$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: tZQ8ZmVJtvB3vC12D8nApZW++oIl+wiGz/AzB7BD/Lc= Subject key identifier: 6E:71:9E:78:98:B5:6D:B6:F7:D7:93:97:75:11:68:92:57:35:A1:80 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 10D244FE4146B81710F53BC79ECFBE1DC54EB3A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: 0F Signing time: Tue 12 May 2026 16:31:06 +0000 Manifest this update: Tue 12 May 2026 16:26:06 +0000 Manifest next update: Wed 13 May 2026 19:03:06 +0000 Files and hashes: 1: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) 2: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: /vropri/z7tZrBT4guHUEowvjXbnzqlhd4s7d8n+0oQ=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) 4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d2:44:fe:41:46:b8:17:10:f5:3b:c7:9e:cf:be:1d:c5:4e:b3:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: May 12 16:26:06 2026 GMT Not After : May 13 19:03:06 2026 GMT Subject: CN=6E719E7898B56DB6F7D79397751168925735A180 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:d4:00:7e:a6:64:1f:1a:68:e5:3d:28:47:cd: 10:6f:86:da:94:a9:29:87:a5:2c:d1:5d:3e:79:6a: 21:b2:10:da:3d:1d:1d:78:37:3a:0e:8d:6f:5d:2e: fc:66:44:51:38:49:6c:20:86:02:f8:eb:81:f6:5d: 9e:26:19:0f:de:7e:a0:99:c4:b0:c3:84:b7:40:d1: f6:66:10:d0:8e:33:f3:c6:ae:d8:0b:b7:55:3a:d0: 5d:6a:1b:ad:f6:b4:6d:ae:2d:5f:84:f3:ab:56:80: 94:80:80:7d:9f:87:fe:dd:6e:17:ca:15:4e:5b:51: 87:cf:0a:9a:e9:25:a1:65:79:95:d1:a7:f3:8a:9d: e6:fe:45:a0:8e:dd:43:a3:7f:f1:02:ec:4f:88:a6: 0e:96:99:35:b7:c1:cf:30:44:98:5b:f2:fe:31:24: e0:8f:97:70:e8:ba:b6:61:4d:ba:d9:a6:37:65:d3: 98:68:fc:8c:85:4c:7a:8a:25:33:dc:82:74:62:e8: 4b:43:0e:55:3c:d0:a9:e5:5e:02:ae:45:d7:e8:7d: 2f:e4:00:37:6a:b0:af:6b:ce:4d:20:49:dd:fd:9c: 08:0f:dc:57:8e:aa:ee:33:0f:a5:6e:bd:7f:e4:f8: 40:7c:21:67:75:fc:05:3e:42:fa:f0:7d:5b:0b:10: df:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:71:9E:78:98:B5:6D:B6:F7:D7:93:97:75:11:68:92:57:35:A1:80 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:b7:b1:a8:20:bf:96:a0:35:8c:9b:af:73:93:77:a4:c5:f0: 56:c5:73:2d:ca:63:e3:5d:07:ba:55:f1:24:48:a6:b1:83:d2: ed:3b:1b:3f:80:26:99:cb:e8:7d:0d:98:10:b2:3c:0f:a9:e9: c0:a1:b2:17:d4:b1:64:2d:45:cd:04:29:28:4d:6e:b7:d9:f8: bd:ea:a7:f2:b9:a6:47:70:91:1d:cb:96:50:d1:29:31:d0:d9: c2:6a:60:dd:dd:f6:d0:6e:1b:cd:1f:65:1a:44:91:53:96:90: 60:d1:2b:d7:9c:85:c6:f3:46:6e:fe:50:d1:45:8a:16:b0:e3: e1:80:f6:9e:d8:e6:2a:74:45:9a:2f:52:5f:4f:29:2e:70:e0: 0a:9a:17:be:e0:fa:67:62:28:23:f2:1a:79:ee:48:5b:2f:2a: 4e:44:ec:8c:8a:a0:ee:e8:8f:02:b0:ec:7e:21:57:aa:31:f6: 0a:f9:69:b6:22:40:27:ae:d8:72:43:69:1c:e7:99:4e:1e:bb: df:e1:ca:2c:e7:4a:fd:f3:aa:f5:1f:1f:a0:c8:51:56:6d:6c: 39:ef:3d:d4:fa:ac:91:d9:93:5e:73:6f:6e:a3:2c:e6:65:54: b3:ea:b0:6c:2f:80:89:1a:49:9a:ba:c1:68:4f:fe:2f:1e:0c: ac:06:dc:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENJE/kFGuBcQ9TvHns++HcVOs6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjA1MTIxNjI2MDZaFw0yNjA1MTMxOTAzMDZaMDMxMTAvBgNV BAMTKDZFNzE5RTc4OThCNTZEQjZGN0Q3OTM5Nzc1MTE2ODkyNTczNUExODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC91AB+pmQfGmjlPShHzRBvhtqU qSmHpSzRXT55aiGyENo9HR14NzoOjW9dLvxmRFE4SWwghgL464H2XZ4mGQ/efqCZ xLDDhLdA0fZmENCOM/PGrtgLt1U60F1qG632tG2uLV+E86tWgJSAgH2fh/7dbhfK FU5bUYfPCprpJaFleZXRp/OKneb+RaCO3UOjf/EC7E+Ipg6WmTW3wc8wRJhb8v4x JOCPl3DourZhTbrZpjdl05ho/IyFTHqKJTPcgnRi6EtDDlU80KnlXgKuRdfofS/k ADdqsK9rzk0gSd39nAgP3FeOqu4zD6VuvX/k+EB8IWd1/AU+QvrwfVsLEN+JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbnGeeJi1bbb315OXdRFoklc1oYAwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIe3saggv5agNYybr3OTd6TF8FbFcy3KY+Nd B7pV8SRIprGD0u07Gz+AJpnL6H0NmBCyPA+p6cChshfUsWQtRc0EKShNbrfZ+L3q p/K5pkdwkR3LllDRKTHQ2cJqYN3d9tBuG80fZRpEkVOWkGDRK9echcbzRm7+UNFF ihaw4+GA9p7Y5ip0RZovUl9PKS5w4AqaF77g+mdiKCPyGnnuSFsvKk5E7IyKoO7o jwKw7H4hV6ox9gr5abYiQCeu2HJDaRznmU4eu9/hyiznSv3zqvUfH6DIUVZtbDnv PdT6rJHZk15zb26jLOZlVLPqsGwvgIkaSZq6wWhP/i8eDKwG3BU= -----END CERTIFICATE-----Generated at Wed May 13 02:40:26 2026 by rpki-client