$ rpki-client -vvf repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft File: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft (raw, json) Hash identifier: zmL/pSfZIH+wlBpcZUIUwH0Pin75M+7QLRMZkXczy98= Subject key identifier: E0:A6:55:B2:FE:3C:5E:6F:CF:96:88:B1:DB:C8:75:CB:A6:F4:D9:5B Authority key identifier: E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 Certificate issuer: /CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Certificate serial: 1BEF52597F6AF75A96CA5B413E4643831BFFFFD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft Manifest number: 018B Signing time: Fri 05 Sep 2025 21:12:13 +0000 Manifest this update: Fri 05 Sep 2025 21:07:13 +0000 Manifest next update: Tue 09 Sep 2025 02:16:13 +0000 Files and hashes: 1: E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl (hash: OFsg1ejOJqF0qynv51bEdvck5EalMgF3MBFLp4sES4I=) 2: 3130332e3230392e31302e302f32342d3234203d3e20313530393237.roa (hash: zvs63z9VCpiCzE9F7SS2YuDrGUS8w4FG4VYk90PMazI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 02:16:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:ef:52:59:7f:6a:f7:5a:96:ca:5b:41:3e:46:43:83:1b:ff:ff:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9 Validity Not Before: Sep 5 21:07:13 2025 GMT Not After : Sep 9 02:16:13 2025 GMT Subject: CN=E0A655B2FE3C5E6FCF9688B1DBC875CBA6F4D95B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:48:f6:f0:d7:dc:07:11:b5:9f:83:c3:39:29: 49:eb:0d:eb:56:9b:0c:dd:0f:a0:e1:d9:10:eb:e3: 68:b8:43:76:cf:1e:b0:51:ac:a2:47:d8:c2:c8:72: 8b:c9:48:5a:9a:97:26:0b:09:de:09:f7:f7:b4:5e: 71:49:f0:c3:6d:e6:e9:b7:24:fb:78:6f:b8:9a:13: 6d:1d:26:50:05:32:5b:a7:9b:75:42:99:18:c2:89: d1:fc:df:07:7e:21:d8:85:91:b2:83:47:3c:52:20: a0:a9:6e:c8:52:c2:ab:19:c2:89:8d:30:67:01:71: dd:84:d4:3e:d2:cd:36:db:07:c2:42:11:7a:83:b1: 29:f1:26:45:2b:0b:a4:e9:41:1f:4a:ae:60:97:ba: 16:c8:cf:5a:86:b4:6d:a6:3f:19:ad:c9:21:12:4b: 8f:98:32:32:d6:4d:46:1d:d6:83:97:69:f1:17:c0: f7:e0:3c:54:ea:1b:70:cf:50:64:f0:65:28:5e:3f: 4a:7d:56:33:fb:e6:67:ac:f2:0e:ff:80:fc:43:3d: b9:88:d1:59:4f:11:2e:13:af:96:a8:21:78:78:61: 23:b4:51:88:f8:80:7a:9f:0c:37:28:14:db:6f:c6: 45:ee:e8:9c:66:be:a7:86:f2:02:3f:e8:09:a4:01: ee:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:A6:55:B2:FE:3C:5E:6F:CF:96:88:B1:DB:C8:75:CB:A6:F4:D9:5B X509v3 Authority Key Identifier: keyid:E8:7D:91:4F:A5:36:CD:DA:1C:04:86:F0:92:3D:2B:E9:FB:FF:15:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db843f00-2823-4732-9b7c-d8cfe63010dc/0/E87D914FA536CDDA1C0486F0923D2BE9FBFF15C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:85:e8:98:77:90:3f:38:6a:14:d1:db:cb:ce:27:23:5e:cf: 