$ rpki-client -vvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: x9zi6PgmLnGWIGQ8+jDcAvB2PR+X6w5F9p/Jd+AGo/0= Subject key identifier: DA:03:AD:A5:9E:C2:EF:12:41:32:DA:46:6F:4D:03:6C:C9:66:00:BA Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 6AC20F8413E871D7129672FE639313A33CB5FBD4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:14:44 +0000 Manifest this update: Thu 23 Jul 2026 16:09:44 +0000 Manifest next update: Fri 24 Jul 2026 18:26:44 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) 2: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: rsxZR4DEaVUgmRG3It2HT5CW5JJtLGkwzAngplGxorY=) 3: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:26:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:c2:0f:84:13:e8:71:d7:12:96:72:fe:63:93:13:a3:3c:b5:fb:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Jul 23 16:09:44 2026 GMT Not After : Jul 24 18:26:44 2026 GMT Subject: CN=DA03ADA59EC2EF124132DA466F4D036CC96600BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7e:5f:5e:4b:e0:f1:49:52:aa:e8:52:32:f2: c9:83:48:49:93:b9:79:99:46:9d:30:54:73:b8:70: e3:9d:5f:58:46:97:fc:45:fc:a1:70:4d:8c:9c:c6: 7f:29:87:6b:73:ff:7d:55:03:3d:ce:9e:20:eb:93: 50:92:79:c3:f5:de:c3:52:37:a0:f3:d1:65:47:65: 89:3f:10:c1:0b:ff:e5:97:57:4d:38:70:4d:e8:3d: 7d:0e:0a:7f:8f:3c:13:ef:82:a9:a8:f4:74:05:50: 06:10:a8:33:a0:b0:c9:64:ec:43:18:f8:b2:91:0c: 14:97:98:7b:77:f3:28:bc:fd:76:0d:ff:37:af:d0: 81:59:60:cd:91:08:04:09:37:2c:f1:17:ce:56:d3: e8:00:be:27:e9:4f:70:10:87:c2:af:90:3b:02:9a: 11:7b:f0:b9:a4:6a:61:83:09:f1:07:fc:f7:49:e3: 11:b8:d5:7e:bb:fc:b7:40:65:5b:73:0b:2d:49:58: c7:8b:b0:72:4c:9d:ad:db:c8:c7:9b:dc:36:72:09: ce:ab:2f:21:98:dd:00:e5:6c:fe:c9:69:6c:4f:07: 2d:57:a1:da:df:32:04:5e:35:2d:4c:88:d5:94:ec: e6:cf:a8:4f:7f:49:1c:e0:3c:65:43:37:3c:8c:10: 6b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:03:AD:A5:9E:C2:EF:12:41:32:DA:46:6F:4D:03:6C:C9:66:00:BA X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:43:28:e4:cd:30:2a:02:80:b2:4a:1f:6c:da:52:fa:73:67: 21:62:df:85:f6:db:1a:ce:df:7a:3c:82:82:fa:03:3b:fa:b2: 72:ab:fe:9e:27:ee:ab:8a:85:6f:f6:85:36:a3:de:bf:d9:32: f3:68:74:d7:fe:7d:e0:0f:80:bc:4a:10:a5:c0:5d:1e:ab:4b: 7b:86:3b:79:56:61:d1:16:c3:a4:ee:85:63:05:71:60:e2:49: 1d:7e:fa:69:fd:ff:3b:9c:2f:fd:34:91:f8:49:cc:96:25:29: 2f:75:76:a5:f1:37:fd:dc:a7:52:1c:92:76:56:6a:1b:58:23: 7d:c2:98:b0:9b:3f:e1:af:3e:8f:84:e8:d0:24:32:60:ee:66: 4d:ed:03:ef:b7:d4:33:7c:51:d9:96:39:d1:3e:35:85:3d:83: d2:b6:72:f6:7b:fc:b1:2e:5d:86:c7:1f:24:be:72:d8:51:c6: 9a:19:95:61:78:e5:cc:fe:ff:08:49:1a:19:78:a4:cb:aa:70: 81:28:e0:34:bb:59:88:54:83:7d:5d:6c:b5:cf:51:68:69:50: 51:c6:08:ed:2d:fb:8a:1e:e1:14:af:e3:e1:a9:3a:47:d0:1b: 7b:a0:69:89:a6:da:b8:8c:8d:5e:3f:29:84:d4:94:7c:c2:b6: 25:98:13:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUasIPhBPocdcSlnL+Y5MTozy1+9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjA3MjMxNjA5NDRaFw0yNjA3MjQxODI2NDRaMDMxMTAvBgNV BAMTKERBMDNBREE1OUVDMkVGMTI0MTMyREE0NjZGNEQwMzZDQzk2NjAwQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCLfl9eS+DxSVKq6FIy8smDSEmT uXmZRp0wVHO4cOOdX1hGl/xF/KFwTYycxn8ph2tz/31VAz3OniDrk1CSecP13sNS N6Dz0WVHZYk/EMEL/+WXV004cE3oPX0OCn+PPBPvgqmo9HQFUAYQqDOgsMlk7EMY +LKRDBSXmHt38yi8/XYN/zev0IFZYM2RCAQJNyzxF85W0+gAvifpT3AQh8KvkDsC mhF78LmkamGDCfEH/PdJ4xG41X67/LdAZVtzCy1JWMeLsHJMna3byMeb3DZyCc6r LyGY3QDlbP7JaWxPBy1XodrfMgReNS1MiNWU7ObPqE9/SRzgPGVDNzyMEGs3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2gOtpZ7C7xJBMtpGb00DbMlmALowHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACtDKOTNMCoCgLJKH2zaUvpzZyFi34X22xrO 33o8goL6Azv6snKr/p4n7quKhW/2hTaj3r/ZMvNodNf+feAPgLxKEKXAXR6rS3uG O3lWYdEWw6TuhWMFcWDiSR1++mn9/zucL/00kfhJzJYlKS91dqXxN/3cp1IcknZW ahtYI33CmLCbP+GvPo+E6NAkMmDuZk3tA++31DN8UdmWOdE+NYU9g9K2cvZ7/LEu XYbHHyS+cthRxpoZlWF45cz+/whJGhl4pMuqcIEo4DS7WYhUg31dbLXPUWhpUFHG CO0t+4oe4RSv4+GpOkfQG3ugaYmm2riMjV4/KYTUlHzCtiWYE9k= -----END CERTIFICATE-----Generated at Fri Jul 24 03:56:32 2026 by rpki-client