$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: 5jj/JmrXadF/SXlDjHuODq7Ww8K77kIlN+i6oiJXEpo= Subject key identifier: DA:F7:1D:4A:B3:62:1C:43:9B:F2:77:AF:3E:B8:61:C2:82:4D:26:D9 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 2C2EB67C36A2C37AEBD622804B9B9486BF6D199F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 0151 Signing time: Tue 17 Jun 2025 02:21:46 +0000 Manifest this update: Tue 17 Jun 2025 02:16:46 +0000 Manifest next update: Fri 20 Jun 2025 11:57:46 +0000 Files and hashes: 1: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) 2: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 3: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 4: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) 5: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 7: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: rKvp3+WSGBPUIIn+N5fw1ShTSXXz/nTFFelvawokOKI=) 8: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 9: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 11:57:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:2e:b6:7c:36:a2:c3:7a:eb:d6:22:80:4b:9b:94:86:bf:6d:19:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Jun 17 02:16:46 2025 GMT Not After : Jun 20 11:57:46 2025 GMT Subject: CN=DAF71D4AB3621C439BF277AF3EB861C2824D26D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:57:ef:6d:1a:8b:e9:a0:7d:26:5f:23:7b:d6: 6a:c9:1f:c1:39:6b:91:5a:23:84:7f:a6:f4:53:74: fb:24:79:3c:b1:74:39:2a:e0:a9:66:6e:b9:81:68: 93:87:1b:50:6f:b4:5d:19:4c:ca:de:33:3e:5c:71: ed:e0:a6:5f:fd:b2:af:a9:eb:a3:f1:89:65:45:6b: 3b:ce:ea:24:3d:30:ff:a0:91:fa:f8:20:8e:2c:3a: 0c:88:68:df:f9:aa:24:de:e7:50:ef:b2:0b:65:41: b5:87:ea:f1:2a:38:66:9a:86:14:53:75:ab:92:ff: 86:21:73:01:88:cf:73:71:17:b4:87:d3:26:ca:8a: 68:1a:ed:04:f7:28:6a:fc:06:3c:d9:b5:30:8d:dd: 60:8b:03:14:f7:d8:67:b8:97:98:14:b5:b4:58:af: 8e:f0:e6:36:e2:83:ce:16:25:b3:90:6d:86:b3:41: 54:e6:2c:87:4c:76:fe:6f:3b:4f:3a:84:c7:25:74: bf:9b:b5:87:dc:90:0a:78:24:7d:11:e3:60:ff:38: f5:dd:19:9f:a7:59:0d:d7:3c:3d:bc:19:00:43:70: 1b:f2:dd:80:43:ea:7d:17:5d:e5:31:e5:c5:98:a4: bf:ea:93:30:ed:fc:1b:18:b1:fa:26:9f:94:af:4a: 75:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:F7:1D:4A:B3:62:1C:43:9B:F2:77:AF:3E:B8:61:C2:82:4D:26:D9 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:fe:7b:f5:b7:a3:65:4c:7d:a0:84:54:e8:0e:36:0d:a9:54: 93:af:0a:7d:d0:eb:9d:4b:5a:bf:0a:3d:b4:a6:c1:6f:d1:3f: 7d:32:0e:84:d5:a5:22:89:36:4d:50:7a:0d:41:6d:da:e9:eb: a6:18:59:83:27:5b:fe:b4:9d:9b:90:5e:58:3d:a6:ab:13:34: 57:d4:77:20:52:6f:c9:27:30:3a:e5:49:e1:01:5f:35:3b:f9: b0:ea:3c:84:4d:71:08:c6:da:5a:21:15:6f:e3:95:eb:4f:57: 11:99:7b:36:fb:c5:64:5a:b7:0a:f3:23:44:c4:c8:dc:eb:9d: 9d:32:0b:f5:a3:86:26:fa:44:99:85:ad:73:7e:29:c6:7f:b1: ed:0f:6b:03:ab:71:9a:2f:e4:6d:94:3f:2a:c6:10:3f:b2:28: 79:ce:88:f5:16:51:18:7c:7e:52:06:ac:9b:37:9f:b7:05:27: ea:c5:d1:e0:1a:3b:98:69:e8:1c:f1:24:23:1b:73:fe:62:55: 6a:c0:01:51:0e:37:09:36:ed:5b:4e:70:38:9d:a0:6d:3c:0f: bc:7c:c5:a3:11:7a:f5:63:98:9b:96:96:06:ce:10:45:4e:2b: 5c:b5:a4:5e:e4:01:f5:6c:90:f3:f8:bf:72:18:77:a2:5d:13: 83:20:e8:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULC62fDaiw3rr1iKAS5uUhr9tGZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTA2MTcwMjE2NDZaFw0yNTA2MjAxMTU3NDZaMDMxMTAvBgNV BAMTKERBRjcxRDRBQjM2MjFDNDM5QkYyNzdBRjNFQjg2MUMyODI0RDI2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLV+9tGovpoH0mXyN71mrJH8E5 a5FaI4R/pvRTdPskeTyxdDkq4KlmbrmBaJOHG1BvtF0ZTMreMz5cce3gpl/9sq+p 66PxiWVFazvO6iQ9MP+gkfr4II4sOgyIaN/5qiTe51DvsgtlQbWH6vEqOGaahhRT dauS/4YhcwGIz3NxF7SH0ybKimga7QT3KGr8BjzZtTCN3WCLAxT32Ge4l5gUtbRY r47w5jbig84WJbOQbYazQVTmLIdMdv5vO086hMcldL+btYfckAp4JH0R42D/OPXd GZ+nWQ3XPD28GQBDcBvy3YBD6n0XXeUx5cWYpL/qkzDt/BsYsfomn5SvSnVPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2vcdSrNiHEOb8nevPrhhwoJNJtkwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACr+e/W3o2VMfaCEVOgONg2pVJOvCn3Q651L Wr8KPbSmwW/RP30yDoTVpSKJNk1Qeg1Bbdrp66YYWYMnW/60nZuQXlg9pqsTNFfU dyBSb8knMDrlSeEBXzU7+bDqPIRNcQjG2lohFW/jletPVxGZezb7xWRatwrzI0TE yNzrnZ0yC/Wjhib6RJmFrXN+KcZ/se0PawOrcZov5G2UPyrGED+yKHnOiPUWURh8 flIGrJs3n7cFJ+rF0eAaO5hp6BzxJCMbc/5iVWrAAVEONwk27VtOcDidoG08D7x8 xaMRevVjmJuWlgbOEEVOK1y1pF7kAfVskPP4v3IYd6JdE4Mg6IE= -----END CERTIFICATE-----Generated at Wed Jun 18 13:31:34 2025 by rpki-client