$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: SHhZp9G9PR2SDTXVJ9WgLXN8QEuUQ1ksdeVt0UAvbrk= Subject key identifier: 0B:8F:B0:48:0E:44:9C:43:94:E4:62:77:56:73:A1:EA:E7:7A:2F:4D Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 75F99E734D45A6E84FBE5C220F669051C40BA90E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 0184 Signing time: Thu 21 Aug 2025 08:12:13 +0000 Manifest this update: Thu 21 Aug 2025 08:07:13 +0000 Manifest next update: Sun 24 Aug 2025 14:06:13 +0000 Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) 2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: oYRSuul7pUXu2FbrZ8xlnzoBQ58QuoXFsGUKtgRpHLI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 14:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:f9:9e:73:4d:45:a6:e8:4f:be:5c:22:0f:66:90:51:c4:0b:a9:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Aug 21 08:07:13 2025 GMT Not After : Aug 24 14:06:13 2025 GMT Subject: CN=0B8FB0480E449C4394E462775673A1EAE77A2F4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:db:a5:0d:9b:1c:c6:37:a9:41:61:69:c6:d5: 9a:fa:7f:e4:9b:6e:6f:ca:78:8b:fa:40:27:d6:50: 92:d7:c9:af:3c:4e:38:25:bd:07:5e:e8:8c:e8:d1: 09:81:b6:d3:ff:87:77:ff:61:fc:b2:7b:bf:17:10: 48:70:20:88:55:59:15:30:6c:44:48:4d:08:db:a6: 5a:8b:95:9b:59:9c:0c:4d:76:53:50:08:ff:f2:94: 71:c4:30:b3:ee:6b:23:22:a6:c8:81:a9:fc:0a:b5: 81:87:f7:dd:8f:a7:a1:7f:d3:91:ca:2d:b0:93:04: 16:92:0a:87:a9:07:36:b0:ef:be:be:8c:a0:5a:30: 32:d8:61:d0:28:f0:25:39:40:bd:dc:2e:30:6a:dd: 36:4a:7a:34:1d:fa:f8:37:87:67:bd:5d:79:04:a6: 84:79:cc:90:35:94:6e:e1:1d:79:5d:4e:41:80:0e: 6f:f5:2f:a6:42:3e:99:95:5f:8e:6b:77:ea:65:66: a4:4e:63:2a:ff:4d:46:23:a1:fa:72:21:4e:e5:fd: 9e:b1:e1:f2:09:c7:e1:88:22:1f:12:ad:03:a4:90: bd:80:04:e8:26:df:de:6e:59:74:3c:d0:dc:3a:5d: 47:38:d9:31:03:03:30:59:47:01:8c:d7:a7:ac:61: 65:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8F:B0:48:0E:44:9C:43:94:E4:62:77:56:73:A1:EA:E7:7A:2F:4D X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:c1:5f:4b:a6:0e:5a:26:63:d1:cb:94:34:cd:40:bf:6c:79: 6a:8e:48:88:f2:1d:c4:a2:18:a3:3c:3c:16:d9:8a:ad:e7:3c: 7c:ab:69:ea:ea:fd:f3:70:2f:d4:03:e1:c8:5e:bf:b0:41:1c: 37:2f:c5:7d:6a:e5:5f:87:b3:d8:bf:eb:dd:e7:d4:fb:81:35: ee:a5:0e:39:eb:a6:be:72:a7:63:84:22:d3:73:da:c1:18:59: 71:62:8b:25:ed:a2:79:97:74:2b:c7:43:5a:90:d7:e0:65:81: 83:c5:df:04:9f:6b:ec:8f:41:ad:89:56:14:4b:d7:2c:56:f6: 9c:c1:dc:2f:d1:e1:b7:68:c5:2c:c6:8e:57:23:62:a7:09:4e: a4:48:b6:3b:f1:f5:83:fe:9f:8c:99:24:f0:c0:85:3d:1e:88: eb:ba:5d:bf:58:48:09:cd:ed:54:ca:f4:dd:35:a7:a9:a3:6d: 6f:e6:3c:bb:9c:72:28:74:d6:3d:c2:52:02:42:44:ec:ef:e9: 57:8d:30:7a:4f:a8:5d:c3:0f:2e:3f:4e:17:e8:3f:3c:28:6b: bf:5c:97:56:3a:5c:04:b0:77:75:cf:34:af:0a:95:c1:38:29: 1e:ef:d2:c5:85:b9:10:bd:14:d5:2e:14:db:be:cf:be:ba:3d: ef:0a:ce:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdfmec01FpuhPvlwiD2aQUcQLqQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTA4MjEwODA3MTNaFw0yNTA4MjQxNDA2MTNaMDMxMTAvBgNV BAMTKDBCOEZCMDQ4MEU0NDlDNDM5NEU0NjI3NzU2NzNBMUVBRTc3QTJGNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG26UNmxzGN6lBYWnG1Zr6f+Sb bm/KeIv6QCfWUJLXya88TjglvQde6Izo0QmBttP/h3f/Yfyye78XEEhwIIhVWRUw bERITQjbplqLlZtZnAxNdlNQCP/ylHHEMLPuayMipsiBqfwKtYGH992Pp6F/05HK LbCTBBaSCoepBzaw776+jKBaMDLYYdAo8CU5QL3cLjBq3TZKejQd+vg3h2e9XXkE poR5zJA1lG7hHXldTkGADm/1L6ZCPpmVX45rd+plZqROYyr/TUYjofpyIU7l/Z6x 4fIJx+GIIh8SrQOkkL2ABOgm395uWXQ80Nw6XUc42TEDAzBZRwGM16esYWVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4+wSA5EnEOU5GJ3VnOh6ud6L00wHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLBX0umDlomY9HLlDTNQL9seWqOSIjyHcSi GKM8PBbZiq3nPHyraerq/fNwL9QD4chev7BBHDcvxX1q5V+Hs9i/693n1PuBNe6l Djnrpr5yp2OEItNz2sEYWXFiiyXtonmXdCvHQ1qQ1+BlgYPF3wSfa+yPQa2JVhRL 1yxW9pzB3C/R4bdoxSzGjlcjYqcJTqRItjvx9YP+n4yZJPDAhT0eiOu6Xb9YSAnN 7VTK9N01p6mjbW/mPLuccih01j3CUgJCROzv6VeNMHpPqF3DDy4/ThfoPzwoa79c l1Y6XASwd3XPNK8KlcE4KR7v0sWFuRC9FNUuFNu+z766Pe8Kzic= -----END CERTIFICATE-----Generated at Sat Aug 23 15:26:25 2025 by rpki-client