$ rpki-client -vvvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: J/zj+oDYKi6WpIsapk65f9vnlNrdjfUhTpQLZpm2mds= Subject key identifier: A6:50:C7:00:B1:9A:ED:63:DE:B7:92:DA:F9:50:93:79:4D:E9:0E:D5 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 21A4DAA40A1AA05CC1C1585309238608A6412034 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:24:56 +0000 Manifest this update: Wed 23 Sep 2026 19:19:56 +0000 Manifest next update: Thu 24 Sep 2026 19:44:56 +0000 Files and hashes: 1: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) 2: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: DelG+tRTYuuy17Rdzwut65Ysdn2mg8XP4D32ehYwi3s=) 3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:44:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:a4:da:a4:0a:1a:a0:5c:c1:c1:58:53:09:23:86:08:a6:41:20:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Sep 23 19:19:56 2026 GMT Not After : Sep 24 19:44:56 2026 GMT Subject: CN=A650C700B19AED63DEB792DAF95093794DE90ED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:93:12:86:67:ff:95:14:37:2e:13:b8:00:e8: bb:52:e0:8c:d0:91:49:db:9c:bc:11:8a:b9:4b:06: 95:ff:4e:3c:7e:f0:16:9b:d3:c9:db:0b:89:e9:dd: 4d:81:29:68:f7:65:1f:94:b0:a7:e8:ca:d1:d5:33: 8a:04:38:3c:59:2e:04:4a:04:cd:c8:0d:52:24:28: 52:bb:98:50:81:e2:1c:92:ef:d1:b0:ee:c9:9b:f8: 03:db:41:04:4e:0b:56:29:20:7a:47:98:05:fe:c4: 5d:68:df:98:d6:22:58:80:4d:e5:ed:7a:0b:a7:78: 1e:1f:8f:53:34:27:e0:52:3c:08:18:4d:b0:64:c2: 2f:2d:c3:87:69:6e:40:2d:6e:ef:e0:6b:b9:73:5c: 6d:eb:6c:22:3c:14:3b:7e:f1:19:2b:0d:dc:5b:b2: a6:0c:8d:a8:d2:e7:66:5c:02:71:e5:11:b2:93:c7: c0:de:ee:c6:87:c0:79:3f:0b:46:87:2f:10:28:44: 77:44:4d:61:25:07:36:07:da:1f:58:1b:39:37:be: 3d:76:81:13:78:8f:fb:f2:2e:c7:a5:85:00:fb:0e: 12:3d:b0:4a:97:aa:31:4c:4d:bf:f7:71:c7:8b:a8: 70:76:b8:d9:1d:b3:c7:24:57:f0:7b:a9:cb:f0:71: f6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:50:C7:00:B1:9A:ED:63:DE:B7:92:DA:F9:50:93:79:4D:E9:0E:D5 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:0f:a4:a8:da:ea:9e:79:8e:5a:a8:f1:82:94:a7:31:fe:97: f3:20:ca:b3:5f:cc:95:67:50:ab:a4:f4:5d:75:06:2f:97:51: fe:ec:a7:1e:d6:e5:26:b6:c8:67:53:03:c6:93:63:fe:7a:74: 4d:82:0b:b9:6f:96:5f:c2:44:18:ef:92:5d:4b:57:2e:bf:92: 6e:88:5f:8a:4c:0b:1b:44:81:d5:97:57:0c:56:7e:d3:b2:18: 36:00:23:78:1d:c1:55:ca:5c:3b:de:4d:27:b1:a6:63:6a:64: 2e:fe:22:82:c8:49:3c:83:15:c9:30:cc:1f:d4:cb:93:5b:74: 88:e5:81:21:dc:d3:60:08:c4:7b:24:4a:a1:8c:1b:39:e4:d6: b5:db:76:e8:0b:96:a0:4d:82:4a:3b:1d:d9:3a:cd:38:75:e2: 1a:8e:47:83:d1:14:8b:19:92:7d:71:35:40:3b:08:e4:d8:77: 93:eb:00:e5:f1:1c:07:22:3b:19:85:3d:d9:41:a5:58:b9:39: 3b:ee:56:cd:f8:23:48:f9:6c:59:50:da:63:d6:e6:8b:b6:6c: 92:38:4a:8b:80:7c:99:3f:25:36:ff:7e:fd:d7:c6:62:85:e0: 99:3f:ec:6b:95:71:57:a6:b5:64:e4:3a:2d:cb:c9:77:a3:fb: 4b:8e:c6:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIaTapAoaoFzBwVhTCSOGCKZBIDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjA5MjMxOTE5NTZaFw0yNjA5MjQxOTQ0NTZaMDMxMTAvBgNV BAMTKEE2NTBDNzAwQjE5QUVENjNERUI3OTJEQUY5NTA5Mzc5NERFOTBFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNkxKGZ/+VFDcuE7gA6LtS4IzQ kUnbnLwRirlLBpX/Tjx+8Bab08nbC4np3U2BKWj3ZR+UsKfoytHVM4oEODxZLgRK BM3IDVIkKFK7mFCB4hyS79Gw7smb+APbQQROC1YpIHpHmAX+xF1o35jWIliATeXt eguneB4fj1M0J+BSPAgYTbBkwi8tw4dpbkAtbu/ga7lzXG3rbCI8FDt+8RkrDdxb sqYMjajS52ZcAnHlEbKTx8De7saHwHk/C0aHLxAoRHdETWElBzYH2h9YGzk3vj12 gRN4j/vyLselhQD7DhI9sEqXqjFMTb/3cceLqHB2uNkds8ckV/B7qcvwcfavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUplDHALGa7WPet5La+VCTeU3pDtUwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYPpKja6p55jlqo8YKUpzH+l/MgyrNfzJVn UKuk9F11Bi+XUf7spx7W5Sa2yGdTA8aTY/56dE2CC7lvll/CRBjvkl1LVy6/km6I X4pMCxtEgdWXVwxWftOyGDYAI3gdwVXKXDveTSexpmNqZC7+IoLISTyDFckwzB/U y5NbdIjlgSHc02AIxHskSqGMGznk1rXbdugLlqBNgko7Hdk6zTh14hqOR4PRFIsZ kn1xNUA7COTYd5PrAOXxHAciOxmFPdlBpVi5OTvuVs34I0j5bFlQ2mPW5ou2bJI4 SouAfJk/JTb/fv3XxmKF4Jk/7GuVcVemtWTkOi3LyXej+0uOxik= -----END CERTIFICATE-----Generated at Thu Sep 24 10:16:32 2026 by rpki-client