bb:32: 82:86:2e:e5:e7:13:f3:15:f4:75:57:3f:a0:d1:33: e0:42:82:06:94:38:09:81:6e:2b:f7:9d:b6:13:37: cf:ad:e6:c7:58:01:6d:18:35:fb:e9:35:80:9b:44: 7d:26:f8:86:43:f4:5d:c5:50:67:cb:25:8f:44:e6: c8:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:FF:02:B5:94:C0:79:86:50:6C:C3:F7:04:D0:C1:B1:AB:C3:1C:4F X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:ca:61:fd:43:82:48:05:fc:d8:7a:8e:5a:6c:18:2b:07:8d: 81:00:42:f9:a8:1c:17:5d:d1:da:a4:71:ed:b4:39:ee:76:6b: aa:2c:7f:8a:42:78:28:3c:43:35:da:ae:26:a1:d4:fd:c8:f3: 0c:56:83:c9:f6:19:bc:1e:37:e8:f1:15:5b:86:00:6c:8a:69: d8:b5:60:fa:5f:9f:fa:e6:95:68:27:09:72:41:12:80:ed:44: 69:a2:21:a5:2a:8f:c7:17:4d:94:b8:76:8f:d1:90:45:87:0d: 53:8c:1f:06:51:50:43:3f:ff:f6:1a:d8:4c:dc:30:a5:ca:33: 6c:b4:d9:13:c4:d6:ab:14:a7:20:3e:0d:10:92:d1:6f:eb:50: 8e:42:ef:5b:5f:b3:6e:60:bd:83:ef:fe:84:11:27:c2:f2:3c: be:59:54:12:30:38:b0:2d:93:49:38:2e:ac:03:f6:c7:f8:9d: 20:4b:6d:e2:3f:de:69:d5:30:d0:6d:8e:02:c3:a5:72:90:a3: 52:de:d4:c4:56:ab:59:c9:1a:5c:c3:60:b5:98:4d:d2:f1:a1: 6b:9f:ea:84:fd:cf:6d:96:d2:bd:94:1f:34:83:16:8f:29:fa: e4:87:af:9b:b6:0b:89:76:61:2a:91:22:07:01:4e:29:e7:3a: 3f:9e:9f:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTw6tCaAkQlPQi23HAkcjCkNegwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTEwMjAxNDQ3MTRaFw0yNTEwMjMyMzExMTRaMDMxMTAvBgNV BAMTKEM5RkYwMkI1OTRDMDc5ODY1MDZDQzNGNzA0RDBDMUIxQUJDMzFDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSiH1QoIuhKhoa4bF61MyFrNK iDO7nR9bhy/4PwV6evf82UezWQ6gPjVLFjA0I1Mad8/6tF5dqKz6WXgcIKe4XTEw 99T00gyihtDcXQV08+eTNFUjDYskcww5plEKYdqYUFyJ7BaVaNOu0N7R6EbFK93z 5Cz6IfmPCBGDD/mVw5mp4ZVVKqiNoTl7jaDp+4iVSR03gcxVtLcJ73j3w19QzE2R 9nSyCEsknLBd9v5009I3T1PPV/wG+g06D4MHlGS7MoKGLuXnE/MV9HVXP6DRM+BC ggaUOAmBbiv3nbYTN8+t5sdYAW0YNfvpNYCbRH0m+IZD9F3FUGfLJY9E5sgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyf8CtZTAeYZQbMP3BNDBsavDHE8wHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnKYf1DgkgF/Nh6jlpsGCsHjYEAQvmoHBdd 0dqkce20Oe52a6osf4pCeCg8QzXariah1P3I8wxWg8n2GbweN+jxFVuGAGyKadi1 YPpfn/rmlWgnCXJBEoDtRGmiIaUqj8cXTZS4do/RkEWHDVOMHwZRUEM///Ya2Ezc MKXKM2y02RPE1qsUpyA+DRCS0W/rUI5C71tfs25gvYPv/oQRJ8LyPL5ZVBIwOLAt k0k4LqwD9sf4nSBLbeI/3mnVMNBtjgLDpXKQo1Le1MRWq1nJGlzDYLWYTdLxoWuf 6oT9z22W0r2UHzSDFo8p+uSHr5u2C4l2YSqRIgcBTinnOj+enzo= -----END CERTIFICATE-----Generated at Mon Oct 20 21:23:55 2025 by rpki-client