$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: jKjEFDU+Z45VzUSAxuXmQFYV4spDNIV3kk7byGty7ls= Subject key identifier: A2:92:30:6A:F7:27:ED:51:7A:A4:17:AE:54:0E:8B:20:A0:DC:17:86 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 0CE3CE37F749589E513BD5AA3A0544F4E1FBD2EB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:44:06 +0000 Manifest this update: Thu 24 Sep 2026 06:39:06 +0000 Manifest next update: Fri 25 Sep 2026 06:49:06 +0000 Files and hashes: 1: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 2: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 3: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 4: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 5: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 6: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: VNn8B1sKmR3h7FEYI0PqOtqdlKWmMaByOxv9f+sfyUI=) 7: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) 8: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 9: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 06:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e3:ce:37:f7:49:58:9e:51:3b:d5:aa:3a:05:44:f4:e1:fb:d2:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Sep 24 06:39:06 2026 GMT Not After : Sep 25 06:49:06 2026 GMT Subject: CN=A292306AF727ED517AA417AE540E8B20A0DC1786 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6c:dc:fb:08:86:39:80:0c:35:1f:95:99:15: 45:e0:11:d1:03:89:24:0f:11:34:e4:72:4e:7a:78: d4:a9:ae:7e:f6:9c:2f:e4:d9:dd:a6:d6:9e:4d:44: c0:da:7e:99:d0:bb:36:16:4f:00:8f:5e:62:15:63: 8b:d1:a9:18:01:51:f9:29:51:d5:92:e0:49:be:ed: b9:d0:f6:30:39:a8:92:c0:1c:6f:6a:24:21:d7:80: a3:df:83:b6:1e:3f:c4:cb:78:56:26:81:b7:b3:5d: fe:78:71:bb:17:4b:72:88:7f:c6:51:eb:90:7e:da: 6a:15:b6:4e:e0:73:ba:fb:d8:2e:ae:5a:42:1e:8e: 04:a0:07:e1:3a:b1:84:d4:9f:f4:98:c3:a4:3a:a7: 70:4d:e4:a0:73:46:cc:64:ff:1b:d4:33:ee:ca:aa: 90:ca:c2:b7:ac:00:c1:0c:e5:45:32:1d:2f:f1:7e: 43:5f:49:43:b4:be:c1:11:7e:9c:35:97:2f:d5:21: 3a:06:77:38:4e:e2:fa:89:f9:77:e5:e5:2f:3e:ca: b0:ea:a1:e4:a5:ec:2c:05:3f:89:4e:a2:d2:0c:f3: 8f:63:84:a0:cf:d5:b3:fc:6e:23:21:6a:98:1c:73: a2:23:99:77:89:aa:f0:3d:0d:d3:28:85:af:f8:c4: a4:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:92:30:6A:F7:27:ED:51:7A:A4:17:AE:54:0E:8B:20:A0:DC:17:86 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ed:ad:0a:37:91:40:09:4f:57:73:66:a5:9f:a2:c6:73:0a: c6:2f:2c:5c:fd:77:e1:73:c9:a0:9e:83:54:61:06:76:13:a4: d1:90:5e:56:ba:67:2d:19:11:82:7f:3f:95:01:70:cc:fe:a7: 77:31:cf:13:33:5b:59:38:9c:50:12:db:22:a9:1b:d4:3d:19: a6:2e:5b:d5:d7:31:17:3a:48:70:9f:3e:08:e1:23:e0:90:ab: e6:39:6e:c1:8f:05:60:d8:89:d8:e9:ce:e5:53:1a:1c:5b:c6: 18:8d:c1:82:81:c6:04:aa:55:a4:52:ab:46:9e:3b:85:a6:cf: 31:ea:e5:92:15:32:2c:3c:a9:26:19:93:60:bb:d7:82:03:0b: 8c:8f:a3:42:56:97:fc:65:8f:8d:a0:d4:6d:7b:07:8f:65:d5: c9:40:b7:93:c1:52:33:d6:9b:22:18:96:17:18:be:b4:42:fe: 1c:65:3a:b1:ac:fb:ae:f0:5d:bf:cd:f1:b3:d0:b5:07:12:c0: 84:6e:bb:33:1b:a6:a9:24:bc:44:52:05:8d:3f:49:2e:68:00: bb:ef:7c:17:03:a6:3d:4c:5a:1e:6b:7c:57:50:fe:df:1b:15: 2b:02:68:d7:4e:78:53:49:90:60:1e:41:40:36:bb:71:74:95: 7a:22:62:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOPON/dJWJ5RO9WqOgVE9OH70uswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA5MjQwNjM5MDZaFw0yNjA5MjUwNjQ5MDZaMDMxMTAvBgNV BAMTKEEyOTIzMDZBRjcyN0VENTE3QUE0MTdBRTU0MEU4QjIwQTBEQzE3ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClbNz7CIY5gAw1H5WZFUXgEdED iSQPETTkck56eNSprn72nC/k2d2m1p5NRMDafpnQuzYWTwCPXmIVY4vRqRgBUfkp UdWS4Em+7bnQ9jA5qJLAHG9qJCHXgKPfg7YeP8TLeFYmgbezXf54cbsXS3KIf8ZR 65B+2moVtk7gc7r72C6uWkIejgSgB+E6sYTUn/SYw6Q6p3BN5KBzRsxk/xvUM+7K qpDKwresAMEM5UUyHS/xfkNfSUO0vsERfpw1ly/VIToGdzhO4vqJ+Xfl5S8+yrDq oeSl7CwFP4lOotIM849jhKDP1bP8biMhapgcc6IjmXeJqvA9DdMoha/4xKQ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopIwavcn7VF6pBeuVA6LIKDcF4YwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAHtrQo3kUAJT1dzZqWfosZzCsYvLFz9d+Fz yaCeg1RhBnYTpNGQXla6Zy0ZEYJ/P5UBcMz+p3cxzxMzW1k4nFAS2yKpG9Q9GaYu W9XXMRc6SHCfPgjhI+CQq+Y5bsGPBWDYidjpzuVTGhxbxhiNwYKBxgSqVaRSq0ae O4WmzzHq5ZIVMiw8qSYZk2C714IDC4yPo0JWl/xlj42g1G17B49l1clAt5PBUjPW myIYlhcYvrRC/hxlOrGs+67wXb/N8bPQtQcSwIRuuzMbpqkkvERSBY0/SS5oALvv fBcDpj1MWh5rfFdQ/t8bFSsCaNdOeFNJkGAeQUA2u3F0lXoiYo0= -----END CERTIFICATE-----Generated at Thu Sep 24 20:56:42 2026 by rpki-client