$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: ggDUS4K2aG/nUqoE8KB9SaBmzyH51Xk6c7e968NeWPw= Subject key identifier: 7F:2D:CC:81:29:ED:71:E3:AE:61:D9:79:F2:FB:F3:39:EC:3D:EB:34 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 3C28389426FEAACFD69662822C61A44747F7B3DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 01CF Signing time: Thu 26 Mar 2026 11:32:03 +0000 Manifest this update: Thu 26 Mar 2026 11:27:03 +0000 Manifest next update: Sun 29 Mar 2026 12:52:03 +0000 Files and hashes: 1: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: UAGKGSjm0CH0zknVedkxHzDnhJTtYq6aJ2UvpPN4dUI=) 2: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: omacf/MlMTOtJi7pgs2aPCZclto1hvc9zlwr6k9i/3s=) 3: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 1RATtgEQ2fC4CTZxbGq9E6JcRJ2nj2d+lfS9XKYbQiw=) 4: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: BJjsAcb4okcNiG6EQrYTnUcjtjw+1b26+gSqZINpdeY=) 5: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: M465AGkIQVJLTD8mWLihVhmnQLcd44l1pfpYvPChqew=) 6: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: bEXXfN8D8Iwh6++6Sf4fNdlCeqEZEgaEYsFhbfU8XrA=) 7: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: dYO4EYncz17AgE2NQ+gbu1sETsiNFmn4HcjMbsqN9Sk=) 8: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: wgJ4l6Z4XSXlS4bEbbx1UlqQbPaEu6hH6VwQa4mHecg=) 9: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: gom2K2gkNEap6pRf8i6qpFWU+p3reMlN96fhfu6QcT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:52:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:28:38:94:26:fe:aa:cf:d6:96:62:82:2c:61:a4:47:47:f7:b3:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Mar 26 11:27:03 2026 GMT Not After : Mar 29 12:52:03 2026 GMT Subject: CN=7F2DCC8129ED71E3AE61D979F2FBF339EC3DEB34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:36:a8:07:0c:08:2e:3a:65:e6:2d:1b:20:91: 95:29:cd:09:bf:86:03:1b:73:e9:96:0b:7f:85:93: 9c:fd:35:da:be:6e:8f:11:0e:91:91:a0:af:17:ce: e5:17:d6:24:23:98:95:0a:dc:06:04:ce:5f:fb:3e: a8:4f:9d:da:fe:f8:73:48:b2:f2:e9:58:0f:bd:87: a0:f6:74:35:33:97:ee:61:b8:2c:0c:3f:1f:b7:d4: 07:33:8f:2a:ac:e7:96:d9:c7:e4:19:3e:e2:e6:e8: fc:39:26:a1:4d:f6:12:89:b1:d6:b2:0d:49:a5:78: 16:bb:ee:2f:43:49:e0:a4:07:8c:53:b1:0e:e2:57: 5f:24:c2:90:89:be:24:40:df:5f:98:b2:3f:ba:de: bd:80:fb:12:0c:3b:88:15:70:84:f5:3b:bf:8d:5e: bb:01:1b:d3:35:e6:95:fc:72:9c:3d:4b:58:f9:43: 9b:8d:4c:ae:0d:02:79:ac:6b:35:31:66:f9:1e:84: 23:e2:d3:88:b8:fe:e1:8c:f9:3a:53:cb:de:fb:9c: b3:05:48:f4:85:52:33:60:45:aa:2b:0d:01:75:07: a5:ac:a4:9f:45:bd:26:16:eb:3b:bb:fa:1a:ec:8a: 23:83:8d:14:96:97:42:a9:42:aa:de:f2:a7:73:bd: 4d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:2D:CC:81:29:ED:71:E3:AE:61:D9:79:F2:FB:F3:39:EC:3D:EB:34 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:fe:ff:93:c0:d8:8a:ea:e8:f2:d7:61:39:4e:56:27:fa:c7: 3c:fc:d5:d0:32:c6:ce:15:03:54:01:d5:7a:03:e4:fa:ea:6b: db:1b:d4:ed:58:4a:25:5c:82:0b:bb:0a:61:5c:67:83:76:23: 36:ea:4d:67:0e:13:1d:2f:a7:ba:ab:d9:89:b5:d1:56:c8:f4: ed:03:41:02:72:69:b1:66:21:87:40:ca:33:99:f0:90:af:a3: 15:da:a6:4f:fb:b7:94:11:b6:39:b9:36:fa:bb:94:c2:c3:6c: c2:49:17:b3:05:47:dd:f1:43:3f:b4:f5:04:77:f0:01:04:f0: b2:33:2d:8f:6a:81:b2:95:ea:6d:f4:8b:0c:22:c8:bc:92:82: 8c:9a:78:e7:8f:8b:af:2e:ba:06:3c:a6:d7:75:a1:61:cb:91: 0f:04:25:d2:7e:75:b2:6c:3b:ee:99:d0:ca:50:2c:dd:41:09: e3:9c:5f:1a:98:90:38:f2:92:fd:c5:50:69:9b:01:a8:0f:38: 61:5a:65:f7:fb:d0:cd:5e:0c:34:9f:a8:d7:36:ea:49:5b:bf: 40:5c:c1:85:c1:d1:9f:c0:5b:44:03:85:ec:f9:26:f9:89:7f: 0d:12:3e:f4:a9:64:d9:ba:81:e0:60:df:78:06:86:7c:37:c1: 08:cf:a1:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCg4lCb+qs/WlmKCLGGkR0f3s9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAzMjYxMTI3MDNaFw0yNjAzMjkxMjUyMDNaMDMxMTAvBgNV BAMTKDdGMkRDQzgxMjlFRDcxRTNBRTYxRDk3OUYyRkJGMzM5RUMzREVCMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5NqgHDAguOmXmLRsgkZUpzQm/ hgMbc+mWC3+Fk5z9Ndq+bo8RDpGRoK8XzuUX1iQjmJUK3AYEzl/7PqhPndr++HNI svLpWA+9h6D2dDUzl+5huCwMPx+31Aczjyqs55bZx+QZPuLm6Pw5JqFN9hKJsday DUmleBa77i9DSeCkB4xTsQ7iV18kwpCJviRA31+Ysj+63r2A+xIMO4gVcIT1O7+N XrsBG9M15pX8cpw9S1j5Q5uNTK4NAnmsazUxZvkehCPi04i4/uGM+TpTy977nLMF SPSFUjNgRaorDQF1B6WspJ9FvSYW6zu7+hrsiiODjRSWl0KpQqre8qdzvU3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfy3MgSntceOuYdl58vvzOew96zQwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7+/5PA2Irq6PLXYTlOVif6xzz81dAyxs4V A1QB1XoD5Prqa9sb1O1YSiVcggu7CmFcZ4N2IzbqTWcOEx0vp7qr2Ym10VbI9O0D QQJyabFmIYdAyjOZ8JCvoxXapk/7t5QRtjm5Nvq7lMLDbMJJF7MFR93xQz+09QR3 8AEE8LIzLY9qgbKV6m30iwwiyLySgoyaeOePi68uugY8ptd1oWHLkQ8EJdJ+dbJs O+6Z0MpQLN1BCeOcXxqYkDjykv3FUGmbAagPOGFaZff70M1eDDSfqNc26klbv0Bc wYXB0Z/AW0QDhez5JvmJfw0SPvSpZNm6geBg33gGhnw3wQjPoVc= -----END CERTIFICATE-----Generated at Thu Mar 26 17:50:50 2026 by rpki-client