$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: lyP/h4u3/yE4F9FgG3aaRquPAW5cS1XSfbM+UzOURQQ= Subject key identifier: 19:D0:99:1C:B7:C6:5C:C9:C1:48:1D:CC:73:4C:CF:C5:EE:2E:FB:16 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 0307E69F2B988417EA421E0C6C95607558E41823 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 22:02:55 +0000 Manifest this update: Thu 24 Sep 2026 21:57:55 +0000 Manifest next update: Sat 26 Sep 2026 00:06:55 +0000 Files and hashes: 1: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: UqT4ut1StVZJQ1i4Gk4fST92gnzhWpnOJ2FSJICUsnE=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) 3: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) 4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:06:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:07:e6:9f:2b:98:84:17:ea:42:1e:0c:6c:95:60:75:58:e4:18:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: Sep 24 21:57:55 2026 GMT Not After : Sep 26 00:06:55 2026 GMT Subject: CN=19D0991CB7C65CC9C1481DCC734CCFC5EE2EFB16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:47:f3:3c:8b:d7:74:e9:83:03:8b:ec:aa:c5: 4d:b0:4e:60:8d:33:ca:d5:bc:5c:39:8e:b9:1c:7e: d7:98:7a:cf:94:47:25:b4:67:e3:16:0f:65:6e:37: b7:05:cf:f7:e3:8a:53:36:84:7b:ce:05:c4:df:e6: 16:bf:63:bc:c1:43:64:2c:4c:ba:34:00:ad:0c:98: ca:20:ae:5b:e5:60:3d:1a:a8:11:24:5d:62:9c:5c: da:92:c9:ea:71:ed:d8:e7:9d:9a:85:df:3b:68:b6: e5:4d:a0:2f:33:45:25:d7:52:5b:31:15:17:1e:8e: b2:21:4a:7b:51:39:16:94:0c:3e:42:50:e2:05:5a: bf:32:8e:fb:98:c7:e4:2d:4f:57:31:64:f9:70:ca: 04:0b:88:c0:dd:d7:79:1f:13:df:c5:74:21:7b:1f: c3:b7:58:37:4d:e4:c6:04:73:48:88:cb:e4:b4:41: 47:1d:02:11:4e:4e:14:6b:bc:76:31:d6:50:a5:98: ae:f9:f3:ae:bf:67:75:e9:1a:66:77:41:89:fd:04: 31:ad:62:b8:e5:32:34:b4:80:3f:2b:64:14:5c:fc: 82:37:81:5c:c3:44:43:fe:15:c6:55:81:bf:23:26: dc:2d:b1:b3:98:cb:49:5a:c7:a7:70:69:97:4a:93: 2b:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D0:99:1C:B7:C6:5C:C9:C1:48:1D:CC:73:4C:CF:C5:EE:2E:FB:16 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:d5:17:f1:be:d7:64:95:62:ec:39:c4:e6:15:df:50:e0:0a: 1a:ae:2c:0d:93:1d:59:3b:1a:c5:79:8a:6d:eb:14:24:c3:01: 12:21:ff:5c:25:00:98:48:65:76:c8:60:9a:d8:be:53:b2:a4: a1:31:36:45:30:de:fe:80:d2:a2:b1:ab:66:51:59:bf:c6:7e: eb:1c:7a:eb:d0:c1:d5:4a:d5:71:25:31:95:58:be:29:d9:47: 05:df:c6:56:4c:4a:32:36:72:84:dc:e7:34:61:e3:e4:e8:c7: 9f:51:4b:f3:d0:07:1f:35:dc:ac:eb:89:3e:5b:75:22:29:19: 10:ac:bf:b9:1b:1d:dc:84:46:7b:4e:3b:47:dd:14:e5:b2:f7: 83:32:91:e0:2d:eb:de:dc:42:3b:2a:74:86:02:2a:03:4b:2c: 13:64:5d:82:06:4a:46:38:3e:8b:4d:cc:5e:45:de:40:41:8c: d2:18:8f:e1:e9:95:06:5c:b4:28:65:f5:3d:e0:d3:cc:63:fd: e0:60:1d:51:41:1a:97:8e:2a:9b:86:6c:9e:24:70:3b:bf:dc: 1c:29:85:d9:0b:d1:b0:62:f1:cf:d8:b9:4f:3f:5e:c1:e4:5d: 2c:6e:54:0d:a9:01:7b:f3:0b:08:7d:49:4b:24:6d:60:e9:2a: d3:48:90:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAwfmnyuYhBfqQh4MbJVgdVjkGCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjA5MjQyMTU3NTVaFw0yNjA5MjYwMDA2NTVaMDMxMTAvBgNV BAMTKDE5RDA5OTFDQjdDNjVDQzlDMTQ4MURDQzczNENDRkM1RUUyRUZCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYR/M8i9d06YMDi+yqxU2wTmCN M8rVvFw5jrkcfteYes+URyW0Z+MWD2VuN7cFz/fjilM2hHvOBcTf5ha/Y7zBQ2Qs TLo0AK0MmMogrlvlYD0aqBEkXWKcXNqSyepx7djnnZqF3ztotuVNoC8zRSXXUlsx FRcejrIhSntRORaUDD5CUOIFWr8yjvuYx+QtT1cxZPlwygQLiMDd13kfE9/FdCF7 H8O3WDdN5MYEc0iIy+S0QUcdAhFOThRrvHYx1lClmK75866/Z3XpGmZ3QYn9BDGt YrjlMjS0gD8rZBRc/II3gVzDREP+FcZVgb8jJtwtsbOYy0lax6dwaZdKkyubAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdCZHLfGXMnBSB3Mc0zPxe4u+xYwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzVF/G+12SVYuw5xOYV31DgChquLA2THVk7 GsV5im3rFCTDARIh/1wlAJhIZXbIYJrYvlOypKExNkUw3v6A0qKxq2ZRWb/Gfusc euvQwdVK1XElMZVYvinZRwXfxlZMSjI2coTc5zRh4+Tox59RS/PQBx813KzriT5b dSIpGRCsv7kbHdyERntOO0fdFOWy94MykeAt697cQjsqdIYCKgNLLBNkXYIGSkY4 PotNzF5F3kBBjNIYj+HplQZctChl9T3g08xj/eBgHVFBGpeOKpuGbJ4kcDu/3Bwp hdkL0bBi8c/YuU8/XsHkXSxuVA2pAXvzCwh9SUskbWDpKtNIkGI= -----END CERTIFICATE-----Generated at Fri Sep 25 05:41:42 2026 by rpki-client