$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: 0hmptNE7PAiu5z0yJYZj/EIjwvh8CYSIChk2rrgNSyw= Subject key identifier: 2E:47:7F:1B:05:B1:EF:73:2E:94:B2:8F:14:2E:C5:C6:24:16:E6:D7 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 402BBAB036AAFF38D1A11363102698620C64E421 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 19:18:45 +0000 Manifest this update: Thu 23 Jul 2026 19:13:45 +0000 Manifest next update: Fri 24 Jul 2026 20:14:45 +0000 Files and hashes: 1: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) 3: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) 4: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: a4FIKm71te9ComiS9XIfkMbGphpIJDpjB3NIi5VtwgI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:2b:ba:b0:36:aa:ff:38:d1:a1:13:63:10:26:98:62:0c:64:e4:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: Jul 23 19:13:45 2026 GMT Not After : Jul 24 20:14:45 2026 GMT Subject: CN=2E477F1B05B1EF732E94B28F142EC5C62416E6D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:33:cb:48:d8:0f:a9:b9:2f:1f:c5:67:8f:10: 39:0f:b3:6b:d6:3f:c7:79:bb:ed:68:ac:4b:59:53: 32:1b:58:39:41:be:fb:1a:14:01:a9:64:aa:bd:f4: 68:c7:4b:47:3d:41:51:16:e3:73:01:68:da:20:99: 6f:65:a3:7e:50:6a:d1:b5:06:8a:e3:fa:f1:54:ae: a9:50:6f:4a:42:dc:e8:8f:13:17:a0:3f:07:22:ce: 79:34:5a:9b:09:b8:f8:91:f7:63:93:3f:f8:e0:db: 4b:81:7f:ff:9c:73:b1:cd:a4:d8:45:4e:e6:90:44: c3:a6:8e:33:19:46:55:88:d2:dc:18:32:68:c6:7e: e7:08:47:f6:1f:ef:47:d1:a5:46:29:1f:82:25:d9: 46:60:51:b5:5d:81:79:a0:ea:71:0f:3b:3f:4e:af: 78:fc:bb:47:a0:ab:85:ab:e2:3b:23:5d:28:71:88: ab:76:e6:bc:a5:d8:1f:a2:6d:f9:26:c4:88:ec:90: 98:69:90:38:e5:51:2f:e6:0f:a8:7e:ff:d3:58:73: 83:74:d3:2e:5e:46:c7:48:d6:7d:8d:f0:b7:da:55: 0a:f6:9e:65:2e:dd:64:84:d1:7d:57:a8:b4:84:6e: 01:9d:f7:fa:f4:0c:d3:2b:47:83:1d:87:d0:57:b9: 4c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:47:7F:1B:05:B1:EF:73:2E:94:B2:8F:14:2E:C5:C6:24:16:E6:D7 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:e9:bc:5c:16:cc:39:b8:c7:6d:e3:b5:88:5b:ad:60:87:47: 14:9d:c2:44:66:ff:2e:a9:15:db:47:0a:7f:a6:08:97:f6:28: f9:d9:2c:57:9d:37:ea:a0:9f:4a:7d:71:3d:1b:d9:3d:61:a6: 57:8c:7f:de:96:a2:e5:21:00:d1:bf:9f:5f:6d:08:bf:e3:f1: 53:6b:ec:94:6b:de:03:06:25:41:61:be:33:ef:82:86:50:8f: 40:2d:37:91:df:0a:34:cd:ef:bb:7e:58:2c:1d:71:01:1a:69: ce:12:a4:a5:22:2a:26:1a:4f:13:f9:c6:27:68:48:f0:10:f1: 51:e9:b5:ae:ad:f1:27:25:72:ec:ee:df:66:8c:f6:dd:19:41: aa:d5:f5:9d:43:d3:f9:74:48:26:09:ce:8b:5d:26:7a:91:96: 41:f6:8b:d5:59:9e:e6:a8:c5:a3:27:d7:c9:71:d3:ef:01:5d: 4d:2f:01:95:55:18:81:9d:a5:2d:b7:0e:d0:24:50:09:88:a4: 25:13:d4:bd:25:7d:94:54:58:08:43:06:95:74:c0:f6:58:72: 63:bb:a0:36:cc:5f:a4:b1:5c:14:14:3d:74:83:18:ef:9a:83: 7f:c9:1d:d0:d6:1a:6d:a7:4f:bd:ba:35:58:d8:eb:39:61:03: 76:09:f0:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQCu6sDaq/zjRoRNjECaYYgxk5CEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjA3MjMxOTEzNDVaFw0yNjA3MjQyMDE0NDVaMDMxMTAvBgNV BAMTKDJFNDc3RjFCMDVCMUVGNzMyRTk0QjI4RjE0MkVDNUM2MjQxNkU2RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyM8tI2A+puS8fxWePEDkPs2vW P8d5u+1orEtZUzIbWDlBvvsaFAGpZKq99GjHS0c9QVEW43MBaNogmW9lo35QatG1 Borj+vFUrqlQb0pC3OiPExegPwciznk0WpsJuPiR92OTP/jg20uBf/+cc7HNpNhF TuaQRMOmjjMZRlWI0twYMmjGfucIR/Yf70fRpUYpH4Il2UZgUbVdgXmg6nEPOz9O r3j8u0egq4Wr4jsjXShxiKt25ryl2B+ibfkmxIjskJhpkDjlUS/mD6h+/9NYc4N0 0y5eRsdI1n2N8LfaVQr2nmUu3WSE0X1XqLSEbgGd9/r0DNMrR4Mdh9BXuUzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkd/GwWx73MulLKPFC7FxiQW5tcwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACrpvFwWzDm4x23jtYhbrWCHRxSdwkRm/y6p FdtHCn+mCJf2KPnZLFedN+qgn0p9cT0b2T1hpleMf96WouUhANG/n19tCL/j8VNr 7JRr3gMGJUFhvjPvgoZQj0AtN5HfCjTN77t+WCwdcQEaac4SpKUiKiYaTxP5xido SPAQ8VHpta6t8Sclcuzu32aM9t0ZQarV9Z1D0/l0SCYJzotdJnqRlkH2i9VZnuao xaMn18lx0+8BXU0vAZVVGIGdpS23DtAkUAmIpCUT1L0lfZRUWAhDBpV0wPZYcmO7 oDbMX6SxXBQUPXSDGO+ag3/JHdDWGm2nT726NVjY6zlhA3YJ8F4= -----END CERTIFICATE-----Generated at Fri Jul 24 04:18:54 2026 by rpki-client