$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: t8bfdfU8yS1pXDlKVEJvN1I5cp6iv69pZstKIpUX/1w= Subject key identifier: FA:1E:5D:A2:92:BD:FB:45:48:18:17:6B:26:02:FE:4A:CB:1B:98:B5 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 7A5281FCD8692586FB817386CA0744F30E6D8CCE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 016C Signing time: Sat 28 Jun 2025 10:32:09 +0000 Manifest this update: Sat 28 Jun 2025 10:27:09 +0000 Manifest next update: Tue 01 Jul 2025 17:51:09 +0000 Files and hashes: 1: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) 2: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: xIlGRvHGTuMyXWwERb02rEEHpoqwfC2zAzRyAOM81Rg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 17:51:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:52:81:fc:d8:69:25:86:fb:81:73:86:ca:07:44:f3:0e:6d:8c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Jun 28 10:27:09 2025 GMT Not After : Jul 1 17:51:09 2025 GMT Subject: CN=FA1E5DA292BDFB454818176B2602FE4ACB1B98B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4b:e1:e1:2c:b5:b1:53:f4:d8:46:1f:b1:18: c5:79:73:d0:2c:56:58:ca:ff:3b:d5:85:72:59:5f: e1:b1:72:0e:35:bb:3f:e6:4e:dd:e7:97:16:d7:5e: 36:ed:ea:8c:db:59:0a:7c:76:d2:c8:25:e3:27:92: 9a:5e:63:c1:a1:57:78:63:d0:1e:bb:1a:91:49:99: 20:2b:30:ad:0f:6f:4b:38:d4:56:b2:60:d9:92:33: 05:d3:23:12:ef:ff:d0:79:8c:81:6a:6c:85:49:bf: 95:a4:b5:75:84:ea:d7:3d:b6:b8:6d:2c:ba:7a:a1: dc:40:f7:90:02:c6:4a:af:1d:97:01:a0:14:bf:d0: ee:7c:48:ce:2f:dd:56:20:85:e4:90:08:6c:b6:20: 21:f6:d9:e1:72:a9:95:9f:04:a8:df:75:3a:f8:0e: 87:68:54:36:15:9f:8c:67:6d:ba:fd:ca:78:b5:82: 86:7f:46:83:38:34:fb:6d:0b:4c:82:fa:2f:85:97: 1c:45:0a:71:cf:0d:0f:fd:a4:30:d1:16:0c:e1:09: 0d:3f:c4:fa:c4:93:ed:f4:28:2b:6f:08:e6:07:89: b5:76:a5:cd:a7:5f:48:ed:74:f9:cd:54:68:d5:3b: 24:6d:ba:7d:b9:9b:04:72:ff:f5:e0:32:94:d0:bf: 44:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:1E:5D:A2:92:BD:FB:45:48:18:17:6B:26:02:FE:4A:CB:1B:98:B5 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:81:29:9a:59:a0:2f:f7:83:e2:88:17:57:d6:04:a3:c3:9b: 8c:66:9d:c3:b9:86:ec:ca:10:11:a7:db:59:2b:1b:84:03:8c: 96:3a:14:28:e7:fc:8a:0e:eb:a4:bc:11:d1:5e:45:c3:d7:ef: a0:27:8b:3c:4a:ab:90:4b:2e:6c:3d:93:da:70:74:7a:86:fd: 5d:67:2e:30:98:c9:d7:e5:96:d5:63:24:a3:36:7b:40:5b:0b: f0:62:f2:36:89:ae:12:f5:0b:83:91:96:ea:6a:35:bf:23:1e: 81:1a:20:0d:cb:ef:35:13:05:8d:48:60:78:f1:d3:0f:fd:7c: cd:ed:7a:46:0a:d5:fd:50:a9:b6:00:de:33:f2:b0:23:87:dc: 05:29:60:02:4d:27:00:98:00:d8:e1:24:52:4a:df:18:6c:15: 01:cc:e2:da:9d:96:a5:fc:fe:0d:c9:63:ac:dc:b9:a3:38:3c: 12:fa:1d:ed:a9:a5:3d:8d:f6:58:da:6e:98:c3:3a:e1:3b:bd: 6a:30:99:0f:be:c4:94:19:82:18:c8:f2:29:7e:03:9c:e2:b0: 87:e9:52:ee:08:45:73:a7:87:ac:d7:e0:9b:c6:6b:d2:d8:70: c8:9b:ab:9e:8f:a1:a7:fb:1b:98:ea:55:3f:a6:f4:f2:dd:87: c2:8b:06:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelKB/NhpJYb7gXOGygdE8w5tjM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTA2MjgxMDI3MDlaFw0yNTA3MDExNzUxMDlaMDMxMTAvBgNV BAMTKEZBMUU1REEyOTJCREZCNDU0ODE4MTc2QjI2MDJGRTRBQ0IxQjk4QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDS+HhLLWxU/TYRh+xGMV5c9As VljK/zvVhXJZX+Gxcg41uz/mTt3nlxbXXjbt6ozbWQp8dtLIJeMnkppeY8GhV3hj 0B67GpFJmSArMK0Pb0s41FayYNmSMwXTIxLv/9B5jIFqbIVJv5WktXWE6tc9trht LLp6odxA95ACxkqvHZcBoBS/0O58SM4v3VYgheSQCGy2ICH22eFyqZWfBKjfdTr4 DodoVDYVn4xnbbr9yni1goZ/RoM4NPttC0yC+i+FlxxFCnHPDQ/9pDDRFgzhCQ0/ xPrEk+30KCtvCOYHibV2pc2nX0jtdPnNVGjVOyRtun25mwRy//XgMpTQv0Q3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+h5dopK9+0VIGBdrJgL+SssbmLUwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFaBKZpZoC/3g+KIF1fWBKPDm4xmncO5huzK EBGn21krG4QDjJY6FCjn/IoO66S8EdFeRcPX76AnizxKq5BLLmw9k9pwdHqG/V1n LjCYydflltVjJKM2e0BbC/Bi8jaJrhL1C4ORlupqNb8jHoEaIA3L7zUTBY1IYHjx 0w/9fM3tekYK1f1QqbYA3jPysCOH3AUpYAJNJwCYANjhJFJK3xhsFQHM4tqdlqX8 /g3JY6zcuaM4PBL6He2ppT2N9ljabpjDOuE7vWowmQ++xJQZghjI8il+A5zisIfp Uu4IRXOnh6zX4JvGa9LYcMibq56Poaf7G5jqVT+m9PLdh8KLBss= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:15 2025 by rpki-client