$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: sugTu3aHd6B7WKWBdiQW44Y/FKnTVcB0JVUdkndrIpo= Subject key identifier: 67:6F:6E:62:72:B5:28:2E:EC:DE:0D:3A:01:39:76:1F:68:67:C0:1A Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 437DB9108FACE14726BEA203FAA7928E841C2C54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 013A Signing time: Sat 26 Apr 2025 11:51:47 +0000 Manifest this update: Sat 26 Apr 2025 11:46:47 +0000 Manifest next update: Tue 29 Apr 2025 14:03:47 +0000 Files and hashes: 1: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 2: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) 3: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 4: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 5: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 6: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: 6I4hR7M6SnHtSKvOFy9wIvL4fD0yn/mw1NXOsW+nxrg=) 7: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) 8: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) 9: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 09:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:7d:b9:10:8f:ac:e1:47:26:be:a2:03:fa:a7:92:8e:84:1c:2c:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Apr 26 11:46:47 2025 GMT Not After : Apr 29 14:03:47 2025 GMT Subject: CN=676F6E6272B5282EECDE0D3A0139761F6867C01A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:0a:d4:5f:ee:9c:b6:d7:79:2d:e5:4c:96:9c: 4d:2f:a4:bf:4c:b4:a8:56:14:a1:13:71:3b:0f:01: e6:a0:2e:f5:1d:d6:a9:f3:67:fb:12:64:60:82:af: 52:77:15:ac:40:54:58:ca:15:01:92:c7:19:f5:5c: 7e:7a:95:6c:d3:35:c7:12:b6:67:e3:8d:41:51:c6: c0:b9:6f:ee:09:44:46:11:1a:56:6f:c7:4e:bb:45: 41:f4:b7:90:cf:4f:ce:94:0c:9a:d3:41:1b:cc:a2: 6d:14:4f:59:85:4e:9b:04:37:07:7f:95:21:c6:45: 07:18:72:60:fc:7c:e3:e2:e8:ce:d5:6b:c2:83:ca: f9:8b:fd:d1:97:8d:fe:7f:e0:aa:91:97:bd:a3:f6: 94:ef:a6:f6:3f:2b:cc:52:eb:56:8b:5d:85:0e:fd: 84:ba:9a:09:81:a1:9d:3f:ed:e7:ed:f1:44:f4:c6: 67:fd:c0:12:99:75:72:33:30:9b:06:25:2d:52:77: 96:13:af:8a:ca:8a:a7:c9:ad:fe:7c:bc:90:5e:ad: 20:64:26:16:04:de:82:78:ac:a3:13:88:a2:c1:5c: 48:76:ba:4e:4b:22:8c:8f:8c:df:34:b0:ea:c0:ac: 1b:1d:5f:b2:6a:f2:18:63:f8:bc:72:07:2a:62:44: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:6F:6E:62:72:B5:28:2E:EC:DE:0D:3A:01:39:76:1F:68:67:C0:1A X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e8:5b:34:47:c4:34:2c:f6:57:b6:32:4a:06:c7:72:b3:bf: 8c:8b:e4:82:2c:89:d2:cf:9f:43:27:46:fb:6b:ba:4c:38:5c: 36:7a:a1:d1:24:8c:c9:3d:84:de:cb:7f:c7:a9:b7:ab:e4:de: 6c:cc:27:c0:8c:0d:04:11:68:21:aa:88:0e:03:db:23:be:7f: 3b:3d:11:52:5d:62:8c:d6:eb:8c:34:03:59:63:15:ed:91:a6: 15:f3:6c:0b:5b:02:f2:71:81:74:bc:ee:3b:4c:0c:b8:8b:c2: 16:09:3b:eb:98:df:79:e9:d9:e3:33:fd:ec:f7:4b:8b:9e:30: 8c:ea:3f:1e:f3:e3:d6:47:6f:73:fd:84:2a:97:9c:1f:eb:c3: 3f:64:87:36:69:05:7e:ea:12:58:cf:e5:51:77:3c:4d:cc:6d: a7:21:b7:09:c6:bd:a3:42:4b:1c:c0:25:ed:86:e8:6c:f0:cc: 49:fe:eb:01:d6:29:4a:f2:20:8e:30:5e:8d:29:66:9b:18:cd: 73:45:ad:c8:b9:b1:9f:9d:80:d2:1e:60:6e:72:1a:2a:c2:51: 58:5a:88:66:3d:14:72:fd:aa:96:73:77:ac:8a:6b:e1:85:4d: 5f:b2:c8:1a:3f:68:20:27:71:92:24:6e:4f:64:18:41:17:77: d2:ea:9b:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ325EI+s4UcmvqID+qeSjoQcLFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNTA0MjYxMTQ2NDdaFw0yNTA0MjkxNDAzNDdaMDMxMTAvBgNV BAMTKDY3NkY2RTYyNzJCNTI4MkVFQ0RFMEQzQTAxMzk3NjFGNjg2N0MwMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCtRf7py213kt5UyWnE0vpL9M tKhWFKETcTsPAeagLvUd1qnzZ/sSZGCCr1J3FaxAVFjKFQGSxxn1XH56lWzTNccS tmfjjUFRxsC5b+4JREYRGlZvx067RUH0t5DPT86UDJrTQRvMom0UT1mFTpsENwd/ lSHGRQcYcmD8fOPi6M7Va8KDyvmL/dGXjf5/4KqRl72j9pTvpvY/K8xS61aLXYUO /YS6mgmBoZ0/7eft8UT0xmf9wBKZdXIzMJsGJS1Sd5YTr4rKiqfJrf58vJBerSBk JhYE3oJ4rKMTiKLBXEh2uk5LIoyPjN80sOrArBsdX7Jq8hhj+LxyBypiRHRdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ29uYnK1KC7s3g06ATl2H2hnwBowHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEroWzRHxDQs9le2MkoGx3Kzv4yL5IIsidLP n0MnRvtrukw4XDZ6odEkjMk9hN7Lf8ept6vk3mzMJ8CMDQQRaCGqiA4D2yO+fzs9 EVJdYozW64w0A1ljFe2RphXzbAtbAvJxgXS87jtMDLiLwhYJO+uY33np2eMz/ez3 S4ueMIzqPx7z49ZHb3P9hCqXnB/rwz9khzZpBX7qEljP5VF3PE3MbachtwnGvaNC SxzAJe2G6GzwzEn+6wHWKUryII4wXo0pZpsYzXNFrci5sZ+dgNIeYG5yGirCUVha iGY9FHL9qpZzd6yKa+GFTV+yyBo/aCAncZIkbk9kGEEXd9Lqm0w= -----END CERTIFICATE-----Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net