$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: XG+i0d/Jc9NyZq7to6gY3QtsPDlUVepyK2WeK36SD9M= Subject key identifier: A4:3B:3D:42:8E:47:4B:AB:D7:C3:DF:7E:1F:4A:8E:EA:38:CF:ED:91 Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 4CC469721F13C53B2452D5EB919870E8EA7BE47D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: C9 Signing time: Sat 26 Apr 2025 14:01:25 +0000 Manifest this update: Sat 26 Apr 2025 13:56:25 +0000 Manifest next update: Tue 29 Apr 2025 20:01:25 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: nfSeD+CY4r6ztIvzCYshtaxZWY6+Lh9sQ8CFLE8xPT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 20:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:c4:69:72:1f:13:c5:3b:24:52:d5:eb:91:98:70:e8:ea:7b:e4:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Apr 26 13:56:25 2025 GMT Not After : Apr 29 20:01:25 2025 GMT Subject: CN=A43B3D428E474BABD7C3DF7E1F4A8EEA38CFED91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:ee:72:b5:5e:ba:45:35:30:3d:ac:c6:92:f0: 86:4b:1d:08:07:c8:28:32:96:24:65:d4:e8:a4:89: a5:85:9d:9c:10:9e:4c:03:c2:06:a8:3a:1b:6f:b0: 75:70:27:6a:a3:d3:99:ce:92:92:19:4f:dc:5b:2b: b5:1d:b3:14:00:03:a7:aa:0e:93:31:5c:4e:dd:01: 10:7f:79:c8:63:f0:52:10:d4:a3:e2:23:80:b1:57: 26:9a:e7:08:b7:9e:65:94:c0:b6:b6:02:8e:f3:e8: 77:c9:9e:56:5f:04:86:08:11:2b:9a:21:f1:32:ca: 40:32:4a:04:1e:c6:89:a4:93:12:b8:f9:f4:ab:c6: 22:fc:a4:3a:41:f9:4e:9b:f0:4f:70:06:1e:cc:12: 2b:10:b3:37:d6:a6:d4:93:f9:27:42:2b:cd:13:e9: e9:ec:a6:a7:e4:81:b9:a0:e2:e3:a1:59:9f:ca:90: 6f:aa:69:9d:db:5c:c8:10:c7:a1:18:6c:7f:a9:c6: 09:9f:29:05:8d:88:6b:f1:79:c0:a8:8a:1c:1a:b7: af:14:28:12:b5:33:5f:61:49:3f:75:d7:59:df:da: 4c:30:1b:84:72:a9:0c:ae:64:dc:06:04:4c:58:ca: 9a:59:cf:87:a7:41:bf:e4:71:a8:bd:ee:d9:9a:02: c1:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:3B:3D:42:8E:47:4B:AB:D7:C3:DF:7E:1F:4A:8E:EA:38:CF:ED:91 X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:56:e6:e8:d5:22:2d:ee:0d:06:bb:c1:c5:c7:b6:a7:64:10: fa:23:cf:6e:d0:38:6e:e5:31:f1:9b:dc:cc:37:01:2c:96:8e: a5:dd:1c:6c:d5:1e:46:f2:2d:28:b2:c6:28:71:ab:d4:94:e1: 7c:ca:b4:ad:52:39:84:c3:46:a1:88:51:64:b5:86:13:b9:2c: fb:0b:8d:22:7d:56:eb:fe:9c:3a:f7:c7:82:20:d0:79:2d:83: c4:d7:5b:e8:94:af:66:4a:95:34:e8:80:dd:e2:07:0a:d8:3d: 36:c2:5d:53:37:29:03:65:8b:a7:0f:11:97:45:6a:4d:e9:03: af:43:8b:f0:c1:4b:38:79:62:c7:d5:8f:2e:50:72:44:3b:45: 95:1a:87:d1:58:b9:6c:ed:b0:50:e0:2f:d4:52:39:3b:4c:33: 29:9d:a6:cb:23:b7:03:6b:35:13:48:c3:57:f4:67:2c:23:c8: 57:2c:20:9d:4a:5a:79:b7:a6:cb:c8:79:8f:92:13:c9:dd:c2: f0:f5:bd:1f:07:ee:81:36:22:cc:3f:db:ad:44:b9:0d:34:7b: fe:aa:21:62:fe:37:ae:e3:c0:2d:36:5f:fb:a6:b5:ef:b1:9a: 61:14:43:53:76:9e:db:da:59:98:4a:57:8f:bf:b0:f9:74:11: 63:4d:27:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTMRpch8TxTskUtXrkZhw6Op75H0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTA0MjYxMzU2MjVaFw0yNTA0MjkyMDAxMjVaMDMxMTAvBgNV BAMTKEE0M0IzRDQyOEU0NzRCQUJEN0MzREY3RTFGNEE4RUVBMzhDRkVEOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7nK1XrpFNTA9rMaS8IZLHQgH yCgyliRl1OikiaWFnZwQnkwDwgaoOhtvsHVwJ2qj05nOkpIZT9xbK7UdsxQAA6eq DpMxXE7dARB/echj8FIQ1KPiI4CxVyaa5wi3nmWUwLa2Ao7z6HfJnlZfBIYIESua IfEyykAySgQexomkkxK4+fSrxiL8pDpB+U6b8E9wBh7MEisQszfWptST+SdCK80T 6enspqfkgbmg4uOhWZ/KkG+qaZ3bXMgQx6EYbH+pxgmfKQWNiGvxecCoihwat68U KBK1M19hST9111nf2kwwG4RyqQyuZNwGBExYyppZz4enQb/kcai97tmaAsGrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDs9Qo5HS6vXw99+H0qO6jjP7ZEwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENW5ujVIi3uDQa7wcXHtqdkEPojz27QOG7l MfGb3Mw3ASyWjqXdHGzVHkbyLSiyxihxq9SU4XzKtK1SOYTDRqGIUWS1hhO5LPsL jSJ9Vuv+nDr3x4Ig0Hktg8TXW+iUr2ZKlTTogN3iBwrYPTbCXVM3KQNli6cPEZdF ak3pA69Di/DBSzh5YsfVjy5QckQ7RZUah9FYuWztsFDgL9RSOTtMMymdpssjtwNr NRNIw1f0ZywjyFcsIJ1KWnm3psvIeY+SE8ndwvD1vR8H7oE2Isw/261EuQ00e/6q IWL+N67jwC02X/umte+xmmEUQ1N2ntvaWZhKV4+/sPl0EWNNJ5U= -----END CERTIFICATE-----Generated at Mon Apr 28 02:10:22 2025 by rpki-client