$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: mczLOEc13SgzIJJgnausJYzBcliesr4FMrcP1aY/8o4= Subject key identifier: F7:7B:C3:6A:C4:90:06:BE:2C:D3:3B:0B:5A:20:A7:27:CD:7E:F6:17 Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 2612B3166389CB0B0F6E4163FD68A649099CC14C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 017D Signing time: Wed 06 Aug 2025 03:12:14 +0000 Manifest this update: Wed 06 Aug 2025 03:07:13 +0000 Manifest next update: Sat 09 Aug 2025 08:33:13 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: gWA9/S/yb5IxtGsFan9XsqsCm+aC/RHn593MvAvyV3I=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:12:b3:16:63:89:cb:0b:0f:6e:41:63:fd:68:a6:49:09:9c:c1:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Aug 6 03:07:13 2025 GMT Not After : Aug 9 08:33:13 2025 GMT Subject: CN=F77BC36AC49006BE2CD33B0B5A20A727CD7EF617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:69:93:d1:a2:3f:d4:56:08:fd:90:fe:f6:31: fd:df:dc:e9:3e:01:f5:cd:ec:9a:9c:64:b7:7c:5d: b9:15:a4:af:6e:d1:b4:1e:70:89:30:08:90:2a:11: d3:32:fa:4f:82:cb:ae:db:be:9e:19:5a:f9:3f:75: 68:e5:77:eb:98:b7:84:2a:e2:d2:88:f5:f7:ea:3d: 49:99:91:30:8d:29:1d:26:96:1d:fe:94:66:c3:68: 35:28:91:a1:70:81:83:e7:64:77:d1:04:24:d5:66: ba:6c:ec:2c:68:3d:04:2e:18:d3:4a:63:d1:cd:24: cd:28:e5:b7:e3:3c:b9:c8:28:4b:5c:06:75:3d:79: b3:47:d4:0f:c5:bb:87:97:b6:dc:3a:b2:63:b3:d8: 9e:5d:38:7e:c0:36:68:d7:3a:13:a7:a8:b6:a9:d2: 2d:41:5f:bf:82:c8:7c:80:5d:35:c8:c1:14:e5:d8: 0b:b2:18:9b:3a:c4:0a:d6:2c:ba:5a:a5:ed:a5:a8: f2:c1:32:00:77:9d:f5:99:c8:c1:9a:5a:20:1f:3d: 80:11:d5:8c:64:4b:8f:d1:15:2b:47:df:5f:00:9d: 34:c5:f4:a7:5e:fa:f8:97:45:a7:f2:4c:2d:f2:ff: 7c:5d:21:5d:2a:0d:43:08:1c:25:88:9e:0a:36:65: 74:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:7B:C3:6A:C4:90:06:BE:2C:D3:3B:0B:5A:20:A7:27:CD:7E:F6:17 X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:aa:25:16:17:78:2e:c2:59:6a:ec:f3:8a:07:f3:3b:b7:cd: 01:6d:6d:f3:00:34:76:f5:f8:4f:ab:e0:c4:bd:7f:a2:57:82: 77:b5:6c:87:50:f7:f3:e3:3a:a2:96:69:9a:64:07:aa:67:65: c1:27:51:09:a1:c0:12:5a:d1:80:2b:6b:0d:2e:95:c5:35:a7: 6d:be:95:63:63:3d:c1:cf:c0:41:f4:52:52:f4:a8:bb:ad:ed: 63:84:06:bf:6f:1f:87:c0:15:7f:c3:f2:fe:e0:5f:37:1c:6a: b3:bd:ef:65:01:6f:f1:77:56:d0:62:ea:77:65:38:4d:11:d2: b3:a0:97:62:73:33:d8:22:50:58:8c:9d:e8:da:09:bf:dd:0c: 1d:39:c2:76:45:d9:25:a2:5a:04:ee:44:4b:d2:99:88:83:9d: c0:ba:2f:92:b7:a7:3a:c5:1a:1a:97:04:66:ba:02:48:41:ff: 10:3d:db:ce:4b:4e:d1:c2:00:4c:e0:1c:c7:d4:78:54:72:9e: d5:eb:03:7a:10:dd:f1:a9:6d:59:21:c6:dd:cf:68:4a:08:90: 31:60:9d:db:c9:c1:df:85:73:ba:58:0b:9b:83:06:4c:e2:53: ae:aa:67:cd:aa:2b:9a:75:e8:cd:b2:9d:fc:ff:67:88:00:1e: a7:e9:2e:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhKzFmOJywsPbkFj/WimSQmcwUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTA4MDYwMzA3MTNaFw0yNTA4MDkwODMzMTNaMDMxMTAvBgNV BAMTKEY3N0JDMzZBQzQ5MDA2QkUyQ0QzM0IwQjVBMjBBNzI3Q0Q3RUY2MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUaZPRoj/UVgj9kP72Mf3f3Ok+ AfXN7JqcZLd8XbkVpK9u0bQecIkwCJAqEdMy+k+Cy67bvp4ZWvk/dWjld+uYt4Qq 4tKI9ffqPUmZkTCNKR0mlh3+lGbDaDUokaFwgYPnZHfRBCTVZrps7CxoPQQuGNNK Y9HNJM0o5bfjPLnIKEtcBnU9ebNH1A/Fu4eXttw6smOz2J5dOH7ANmjXOhOnqLap 0i1BX7+CyHyAXTXIwRTl2AuyGJs6xArWLLpape2lqPLBMgB3nfWZyMGaWiAfPYAR 1YxkS4/RFStH318AnTTF9Kde+viXRafyTC3y/3xdIV0qDUMIHCWIngo2ZXQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93vDasSQBr4s0zsLWiCnJ81+9hcwHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGqJRYXeC7CWWrs84oH8zu3zQFtbfMANHb1 +E+r4MS9f6JXgne1bIdQ9/PjOqKWaZpkB6pnZcEnUQmhwBJa0YAraw0ulcU1p22+ lWNjPcHPwEH0UlL0qLut7WOEBr9vH4fAFX/D8v7gXzccarO972UBb/F3VtBi6ndl OE0R0rOgl2JzM9giUFiMnejaCb/dDB05wnZF2SWiWgTuREvSmYiDncC6L5K3pzrF GhqXBGa6AkhB/xA9285LTtHCAEzgHMfUeFRyntXrA3oQ3fGpbVkhxt3PaEoIkDFg ndvJwd+Fc7pYC5uDBkziU66qZ82qK5p16M2ynfz/Z4gAHqfpLs4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:54 2025 by rpki-client