$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: MM5SvAJePNL7eYknOlPzcUeMcFTxZCc1p4aXIbvc9vU= Subject key identifier: B6:84:FC:72:6A:F7:A5:FB:10:2F:52:E5:65:2C:58:33:88:25:B7:0C Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 3544990B5D47D71C295C89C8CE8BE74CC4726647 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 0194 Signing time: Sun 20 Jul 2025 08:42:11 +0000 Manifest this update: Sun 20 Jul 2025 08:37:11 +0000 Manifest next update: Wed 23 Jul 2025 16:02:11 +0000 Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: IVJ0b0O0UGWFb8DQACwVWHuzImwsy85XwTmxoeLCF2Q=) 2: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: wG7x2uuIaCom9Q8si7ydv1/RWh7Y3Cs7i0jSu0WzttE=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: hJb47Cih3yK2ughpevnMJU/IHmzWp3j4uIzblFeg3/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:44:99:0b:5d:47:d7:1c:29:5c:89:c8:ce:8b:e7:4c:c4:72:66:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Jul 20 08:37:11 2025 GMT Not After : Jul 23 16:02:11 2025 GMT Subject: CN=B684FC726AF7A5FB102F52E5652C58338825B70C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:76:17:cc:f8:10:d8:a2:29:06:35:4e:22:e1: b4:7a:49:32:cc:1b:e2:2a:cd:a0:fc:02:07:aa:1d: b8:1d:42:67:17:d8:71:11:05:32:49:87:63:ac:0f: a3:9f:89:73:9a:ff:49:2e:77:9b:3b:1e:f9:1a:56: c5:88:26:d4:6a:69:28:90:6b:77:08:f6:fb:82:cb: 4a:6b:b5:46:6a:8d:f3:c4:da:5c:b4:89:fc:9a:67: 2a:57:e0:a6:3b:0c:d4:79:44:e5:71:b8:86:ea:39: 77:e7:c8:0f:f1:fb:6b:5c:48:02:d5:cc:38:b5:72: 67:d2:91:93:f1:39:de:1c:d1:85:52:60:93:56:e5: ed:fc:f1:b1:6d:63:af:16:72:66:8a:63:20:0b:89: 23:e4:cc:a6:21:a0:19:58:26:22:39:85:a8:9b:c1: 01:08:7e:40:cc:2d:00:39:b0:5a:a8:a5:95:f2:37: 18:81:de:97:e4:95:b6:a6:72:6a:37:d1:48:15:af: 16:45:b9:ac:af:95:37:62:02:a1:9c:bb:d1:45:a5: 5f:db:a1:3f:e2:9b:6a:ce:67:f7:e0:2e:fd:58:2b: cd:31:38:21:12:65:84:e9:68:92:15:14:eb:d0:5a: 21:e0:6e:27:c7:07:4d:f5:85:9c:15:54:aa:c3:b6: 32:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:84:FC:72:6A:F7:A5:FB:10:2F:52:E5:65:2C:58:33:88:25:B7:0C X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:d1:0c:ce:39:bb:21:fd:77:17:c6:70:34:57:59:ff:dd:7d: 90:34:81:af:52:15:de:3f:38:8a:ae:b8:4d:1b:5f:85:6d:e1: 6f:d4:1d:9d:d7:fc:ef:f3:65:86:45:7c:1f:e7:cd:61:f2:92: 35:0f:fb:4d:67:22:ad:a1:c2:9b:9e:a7:60:f9:f2:d6:38:3f: ab:0b:f6:37:22:60:3b:5a:56:a4:01:8e:19:bf:a2:58:b0:99: 9c:92:40:d6:26:d0:4d:1b:69:18:cb:a6:90:68:04:e3:f9:d5: cd:6e:1c:f7:ab:83:2f:66:55:bb:12:03:eb:42:5b:d7:ac:8b: 0d:ba:0b:27:6a:8e:8a:0d:a1:d2:6c:70:0d:14:7e:41:6a:a9: 3f:cb:88:99:40:7a:60:a1:a8:c3:d9:c2:ee:e1:b2:e1:5b:ee: 81:1c:11:7b:30:10:b7:25:ee:aa:41:a2:48:4d:61:f5:9a:49: 69:90:81:52:7f:67:3d:30:a6:87:56:49:03:f2:6d:bf:6c:4d: d8:73:8b:19:06:55:09:89:9d:e8:b0:e4:d7:b4:69:3f:e5:b5: 19:97:04:89:93:94:24:bb:e8:37:76:88:20:e2:b8:e8:0d:c6: 12:9b:30:af:ea:67:66:7c:a0:e9:37:73:a9:84:dc:1a:9d:28: 60:bd:54:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNUSZC11H1xwpXInIzovnTMRyZkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTA3MjAwODM3MTFaFw0yNTA3MjMxNjAyMTFaMDMxMTAvBgNV BAMTKEI2ODRGQzcyNkFGN0E1RkIxMDJGNTJFNTY1MkM1ODMzODgyNUI3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMdhfM+BDYoikGNU4i4bR6STLM G+IqzaD8AgeqHbgdQmcX2HERBTJJh2OsD6OfiXOa/0kud5s7HvkaVsWIJtRqaSiQ a3cI9vuCy0prtUZqjfPE2ly0ifyaZypX4KY7DNR5ROVxuIbqOXfnyA/x+2tcSALV zDi1cmfSkZPxOd4c0YVSYJNW5e388bFtY68WcmaKYyALiSPkzKYhoBlYJiI5haib wQEIfkDMLQA5sFqopZXyNxiB3pfklbamcmo30UgVrxZFuayvlTdiAqGcu9FFpV/b oT/im2rOZ/fgLv1YK80xOCESZYTpaJIVFOvQWiHgbifHB031hZwVVKrDtjLLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtoT8cmr3pfsQL1LlZSxYM4gltwwwHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7RDM45uyH9dxfGcDRXWf/dfZA0ga9SFd4/ OIquuE0bX4Vt4W/UHZ3X/O/zZYZFfB/nzWHykjUP+01nIq2hwpuep2D58tY4P6sL 9jciYDtaVqQBjhm/oliwmZySQNYm0E0baRjLppBoBOP51c1uHPergy9mVbsSA+tC W9esiw26CydqjooNodJscA0UfkFqqT/LiJlAemChqMPZwu7hsuFb7oEcEXswELcl 7qpBokhNYfWaSWmQgVJ/Zz0wpodWSQPybb9sTdhzixkGVQmJneiw5Ne0aT/ltRmX BImTlCS76Dd2iCDiuOgNxhKbMK/qZ2Z8oOk3c6mE3BqdKGC9VPQ= -----END CERTIFICATE-----Generated at Mon Jul 21 12:43:33 2025 by rpki-client