
$ rpki-client -vvf repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
File: 87C7B4B7933266A0A09E2290B0934622DD072C9B.mft (raw, json)
Hash identifier: +bf2vl7OebrvUeNcrvSM0bFN7HtNxOjRl7yrZZCYqxA=
Subject key identifier: 9B:97:ED:96:73:6A:44:5E:91:CC:CD:23:62:2A:00:E4:4A:EE:88:60
Authority key identifier: 87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B
Certificate issuer: /CN=87C7B4B7933266A0A09E2290B0934622DD072C9B
Certificate serial: 6B004026819AE8F9C3B64D7B1306FF22527F02B0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
Manifest number: 0203
Signing time: Thu 26 Mar 2026 04:22:32 +0000
Manifest this update: Thu 26 Mar 2026 04:17:32 +0000
Manifest next update: Sun 29 Mar 2026 07:07:32 +0000
Files and hashes: 1: 3130332e3132312e3137302e302f32332d3234203d3e20313335343738.roa (hash: hCEj/QyElaSlXw7fH2Elzk01Ogcjojp5yTlkppcV3sU=)
2: 3130332e3132312e3136382e302f32332d3234203d3e20313335343738.roa (hash: KZVD7OAboXTBhMUu53su70M8avlrOY8wZiIl8TEQgso=)
3: 87C7B4B7933266A0A09E2290B0934622DD072C9B.crl (hash: nfXMbV7mOvehwN5HjIX4+5SIQTJMuhAQIgpwh/Png20=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl
rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 07:07:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:00:40:26:81:9a:e8:f9:c3:b6:4d:7b:13:06:ff:22:52:7f:02:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87C7B4B7933266A0A09E2290B0934622DD072C9B
Validity
Not Before: Mar 26 04:17:32 2026 GMT
Not After : Mar 29 07:07:32 2026 GMT
Subject: CN=9B97ED96736A445E91CCCD23622A00E44AEE8860
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1a:6f:59:44:03:ba:2d:63:ba:56:be:01:19:
75:54:dc:94:11:89:52:54:95:6d:14:90:a3:03:e2:
17:07:d6:aa:2e:1c:90:da:7f:bd:a2:5d:20:3b:5b:
32:23:a7:85:72:c4:fc:03:6b:d0:bf:5b:09:dc:04:
a2:c2:39:d3:cf:0d:b2:ad:93:63:f7:bf:74:06:42:
06:09:8c:ac:03:bc:25:5f:2a:34:c6:19:23:31:1e:
c7:fd:be:1d:8a:2c:12:a7:5e:5e:58:53:75:aa:7f:
95:77:7c:eb:2b:8a:d0:ab:d6:73:01:e5:6a:d5:17:
05:ef:41:69:e9:88:cf:3b:19:16:97:40:15:d1:21:
a1:43:9c:8f:b6:46:16:30:6e:f2:81:8f:69:14:a0:
13:58:18:7f:77:de:f1:c5:5b:6f:5c:97:78:f9:47:
49:98:1a:ff:15:65:2a:c7:75:1a:6c:19:6c:04:39:
e1:72:06:5a:d3:a9:83:7a:56:a3:84:c8:60:36:76:
a8:10:26:02:63:8e:92:52:91:f7:1c:0e:0d:41:34:
d3:04:a7:97:4c:14:8c:75:bf:23:ee:71:11:7a:11:
08:59:4d:a7:5f:77:e4:ee:a8:bd:09:60:eb:9b:82:
fc:03:5d:f8:67:5a:9a:6e:83:2a:f5:dc:26:16:4c:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:97:ED:96:73:6A:44:5E:91:CC:CD:23:62:2A:00:E4:4A:EE:88:60
X509v3 Authority Key Identifier:
