$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json) Hash identifier: Zw0oaKx90Eudcz2wZloCUbKvtU3l6VyUZcp1n/Tm55A= Subject key identifier: 98:03:85:23:0F:4E:39:1C:8B:B0:42:BE:72:F4:FA:26:0D:1F:CC:7E Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Certificate serial: 4A25882C7146C9477791623447C1648801CDBFAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft Manifest number: 01A9 Signing time: Fri 05 Sep 2025 05:22:14 +0000 Manifest this update: Fri 05 Sep 2025 05:17:14 +0000 Manifest next update: Mon 08 Sep 2025 08:18:14 +0000 Files and hashes: 1: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: e1BZWL9NXjvClEGPWm/DnXgQtj3xp7BBdNF/61klZuw=) 2: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: IVJ0b0O0UGWFb8DQACwVWHuzImwsy85XwTmxoeLCF2Q=) 3: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: hJb47Cih3yK2ughpevnMJU/IHmzWp3j4uIzblFeg3/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 08:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:25:88:2c:71:46:c9:47:77:91:62:34:47:c1:64:88:01:cd:bf:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B Validity Not Before: Sep 5 05:17:14 2025 GMT Not After : Sep 8 08:18:14 2025 GMT Subject: CN=980385230F4E391C8BB042BE72F4FA260D1FCC7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:d0:24:7d:58:51:68:45:4d:45:6b:18:79:4d: 2c:df:dc:d2:58:8a:cf:d3:7a:e4:78:bc:dd:12:e4: 5b:f4:76:72:48:7d:57:f9:54:62:aa:4c:56:76:28: 06:8e:7d:09:ed:21:8e:eb:c4:e2:5d:a8:53:41:16: 3c:c0:fa:61:10:8d:e5:5c:d0:9d:12:41:8a:15:1b: 8b:b9:2b:34:21:06:bd:5d:93:a3:54:2d:df:13:f4: 61:21:42:fe:65:6e:6a:39:2c:ba:8a:77:9e:5d:a9: 5a:c4:f3:38:1c:02:96:96:57:a4:00:bc:d4:b1:8d: 79:76:e3:76:2d:d0:c3:bf:ef:cf:ab:f0:02:ba:96: c9:d4:83:d8:41:85:28:a9:78:ef:02:a5:42:a8:f8: 04:72:26:08:b9:af:34:41:57:4d:3f:80:3d:e8:af: d1:55:ee:d4:05:8c:93:cb:18:61:38:7c:09:65:87: b9:a7:a4:c8:6c:52:f8:10:02:e6:68:51:f7:d8:4f: 6c:87:4c:3a:28:0a:94:bf:48:44:2c:84:a6:24:c0: 15:f8:ac:a0:d2:c8:ff:89:b0:bd:a9:40:e0:32:fd: 43:c6:df:da:60:54:eb:bc:63:51:3b:c3:f1:b2:84: 70:fa:84:7d:50:fb:1e:19:ba:94:ed:3c:25:a4:80: 81:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:03:85:23:0F:4E:39:1C:8B:B0:42:BE:72:F4:FA:26:0D:1F:CC:7E X509v3 Authority Key Identifier: keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:9e:b5:9c:0a:ed:96:eb:37:d5:ba:ac:e2:77:32:9d:8f:ec: e9:fc:1a:66:36:bc:50:8a:68:9a:02:d5:11:68:46:84:d7:6b: ed:a0:b9:9f:a5:e7:f1:da:cb:4a:c9:dd:68:ac:02:6d:d5:47: da:68:98:2a:85:d2:45:c0:4f:3b:d9:1f:40:28:9f:29:40:d4: cf:c4:c6:f4:4d:0d:0c:48:85:3b:4c:7d:cf:c2:58:eb:e8:8e: cb:c3:a2:30:05:59:b0:f4:37:ab:5d:96:bd:d9:ed:d3:aa:bd: 50:92:d2:b2:9b:ca:ca:5d:42:dd:20:33:5a:56:eb:20:55:d8: 53:86:3d:4b:ea:7b:1e:c9:00:99:cf:aa:45:d5:35:9f:b9:04: 0b:e7:74:74:e8:fc:c1:9d:91:62:aa:4c:40:d1:47:7a:1c:31: 97:e5:ba:cc:e5:71:1c:2e:db:63:71:e4:df:8a:02:8c:c3:20: 24:59:77:0d:ae:86:74:73:5b:65:99:81:fe:43:f5:39:66:ad: a3:95:40:3e:a8:af:6d:b7:16:a8:a2:a4:35:e6:cf:28:35:c4: e7:7e:66:81:c9:8a:3a:e8:21:ca:ee:5e:1b:df:cb:a6:ee:ef: c3:46:53:51:9d:77:09:7f:4f:11:72:0d:dc:4f:15:0c:d8:a2: 10:4a:22:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiWILHFGyUd3kWI0R8FkiAHNv64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE RDA3MkM5QjAeFw0yNTA5MDUwNTE3MTRaFw0yNTA5MDgwODE4MTRaMDMxMTAvBgNV BAMTKDk4MDM4NTIzMEY0RTM5MUM4QkIwNDJCRTcyRjRGQTI2MEQxRkNDN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO0CR9WFFoRU1Faxh5TSzf3NJY is/TeuR4vN0S5Fv0dnJIfVf5VGKqTFZ2KAaOfQntIY7rxOJdqFNBFjzA+mEQjeVc 0J0SQYoVG4u5KzQhBr1dk6NULd8T9GEhQv5lbmo5LLqKd55dqVrE8zgcApaWV6QA vNSxjXl243Yt0MO/78+r8AK6lsnUg9hBhSipeO8CpUKo+ARyJgi5rzRBV00/gD3o r9FV7tQFjJPLGGE4fAllh7mnpMhsUvgQAuZoUffYT2yHTDooCpS/SEQshKYkwBX4 rKDSyP+JsL2pQOAy/UPG39pgVOu8Y1E7w/GyhHD6hH1Q+x4ZupTtPCWkgIHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmAOFIw9OORyLsEK+cvT6Jg0fzH4wHwYDVR0j BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3 MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2 ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2 MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqetZwK7ZbrN9W6rOJ3Mp2P7On8GmY2vFCK aJoC1RFoRoTXa+2guZ+l5/Hay0rJ3WisAm3VR9pomCqF0kXATzvZH0AonylA1M/E xvRNDQxIhTtMfc/CWOvojsvDojAFWbD0N6tdlr3Z7dOqvVCS0rKbyspdQt0gM1pW 6yBV2FOGPUvqex7JAJnPqkXVNZ+5BAvndHTo/MGdkWKqTEDRR3ocMZfluszlcRwu 22Nx5N+KAozDICRZdw2uhnRzW2WZgf5D9TlmraOVQD6or223FqiipDXmzyg1xOd+ ZoHJijroIcruXhvfy6bu78NGU1Gddwl/TxFyDdxPFQzYohBKIg8= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:38 2025 by rpki-client