$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: LezIvMOHwIaOPoC7kkbon/r4NfK+IZi/ZY0v11EBgmk= Subject key identifier: 4F:43:C7:A8:18:14:20:34:78:23:8E:08:E2:6B:31:EF:8D:43:05:8D Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 4ECB8AFD4B899095D295A43C4FDF335501232FA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 0158 Signing time: Wed 02 Jul 2025 22:51:46 +0000 Manifest this update: Wed 02 Jul 2025 22:46:46 +0000 Manifest next update: Sun 06 Jul 2025 04:23:46 +0000 Files and hashes: 1: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) 2: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: s3WJQ1puhr3zorOCU1YYAvSieHZIt7IjYMNLYa06byk=) 3: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 4: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 5: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 6: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) 8: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 9: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 04:23:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:cb:8a:fd:4b:89:90:95:d2:95:a4:3c:4f:df:33:55:01:23:2f:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Jul 2 22:46:46 2025 GMT Not After : Jul 6 04:23:46 2025 GMT Subject: CN=4F43C7A81814203478238E08E26B31EF8D43058D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0b:38:f0:54:b3:2f:3f:24:71:cb:20:95:76: 01:c2:9e:c6:94:ec:2b:9a:dc:9f:ec:2c:07:bd:e5: b3:0f:37:e9:4b:f7:99:df:ac:74:5d:a2:2c:c1:4e: d9:c1:1b:a2:50:21:79:95:d6:9b:3b:b6:0d:76:5f: 34:dc:ca:b0:ad:2d:80:96:37:62:2b:d9:a4:58:e6: d2:52:dd:18:7d:3f:3a:0b:a5:47:01:2f:9c:51:f2: 94:e5:11:49:88:ab:b6:cb:ba:02:1a:4e:3d:f1:99: 9f:7d:c2:bf:fa:b2:b8:7b:0a:6c:89:7e:f0:17:9b: 6d:7e:26:59:d6:22:29:12:3a:17:e0:03:19:06:26: 93:7f:18:e5:3d:aa:40:c0:a4:4d:e2:ac:1e:37:fb: ef:c7:ab:4d:ef:cb:eb:2e:2b:c9:88:af:51:42:43: 4b:b3:35:46:2b:1e:5a:e6:9f:24:a8:95:fe:73:19: ae:1f:dc:5f:b0:8b:68:33:89:11:d0:29:cc:49:34: d8:49:23:35:b4:ef:80:c2:ce:88:7e:e3:ee:e2:90: 66:6a:68:3a:43:d6:cb:a1:fe:7e:e0:39:06:6c:50: 32:69:43:95:e4:ff:48:50:22:b8:7e:33:e4:62:7e: 41:36:2e:23:de:ce:6c:1a:02:aa:b0:33:0b:84:88: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:43:C7:A8:18:14:20:34:78:23:8E:08:E2:6B:31:EF:8D:43:05:8D X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c8:6d:68:96:3a:88:e5:4a:52:8d:ed:04:19:fd:c4:7e:68: ac:09:de:17:77:29:51:93:28:88:54:c1:2b:18:37:65:e0:c0: 76:c6:c2:26:8a:0a:ac:29:d0:85:31:4e:5a:97:d0:fd:67:5b: 96:84:f2:18:8d:85:cd:fb:24:41:28:0c:83:d0:09:56:11:f5: 11:7d:ae:75:f9:a6:e8:44:1f:24:2f:f8:ee:71:ff:17:18:22: f3:32:c0:7a:24:18:64:06:ff:0f:31:c3:c3:b9:58:7a:96:eb: 0e:8e:56:cb:54:f2:10:81:b8:ca:7c:05:17:14:fd:23:18:b0: fb:2a:35:97:fe:5b:4a:2c:81:ef:70:a5:ab:46:35:b0:7e:90: 4a:e6:5c:87:6c:3e:2b:bd:8f:a5:a3:58:4f:26:92:7f:f8:ec: b8:1a:6b:4c:9b:45:4a:6a:3c:fb:88:ce:f1:10:8e:5b:41:6f: 3f:39:b7:11:7e:7e:b9:78:aa:ac:c3:25:b4:4f:2b:73:3a:da: 60:35:c0:d8:3c:29:35:eb:25:c6:16:33:14:ff:69:a7:f5:eb: e0:48:c9:bc:3c:29:bf:99:99:cf:e3:f2:67:05:25:c7:2e:7a: df:a2:22:84:8d:16:5c:9d:04:5d:6e:e6:c4:dc:53:aa:51:63: 96:9b:79:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTsuK/UuJkJXSlaQ8T98zVQEjL6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTA3MDIyMjQ2NDZaFw0yNTA3MDYwNDIzNDZaMDMxMTAvBgNV BAMTKDRGNDNDN0E4MTgxNDIwMzQ3ODIzOEUwOEUyNkIzMUVGOEQ0MzA1OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCzjwVLMvPyRxyyCVdgHCnsaU 7Cua3J/sLAe95bMPN+lL95nfrHRdoizBTtnBG6JQIXmV1ps7tg12XzTcyrCtLYCW N2Ir2aRY5tJS3Rh9PzoLpUcBL5xR8pTlEUmIq7bLugIaTj3xmZ99wr/6srh7CmyJ fvAXm21+JlnWIikSOhfgAxkGJpN/GOU9qkDApE3irB43++/Hq03vy+suK8mIr1FC Q0uzNUYrHlrmnySolf5zGa4f3F+wi2gziRHQKcxJNNhJIzW074DCzoh+4+7ikGZq aDpD1suh/n7gOQZsUDJpQ5Xk/0hQIrh+M+RifkE2LiPezmwaAqqwMwuEiJtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT0PHqBgUIDR4I44I4msx741DBY0wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPIbWiWOojlSlKN7QQZ/cR+aKwJ3hd3KVGT KIhUwSsYN2XgwHbGwiaKCqwp0IUxTlqX0P1nW5aE8hiNhc37JEEoDIPQCVYR9RF9 rnX5puhEHyQv+O5x/xcYIvMywHokGGQG/w8xw8O5WHqW6w6OVstU8hCBuMp8BRcU /SMYsPsqNZf+W0osge9wpatGNbB+kErmXIdsPiu9j6WjWE8mkn/47Lgaa0ybRUpq PPuIzvEQjltBbz85txF+frl4qqzDJbRPK3M62mA1wNg8KTXrJcYWMxT/aaf16+BI ybw8Kb+Zmc/j8mcFJccuet+iIoSNFlydBF1u5sTcU6pRY5abeRI= -----END CERTIFICATE-----Generated at Thu Jul 3 07:03:26 2025 by rpki-client