$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: TnJpRbHwmY/zmGr5mCXE8g198AXg62ZnRyPnBWFB1aw= Subject key identifier: 9B:61:5E:BA:82:59:53:74:F7:BF:15:44:13:06:EA:6E:4D:E6:48:CA Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 6EC4EA7FBBECFDA2E373F4E848F30BB739DF1721 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 19:40:16 +0000 Manifest this update: Wed 23 Sep 2026 19:35:16 +0000 Manifest next update: Thu 24 Sep 2026 20:05:16 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) 3: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: P5R0ty7J3kprk/FNPf9jXtKkicZKc9tixOYQSHUM+28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:05:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c4:ea:7f:bb:ec:fd:a2:e3:73:f4:e8:48:f3:0b:b7:39:df:17:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Sep 23 19:35:16 2026 GMT Not After : Sep 24 20:05:16 2026 GMT Subject: CN=9B615EBA82595374F7BF15441306EA6E4DE648CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:94:e6:50:b0:05:f2:21:7c:2c:af:49:f1:92: b6:a2:c7:28:b1:38:05:ac:a6:c3:fb:0b:69:79:5b: a9:1c:35:7e:93:49:0b:69:dd:a1:20:2e:76:9a:16: dd:77:2b:33:2b:db:3b:ae:4e:76:b9:3e:ec:b0:d6: 27:f5:02:87:9b:c4:99:bf:ad:14:97:97:c4:26:ce: 7e:07:80:02:81:2c:56:9a:c5:04:27:6b:ca:79:97: fd:b3:ef:8c:43:b1:95:ce:3a:b2:ca:3e:72:d1:a0: 31:2a:ac:7c:63:72:fe:f1:11:cd:0c:2c:64:91:cc: 12:ab:e9:8d:e8:89:40:40:a4:83:4d:27:6f:4d:1b: dd:aa:70:7e:01:48:ba:6c:3f:72:2a:ac:32:8f:c2: d1:59:27:10:6a:8a:9e:69:96:3c:93:0a:de:8a:ea: 5e:f9:31:dc:b5:dd:b9:f8:01:54:ee:61:3a:29:d7: 96:2d:1a:84:43:7e:11:8f:cb:3f:38:cb:b2:ba:dd: a3:16:87:d7:75:70:0a:53:35:df:b4:f4:e0:a2:45: e0:19:48:ba:1a:20:d2:b1:dd:00:d0:0c:2e:ca:d2: 9b:88:b2:45:60:01:80:95:34:41:b2:49:9b:7d:f6: 36:d6:79:16:4d:a9:62:ab:a4:b4:7f:c3:52:5e:f8: eb:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:61:5E:BA:82:59:53:74:F7:BF:15:44:13:06:EA:6E:4D:E6:48:CA X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:64:92:31:72:5a:8d:46:c1:84:eb:64:29:85:4b:65:84:5a: 5d:0d:cb:b7:52:36:d8:32:b2:27:57:96:02:6d:e8:70:28:34: 8f:c2:a3:10:aa:74:1c:87:6e:fe:1e:2f:e7:47:42:b4:f5:17: e6:61:48:8f:31:37:85:5c:83:86:02:9f:d1:55:2c:ce:6a:fe: 83:30:3c:e6:da:51:01:28:9a:54:dd:e8:3b:7f:fa:0e:9b:d3: c2:f4:8c:2f:68:e2:3c:10:d7:b6:7e:94:1d:c7:81:8a:35:41: 0b:ee:36:b0:d5:4f:f5:ab:8a:27:e3:e6:e8:72:0f:a1:ac:72: 60:d7:0d:61:32:c3:fc:65:c8:25:e8:67:47:b6:6d:86:05:aa: be:58:2d:ae:76:1a:68:6f:be:63:0b:86:5c:58:00:ac:b3:ba: 1a:85:cc:34:ee:50:bf:7f:8d:68:c9:2a:0b:70:a4:a3:bb:57: ec:54:7c:7c:c8:f0:e2:12:9b:b3:77:0e:f8:ad:b0:4b:f2:2f: 8c:92:bd:bc:f5:9c:ca:2f:9e:44:24:7f:2e:28:d9:1f:e8:38: 7f:b0:dc:91:56:ce:44:8e:dd:a7:74:ed:e9:d2:df:71:89:02: 11:69:c8:73:08:87:3d:12:f6:fd:97:b8:31:86:f3:24:c8:8a: 7e:c4:d5:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsTqf7vs/aLjc/ToSPMLtznfFyEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjA5MjMxOTM1MTZaFw0yNjA5MjQyMDA1MTZaMDMxMTAvBgNV BAMTKDlCNjE1RUJBODI1OTUzNzRGN0JGMTU0NDEzMDZFQTZFNERFNjQ4Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCulOZQsAXyIXwsr0nxkraixyix OAWspsP7C2l5W6kcNX6TSQtp3aEgLnaaFt13KzMr2zuuTna5Puyw1if1AoebxJm/ rRSXl8Qmzn4HgAKBLFaaxQQna8p5l/2z74xDsZXOOrLKPnLRoDEqrHxjcv7xEc0M LGSRzBKr6Y3oiUBApINNJ29NG92qcH4BSLpsP3IqrDKPwtFZJxBqip5pljyTCt6K 6l75Mdy13bn4AVTuYTop15YtGoRDfhGPyz84y7K63aMWh9d1cApTNd+09OCiReAZ SLoaINKx3QDQDC7K0puIskVgAYCVNEGySZt99jbWeRZNqWKrpLR/w1Je+OvPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm2FeuoJZU3T3vxVEEwbqbk3mSMowHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJkkjFyWo1GwYTrZCmFS2WEWl0Ny7dSNtgy sidXlgJt6HAoNI/CoxCqdByHbv4eL+dHQrT1F+ZhSI8xN4Vcg4YCn9FVLM5q/oMw PObaUQEomlTd6Dt/+g6b08L0jC9o4jwQ17Z+lB3HgYo1QQvuNrDVT/Wriifj5uhy D6GscmDXDWEyw/xlyCXoZ0e2bYYFqr5YLa52GmhvvmMLhlxYAKyzuhqFzDTuUL9/ jWjJKgtwpKO7V+xUfHzI8OISm7N3DvitsEvyL4ySvbz1nMovnkQkfy4o2R/oOH+w 3JFWzkSO3ad07enS33GJAhFpyHMIhz0S9v2XuDGG8yTIin7E1d4= -----END CERTIFICATE-----Generated at Thu Sep 24 04:57:53 2026 by rpki-client