$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: uMPZoKAuC8WGnvhXZz1v+N6l7abYk11W7fOGe5c7+4A= Subject key identifier: 91:AC:6D:0D:D7:BE:CC:5F:2D:04:F1:2E:A8:14:6B:6F:92:33:E3:86 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 21C73F6E5C1E8BAFFE2A3D4C48CD742CC5DC3CD6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:56:41 +0000 Manifest this update: Tue 12 May 2026 22:51:41 +0000 Manifest next update: Thu 14 May 2026 02:22:41 +0000 Files and hashes: 1: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: Jlk3vmLWthNbWTR5pmW7Y3B1AqBtBotOSWRJ1ePX/Zk=) 2: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 3: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 4: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 5: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 6: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 7: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) 8: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) 9: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:58:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:c7:3f:6e:5c:1e:8b:af:fe:2a:3d:4c:48:cd:74:2c:c5:dc:3c:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: May 12 22:51:41 2026 GMT Not After : May 14 02:22:41 2026 GMT Subject: CN=91AC6D0DD7BECC5F2D04F12EA8146B6F9233E386 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ca:cd:3b:fc:40:99:8f:14:3d:7a:94:2e:9c: de:6e:cd:46:1f:8d:a1:46:8f:4f:bf:49:68:a8:d8: 77:87:01:5d:c3:8d:71:ba:44:dc:b2:87:df:9a:a9: d6:ae:a0:06:2a:0e:54:fd:a3:3d:00:94:e5:7e:e2: 60:46:2e:b0:ed:c1:fc:00:a2:16:24:f0:94:57:21: 44:c3:49:1c:d0:01:db:01:bf:74:00:7a:16:06:32: 7f:96:d3:2d:b7:0f:59:e7:f1:57:95:f7:17:a2:10: 17:03:14:55:70:e6:dd:2d:7a:28:83:4b:7f:73:e8: 22:8c:a0:d3:1c:12:e8:96:59:0c:3b:3a:e4:13:6c: b6:87:c5:4e:17:a8:78:50:fb:2e:7a:d1:f5:e5:31: 43:98:a4:1f:f3:17:96:cb:37:54:b9:7c:c8:1d:3b: 98:7a:d0:0f:a1:5b:57:bb:96:38:d3:39:20:e9:3a: 1e:b8:ca:41:79:ba:18:35:2d:03:ca:8d:c8:6b:46: 97:ac:fa:eb:19:f3:42:d0:57:d9:d5:db:97:32:5d: 50:38:8c:d2:c5:e4:ee:6f:fb:49:ed:0a:b1:82:c7: 97:92:16:34:2e:43:6e:7a:47:8d:68:83:97:5f:cf: 56:98:ba:05:f3:e2:73:9d:8d:c2:f2:bd:8a:6f:27: bb:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:AC:6D:0D:D7:BE:CC:5F:2D:04:F1:2E:A8:14:6B:6F:92:33:E3:86 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:aa:01:4b:1c:b7:a7:7b:30:aa:55:c4:8f:e1:61:4f:9a:72: 91:90:35:9b:da:2a:1e:1a:f4:49:1a:9f:fd:29:2b:60:86:39: a1:50:5f:0a:85:a7:5c:0c:35:10:65:c8:35:87:57:68:c9:a7: 15:37:51:95:cf:65:9e:fd:87:18:83:36:ec:62:0d:c0:97:bc: e1:ff:cd:c9:37:0c:98:91:cf:9d:7a:b2:51:9e:cb:18:7e:1a: 54:a1:09:87:3f:be:e3:46:45:f5:6c:ce:96:34:17:0b:bf:70: a9:b5:f9:5e:cf:b8:ce:65:f9:74:ec:eb:e5:5c:89:b7:25:50: d7:59:cb:0e:28:dc:9b:17:10:9d:f1:9c:b4:e7:4c:aa:3e:50: 20:b8:e9:c8:0a:bd:ff:54:83:40:f0:c2:41:44:67:23:02:ae: a7:70:ec:97:7b:88:c5:e6:af:10:3d:98:9e:ea:0a:6c:5f:0b: c4:3c:19:bc:6b:6f:9b:c9:9f:d4:9f:d4:05:81:d4:14:52:1d: 6b:cd:9b:ae:ed:0e:62:ee:51:69:23:0d:4b:2c:4f:62:8d:92: 11:b7:13:e2:e3:44:a8:2d:ab:d3:88:f9:81:2f:62:13:cd:f3: 67:a7:72:e6:e4:b8:01:79:fb:ea:00:fe:68:f3:94:ac:40:57: 2f:62:46:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIcc/blwei6/+Kj1MSM10LMXcPNYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA1MTIyMjUxNDFaFw0yNjA1MTQwMjIyNDFaMDMxMTAvBgNV BAMTKDkxQUM2RDBERDdCRUNDNUYyRDA0RjEyRUE4MTQ2QjZGOTIzM0UzODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2ys07/ECZjxQ9epQunN5uzUYf jaFGj0+/SWio2HeHAV3DjXG6RNyyh9+aqdauoAYqDlT9oz0AlOV+4mBGLrDtwfwA ohYk8JRXIUTDSRzQAdsBv3QAehYGMn+W0y23D1nn8VeV9xeiEBcDFFVw5t0teiiD S39z6CKMoNMcEuiWWQw7OuQTbLaHxU4XqHhQ+y560fXlMUOYpB/zF5bLN1S5fMgd O5h60A+hW1e7ljjTOSDpOh64ykF5uhg1LQPKjchrRpes+usZ80LQV9nV25cyXVA4 jNLF5O5v+0ntCrGCx5eSFjQuQ256R41og5dfz1aYugXz4nOdjcLyvYpvJ7tRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkaxtDde+zF8tBPEuqBRrb5Iz44YwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGqAUsct6d7MKpVxI/hYU+acpGQNZvaKh4a 9Ekan/0pK2CGOaFQXwqFp1wMNRBlyDWHV2jJpxU3UZXPZZ79hxiDNuxiDcCXvOH/ zck3DJiRz516slGeyxh+GlShCYc/vuNGRfVszpY0Fwu/cKm1+V7PuM5l+XTs6+Vc ibclUNdZyw4o3JsXEJ3xnLTnTKo+UCC46cgKvf9Ug0DwwkFEZyMCrqdw7Jd7iMXm rxA9mJ7qCmxfC8Q8Gbxrb5vJn9Sf1AWB1BRSHWvNm67tDmLuUWkjDUssT2KNkhG3 E+LjRKgtq9OI+YEvYhPN82encubkuAF5++oA/mjzlKxAVy9iRtg= -----END CERTIFICATE-----Generated at Wed May 13 04:47:48 2026 by rpki-client