$ rpki-client -vvvf rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft File: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft (raw, json) Hash identifier: uc96nPm42LTVXwctMkNfsUiXozelvq1d85xih1LbZYo= Subject key identifier: 43:28:5C:3F:A7:52:3C:0E:11:A2:DE:4E:F7:E3:86:5F:DB:02:F6:6B Authority key identifier: 87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5 Certificate issuer: /CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5 Certificate serial: 0A394F5B20210E97A5E93F6504F8FEBF39E1C1AC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 21:32:47 +0000 Manifest this update: Wed 23 Sep 2026 21:27:47 +0000 Manifest next update: Thu 24 Sep 2026 22:16:47 +0000 Files and hashes: 1: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl (hash: PwlWEdutf99e/EaeVEk7/tkl9VudlKY3wwSo0Erhsm4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:16:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:39:4f:5b:20:21:0e:97:a5:e9:3f:65:04:f8:fe:bf:39:e1:c1:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5 Validity Not Before: Sep 23 21:27:47 2026 GMT Not After : Sep 24 22:16:47 2026 GMT Subject: CN=43285C3FA7523C0E11A2DE4EF7E3865FDB02F66B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:8d:4f:22:0a:fa:5e:a4:ab:a3:43:5c:17: 60:04:00:fd:d1:38:bf:bf:e1:30:88:d0:91:95:14: 8d:51:44:d7:cd:ae:f3:7a:af:09:cf:c8:38:3e:d8: 74:6e:7a:17:0d:87:5b:58:59:31:f8:df:f7:1f:5a: ad:3f:48:58:9a:e5:8e:7e:ab:a4:09:23:9c:18:d0: f1:3a:f2:d1:3d:de:d1:16:d7:a7:14:7e:27:63:aa: 96:38:0d:27:d6:4a:72:40:14:b6:98:58:3b:6e:79: 48:9a:01:c5:8b:8e:36:1d:6a:b5:88:2c:0a:ed:a0: 25:c4:89:57:f2:3e:a7:51:0c:ec:1a:74:b1:3e:3a: 33:3b:5f:60:c8:4b:0d:a6:e1:13:f8:70:cb:de:8f: 75:ae:30:d5:ea:87:9a:c8:0e:b4:49:6f:1c:02:d0: 61:5c:86:4f:5b:5c:af:02:6f:54:73:5f:5b:e9:13: 4d:30:92:35:51:50:fb:e7:84:87:5d:0c:d6:c7:63: 12:5e:db:af:d8:c2:fa:55:a5:80:cd:1f:a4:cb:10: fd:4e:b3:62:b8:73:6d:88:fc:e4:d7:36:1f:89:f9: fa:98:d5:be:98:35:24:a8:24:75:1a:cf:da:8b:ce: c6:26:84:de:4f:98:1d:f4:f6:68:d6:24:6f:b0:02: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:28:5C:3F:A7:52:3C:0E:11:A2:DE:4E:F7:E3:86:5F:DB:02:F6:6B X509v3 Authority Key Identifier: keyid:87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:f1:ef:22:d8:ea:69:de:09:ec:ef:e2:54:b0:e4:0d:0f:78: 7e:9d:ed:d9:4b:51:d7:fa:cd:f9:5b:ea:26:4a:1e:0e:aa:fd: b7:b7:30:7c:d9:a3:cd:51:9a:35:a6:d1:64:f7:b5:5e:b7:16: f6:9c:46:e1:86:3a:bd:2e:93:6c:6b:f4:eb:a5:03:e0:28:e0: 72:c9:f1:ce:99:12:5a:77:87:54:90:c5:65:c1:c3:62:e1:76: ed:0c:ae:a6:42:a6:c7:ed:3c:d1:88:47:84:0d:0f:e8:c2:c4: 55:3a:14:e2:c9:c2:b4:e5:e5:07:7e:c7:23:b4:f4:7d:61:fe: fe:06:38:62:74:bd:5c:b8:ef:50:8e:bf:67:02:ad:09:d3:cc: ab:f6:2f:ad:21:6e:6a:66:5a:2b:31:92:60:f9:b0:04:5a:10: 73:55:02:cf:0a:50:dd:7b:a0:7a:ca:4d:ee:f5:98:a0:4d:25: 8f:ee:16:b2:ba:7b:40:46:5c:aa:bb:07:1b:0c:a5:cb:c2:f7: 5c:b5:19:aa:0a:9e:d4:42:67:1e:7e:1f:3d:f5:7f:23:b2:29: e9:07:09:83:be:a7:a4:8b:38:8e:0e:7d:46:87:c9:02:c6:f1: e3:db:54:eb:07:ab:15:41:2f:20:02:09:6c:2e:05:22:63:8c: f6:12:f6:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjlPWyAhDpel6T9lBPj+vznhwawwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDNkRCMDYxMDgwNTBEMTVDMjMxNEM4MTZCQ0I1REE2 Q0IxMDFDNTAeFw0yNjA5MjMyMTI3NDdaFw0yNjA5MjQyMjE2NDdaMDMxMTAvBgNV BAMTKDQzMjg1QzNGQTc1MjNDMEUxMUEyREU0RUY3RTM4NjVGREIwMkY2NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYf41PIgr6XqSro0NcF2AEAP3R OL+/4TCI0JGVFI1RRNfNrvN6rwnPyDg+2HRuehcNh1tYWTH43/cfWq0/SFia5Y5+ q6QJI5wY0PE68tE93tEW16cUfidjqpY4DSfWSnJAFLaYWDtueUiaAcWLjjYdarWI LArtoCXEiVfyPqdRDOwadLE+OjM7X2DISw2m4RP4cMvej3WuMNXqh5rIDrRJbxwC 0GFchk9bXK8Cb1RzX1vpE00wkjVRUPvnhIddDNbHYxJe26/YwvpVpYDNH6TLEP1O s2K4c22I/OTXNh+J+fqY1b6YNSSoJHUaz9qLzsYmhN5PmB309mjWJG+wAlZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQyhcP6dSPA4Rot5O9+OGX9sC9mswHwYDVR0j BBgwFoAUh8bbBhCAUNFcIxTIFry12myxAcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAyYjc4YWQtZGYyMy00M2UyLWE5NGQtM2I0NTRjYmM3ZmM1LzAvODdDNkRCMDYx MDgwNTBEMTVDMjMxNEM4MTZCQ0I1REE2Q0IxMDFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0M2REIwNjEwODA1MEQxNUMyMzE0QzgxNkJDQjVEQTZDQjEw MUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvODdDNkRCMDYxMDgwNTBEMTVDMjMxNEM4MTZCQ0I1 REE2Q0IxMDFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErx7yLY6mneCezv4lSw5A0PeH6d7dlLUdf6 zflb6iZKHg6q/be3MHzZo81RmjWm0WT3tV63FvacRuGGOr0uk2xr9OulA+Ao4HLJ 8c6ZElp3h1SQxWXBw2Lhdu0MrqZCpsftPNGIR4QND+jCxFU6FOLJwrTl5Qd+xyO0 9H1h/v4GOGJ0vVy471COv2cCrQnTzKv2L60hbmpmWisxkmD5sARaEHNVAs8KUN17 oHrKTe71mKBNJY/uFrK6e0BGXKq7BxsMpcvC91y1GaoKntRCZx5+Hz31fyOyKekH CYO+p6SLOI4OfUaHyQLG8ePbVOsHqxVBLyACCWwuBSJjjPYS9vs= -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:51 2026 by rpki-client