$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: gRDr+6BqxKaE8S7JR1gW0YIhY52jWbx+/HzP8Gl1zR0= Subject key identifier: 62:68:77:F9:CE:00:F0:2F:41:65:95:45:2A:4D:FB:99:CD:05:F3:E3 Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 3563602F0414CACCB880800D352311B315D43C24 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 02:44:05 +0000 Manifest this update: Thu 24 Sep 2026 02:39:05 +0000 Manifest next update: Fri 25 Sep 2026 03:54:05 +0000 Files and hashes: 1: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: CzVUILO0jc55iLA6qX0Tx+FjmJ27Y9r9aGh2Kq10erY=) 2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:63:60:2f:04:14:ca:cc:b8:80:80:0d:35:23:11:b3:15:d4:3c:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Sep 24 02:39:05 2026 GMT Not After : Sep 25 03:54:05 2026 GMT Subject: CN=626877F9CE00F02F416595452A4DFB99CD05F3E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:d0:ab:9c:38:88:2f:05:19:97:66:bd:70:be: 59:3d:09:70:5f:58:a9:98:de:d8:a0:00:13:f8:3e: 22:4b:14:b0:6a:d6:57:c6:78:8e:ac:f4:6b:5b:f1: 5f:f8:e5:34:a1:13:24:52:ed:ac:4b:e4:dd:3b:d1: 21:eb:80:91:55:37:fa:b5:3e:ce:1f:58:22:73:5e: 54:42:09:d1:0f:68:9b:a2:27:bc:b9:69:f2:2a:43: bb:c6:4e:98:f8:b4:0a:9d:5e:f1:27:71:9c:8f:38: 56:79:1e:3a:a4:98:9d:7c:f6:87:27:f9:8d:fd:a2: ed:fd:0c:f4:c5:46:4d:6e:bc:e0:af:1b:7c:ab:13: 70:a3:58:6c:c4:33:f3:49:cf:ee:f5:a8:dd:e1:46: c4:3f:62:4e:dc:83:b3:37:e5:b9:c4:23:c7:b0:1e: 37:d1:25:92:21:12:7b:e7:36:91:a5:42:77:c3:72: 5f:aa:36:dd:a4:29:cc:ac:a4:b7:56:c6:51:42:c1: af:ce:26:43:38:cc:75:bb:77:b0:0a:95:43:90:eb: c7:e4:61:35:bd:e3:30:ea:31:5c:f8:aa:ed:5a:0f: 33:fe:cd:ed:7d:f6:d8:78:36:92:7b:6e:28:00:22: 40:71:96:82:cd:b0:81:f5:06:22:7d:54:20:93:9a: 68:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:68:77:F9:CE:00:F0:2F:41:65:95:45:2A:4D:FB:99:CD:05:F3:E3 X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:6e:5c:75:c8:5f:4a:cf:a2:42:73:ed:96:00:ef:13:30:fa: e1:a1:c3:b6:54:8e:b3:f1:bb:c9:45:b8:bd:d1:1c:a6:34:7c: e1:94:15:89:8f:90:01:e7:17:13:39:58:c9:ad:98:df:19:5b: 48:d9:c1:38:20:49:18:b3:84:4d:69:04:f1:d7:a8:d7:47:96: e5:de:d3:6d:7c:6c:75:ad:a9:f3:69:5a:e2:49:af:be:05:a2: a3:f9:a8:d7:be:ed:ef:80:6e:31:a7:ab:c2:aa:79:b3:b5:d9: 4f:14:17:65:52:14:15:de:0e:ab:6b:eb:08:40:cf:3c:8a:1c: 65:59:a8:c0:d2:73:b4:ff:f8:43:8b:1f:9f:11:13:5c:51:45: cc:56:78:b0:52:00:92:b8:4d:ba:5f:f4:de:33:62:d3:c0:15: ba:4b:98:44:21:0c:a3:df:a7:e1:dd:64:ba:13:e3:4f:d8:00: 91:21:a6:ef:fc:f6:ef:fa:40:bb:91:c2:0a:de:dd:c9:a2:ee: 83:e0:51:45:41:d2:4b:de:1a:0e:84:56:e6:d0:9e:e1:90:40: bb:70:c6:08:59:6d:27:08:06:91:b3:56:cc:01:c5:71:78:db: 19:8c:bd:4e:83:92:9d:84:6e:79:53:db:a5:4c:94:2c:a5:c8: 08:90:8f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWNgLwQUysy4gIANNSMRsxXUPCQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjA5MjQwMjM5MDVaFw0yNjA5MjUwMzU0MDVaMDMxMTAvBgNV BAMTKDYyNjg3N0Y5Q0UwMEYwMkY0MTY1OTU0NTJBNERGQjk5Q0QwNUYzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy0KucOIgvBRmXZr1wvlk9CXBf WKmY3tigABP4PiJLFLBq1lfGeI6s9Gtb8V/45TShEyRS7axL5N070SHrgJFVN/q1 Ps4fWCJzXlRCCdEPaJuiJ7y5afIqQ7vGTpj4tAqdXvEncZyPOFZ5HjqkmJ189ocn +Y39ou39DPTFRk1uvOCvG3yrE3CjWGzEM/NJz+71qN3hRsQ/Yk7cg7M35bnEI8ew HjfRJZIhEnvnNpGlQnfDcl+qNt2kKcyspLdWxlFCwa/OJkM4zHW7d7AKlUOQ68fk YTW94zDqMVz4qu1aDzP+ze199th4NpJ7bigAIkBxloLNsIH1BiJ9VCCTmmj9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYmh3+c4A8C9BZZVFKk37mc0F8+MwHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAExuXHXIX0rPokJz7ZYA7xMw+uGhw7ZUjrPx u8lFuL3RHKY0fOGUFYmPkAHnFxM5WMmtmN8ZW0jZwTggSRizhE1pBPHXqNdHluXe 0218bHWtqfNpWuJJr74FoqP5qNe+7e+AbjGnq8KqebO12U8UF2VSFBXeDqtr6whA zzyKHGVZqMDSc7T/+EOLH58RE1xRRcxWeLBSAJK4Tbpf9N4zYtPAFbpLmEQhDKPf p+HdZLoT40/YAJEhpu/89u/6QLuRwgre3cmi7oPgUUVB0kveGg6EVubQnuGQQLtw xghZbScIBpGzVswBxXF42xmMvU6Dkp2EbnlT26VMlCylyAiQj9E= -----END CERTIFICATE-----Generated at Thu Sep 24 10:50:52 2026 by rpki-client