$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: gkRyGLL340IR1Gr8lWitZIUH7/eY5XVraP++u9asR1o= Subject key identifier: 9B:1D:03:E7:28:2E:09:9A:10:75:DB:45:94:FC:95:94:78:03:47:55 Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 6E83C7E9090683EC7EA1B9B4661343C394763463 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: F2 Signing time: Fri 25 Jul 2025 21:01:29 +0000 Manifest this update: Fri 25 Jul 2025 20:56:29 +0000 Manifest next update: Tue 29 Jul 2025 04:47:29 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: CcH5zrcPXiqpas1hsf1+yg31YpzblmFk2LSV9npytdQ=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: d282dl3WFTA+eORVbU7KQGzeZpFeSErJQaRTXA2Bg78=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 04:47:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:83:c7:e9:09:06:83:ec:7e:a1:b9:b4:66:13:43:c3:94:76:34:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Jul 25 20:56:29 2025 GMT Not After : Jul 29 04:47:29 2025 GMT Subject: CN=9B1D03E7282E099A1075DB4594FC959478034755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:d3:63:b9:86:b6:81:61:c8:16:a1:b4:bc:f4: a4:e3:47:79:a0:49:d6:23:d3:ed:ca:f7:da:ef:2c: 69:fc:12:3d:73:99:43:c4:aa:51:76:15:6b:82:a1: a7:e9:c1:9e:2f:c1:26:0d:5b:e4:09:d6:d2:0d:a8: db:b1:ce:52:72:6f:5e:ff:f5:6f:05:83:89:46:9c: 4e:48:7a:b5:56:39:fa:0b:34:4d:49:eb:a8:7a:3c: 3e:ff:a4:06:bd:20:84:45:25:6d:eb:a7:38:6b:e7: c7:b4:47:a8:40:79:f2:f3:34:36:4e:8d:29:23:77: 94:af:d1:4e:74:b8:51:1a:8a:78:17:29:8a:0c:bf: 23:f3:7c:c3:df:9d:c6:d3:10:f6:7e:cc:cd:65:b9: 9f:e8:c9:8e:e7:ad:51:7c:59:50:0d:e8:71:3d:71: 7e:4b:43:fb:4f:83:ab:97:28:82:eb:c1:77:71:76: 04:56:e4:9b:5a:0f:8c:20:95:a8:ce:01:72:3c:f5: 25:71:4e:c6:7a:a6:e4:12:b9:a4:77:52:af:33:76: 0b:16:d1:50:09:52:29:97:b8:9a:d5:65:7f:a5:47: 9e:f0:e6:6a:2c:af:bd:30:fc:43:be:64:62:fe:f1: c6:1d:1d:3e:66:ea:a3:18:33:a5:a9:27:25:86:e0: e7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:1D:03:E7:28:2E:09:9A:10:75:DB:45:94:FC:95:94:78:03:47:55 X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:50:3d:8d:a8:fa:18:ff:c1:b8:de:51:99:be:7a:66:94:28: 41:dc:ee:3b:4c:da:9f:bb:43:cd:f4:ad:f1:e9:ee:40:a1:26: 40:a0:82:14:95:2f:19:0e:c0:d2:aa:80:7b:5b:ef:da:dd:e0: 01:cc:db:c5:b0:ee:94:17:34:09:7b:88:84:ed:eb:1e:04:2d: dd:60:05:b6:d5:49:21:ae:55:b5:0e:71:1e:3d:d0:34:c2:5c: 90:38:12:e0:e3:4c:8f:39:28:f1:cb:aa:63:25:91:c2:83:19: c2:5c:8a:93:b3:5a:aa:c8:40:21:c0:05:3a:33:3f:07:95:e9: b4:97:78:76:02:81:70:31:8a:eb:d4:d8:1b:64:eb:6e:e2:16: c7:1e:22:54:62:79:99:bf:42:f7:b1:af:be:31:e5:10:6a:6f: b6:b2:22:30:e2:bd:9c:55:4f:ec:72:80:49:58:96:50:3d:ba: 2b:46:84:77:23:a6:fb:85:50:7b:23:d4:8f:17:ea:fb:03:f6: 6e:90:60:45:e9:76:0a:cf:d5:e3:e8:3b:d9:cd:68:b0:55:14: e8:cf:1a:0b:95:83:7b:34:07:9a:fa:43:82:9f:b8:49:87:7b: 83:c5:52:b1:d8:f5:79:a3:04:f3:74:0b:0c:b9:e3:9a:78:1d: 38:8e:2a:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboPH6QkGg+x+obm0ZhNDw5R2NGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNTA3MjUyMDU2MjlaFw0yNTA3MjkwNDQ3MjlaMDMxMTAvBgNV BAMTKDlCMUQwM0U3MjgyRTA5OUExMDc1REI0NTk0RkM5NTk0NzgwMzQ3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz02O5hraBYcgWobS89KTjR3mg SdYj0+3K99rvLGn8Ej1zmUPEqlF2FWuCoafpwZ4vwSYNW+QJ1tINqNuxzlJyb17/ 9W8Fg4lGnE5IerVWOfoLNE1J66h6PD7/pAa9IIRFJW3rpzhr58e0R6hAefLzNDZO jSkjd5Sv0U50uFEaingXKYoMvyPzfMPfncbTEPZ+zM1luZ/oyY7nrVF8WVAN6HE9 cX5LQ/tPg6uXKILrwXdxdgRW5JtaD4wglajOAXI89SVxTsZ6puQSuaR3Uq8zdgsW 0VAJUimXuJrVZX+lR57w5mosr70w/EO+ZGL+8cYdHT5m6qMYM6WpJyWG4OeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmx0D5yguCZoQddtFlPyVlHgDR1UwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOFQPY2o+hj/wbjeUZm+emaUKEHc7jtM2p+7 Q830rfHp7kChJkCgghSVLxkOwNKqgHtb79rd4AHM28Ww7pQXNAl7iITt6x4ELd1g BbbVSSGuVbUOcR490DTCXJA4EuDjTI85KPHLqmMlkcKDGcJcipOzWqrIQCHABToz PweV6bSXeHYCgXAxiuvU2Btk627iFsceIlRieZm/Qvexr74x5RBqb7ayIjDivZxV T+xygElYllA9uitGhHcjpvuFUHsj1I8X6vsD9m6QYEXpdgrP1ePoO9nNaLBVFOjP GguVg3s0B5r6Q4KfuEmHe4PFUrHY9XmjBPN0Cwy545p4HTiOKt0= -----END CERTIFICATE-----Generated at Sat Jul 26 20:05:46 2025 by rpki-client