$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: 3EZ12nIw9iHBRo8GlwONPOebl42I28IjLpxuD4N56tk= Subject key identifier: 25:C9:88:C8:5C:7A:57:78:27:C5:81:3C:0C:0B:2B:D3:95:1A:1E:EE Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 62B3DA35EA70B23D12AEDBD35B30030E7F1F5278 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 01CB Signing time: Tue 17 Mar 2026 09:03:25 +0000 Manifest this update: Tue 17 Mar 2026 08:58:25 +0000 Manifest next update: Fri 20 Mar 2026 15:01:25 +0000 Files and hashes: 1: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: gom2K2gkNEap6pRf8i6qpFWU+p3reMlN96fhfu6QcT4=) 2: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: omacf/MlMTOtJi7pgs2aPCZclto1hvc9zlwr6k9i/3s=) 3: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: T4coAwXt6fV/Sn1oLDCCAmEi91swI4WZfQ2qUtF58Zs=) 4: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 1RATtgEQ2fC4CTZxbGq9E6JcRJ2nj2d+lfS9XKYbQiw=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: dYO4EYncz17AgE2NQ+gbu1sETsiNFmn4HcjMbsqN9Sk=) 6: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: wgJ4l6Z4XSXlS4bEbbx1UlqQbPaEu6hH6VwQa4mHecg=) 7: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: bEXXfN8D8Iwh6++6Sf4fNdlCeqEZEgaEYsFhbfU8XrA=) 8: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: M465AGkIQVJLTD8mWLihVhmnQLcd44l1pfpYvPChqew=) 9: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: UAGKGSjm0CH0zknVedkxHzDnhJTtYq6aJ2UvpPN4dUI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 15:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b3:da:35:ea:70:b2:3d:12:ae:db:d3:5b:30:03:0e:7f:1f:52:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Mar 17 08:58:25 2026 GMT Not After : Mar 20 15:01:25 2026 GMT Subject: CN=25C988C85C7A577827C5813C0C0B2BD3951A1EEE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c4:44:fb:0f:aa:46:4b:ae:0a:da:fc:6e:db: 7e:9e:94:88:e1:f3:f5:36:27:ed:2f:da:28:56:bf: 42:10:cc:5c:97:55:41:02:6e:0a:b2:ff:0d:26:a8: 21:c5:96:bc:14:84:b7:4f:aa:c6:a3:9c:01:e5:07: 29:5e:41:01:41:27:f6:96:99:40:29:fb:fc:1d:37: c1:01:0a:85:20:c2:cf:dd:79:11:90:e1:86:60:20: 81:dc:17:90:2a:c7:60:da:ba:18:a8:f5:32:88:46: de:4a:b5:5d:28:6d:8a:1b:42:b1:d1:fa:fb:2c:2e: c8:5b:ba:07:c1:2d:02:ef:ec:72:e1:59:95:9a:6c: 2c:1c:75:09:7a:70:77:ba:95:68:5f:37:d8:d5:91: 1c:1e:3e:5d:a3:9f:b7:b7:ea:89:e0:2b:37:e4:00: bf:92:4c:d0:f2:6f:1c:3a:ec:d3:67:ff:c9:40:83: 0d:0d:08:67:cf:d0:19:b0:d1:3d:c2:66:e0:3a:ec: ad:20:4c:84:be:87:39:94:b7:59:74:25:72:70:74: 02:a0:95:ef:e7:dc:a1:1e:ca:fc:9b:1c:74:05:5d: 7a:32:67:56:3d:df:02:f6:47:60:ee:33:a1:17:38: d5:9b:db:2a:cb:07:7b:fd:83:45:bb:cb:4b:23:fb: 2a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:C9:88:C8:5C:7A:57:78:27:C5:81:3C:0C:0B:2B:D3:95:1A:1E:EE X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0e:0c:a0:31:46:f5:36:db:ae:7c:d8:c4:9a:57:04:4d:e0: f0:f1:51:89:bf:b8:23:d4:6b:9e:f6:6c:f9:eb:a5:04:4c:83: 7d:fe:4c:a0:5a:1a:42:68:21:c8:14:8b:a4:a1:ff:d7:82:d5: 62:47:15:91:c1:d7:ad:27:7e:7e:a2:5f:15:24:c3:d5:9a:a1: db:32:cb:f1:ab:2b:45:19:b2:53:47:fb:71:52:c1:6a:22:09: 55:72:a3:3d:19:2b:00:aa:91:ed:fb:8a:0f:2d:6b:c3:21:da: 9c:fb:08:f0:a2:f2:5e:34:d7:f4:ca:3b:e0:92:58:d3:a8:78: 51:82:75:37:dd:eb:53:19:78:4a:30:1f:b9:65:fb:d2:94:d4: 44:f0:ee:f9:cb:f1:02:f1:bb:bd:48:92:d7:e2:f1:4d:cb:7f: e4:17:25:7c:16:e4:75:ac:92:8f:bb:dd:9e:5a:dd:aa:70:86: 60:ec:0f:a9:56:9f:79:44:62:c0:c2:79:f6:24:45:e1:27:6b: 74:93:62:cb:40:68:f9:f8:b9:0b:20:5f:1a:36:88:2b:13:41: 98:6b:b5:f1:7e:0b:47:5a:33:1d:2a:c2:22:a0:1f:0b:ca:6f: 72:55:6d:1a:a2:d1:66:d2:4c:75:f5:0d:b4:d7:04:4b:40:1f: e7:0d:79:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrPaNepwsj0SrtvTWzADDn8fUngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAzMTcwODU4MjVaFw0yNjAzMjAxNTAxMjVaMDMxMTAvBgNV BAMTKDI1Qzk4OEM4NUM3QTU3NzgyN0M1ODEzQzBDMEIyQkQzOTUxQTFFRUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyxET7D6pGS64K2vxu236elIjh 8/U2J+0v2ihWv0IQzFyXVUECbgqy/w0mqCHFlrwUhLdPqsajnAHlByleQQFBJ/aW mUAp+/wdN8EBCoUgws/deRGQ4YZgIIHcF5Aqx2Dauhio9TKIRt5KtV0obYobQrHR +vssLshbugfBLQLv7HLhWZWabCwcdQl6cHe6lWhfN9jVkRwePl2jn7e36ongKzfk AL+STNDybxw67NNn/8lAgw0NCGfP0Bmw0T3CZuA67K0gTIS+hzmUt1l0JXJwdAKg le/n3KEeyvybHHQFXXoyZ1Y93wL2R2DuM6EXONWb2yrLB3v9g0W7y0sj+ypvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJcmIyFx6V3gnxYE8DAsr05UaHu4wHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGUODKAxRvU226582MSaVwRN4PDxUYm/uCPU a572bPnrpQRMg33+TKBaGkJoIcgUi6Sh/9eC1WJHFZHB160nfn6iXxUkw9Waodsy y/GrK0UZslNH+3FSwWoiCVVyoz0ZKwCqke37ig8ta8Mh2pz7CPCi8l401/TKO+CS WNOoeFGCdTfd61MZeEowH7ll+9KU1ETw7vnL8QLxu71Iktfi8U3Lf+QXJXwW5HWs ko+73Z5a3apwhmDsD6lWn3lEYsDCefYkReEna3STYstAaPn4uQsgXxo2iCsTQZhr tfF+C0daMx0qwiKgHwvKb3JVbRqi0WbSTHX1DbTXBEtAH+cNefk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:57:19 2026 by rpki-client