30:7c:e1:af:a0:c4:7c:95:8f:08:fe:f7:e6:ba:57:e0:14:e4: ea:a8:4c:52:23:08:e4:cd:31:81:74:33:5c:2b:bb:10:de:f6: 54:48:11:d9:37:ba:5c:79:3d:5d:8f:83:2d:eb:b0:b7:ec:bf: a9:e4:e2:12:9c:5d:d6:d3:4d:65:4f:f8:28:f0:b7:fc:ac:d0: 31:20:be:45:25:7e:4a:61:81:69:85:8d:bb:dd:80:d4:5d:63: 5a:20:75:4b:69:e8:bb:ce:80:a3:e0:8a:4e:ae:49:c3:81:5b: 94:43:78:1d:d8:e0:8d:b3:1d:34:2c:6f:16:98:c7:24:18:b3: 53:40:45:93:8d:54:82:2d:76:cd:92:3a:13:91:d1:8e:db:17: 87:4d:6a:70:b4:fb:69:5d:5b:e0:c3:13:c2:64:50:be:12:35: a7:72:1e:8e:76:ac:47:94:51:fb:2e:8d:94:12:9a:29:48:e0: f4:87:fa:a6:3e:98:3a:74:d0:68:28:bd:a8:14:51:19:71:70: ca:db:33:2e:f9:48:bf:f6:6a:91:0b:10:1c:7a:34:a7:fe:e6: 1d:c5:7c:7a:12:aa:ea:e0:e8:50:9d:c2:9e:ce:52:73:a5:61: 2a:00:6d:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG+9SWX9q91qWyltBPkZDgxv//9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlG QkZGMTVDOTAeFw0yNTA5MDUyMTA3MTNaFw0yNTA5MDkwMjE2MTNaMDMxMTAvBgNV BAMTKEUwQTY1NUIyRkUzQzVFNkZDRjk2ODhCMURCQzg3NUNCQTZGNEQ5NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSPbw19wHEbWfg8M5KUnrDetW mwzdD6Dh2RDr42i4Q3bPHrBRrKJH2MLIcovJSFqalyYLCd4J9/e0XnFJ8MNt5um3 JPt4b7iaE20dJlAFMlunm3VCmRjCidH83wd+IdiFkbKDRzxSIKCpbshSwqsZwomN MGcBcd2E1D7SzTbbB8JCEXqDsSnxJkUrC6TpQR9KrmCXuhbIz1qGtG2mPxmtySES S4+YMjLWTUYd1oOXafEXwPfgPFTqG3DPUGTwZSheP0p9VjP75mes8g7/gPxDPbmI 0VlPES4Tr5aoIXh4YSO0UYj4gHqfDDcoFNtvxkXu6JxmvqeG8gI/6AmkAe4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4KZVsv48Xm/Ploix28h1y6b02VswHwYDVR0j BBgwFoAU6H2RT6U2zdocBIbwkj0r6fv/FckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k Yjg0M2YwMC0yODIzLTQ3MzItOWI3Yy1kOGNmZTYzMDEwZGMvMC9FODdEOTE0RkE1 MzZDRERBMUMwNDg2RjA5MjNEMkJFOUZCRkYxNUM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJCRTlGQkZG MTVDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGI4NDNmMDAtMjgyMy00NzMyLTli N2MtZDhjZmU2MzAxMGRjLzAvRTg3RDkxNEZBNTM2Q0REQTFDMDQ4NkYwOTIzRDJC RTlGQkZGMTVDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIWF6Jh3kD84ahTR28vOJyNezzB84a+gxHyV jwj+9+a6V+AU5OqoTFIjCOTNMYF0M1wruxDe9lRIEdk3ulx5PV2Pgy3rsLfsv6nk 4hKcXdbTTWVP+Cjwt/ys0DEgvkUlfkphgWmFjbvdgNRdY1ogdUtp6LvOgKPgik6u ScOBW5RDeB3Y4I2zHTQsbxaYxyQYs1NARZONVIItds2SOhOR0Y7bF4dNanC0+2ld W+DDE8JkUL4SNadyHo52rEeUUfsujZQSmilI4PSH+qY+mDp00GgovagUURlxcMrb My75SL/2apELEBx6NKf+5h3FfHoSqurg6FCdwp7OUnOlYSoAbVw= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:16 2025 by rpki-client