keyid:87:C7:B4:B7:93:32:66:A0:A0:9E:22:90:B0:93:46:22:DD:07:2C:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87C7B4B7933266A0A09E2290B0934622DD072C9B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1a58af24-463b-44d8-b6f0-39b82b458f75/0/87C7B4B7933266A0A09E2290B0934622DD072C9B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:ea:dd:29:db:69:48:d1:28:f1:f1:c6:19:42:77:41:21:f9:
33:e3:22:cf:c4:04:6a:eb:ea:5f:ce:88:2d:88:9e:4e:ce:d5:
75:8f:7f:1c:1d:b9:36:9e:51:89:ca:d7:6a:14:da:bc:a6:b6:
0f:51:1a:bc:31:a2:f4:11:af:5f:a0:f6:2e:45:e0:cf:57:0e:
7c:d4:c8:31:75:61:cc:bd:9e:b3:c8:bd:d3:22:05:69:5f:8f:
a9:55:5b:b2:95:ea:d6:3f:0e:2a:18:13:0e:f9:03:86:20:a7:
9b:0b:07:16:1a:d4:7d:ae:a0:10:3e:9b:fb:aa:3a:a2:18:37:
70:ab:27:b0:99:aa:c3:af:2c:a7:d1:29:92:9d:16:ec:95:02:
68:94:26:fb:8b:78:7f:36:04:5b:73:4c:8c:e4:f6:c0:b0:32:
a1:b5:9b:c5:b5:de:04:e5:f4:4b:af:df:d7:ea:51:4b:09:7b:
9c:de:a2:4f:e6:c8:e1:77:de:34:36:23:18:65:88:11:73:b3:
f5:29:18:87:71:f2:c5:63:5c:cd:03:67:85:06:33:5d:19:8c:
a7:39:67:72:cb:14:c0:e0:75:d1:8d:18:bf:be:95:e1:3c:34:
be:d6:60:de:2b:87:f8:5c:8a:4e:23:ef:c4:32:40:dc:5d:b2:
b3:56:b3:d0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUawBAJoGa6PnDtk17Ewb/IlJ/ArAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJE
RDA3MkM5QjAeFw0yNjAzMjYwNDE3MzJaFw0yNjAzMjkwNzA3MzJaMDMxMTAvBgNV
BAMTKDlCOTdFRDk2NzM2QTQ0NUU5MUNDQ0QyMzYyMkEwMEU0NEFFRTg4NjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVGm9ZRAO6LWO6Vr4BGXVU3JQR
iVJUlW0UkKMD4hcH1qouHJDaf72iXSA7WzIjp4VyxPwDa9C/WwncBKLCOdPPDbKt
k2P3v3QGQgYJjKwDvCVfKjTGGSMxHsf9vh2KLBKnXl5YU3Wqf5V3fOsritCr1nMB
5WrVFwXvQWnpiM87GRaXQBXRIaFDnI+2RhYwbvKBj2kUoBNYGH933vHFW29cl3j5
R0mYGv8VZSrHdRpsGWwEOeFyBlrTqYN6VqOEyGA2dqgQJgJjjpJSkfccDg1BNNME
p5dMFIx1vyPucRF6EQhZTadfd+TuqL0JYOubgvwDXfhnWppugyr13CYWTMUnAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUm5ftlnNqRF6RzM0jYioA5EruiGAwHwYDVR0j
BBgwFoAUh8e0t5MyZqCgniKQsJNGIt0HLJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YTU4YWYyNC00NjNiLTQ0ZDgtYjZmMC0zOWI4MmI0NThmNzUvMC84N0M3QjRCNzkz
MzI2NkEwQTA5RTIyOTBCMDkzNDYyMkREMDcyQzlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2MjJERDA3
MkM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWE1OGFmMjQtNDYzYi00NGQ4LWI2
ZjAtMzliODJiNDU4Zjc1LzAvODdDN0I0Qjc5MzMyNjZBMEEwOUUyMjkwQjA5MzQ2
MjJERDA3MkM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAJvq3SnbaUjRKPHxxhlCd0Eh+TPjIs/EBGrr
6l/OiC2Ink7O1XWPfxwduTaeUYnK12oU2rymtg9RGrwxovQRr1+g9i5F4M9XDnzU
yDF1Ycy9nrPIvdMiBWlfj6lVW7KV6tY/DioYEw75A4Ygp5sLBxYa1H2uoBA+m/uq
OqIYN3CrJ7CZqsOvLKfRKZKdFuyVAmiUJvuLeH82BFtzTIzk9sCwMqG1m8W13gTl
9Euv39fqUUsJe5zeok/myOF33jQ2IxhliBFzs/UpGIdx8sVjXM0DZ4UGM10ZjKc5
Z3LLFMDgddGNGL++leE8NL7WYN4rh/hcik4j78QyQNxdsrNWs9A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 19:46:50 2026 by rpki-client