$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft File: 87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft (raw, json) Hash identifier: tXrbS1VjZYL244K3kMyW7I8pOFWFN+Qe/J95eAbbWAs= Subject key identifier: DC:87:09:93:A8:F1:E3:CC:23:40:5D:AB:0C:FE:93:0C:E1:25:51:F4 Authority key identifier: 87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74 Certificate issuer: /CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74 Certificate serial: 2D41D6602450462CA084FA8A9AAF62C87D96B966 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft Manifest number: 3F Signing time: Sun 15 Nov 2026 07:23:29 +0000 Manifest this update: Sun 15 Nov 2026 07:18:29 +0000 Manifest next update: Mon 16 Nov 2026 08:10:29 +0000 Files and hashes: 1: 87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl (hash: AmqHYjazDJ/4xHJRAfZ4mhe/jb54MqHd1KteIPYfDPE=) 2: 3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa (hash: z0l7Jg74I6/X1fUoqM2N8PY0DnkyoPTf46foVKvgxYU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:10:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:41:d6:60:24:50:46:2c:a0:84:fa:8a:9a:af:62:c8:7d:96:b9:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74 Validity Not Before: Nov 15 07:18:29 2026 GMT Not After : Nov 16 08:10:29 2026 GMT Subject: CN=DC870993A8F1E3CC23405DAB0CFE930CE12551F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:b7:01:c1:29:80:ef:fc:be:6d:de:a4:ae: 43:61:7c:79:40:50:ef:4c:94:bd:6d:de:a4:85:7a: 8c:9c:85:62:03:a1:80:1f:f2:a5:26:c2:9d:ae:00: 73:9b:fc:c3:cb:50:51:f6:2c:69:b7:76:7b:fb:37: 79:29:11:66:78:cc:27:b1:1a:6c:80:e7:f7:dd:68: a5:21:6a:f7:bb:78:73:b5:0a:14:80:35:f2:a7:db: 1f:11:b4:1a:43:8b:77:70:76:0e:c4:8f:4a:e7:07: 59:82:87:d1:5c:d9:2d:e5:a5:fa:d5:8b:f0:3a:62: c6:12:e8:c7:0b:60:05:5f:0b:57:a0:ed:52:87:60: c4:80:89:04:0a:1a:ac:c3:5c:2f:e3:3a:59:c5:a5: f5:05:dc:2b:ee:51:8e:69:d7:35:14:01:95:34:b9: 06:3e:45:23:f1:37:cf:a7:11:70:f0:1f:85:8d:cf: 33:01:81:50:01:48:7e:9a:88:3f:45:6a:4a:b2:be: 3e:e4:b3:0b:eb:b3:35:55:18:68:b0:b3:f9:51:c0: 61:73:00:64:cd:b9:25:3c:33:de:d1:8a:c3:1d:81: 9f:8c:05:31:f2:2c:fc:e8:a6:75:1f:5b:24:d9:3b: b6:58:83:c6:2d:23:5c:dc:30:4e:f9:1f:fd:84:b0: 40:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:87:09:93:A8:F1:E3:CC:23:40:5D:AB:0C:FE:93:0C:E1:25:51:F4 X509v3 Authority Key Identifier: keyid:87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:ad:20:23:fa:72:b5:06:29:24:fe:7b:b3:32:54:ff:ec:9e: 