$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: EXzbQgM69zDP9ZbKEk3hyH6FrOnOFmkF0EpAIcw1zdQ= Subject key identifier: 76:7B:06:8B:D0:61:80:48:56:86:CA:AD:7E:EB:B8:A6:BD:34:C0:9F Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 5EF83E7E7124DE39C65F3F0E37BD0760E2C2A890 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 015E Signing time: Wed 25 Mar 2026 11:01:39 +0000 Manifest this update: Wed 25 Mar 2026 10:56:39 +0000 Manifest next update: Sat 28 Mar 2026 22:03:39 +0000 Files and hashes: 1: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: CUAThlAFrwvyRODOZ+DEXmoo4NT/vRztwY6ltCxRHGY=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: /2jJPO3Er6sewDinbJyZDHA9B3o2kNcba+XnPeftBr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:f8:3e:7e:71:24:de:39:c6:5f:3f:0e:37:bd:07:60:e2:c2:a8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Mar 25 10:56:39 2026 GMT Not After : Mar 28 22:03:39 2026 GMT Subject: CN=767B068BD06180485686CAAD7EEBB8A6BD34C09F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:0c:57:a1:9f:a4:94:c6:76:e9:bb:ed:c7:47: b2:b0:6e:e5:67:1a:82:60:79:01:5a:f7:95:e6:57: 79:73:9b:df:78:d8:2f:44:8b:4c:ae:81:c9:92:dd: 41:af:50:62:98:be:71:ae:fd:e7:c2:25:26:d3:5b: bd:61:83:dc:d9:1c:a5:44:e3:ed:58:c2:6d:bc:b7: 16:93:dc:85:8b:ed:0f:a9:71:d2:aa:af:3a:35:c6: 9d:57:e0:57:a0:95:f9:4a:80:da:e5:8a:ae:4f:4c: f9:ee:31:ca:e0:81:dd:59:f3:56:ec:0c:48:42:54: 78:6c:8c:96:84:89:36:e7:66:58:dd:36:08:76:57: f0:39:50:f3:96:ff:b1:21:eb:88:2d:a0:73:5b:0b: a0:12:c4:c2:ad:50:ea:1f:b7:77:1c:36:a6:b7:d7: a0:f4:1a:91:ac:96:15:b2:dc:64:7a:20:9b:55:d7: d5:cb:09:6f:31:f0:37:e5:25:ea:df:90:9c:72:a7: 5c:2f:89:05:3a:2b:96:ce:12:33:39:bc:f0:ff:5c: 38:5d:1d:00:df:31:c8:5a:b8:a5:87:25:cf:77:60: 4a:23:32:80:5c:cb:b2:ff:06:2b:94:e8:81:ee:b7: d7:88:12:2b:ac:42:6b:59:25:8f:51:ca:ad:50:af: 3c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:7B:06:8B:D0:61:80:48:56:86:CA:AD:7E:EB:B8:A6:BD:34:C0:9F X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:c4:1e:3d:ea:7a:ae:76:fa:74:2f:34:58:0a:55:e5:5c:62: 90:2f:f0:1a:3f:99:fc:53:98:19:07:ce:ab:4b:79:a9:fb:21: 44:f9:81:af:5c:de:a6:ef:61:d8:e1:fa:a3:61:e9:13:e2:48: dc:ed:d7:f8:c3:04:06:03:64:81:aa:85:a1:42:a8:75:c5:af: 70:b8:db:f7:aa:18:83:cd:65:ee:72:38:5f:61:6e:05:c8:82: 34:16:6c:83:fa:83:aa:9d:52:56:0a:ab:49:48:45:e8:d6:7a: 24:bf:74:a4:b4:e0:b2:f3:ee:0c:97:46:90:e3:dc:a1:6c:2c: 52:54:1e:fb:6b:5a:fb:ca:c4:af:01:dd:48:76:ee:33:92:6a: 40:35:10:2d:78:4a:30:aa:20:70:a3:93:07:2a:58:09:87:ea: 92:fb:52:9d:2b:28:19:34:a5:06:42:16:62:4b:4d:3c:23:38: 92:69:da:86:d6:06:87:48:01:42:c0:f5:0f:c5:b3:87:31:77: b6:b6:f5:76:09:8e:98:da:93:39:b2:1e:4e:e1:63:cf:e4:45: af:87:36:f5:93:e0:b1:fb:48:4a:9b:e1:7d:d6:99:3b:63:60: b2:35:d4:28:9c:88:40:0d:40:bd:76:87:74:1a:dd:5f:8d:a7: ed:32:0e:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXvg+fnEk3jnGXz8ON70HYOLCqJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNjAzMjUxMDU2MzlaFw0yNjAzMjgyMjAzMzlaMDMxMTAvBgNV BAMTKDc2N0IwNjhCRDA2MTgwNDg1Njg2Q0FBRDdFRUJCOEE2QkQzNEMwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDFehn6SUxnbpu+3HR7KwbuVn GoJgeQFa95XmV3lzm9942C9Ei0yugcmS3UGvUGKYvnGu/efCJSbTW71hg9zZHKVE 4+1Ywm28txaT3IWL7Q+pcdKqrzo1xp1X4FeglflKgNrliq5PTPnuMcrggd1Z81bs DEhCVHhsjJaEiTbnZljdNgh2V/A5UPOW/7Eh64gtoHNbC6ASxMKtUOoft3ccNqa3 16D0GpGslhWy3GR6IJtV19XLCW8x8DflJerfkJxyp1wviQU6K5bOEjM5vPD/XDhd HQDfMchauKWHJc93YEojMoBcy7L/BiuU6IHut9eIEiusQmtZJY9Ryq1QrzwDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdnsGi9BhgEhWhsqtfuu4pr00wJ8wHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/EHj3qeq52+nQvNFgKVeVcYpAv8Bo/mfxT mBkHzqtLean7IUT5ga9c3qbvYdjh+qNh6RPiSNzt1/jDBAYDZIGqhaFCqHXFr3C4 2/eqGIPNZe5yOF9hbgXIgjQWbIP6g6qdUlYKq0lIRejWeiS/dKS04LLz7gyXRpDj 3KFsLFJUHvtrWvvKxK8B3Uh27jOSakA1EC14SjCqIHCjkwcqWAmH6pL7Up0rKBk0 pQZCFmJLTTwjOJJp2obWBodIAULA9Q/Fs4cxd7a29XYJjpjakzmyHk7hY8/kRa+H NvWT4LH7SEqb4X3WmTtjYLI11CiciEANQL12h3Qa3V+Np+0yDig= -----END CERTIFICATE-----Generated at Thu Mar 26 18:58:02 2026 by rpki-client