$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: WYWXZaD6aiYNhWBWWg4gTIjW4MJEetRO3WLOEowxm2Q= Subject key identifier: E7:66:04:5C:AB:AA:AA:42:CE:9D:AA:34:EB:DA:42:08:DC:7E:20:2E Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 18F0FBA63E04FA87B717199201F20D919253671E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 01CE Signing time: Tue 24 Mar 2026 10:42:08 +0000 Manifest this update: Tue 24 Mar 2026 10:37:08 +0000 Manifest next update: Fri 27 Mar 2026 11:22:08 +0000 Files and hashes: 1: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 1RATtgEQ2fC4CTZxbGq9E6JcRJ2nj2d+lfS9XKYbQiw=) 2: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: UAGKGSjm0CH0zknVedkxHzDnhJTtYq6aJ2UvpPN4dUI=) 3: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: dYO4EYncz17AgE2NQ+gbu1sETsiNFmn4HcjMbsqN9Sk=) 4: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: bEXXfN8D8Iwh6++6Sf4fNdlCeqEZEgaEYsFhbfU8XrA=) 5: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: RlwQbtKUiWW9ov1dbRH/9/eXGNahbmEgxoduZHd2vu4=) 6: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: M465AGkIQVJLTD8mWLihVhmnQLcd44l1pfpYvPChqew=) 7: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: gom2K2gkNEap6pRf8i6qpFWU+p3reMlN96fhfu6QcT4=) 8: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: omacf/MlMTOtJi7pgs2aPCZclto1hvc9zlwr6k9i/3s=) 9: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: wgJ4l6Z4XSXlS4bEbbx1UlqQbPaEu6hH6VwQa4mHecg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:f0:fb:a6:3e:04:fa:87:b7:17:19:92:01:f2:0d:91:92:53:67:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Mar 24 10:37:08 2026 GMT Not After : Mar 27 11:22:08 2026 GMT Subject: CN=E766045CABAAAA42CE9DAA34EBDA4208DC7E202E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:bb:68:e1:b4:fd:89:cd:1e:90:f5:84:3e:b1: d5:2c:6b:fb:10:4b:dd:9d:32:8f:08:6b:05:70:28: b8:77:cc:82:c3:eb:1e:5f:95:23:bc:35:1e:6a:84: db:a0:78:68:8e:3b:c7:45:10:39:23:19:42:e5:fd: d5:03:b5:0d:cd:7b:66:26:86:61:93:f7:f1:bf:54: c3:92:13:de:79:dc:ae:9d:6e:96:2f:0a:86:2f:bf: ec:91:d7:c7:33:9b:5e:39:df:e2:01:70:08:79:6e: 3b:6f:1d:f3:60:d3:5c:87:23:cc:82:95:cb:6d:87: 03:1c:68:c4:a9:88:56:a9:96:38:88:bc:67:e3:a9: fc:ed:c3:f6:df:3a:8e:69:19:72:35:75:36:66:91: f0:f7:66:dc:8f:d4:ca:ef:8d:42:d9:de:3e:73:04: a3:fc:40:3a:96:e3:e5:be:39:3f:ad:f2:78:c2:00: fa:d8:ee:66:87:fc:84:f5:7c:db:d0:5a:99:2f:2d: 48:a2:db:1e:2b:64:a9:ec:fe:35:d7:2e:82:ae:7a: 60:b3:5d:e8:a5:36:c2:58:fb:f7:db:b8:3b:3d:60: ac:9e:98:52:79:5b:74:14:62:90:c7:c0:2d:e2:55: 01:bd:a2:78:c0:c8:ff:7e:b6:a8:c6:22:8d:ad:ec: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:66:04:5C:AB:AA:AA:42:CE:9D:AA:34:EB:DA:42:08:DC:7E:20:2E X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d8:f7:a4:60:4f:ca:cf:9b:4a:83:ae:09:b0:1a:20:4e:4f: 06:c7:3f:35:75:cc:39:2f:aa:d1:3e:29:a1:32:35:6d:d5:c3: 67:24:0c:3f:f6:d5:76:68:88:a3:8c:67:fd:96:af:d4:d8:ad: 00:79:c1:ae:1d:3f:ad:3e:d4:df:23:a0:7b:df:b5:8c:af:4a: 32:2d:fc:17:4a:0d:10:77:54:68:36:e3:ae:72:5e:16:d8:dc: 4f:63:7b:72:22:5f:fd:d3:7b:70:bd:92:50:95:3e:b3:90:cb: 0c:5a:c6:e3:13:d3:7c:71:bd:63:21:21:ab:89:54:aa:52:de: d6:98:c1:55:8d:a4:ca:73:77:ab:79:d1:c8:4a:b5:26:3c:6c: 40:c6:23:4b:36:49:fa:ef:32:b2:d6:48:bf:5d:44:6d:f4:40: 78:33:ef:5e:01:dd:88:87:cf:95:84:0f:63:9b:da:f5:d7:e7: 31:39:5d:8d:66:d2:9f:13:00:87:96:94:ee:bb:57:2f:aa:33: 6d:70:59:40:2a:74:c9:eb:67:78:2f:ae:90:db:63:49:1d:57: e7:0b:6b:7e:c4:f8:23:01:b8:40:43:7f:d1:81:96:96:ac:9e: 9d:7d:48:a7:d8:8c:9d:02:92:d8:79:4a:ab:ba:f6:8b:41:46: d4:fc:d8:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGPD7pj4E+oe3FxmSAfINkZJTZx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAzMjQxMDM3MDhaFw0yNjAzMjcxMTIyMDhaMDMxMTAvBgNV BAMTKEU3NjYwNDVDQUJBQUFBNDJDRTlEQUEzNEVCREE0MjA4REM3RTIwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyu2jhtP2JzR6Q9YQ+sdUsa/sQ S92dMo8IawVwKLh3zILD6x5flSO8NR5qhNugeGiOO8dFEDkjGULl/dUDtQ3Ne2Ym hmGT9/G/VMOSE9553K6dbpYvCoYvv+yR18czm1453+IBcAh5bjtvHfNg01yHI8yC lctthwMcaMSpiFapljiIvGfjqfztw/bfOo5pGXI1dTZmkfD3ZtyP1MrvjULZ3j5z BKP8QDqW4+W+OT+t8njCAPrY7maH/IT1fNvQWpkvLUii2x4rZKns/jXXLoKuemCz XeilNsJY+/fbuDs9YKyemFJ5W3QUYpDHwC3iVQG9onjAyP9+tqjGIo2t7E4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU52YEXKuqqkLOnao069pCCNx+IC4wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfY96RgT8rPm0qDrgmwGiBOTwbHPzV1zDkv qtE+KaEyNW3Vw2ckDD/21XZoiKOMZ/2Wr9TYrQB5wa4dP60+1N8joHvftYyvSjIt /BdKDRB3VGg2465yXhbY3E9je3IiX/3Te3C9klCVPrOQywxaxuMT03xxvWMhIauJ VKpS3taYwVWNpMpzd6t50chKtSY8bEDGI0s2SfrvMrLWSL9dRG30QHgz714B3YiH z5WED2Ob2vXX5zE5XY1m0p8TAIeWlO67Vy+qM21wWUAqdMnrZ3gvrpDbY0kdV+cL a37E+CMBuEBDf9GBlpasnp19SKfYjJ0Ckth5Squ69otBRtT82Mc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:49 2026 by rpki-client