$ rpki-client -vvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: B4W//pvqiTt+hbxPW1LrBO9D7mEuYsbfd3DrBrLyHnM= Subject key identifier: 30:EA:F1:F3:5D:D3:EA:CC:FC:2F:18:C4:09:96:EC:D1:F5:E8:99:D4 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 0B26DA4D01D9419300789496C996AEAFAE0FA728 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: 0E Signing time: Tue 12 May 2026 06:11:58 +0000 Manifest this update: Tue 12 May 2026 06:06:58 +0000 Manifest next update: Wed 13 May 2026 08:53:58 +0000 Files and hashes: 1: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: 4fjoqsnX7X/sgmGDcgae4yCtzOlsY+tvC7NvlhnDebY=) 2: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) 3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 08:53:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:26:da:4d:01:d9:41:93:00:78:94:96:c9:96:ae:af:ae:0f:a7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: May 12 06:06:58 2026 GMT Not After : May 13 08:53:58 2026 GMT Subject: CN=30EAF1F35DD3EACCFC2F18C40996ECD1F5E899D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b1:85:b2:a1:3e:0a:ff:04:a9:a9:52:6a:f9: 1c:f5:c6:86:f1:ec:17:5f:24:a6:71:33:5f:f5:19: 5a:13:93:6f:8c:83:7a:fe:89:2d:ae:70:cf:69:2c: 98:0b:94:ed:38:41:2d:5a:d6:a9:da:2f:5a:12:b1: 98:a7:fd:c1:5b:65:31:0b:9a:01:31:7f:8e:26:80: a9:e7:53:2a:83:57:9f:de:8e:fd:66:f3:25:b7:26: 80:22:ab:38:45:89:67:f2:32:80:92:4a:a2:0e:b2: c1:8e:e6:f1:cd:f9:15:f1:71:6f:49:d4:73:bc:67: 15:6e:1b:2c:34:32:68:9f:3b:07:a1:db:7b:59:34: b9:e4:ab:05:30:74:c2:1f:8f:e5:6d:5a:f3:0c:85: 9f:51:23:a8:74:02:33:23:39:3f:21:92:e4:1c:36: 15:2e:35:cc:31:b8:fd:84:e7:41:b7:87:1f:0b:f5: 1f:a3:cb:e2:57:2b:bb:e1:b3:b4:26:d8:1f:45:c2: 3a:17:4a:09:0e:e4:c8:ab:c3:6d:9b:58:a0:4c:08: 3d:6e:83:cf:13:41:08:3b:bb:a7:d3:e4:4d:59:7c: f3:bb:a4:03:df:72:f6:74:c0:a8:ba:84:5f:b2:da: 23:d9:0f:70:0c:ae:fb:09:e8:5d:f0:f0:11:9c:01: e8:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EA:F1:F3:5D:D3:EA:CC:FC:2F:18:C4:09:96:EC:D1:F5:E8:99:D4 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:9a:9b:9d:14:52:fe:0e:79:57:4e:3c:93:d1:d0:1d:19:e9: 60:2f:08:5c:cb:fa:5a:ad:cd:de:05:c2:77:ee:a3:c1:11:07: 61:88:18:f4:98:7a:7d:ad:60:c1:db:3c:af:1b:a4:ed:52:95: 5d:f2:cf:de:d1:a5:30:ca:4a:5e:fe:58:92:7a:ec:21:6a:bb: d5:77:a2:ed:f8:42:07:87:80:38:6c:fe:75:91:8f:9f:cf:ef: cb:c9:3e:5e:55:df:f6:99:81:5a:c6:26:10:5a:0b:00:d1:cd: 90:9a:e1:32:1c:c5:cd:34:a3:84:b0:83:2f:90:42:cf:2c:0e: 6e:8a:b3:65:4d:0b:c8:37:75:ca:98:4a:9b:cb:cc:47:db:6b: 57:70:1e:d2:c0:af:a0:c0:ab:76:5d:86:74:10:a1:d0:55:81: 46:3a:86:59:62:fe:99:7d:6f:30:44:a8:5e:87:b0:e3:f0:f2: 77:a3:a7:d3:d4:e3:86:9d:5d:8b:fd:ce:bd:ea:85:a3:bf:12: 4c:48:d5:a9:fb:6f:86:87:8a:c7:e6:0d:c0:20:99:58:2c:d0: a8:e4:0f:70:a3:a9:68:11:82:a0:4d:69:23:d5:ae:c7:82:52: 21:c2:c9:55:01:7b:b8:be:de:66:e7:92:81:95:fc:45:f0:af: 12:23:88:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCybaTQHZQZMAeJSWyZaur64PpygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjA1MTIwNjA2NThaFw0yNjA1MTMwODUzNThaMDMxMTAvBgNV BAMTKDMwRUFGMUYzNUREM0VBQ0NGQzJGMThDNDA5OTZFQ0QxRjVFODk5RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0sYWyoT4K/wSpqVJq+Rz1xobx 7BdfJKZxM1/1GVoTk2+Mg3r+iS2ucM9pLJgLlO04QS1a1qnaL1oSsZin/cFbZTEL mgExf44mgKnnUyqDV5/ejv1m8yW3JoAiqzhFiWfyMoCSSqIOssGO5vHN+RXxcW9J 1HO8ZxVuGyw0MmifOweh23tZNLnkqwUwdMIfj+VtWvMMhZ9RI6h0AjMjOT8hkuQc NhUuNcwxuP2E50G3hx8L9R+jy+JXK7vhs7Qm2B9FwjoXSgkO5Mirw22bWKBMCD1u g88TQQg7u6fT5E1ZfPO7pAPfcvZ0wKi6hF+y2iPZD3AMrvsJ6F3w8BGcAeg7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOrx813T6sz8LxjECZbs0fXomdQwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEeam50UUv4OeVdOPJPR0B0Z6WAvCFzL+lqt zd4Fwnfuo8ERB2GIGPSYen2tYMHbPK8bpO1SlV3yz97RpTDKSl7+WJJ67CFqu9V3 ou34QgeHgDhs/nWRj5/P78vJPl5V3/aZgVrGJhBaCwDRzZCa4TIcxc00o4Swgy+Q Qs8sDm6Ks2VNC8g3dcqYSpvLzEfba1dwHtLAr6DAq3ZdhnQQodBVgUY6hlli/pl9 bzBEqF6HsOPw8nejp9PU44adXYv9zr3qhaO/EkxI1an7b4aHisfmDcAgmVgs0Kjk D3CjqWgRgqBNaSPVrseCUiHCyVUBe7i+3mbnkoGV/EXwrxIjiNI= -----END CERTIFICATE-----Generated at Tue May 12 22:20:16 2026 by rpki-client