8d:81:88:2b:71:84:c8:0a:6c:d0:ec:1c:31:93:db:f9:c0:83: e0:ec:d4:2d:60:30:e8:57:42:6f:fd:ae:e6:5f:74:3b:d9:ec: ad:c6:b3:c8:ef:fc:ed:dc:f1:bd:3a:6e:ac:cd:e3:cd:23:9c: 79:e1:41:87:f6:0e:67:d4:ca:ff:77:33:e6:50:df:28:c1:00: 92:93:d0:54:eb:e4:22:63:1f:16:9d:b8:e7:43:b8:fa:c2:4c: bd:d2:48:b5:1b:cf:28:dc:be:db:aa:4f:54:9e:f5:2e:4c:7d: 66:4f:6b:10:a8:58:f2:3d:d6:0e:59:37:30:af:a3:b5:47:21: 1a:4c:1b:c8:33:53:4e:a4:ac:a7:bc:88:ff:a0:ac:25:9b:6f: 98:a5:87:26:9c:7b:b2:ef:33:10:0d:e6:2d:ff:58:45:6d:bb: ab:66:a5:60:83:7f:04:a7:48:50:33:96:0a:0b:fc:ba:90:b5: e3:92:88:b5:a4:fa:13:45:f1:7c:cf:ac:c8:a7:5e:7b:d5:41: 3a:94:e0:0b:5d:2f:86:01:64:2f:2d:31:67:ed:4d:8b:a5:ed: 4e:09:6e:09:c9:b1:2a:b0:67:39:41:77:c9:6d:21:1d:a3:8c: b4:91:8e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULUHWYCRQRiyghPqKmq9iyH2WuWYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNTdENzAxN0IzMUZCMDhCNDJERDRFQ0U2QjI5RjM2 RDkzN0U3NDAeFw0yNjExMTUwNzE4MjlaFw0yNjExMTYwODEwMjlaMDMxMTAvBgNV BAMTKERDODcwOTkzQThGMUUzQ0MyMzQwNURBQjBDRkU5MzBDRTEyNTUxRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulLcBwSmA7/y+bd6krkNhfHlA UO9MlL1t3qSFeoychWIDoYAf8qUmwp2uAHOb/MPLUFH2LGm3dnv7N3kpEWZ4zCex GmyA5/fdaKUhave7eHO1ChSANfKn2x8RtBpDi3dwdg7Ej0rnB1mCh9Fc2S3lpfrV i/A6YsYS6McLYAVfC1eg7VKHYMSAiQQKGqzDXC/jOlnFpfUF3CvuUY5p1zUUAZU0 uQY+RSPxN8+nEXDwH4WNzzMBgVABSH6aiD9Fakqyvj7kswvrszVVGGiws/lRwGFz AGTNuSU8M97RisMdgZ+MBTHyLPzopnUfWyTZO7ZYg8YtI1zcME75H/2EsECZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3IcJk6jx48wjQF2rDP6TDOElUfQwHwYDVR0j BBgwFoAUhzV9cBezH7CLQt1Ozmsp822TfnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZDA3YWUtM2M3NC00NTdkLTg5N2YtNWI4MDZiZWRlYTg3LzEvODczNTdENzAx N0IzMUZCMDhCNDJERDRFQ0U2QjI5RjM2RDkzN0U3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NzM1N0Q3MDE3QjMxRkIwOEI0MkRENEVDRTZCMjlGMzZEOTM3 RTc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZDA3YWUtM2M3NC00NTdkLTg5 N2YtNWI4MDZiZWRlYTg3LzEvODczNTdENzAxN0IzMUZCMDhCNDJERDRFQ0U2QjI5 RjM2RDkzN0U3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAytICP6crUGKST+e7MyVP/sno2BiCtxhMgK bNDsHDGT2/nAg+Ds1C1gMOhXQm/9ruZfdDvZ7K3Gs8jv/O3c8b06bqzN480jnHnh QYf2DmfUyv93M+ZQ3yjBAJKT0FTr5CJjHxaduOdDuPrCTL3SSLUbzyjcvtuqT1Se 9S5MfWZPaxCoWPI91g5ZNzCvo7VHIRpMG8gzU06krKe8iP+grCWbb5ilhyace7Lv MxAN5i3/WEVtu6tmpWCDfwSnSFAzlgoL/LqQteOSiLWk+hNF8XzPrMinXnvVQTqU 4AtdL4YBZC8tMWftTYul7U4JbgnJsSqwZzlBd8ltIR2jjLSRjnA= -----END CERTIFICATE-----Generated at Sun Nov 15 14:34:42 2026 by rpki-client