$ rpki-client -vvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: lS9GiSk0lk7OYx9STKg8/i8MDDGpeJuKwkv5exJktLw= Subject key identifier: B8:62:55:CF:C9:73:DC:1E:11:47:5C:F2:D0:F8:81:EE:AC:31:BC:18 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 5428E7FD40D004D9BA22D6A6F77D87C7921DC4F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 10:38:05 +0000 Manifest this update: Thu 23 Jul 2026 10:33:05 +0000 Manifest next update: Fri 24 Jul 2026 14:31:05 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) 3: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: yaqaIasmo1lD0bTsdLx84pF3ki31zKwbYcETWwwvVJQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:28:e7:fd:40:d0:04:d9:ba:22:d6:a6:f7:7d:87:c7:92:1d:c4:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Jul 23 10:33:05 2026 GMT Not After : Jul 24 14:31:05 2026 GMT Subject: CN=B86255CFC973DC1E11475CF2D0F881EEAC31BC18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:6f:11:98:aa:38:4b:03:58:c4:51:be:29:16: 68:9b:45:c3:e6:1e:b9:73:ad:bc:8a:22:a3:9d:50: 0a:c8:6b:0e:ad:c6:18:59:74:ed:a5:ed:2f:37:e1: 52:86:44:db:69:1d:5d:f1:60:aa:b6:b5:d6:e3:c4: 13:de:17:d3:da:ac:c5:81:ff:40:c8:d2:71:e5:fd: 53:37:7b:8a:c6:5f:fa:52:d2:ab:9f:e6:92:4c:5e: 42:19:3a:d1:ae:59:48:83:86:89:36:65:de:93:ef: 8a:bd:87:c9:e7:8e:0d:69:83:0d:92:ce:d1:62:1e: 17:23:8a:dc:d4:04:da:9e:fb:39:c0:28:c9:94:b4: a6:10:11:63:41:c4:e1:93:e8:4c:7e:5d:60:c0:8b: 81:c5:21:ad:1c:b0:4d:25:ff:da:51:9b:59:56:66: 5e:cd:85:e6:ca:f6:3e:ee:4b:ee:be:a1:e4:02:60: c1:89:ca:08:82:24:94:96:35:ec:ad:07:ad:e2:74: 0a:10:3b:55:b2:2c:25:6c:10:6c:2f:8e:1d:4e:db: 47:5d:33:0c:85:e9:44:72:c5:7f:d1:3d:56:43:ae: 34:14:df:e3:88:cf:f2:32:ae:94:57:14:a2:85:20: d3:bd:00:1e:f7:11:a7:94:23:b0:43:38:0a:30:da: 50:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:62:55:CF:C9:73:DC:1E:11:47:5C:F2:D0:F8:81:EE:AC:31:BC:18 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:cd:d9:16:01:97:52:5a:63:36:3e:fa:91:b6:b4:57:77:5f: f0:e4:b4:19:13:78:fc:c3:db:3e:80:1f:ab:f2:02:6a:9e:ce: f4:c2:4e:18:6d:31:80:80:8a:99:d3:d0:df:20:5b:3c:fb:21: 2a:38:ca:28:f2:41:59:78:d0:30:60:04:bf:d3:4f:5f:c5:2c: d2:7a:b9:a4:80:a8:62:d3:cd:d8:10:5b:c5:1d:b7:1b:f8:07: af:32:40:95:db:95:a1:65:3c:0d:7a:48:c0:04:e5:1d:5f:7e: e4:6e:5c:ec:7c:aa:2b:c9:07:32:9a:cd:6d:a8:15:21:97:fa: 8d:f0:c4:d6:44:63:20:6a:fb:f3:91:77:76:b0:dd:d2:46:17: 8e:6c:17:ec:0d:da:27:9e:ff:f1:a2:e2:86:12:bd:95:9f:28: d7:15:f4:87:e2:4e:7b:f7:f8:e1:c0:4b:b7:86:00:ea:20:3b: b9:cd:48:03:4e:14:e5:76:9e:bd:56:3b:8a:07:24:6f:34:1b: c0:51:95:33:54:73:08:5a:6d:fb:26:9e:07:51:4f:d6:80:57: 12:dc:2e:e1:df:d8:ce:72:b7:ec:75:d5:83:ea:f4:18:a2:a2: ce:3e:dd:81:3c:9a:37:7d:ae:36:7e:0e:74:d3:f2:36:7c:8f: 4d:60:69:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVCjn/UDQBNm6Itam932Hx5IdxPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjA3MjMxMDMzMDVaFw0yNjA3MjQxNDMxMDVaMDMxMTAvBgNV BAMTKEI4NjI1NUNGQzk3M0RDMUUxMTQ3NUNGMkQwRjg4MUVFQUMzMUJDMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMbxGYqjhLA1jEUb4pFmibRcPm HrlzrbyKIqOdUArIaw6txhhZdO2l7S834VKGRNtpHV3xYKq2tdbjxBPeF9ParMWB /0DI0nHl/VM3e4rGX/pS0quf5pJMXkIZOtGuWUiDhok2Zd6T74q9h8nnjg1pgw2S ztFiHhcjitzUBNqe+znAKMmUtKYQEWNBxOGT6Ex+XWDAi4HFIa0csE0l/9pRm1lW Zl7NhebK9j7uS+6+oeQCYMGJygiCJJSWNeytB63idAoQO1WyLCVsEGwvjh1O20dd MwyF6URyxX/RPVZDrjQU3+OIz/IyrpRXFKKFINO9AB73EaeUI7BDOAow2lB9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuGJVz8lz3B4RR1zy0PiB7qwxvBgwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/N2RYBl1JaYzY++pG2tFd3X/DktBkTePzD 2z6AH6vyAmqezvTCThhtMYCAipnT0N8gWzz7ISo4yijyQVl40DBgBL/TT1/FLNJ6 uaSAqGLTzdgQW8Udtxv4B68yQJXblaFlPA16SMAE5R1ffuRuXOx8qivJBzKazW2o FSGX+o3wxNZEYyBq+/ORd3aw3dJGF45sF+wN2iee//Gi4oYSvZWfKNcV9IfiTnv3 +OHAS7eGAOogO7nNSANOFOV2nr1WO4oHJG80G8BRlTNUcwhabfsmngdRT9aAVxLc LuHf2M5yt+x11YPq9Biios4+3YE8mjd9rjZ+DnTT8jZ8j01gac4= -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:49 2026 by rpki-client