$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: JaD5L5qaWzwALdHbPkFzksnI8dGy96Zs911tP0CsywM= Subject key identifier: 37:4B:24:CF:3A:0C:6D:8A:0D:97:00:C9:0F:5C:81:FE:DF:FA:88:3C Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 42E7A5D1FD35DA4178CAF91074D3C4B0FE7F95D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 0174 Signing time: Wed 03 Sep 2025 11:41:49 +0000 Manifest this update: Wed 03 Sep 2025 11:36:49 +0000 Manifest next update: Sat 06 Sep 2025 17:40:49 +0000 Files and hashes: 1: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: MW19UzM10ybXTVhow2wsCpnOifbLMGbJrWJquWrQAwE=) 2: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 3: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 4: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 6: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 7: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) 8: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 9: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 17:40:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:e7:a5:d1:fd:35:da:41:78:ca:f9:10:74:d3:c4:b0:fe:7f:95:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Sep 3 11:36:49 2025 GMT Not After : Sep 6 17:40:49 2025 GMT Subject: CN=374B24CF3A0C6D8A0D9700C90F5C81FEDFFA883C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:36:9e:5a:d8:f5:16:38:f5:64:83:f1:a4:fe: a7:f7:e4:fc:b1:15:77:bb:d1:ba:42:88:d3:c3:52: 2a:bf:00:61:82:90:21:c1:73:23:0c:71:cb:5b:95: 27:8c:1a:44:3f:c5:ea:f0:6a:cd:c4:86:04:a2:93: 17:c7:d5:42:9f:85:61:cb:66:5f:8f:79:1c:a1:2b: b2:6b:37:f8:02:6c:ab:f0:01:bb:de:fa:f1:bd:f9: ce:27:8a:5f:e4:1b:07:b8:ba:79:e8:2c:e6:2f:1d: 40:bf:dc:80:7b:b9:b2:11:b2:cf:8d:00:1b:39:d1: f2:35:7c:b5:49:29:e7:b3:25:9b:f8:8c:f6:3c:1e: 2c:75:a5:42:53:07:82:54:43:f1:f5:e1:c8:fa:ca: 90:fc:7e:0e:a8:f8:4c:45:5d:bc:16:00:99:80:76: a2:94:24:36:97:9f:69:88:81:50:1d:1f:59:e2:c2: 36:6c:19:92:d9:83:42:ea:87:8b:37:51:93:ee:37: dc:d6:20:93:2d:5c:2d:d3:c6:09:b9:99:37:e8:34: 6e:32:68:51:95:9e:0e:b6:66:4e:06:e8:c8:f8:da: a1:a5:68:57:42:ec:2d:ed:f4:ea:09:55:97:65:2b: 34:bf:c1:40:9e:77:6c:f0:b2:24:cb:1b:a9:75:a1: a8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:4B:24:CF:3A:0C:6D:8A:0D:97:00:C9:0F:5C:81:FE:DF:FA:88:3C X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:77:26:8f:ea:1d:75:8e:fe:87:71:22:60:77:e8:60:29:77: cc:55:d0:4e:5c:9d:48:5a:94:58:60:16:5b:7d:b7:31:7a:2e: 7f:02:4d:80:4d:c7:d2:27:fd:74:b7:f4:c3:a1:f2:6e:43:8e: 79:ac:96:89:36:2a:f5:38:d0:e9:a3:2f:f3:31:22:df:7c:c0: 6d:07:b5:94:9a:e2:bc:ec:3a:ea:ac:bd:1d:1e:6e:cc:8c:37: 65:ae:42:05:4e:43:f2:3e:eb:9e:4a:44:33:95:18:2c:7c:d7: 30:68:d5:35:45:fc:ad:7f:d3:25:4b:c7:7f:e8:0c:1a:b8:fa: c6:e6:f6:a9:53:ad:11:07:b3:10:83:2b:db:18:eb:a7:e5:11: b9:6e:21:7b:2e:1b:fa:ab:c8:43:46:4c:c1:94:62:04:44:c8: f2:77:77:41:87:3d:47:3d:64:8f:e4:64:87:68:98:63:f8:12: 68:9c:42:03:55:4a:71:95:35:9f:0b:7e:e9:16:06:53:a7:f6: 95:52:ab:21:b6:ea:75:1b:39:65:3a:0f:f9:3d:84:1c:0e:f3: e7:2e:44:aa:4d:34:9c:1a:d3:be:1d:d3:43:3d:ec:55:60:b6: 06:85:94:40:36:29:b2:72:f5:c2:96:2d:89:f7:69:d1:05:39: c7:d2:45:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQuel0f012kF4yvkQdNPEsP5/ldkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTA5MDMxMTM2NDlaFw0yNTA5MDYxNzQwNDlaMDMxMTAvBgNV BAMTKDM3NEIyNENGM0EwQzZEOEEwRDk3MDBDOTBGNUM4MUZFREZGQTg4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuNp5a2PUWOPVkg/Gk/qf35Pyx FXe70bpCiNPDUiq/AGGCkCHBcyMMcctblSeMGkQ/xerwas3EhgSikxfH1UKfhWHL Zl+PeRyhK7JrN/gCbKvwAbve+vG9+c4nil/kGwe4unnoLOYvHUC/3IB7ubIRss+N ABs50fI1fLVJKeezJZv4jPY8Hix1pUJTB4JUQ/H14cj6ypD8fg6o+ExFXbwWAJmA dqKUJDaXn2mIgVAdH1niwjZsGZLZg0Lqh4s3UZPuN9zWIJMtXC3Txgm5mTfoNG4y aFGVng62Zk4G6Mj42qGlaFdC7C3t9OoJVZdlKzS/wUCed2zwsiTLG6l1oajvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0skzzoMbYoNlwDJD1yB/t/6iDwwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIB3Jo/qHXWO/odxImB36GApd8xV0E5cnUha lFhgFlt9tzF6Ln8CTYBNx9In/XS39MOh8m5Djnmslok2KvU40OmjL/MxIt98wG0H tZSa4rzsOuqsvR0ebsyMN2WuQgVOQ/I+655KRDOVGCx81zBo1TVF/K1/0yVLx3/o DBq4+sbm9qlTrREHsxCDK9sY66flEbluIXsuG/qryENGTMGUYgREyPJ3d0GHPUc9 ZI/kZIdomGP4EmicQgNVSnGVNZ8LfukWBlOn9pVSqyG26nUbOWU6D/k9hBwO8+cu RKpNNJwa074d00M97FVgtgaFlEA2KbJy9cKWLYn3adEFOcfSRVY= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client