$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: fIFW5fOUaTm0VOQmAUAMNHal6Xhvus4rmT5YRWY1S8Q= Subject key identifier: 42:A9:89:DF:B4:7E:6A:47:01:8C:EC:7D:13:C9:FB:B5:10:6B:40:4D Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 4930F8D479E4EE28830B4DD8B8CD0C9E9C284154 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: F7 Signing time: Wed 06 Aug 2025 08:31:29 +0000 Manifest this update: Wed 06 Aug 2025 08:26:29 +0000 Manifest next update: Sat 09 Aug 2025 14:52:29 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: eTc9aZ+dI9FHSo0V1LiYmYFvG5KY+KzqXD3rJnVyXoY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:30:f8:d4:79:e4:ee:28:83:0b:4d:d8:b8:cd:0c:9e:9c:28:41:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Aug 6 08:26:29 2025 GMT Not After : Aug 9 14:52:29 2025 GMT Subject: CN=42A989DFB47E6A47018CEC7D13C9FBB5106B404D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:ac:c0:b8:e5:25:de:4c:d9:a3:8a:5d:41: c7:41:32:eb:75:83:c1:02:83:a6:3d:33:15:30:fa: 46:3d:e4:14:a6:d0:73:58:12:3e:99:a9:57:c9:24: d1:99:a1:69:c1:b8:69:bc:78:2e:20:25:8e:cd:a1: 2a:1e:37:0c:3e:54:a4:cf:f7:ee:af:47:41:e1:6e: b5:ae:87:6c:f8:25:bd:e9:e2:b9:9c:82:a6:35:8e: 96:7d:54:8a:05:87:36:a7:23:e9:80:73:4f:16:7c: 11:a8:1a:ad:72:0c:84:7a:e8:35:30:48:f9:64:86: 03:21:54:5a:b0:4e:4b:0b:f4:2a:a3:04:af:db:39: dd:5b:a0:31:6f:65:0e:fe:72:3d:86:d1:3b:27:f2: 9f:6d:39:76:0c:0a:0d:79:2c:21:dc:32:6d:6f:c7: 30:a4:0f:35:1d:3e:e5:e9:ef:6b:72:b5:2d:e6:87: 66:89:11:70:34:53:0e:f2:65:54:1b:e2:cd:c5:3b: 29:d9:00:93:0c:5f:86:97:a8:c3:ac:cd:92:80:75: 60:6d:80:fa:3c:74:00:ae:cb:41:9a:2e:1d:7b:97: 21:ff:77:73:a2:1a:97:ba:aa:87:cd:a2:a9:85:d9: 21:24:64:33:c7:00:64:b5:de:40:5f:9d:94:56:5f: 2c:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:A9:89:DF:B4:7E:6A:47:01:8C:EC:7D:13:C9:FB:B5:10:6B:40:4D X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ba:b3:35:c4:ca:98:e9:fa:a1:93:f9:75:aa:e5:de:38:04: 79:64:b2:5e:53:a6:7b:c7:5e:ae:79:c7:0e:25:ce:71:c2:d9: f9:ef:bc:14:4d:13:d5:77:2f:49:48:44:1a:87:e0:a2:c1:7a: 35:4f:b3:25:09:36:2a:05:d4:57:fd:11:13:1c:4b:11:e1:ec: c0:07:a9:68:47:d9:7b:01:35:86:ec:73:18:b9:16:62:37:13: 07:bd:d2:76:55:7c:0f:85:f4:85:da:df:e9:c0:7c:f9:8f:f8: 57:0e:de:c7:47:62:9c:f3:dc:90:44:f2:e1:3c:cc:3e:1c:05: 31:99:48:cf:d0:a8:8e:eb:7d:b4:3d:95:36:ba:99:61:e2:4f: a6:d0:c0:de:7f:aa:f4:d9:8f:b7:fe:a7:2a:70:3d:01:9c:65: ee:4b:e8:e9:54:88:cc:a2:4c:d3:d4:99:ea:be:2b:50:05:70: ca:3b:70:1a:f1:be:5c:88:1d:f8:86:a4:8d:1a:25:4a:31:14: 52:47:44:b9:26:87:41:3a:b5:97:77:cd:54:9e:7b:ee:4b:38: f1:ae:ed:bc:70:17:72:a3:22:ac:db:9a:34:3b:20:42:00:ac: c9:18:ad:57:d2:b8:97:1e:c4:51:c2:0b:3b:70:74:8c:17:4f: 70:29:4f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTD41Hnk7iiDC03YuM0MnpwoQVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTA4MDYwODI2MjlaFw0yNTA4MDkxNDUyMjlaMDMxMTAvBgNV BAMTKDQyQTk4OURGQjQ3RTZBNDcwMThDRUM3RDEzQzlGQkI1MTA2QjQwNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTKzAuOUl3kzZo4pdQcdBMut1 g8ECg6Y9MxUw+kY95BSm0HNYEj6ZqVfJJNGZoWnBuGm8eC4gJY7NoSoeNww+VKTP 9+6vR0HhbrWuh2z4Jb3p4rmcgqY1jpZ9VIoFhzanI+mAc08WfBGoGq1yDIR66DUw SPlkhgMhVFqwTksL9CqjBK/bOd1boDFvZQ7+cj2G0Tsn8p9tOXYMCg15LCHcMm1v xzCkDzUdPuXp72tytS3mh2aJEXA0Uw7yZVQb4s3FOynZAJMMX4aXqMOszZKAdWBt gPo8dACuy0GaLh17lyH/d3OiGpe6qofNoqmF2SEkZDPHAGS13kBfnZRWXyzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQqmJ37R+akcBjOx9E8n7tRBrQE0wHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGG6szXEypjp+qGT+XWq5d44BHlksl5TpnvH Xq55xw4lznHC2fnvvBRNE9V3L0lIRBqH4KLBejVPsyUJNioF1Ff9ERMcSxHh7MAH qWhH2XsBNYbscxi5FmI3Ewe90nZVfA+F9IXa3+nAfPmP+FcO3sdHYpzz3JBE8uE8 zD4cBTGZSM/QqI7rfbQ9lTa6mWHiT6bQwN5/qvTZj7f+pypwPQGcZe5L6OlUiMyi TNPUmeq+K1AFcMo7cBrxvlyIHfiGpI0aJUoxFFJHRLkmh0E6tZd3zVSee+5LOPGu 7bxwF3KjIqzbmjQ7IEIArMkYrVfSuJcexFHCCztwdIwXT3ApT4M= -----END CERTIFICATE-----Generated at Thu Aug 7 11:17:33 2025 by rpki-client