$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: +extrM+QN6gT5lOtWM6yhdsGgb6O6p4PmY2Jt2ojJqg= Subject key identifier: 32:71:71:63:C6:C5:C9:E5:95:12:86:44:04:A6:6F:6B:A7:75:14:97 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 5E2507A54CABB07DE5B6F5DF78F83CD5417CBAB6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: F8 Signing time: Wed 04 Nov 2026 10:16:03 +0000 Manifest this update: Wed 04 Nov 2026 10:11:03 +0000 Manifest next update: Thu 05 Nov 2026 12:28:03 +0000 Files and hashes: 1: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 2: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 3: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: jRSmr/34an7edNApsp7d/Z0Jv8359MCoJrSxAbtx6Yg=) 4: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) 5: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 6: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 7: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 8: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) 9: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 11:48:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:25:07:a5:4c:ab:b0:7d:e5:b6:f5:df:78:f8:3c:d5:41:7c:ba:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Nov 4 10:11:03 2026 GMT Not After : Nov 5 12:28:03 2026 GMT Subject: CN=32717163C6C5C9E59512864404A66F6BA7751497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f7:84:e4:75:b6:7a:d6:04:be:c0:ef:75:b0: 75:21:1b:6b:71:a8:02:35:39:d9:e8:7b:09:58:43: 1a:f0:f9:c1:12:e1:c5:3d:e2:6e:bd:4b:cf:80:58: 6a:dc:ec:27:8e:31:b1:67:13:36:c4:f5:ee:5a:11: 53:73:d7:78:d4:f7:dd:e2:ae:b2:76:f9:5e:aa:bb: 17:fa:07:b3:9e:d4:ac:27:37:21:34:4a:54:e8:5d: 6a:7d:e2:b9:83:85:f7:c7:08:20:6e:bb:cf:b9:a5: a5:68:6d:87:3b:96:b6:59:39:ff:7b:b5:da:8d:da: 68:8d:f5:6f:5a:85:c5:1b:7d:2e:63:55:65:89:89: c4:41:8a:7e:5e:b2:50:ee:7a:a3:42:5e:34:d8:2f: d0:89:f6:4a:32:fc:50:40:63:98:ef:27:03:85:5a: 22:98:95:52:1c:37:e0:63:7a:20:36:8a:20:33:9e: 43:7e:ec:0a:aa:55:5a:d0:3a:5c:4b:55:0e:e5:33: db:f9:25:89:a2:f4:ab:fe:52:1b:12:0e:5a:19:91: 4c:12:27:37:c4:e6:3f:e8:82:b0:ce:c0:d0:1a:53: 5a:b4:6d:de:34:ec:d3:22:99:2c:94:39:2c:e3:e9: 94:dd:3b:2e:b3:69:6d:be:5b:21:de:76:37:76:30: fd:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:71:71:63:C6:C5:C9:E5:95:12:86:44:04:A6:6F:6B:A7:75:14:97 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:bb:a4:45:4b:05:70:46:bb:fc:7d:f8:d0:01:2c:26:a5:f6: b7:50:fb:49:85:de:05:a6:aa:44:88:21:31:5d:7e:26:6b:34: 6f:ea:a7:26:0f:58:35:c7:cb:e3:e0:6f:c5:23:90:59:f0:14: c9:b5:47:8e:c2:4b:75:66:00:03:23:fc:62:19:71:16:cd:46: 00:fe:46:9c:a0:a3:eb:b1:43:cd:02:fe:f7:68:e8:88:60:78: 7f:fc:c4:77:33:72:0d:71:87:e6:e6:e4:dc:9b:29:8c:81:0b: c2:3c:40:d2:0a:03:59:c1:b6:83:c2:de:10:55:24:9c:13:a9: e6:83:fc:b5:32:54:e6:b7:4c:91:e6:86:42:49:7e:ac:da:28: 35:ab:84:93:c9:25:6d:0c:f1:0e:d7:c3:24:b7:aa:1c:23:70: 18:e0:11:ad:21:9c:01:7c:71:3e:f6:aa:ac:2e:fc:5a:14:b7: 9b:5c:c9:ac:de:c0:cb:a0:99:af:81:ab:8e:ec:0e:c1:ca:e9: 23:28:c1:37:d8:4d:cc:aa:6e:d5:ec:b4:b7:02:93:f6:ca:c1: 9c:75:64:b5:f3:f1:ad:26:ef:11:2f:85:a1:86:a5:7a:53:30: 38:ac:54:7b:3a:c9:5e:25:af:a6:4e:d5:db:25:c5:a4:b6:ea: 85:b6:27:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiUHpUyrsH3ltvXfePg81UF8urYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjExMDQxMDExMDNaFw0yNjExMDUxMjI4MDNaMDMxMTAvBgNV BAMTKDMyNzE3MTYzQzZDNUM5RTU5NTEyODY0NDA0QTY2RjZCQTc3NTE0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA94TkdbZ61gS+wO91sHUhG2tx qAI1OdnoewlYQxrw+cES4cU94m69S8+AWGrc7CeOMbFnEzbE9e5aEVNz13jU993i rrJ2+V6quxf6B7Oe1KwnNyE0SlToXWp94rmDhffHCCBuu8+5paVobYc7lrZZOf97 tdqN2miN9W9ahcUbfS5jVWWJicRBin5eslDueqNCXjTYL9CJ9koy/FBAY5jvJwOF WiKYlVIcN+BjeiA2iiAznkN+7AqqVVrQOlxLVQ7lM9v5JYmi9Kv+UhsSDloZkUwS JzfE5j/ogrDOwNAaU1q0bd407NMimSyUOSzj6ZTdOy6zaW2+WyHedjd2MP2HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMnFxY8bFyeWVEoZEBKZva6d1FJcwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa7pEVLBXBGu/x9+NABLCal9rdQ+0mF3gWm qkSIITFdfiZrNG/qpyYPWDXHy+Pgb8UjkFnwFMm1R47CS3VmAAMj/GIZcRbNRgD+ Rpygo+uxQ80C/vdo6IhgeH/8xHczcg1xh+bm5NybKYyBC8I8QNIKA1nBtoPC3hBV JJwTqeaD/LUyVOa3TJHmhkJJfqzaKDWrhJPJJW0M8Q7XwyS3qhwjcBjgEa0hnAF8 cT72qqwu/FoUt5tcyazewMugma+Bq47sDsHK6SMowTfYTcyqbtXstLcCk/bKwZx1 ZLXz8a0m7xEvhaGGpXpTMDisVHs6yV4lr6ZO1dslxaS26oW2J2c= -----END CERTIFICATE-----Generated at Thu Nov 5 01:09:24 2026 by rpki-client