$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: VuNofhCC2AIoqR1CPoCjY1V4KL7nn2j7kxYi7G3zqQ4= Subject key identifier: 64:3B:DC:1A:F2:8B:C0:F7:87:72:2D:F6:B5:F5:27:5C:7E:EB:72:8C Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 5F1AF1139BDA9DA258A369EA5F354AFB3472092C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 0190 Signing time: Tue 04 Nov 2025 20:51:51 +0000 Manifest this update: Tue 04 Nov 2025 20:46:51 +0000 Manifest next update: Sat 08 Nov 2025 01:02:51 +0000 Files and hashes: 1: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: R9kR9ngXCejQmYTZWygfJu0UGLeY1mXEfiEiD9raybY=) 2: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) 3: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 4: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 5: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 6: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 7: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 8: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 9: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 01:02:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:1a:f1:13:9b:da:9d:a2:58:a3:69:ea:5f:35:4a:fb:34:72:09:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Nov 4 20:46:51 2025 GMT Not After : Nov 8 01:02:51 2025 GMT Subject: CN=643BDC1AF28BC0F787722DF6B5F5275C7EEB728C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fa:92:b1:84:61:af:63:c7:85:4c:78:04:61: c2:40:90:71:64:c5:73:d2:14:37:ac:3a:49:60:39: cc:3a:d3:5e:82:a0:fb:a8:af:83:f2:49:2b:05:4c: b8:48:ae:a9:b5:cd:bd:68:c1:fc:4e:45:d2:87:79: 9f:80:d5:bc:82:e2:ee:66:02:b4:d0:19:ec:f4:a8: 57:a3:b9:d7:2d:54:d3:b8:d9:9c:09:a6:df:a8:bf: ad:27:11:93:b3:fb:7f:f3:f3:96:eb:16:a6:76:66: c0:19:bc:a8:fc:ec:a8:eb:0a:f2:1c:e9:dc:25:31: cc:a1:da:89:3b:d1:86:c4:94:80:1b:3a:ad:f0:60: 36:0c:9e:ef:b6:ae:50:4c:3e:78:7c:b0:7d:ad:7d: d6:b9:f9:75:e1:3b:2b:ef:11:97:8b:5b:57:0a:6d: 6d:af:31:7c:5e:88:3a:10:10:9f:68:cb:15:58:e7: 5c:5f:9f:30:e6:93:ca:6b:07:c9:4f:6a:5e:3c:17: 5a:af:9a:ae:2f:ca:40:86:57:9a:8a:59:7e:d3:08: 00:c3:f5:2f:2b:7f:c6:6d:a8:a9:e3:98:24:31:47: 87:fd:d7:93:83:b7:4b:81:67:96:80:a3:98:0d:6e: 52:c9:75:0e:82:09:26:f9:79:44:fb:98:a5:5e:69: 24:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:3B:DC:1A:F2:8B:C0:F7:87:72:2D:F6:B5:F5:27:5C:7E:EB:72:8C X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c0:e4:1a:a3:4b:b7:2a:12:74:10:e5:4f:73:14:87:fc:e9: 49:4f:28:d2:a4:96:ef:fa:f5:7f:14:4c:50:8e:1e:b1:bc:45: 05:d5:3d:5b:5d:7b:29:1e:c1:3d:19:9d:88:00:6d:8e:ab:71: 3d:f8:5a:23:cb:0a:82:3a:f0:b2:a1:07:e8:7f:85:41:8c:19: ae:45:68:99:47:d8:89:8c:00:1d:3d:80:8a:d7:10:65:03:68: 31:d8:4e:7d:33:6d:28:5a:61:62:9c:09:93:fd:93:a1:5d:1d: ac:97:98:de:3a:a1:3f:bb:8e:01:89:b5:f7:6f:29:63:7b:81: e2:4b:ae:e0:d6:14:c6:20:a9:67:27:9a:6d:49:a5:46:3a:6e: 1b:0c:b3:98:22:eb:be:10:ef:66:c5:f3:32:36:5f:59:d8:d4: bf:32:ec:dc:86:f0:7e:37:98:02:7a:86:72:12:a1:12:6d:16: 97:e0:73:1a:f5:52:8b:a4:00:49:89:06:f1:84:9e:31:ff:0f: ea:8b:24:0a:fc:34:04:71:57:4d:e1:dc:6d:d9:73:9d:74:19: d8:ca:fc:30:83:92:ae:ff:f3:f1:9d:c6:ff:74:14:b8:a7:61: 13:c2:dd:14:84:16:36:21:18:a2:40:3d:b7:80:a7:83:13:f7: f1:e9:51:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxrxE5vanaJYo2nqXzVK+zRyCSwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTExMDQyMDQ2NTFaFw0yNTExMDgwMTAyNTFaMDMxMTAvBgNV BAMTKDY0M0JEQzFBRjI4QkMwRjc4NzcyMkRGNkI1RjUyNzVDN0VFQjcyOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv+pKxhGGvY8eFTHgEYcJAkHFk xXPSFDesOklgOcw6016CoPuor4PySSsFTLhIrqm1zb1owfxORdKHeZ+A1byC4u5m ArTQGez0qFejudctVNO42ZwJpt+ov60nEZOz+3/z85brFqZ2ZsAZvKj87KjrCvIc 6dwlMcyh2ok70YbElIAbOq3wYDYMnu+2rlBMPnh8sH2tfda5+XXhOyvvEZeLW1cK bW2vMXxeiDoQEJ9oyxVY51xfnzDmk8prB8lPal48F1qvmq4vykCGV5qKWX7TCADD 9S8rf8ZtqKnjmCQxR4f915ODt0uBZ5aAo5gNblLJdQ6CCSb5eUT7mKVeaST7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZDvcGvKLwPeHci32tfUnXH7rcowwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLA5BqjS7cqEnQQ5U9zFIf86UlPKNKklu/6 9X8UTFCOHrG8RQXVPVtdeykewT0ZnYgAbY6rcT34WiPLCoI68LKhB+h/hUGMGa5F aJlH2ImMAB09gIrXEGUDaDHYTn0zbShaYWKcCZP9k6FdHayXmN46oT+7jgGJtfdv KWN7geJLruDWFMYgqWcnmm1JpUY6bhsMs5gi674Q72bF8zI2X1nY1L8y7NyG8H43 mAJ6hnISoRJtFpfgcxr1UoukAEmJBvGEnjH/D+qLJAr8NARxV03h3G3Zc510GdjK /DCDkq7/8/Gdxv90FLinYRPC3RSEFjYhGKJAPbeAp4MT9/HpUW4= -----END CERTIFICATE-----Generated at Wed Nov 5 20:05:39 2025 by rpki-client