$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: H/Q2I8iXl2gt8LvUYZM7zsmx62SwzSLUQ3JLgkMjQN8= Subject key identifier: 2C:B3:15:31:B1:4B:59:C0:2D:5B:3D:50:75:A2:3B:04:86:D4:1D:45 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 111927EE92CFAB67F80D67CCC0692D2712F29547 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 014D Signing time: Sun 08 Jun 2025 13:41:48 +0000 Manifest this update: Sun 08 Jun 2025 13:36:48 +0000 Manifest next update: Wed 11 Jun 2025 15:08:48 +0000 Files and hashes: 1: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) 2: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 3: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 4: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 5: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 6: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 7: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: VMwgCY7BkkKnNQ7POhFm51fwLswhc2SSO7LJ6A6aHjc=) 8: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 9: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:19:27:ee:92:cf:ab:67:f8:0d:67:cc:c0:69:2d:27:12:f2:95:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Jun 8 13:36:48 2025 GMT Not After : Jun 11 15:08:48 2025 GMT Subject: CN=2CB31531B14B59C02D5B3D5075A23B0486D41D45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5b:33:b7:4d:f7:8a:c8:da:58:11:d6:13:cd: 2f:7c:d7:2e:d0:d6:99:0e:80:7a:d0:9f:21:23:58: d1:ff:ea:b5:c1:9b:35:83:2e:12:f6:85:d7:6d:63: 4b:d5:5c:7a:ba:04:35:9c:4a:50:65:e2:8f:8f:d4: 05:71:94:4b:de:0a:d6:96:8f:1f:83:f5:d2:bc:5f: 72:91:03:7f:c9:dd:09:f9:12:49:02:69:d2:03:3b: 52:71:6f:49:61:fa:e3:d1:87:47:0d:4d:1d:2e:89: 05:ca:36:f0:1d:d6:fb:5f:c6:41:61:6a:c8:7b:46: 88:5a:08:33:cf:bb:fd:a1:b1:27:f7:b9:f7:14:8e: f0:91:76:7b:70:b5:d3:98:63:20:a3:79:0e:0b:05: f9:3c:54:26:33:ec:a2:80:91:f4:92:20:5f:a3:20: 19:5b:cc:e4:74:a2:1a:2c:df:77:bc:9b:97:0e:2c: bc:c8:14:e5:45:74:a8:38:26:e5:80:d5:97:72:71: 34:26:3d:30:16:cf:6b:c2:7c:64:a2:7a:5a:38:d1: 4f:c0:db:9d:6f:d4:fb:a2:e1:54:f9:3a:37:58:13: 3f:c8:00:7f:bf:8d:a9:03:c6:8a:e1:0f:28:37:1c: b4:09:a8:ff:b0:96:36:13:ed:dd:0c:56:e1:af:ea: 2d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:B3:15:31:B1:4B:59:C0:2D:5B:3D:50:75:A2:3B:04:86:D4:1D:45 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:16:a5:72:0c:41:a2:b7:50:57:e4:ec:ba:ac:e3:45:39:fa: 7e:7b:ed:8f:a8:01:9f:2d:62:81:c8:6b:ad:00:b0:d3:c9:91: 6d:85:eb:ea:b9:2f:fb:0e:f4:4f:e7:2b:f8:60:01:0d:0d:8c: 74:ab:80:a6:97:85:16:f6:fb:c1:81:17:15:96:86:3e:2d:4b: ba:39:8a:1a:2c:60:02:59:b4:5b:74:1b:41:d6:89:18:2d:ad: 0d:87:be:44:92:09:03:cb:95:68:a5:87:0d:68:c6:50:89:ec: 78:2d:fd:8e:ef:9d:40:ba:f9:9d:70:ef:6c:e5:12:d8:9c:0a: 83:8f:29:3f:b6:b3:6e:de:b4:2a:43:a4:f7:9d:c6:8e:8e:9c: f3:9b:36:a2:0e:3c:36:98:44:ac:4e:7f:87:fb:fa:47:76:aa: 56:9b:74:5a:b5:ff:81:f4:ee:6c:97:8f:58:8d:0c:16:dd:2a: 01:d6:ba:55:48:0b:2e:14:22:38:7d:e9:92:a2:88:25:8b:3b: 9d:89:3b:c7:a9:5d:d6:d7:6b:cf:ef:34:1b:dd:d7:5c:39:a1: 5c:7b:70:5d:64:84:3a:4b:c7:ce:71:bf:26:f9:53:25:cb:14: 25:7a:d5:5e:be:cf:ee:81:7a:be:4b:c2:9d:5b:bb:61:ec:37: b7:7f:84:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUERkn7pLPq2f4DWfMwGktJxLylUcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTA2MDgxMzM2NDhaFw0yNTA2MTExNTA4NDhaMDMxMTAvBgNV BAMTKDJDQjMxNTMxQjE0QjU5QzAyRDVCM0Q1MDc1QTIzQjA0ODZENDFENDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWzO3TfeKyNpYEdYTzS981y7Q 1pkOgHrQnyEjWNH/6rXBmzWDLhL2hddtY0vVXHq6BDWcSlBl4o+P1AVxlEveCtaW jx+D9dK8X3KRA3/J3Qn5EkkCadIDO1Jxb0lh+uPRh0cNTR0uiQXKNvAd1vtfxkFh ash7RohaCDPPu/2hsSf3ufcUjvCRdntwtdOYYyCjeQ4LBfk8VCYz7KKAkfSSIF+j IBlbzOR0ohos33e8m5cOLLzIFOVFdKg4JuWA1ZdycTQmPTAWz2vCfGSielo40U/A 251v1Pui4VT5OjdYEz/IAH+/jakDxorhDyg3HLQJqP+wljYT7d0MVuGv6i0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULLMVMbFLWcAtWz1QdaI7BIbUHUUwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4WpXIMQaK3UFfk7Lqs40U5+n577Y+oAZ8t YoHIa60AsNPJkW2F6+q5L/sO9E/nK/hgAQ0NjHSrgKaXhRb2+8GBFxWWhj4tS7o5 ihosYAJZtFt0G0HWiRgtrQ2HvkSSCQPLlWilhw1oxlCJ7Hgt/Y7vnUC6+Z1w72zl EticCoOPKT+2s27etCpDpPedxo6OnPObNqIOPDaYRKxOf4f7+kd2qlabdFq1/4H0 7myXj1iNDBbdKgHWulVICy4UIjh96ZKiiCWLO52JO8epXdbXa8/vNBvd11w5oVx7 cF1khDpLx85xvyb5UyXLFCV61V6+z+6Ber5Lwp1bu2HsN7d/hP8= -----END CERTIFICATE-----Generated at Sun Jun 8 21:35:48 2025 by rpki-client