$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: DNWwnf6VMvkRF4zkFhWNuKC+aup/cOp4UvrfT7qz2pk= Subject key identifier: 78:CB:0A:37:DE:24:17:23:F7:B2:80:31:88:78:0C:04:DA:80:1A:56 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 4359196697ECCBD0A03A4A9C2CD3CA16C27AE89C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 13:46:57 +0000 Manifest this update: Tue 02 Jun 2026 13:41:57 +0000 Manifest next update: Wed 03 Jun 2026 14:02:57 +0000 Files and hashes: 1: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 2: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 3: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 4: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 5: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: zdmq57Tb67ipPk8n61zp5lB0xwz6a6kbv7YnWi7YzeM=) 6: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 7: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) 8: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 9: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:59:19:66:97:ec:cb:d0:a0:3a:4a:9c:2c:d3:ca:16:c2:7a:e8:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Jun 2 13:41:57 2026 GMT Not After : Jun 3 14:02:57 2026 GMT Subject: CN=78CB0A37DE241723F7B2803188780C04DA801A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:4f:aa:b7:c5:ab:df:ac:4d:bb:5d:9c:90:bc: 34:b1:ad:69:2f:ea:48:25:25:be:d4:26:57:ec:b4: cf:1a:91:a6:26:26:b1:cc:c8:e3:02:10:0a:e8:69: 7e:70:7c:80:57:86:ca:6b:fe:8c:b8:3d:71:85:73: 53:7a:a7:10:c5:1b:a3:66:be:21:7a:49:22:ab:af: 8d:cc:67:6b:3e:13:83:88:e2:01:16:c0:78:e4:14: b0:92:c1:e5:13:6e:ae:0e:fe:1a:a1:fe:22:8b:97: 9b:07:e4:99:de:c6:21:2f:9e:86:08:2b:cc:a4:bf: 22:28:59:fc:63:93:e0:d6:19:6b:2a:60:49:be:ed: 94:10:37:42:82:83:8f:f1:80:dc:03:ae:b7:d2:3b: f8:7e:a4:3f:bc:4f:ce:c1:21:53:f1:80:ad:99:58: 60:94:41:5b:35:04:03:e7:da:ff:f1:6e:0f:8f:0b: 3e:61:aa:be:9b:77:de:2f:b6:6e:c0:38:c0:2f:e9: 16:a6:cf:3c:b6:07:82:ac:7d:26:8f:6d:d7:fa:ec: 7e:db:e6:eb:2a:6c:02:38:98:45:45:b8:48:6b:9f: 1c:56:e0:ae:ae:49:57:eb:6e:e8:1e:09:a8:93:d3: c3:a5:8d:47:0f:c2:eb:0e:e2:45:da:d7:f2:f5:22: 7b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CB:0A:37:DE:24:17:23:F7:B2:80:31:88:78:0C:04:DA:80:1A:56 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:e1:f7:bb:7c:0e:58:77:e9:86:9e:a7:48:a4:ad:43:a1:fc: ec:ad:92:74:dd:66:55:21:53:ac:94:dc:56:09:18:3a:a8:44: c1:03:04:f1:2a:c6:f0:fd:0b:60:16:78:8a:f7:57:22:a3:4d: e8:74:47:92:ff:e6:8c:4d:14:08:64:a9:eb:f6:57:32:cf:f8: 6b:26:ec:12:06:67:97:5f:85:10:7f:3e:4a:d6:65:ae:db:a4: bf:14:50:01:5b:c6:bb:c0:32:49:b9:fd:7d:c3:e2:fe:61:0c: 5f:49:05:28:ff:38:c8:9f:c0:68:26:51:d5:c1:aa:3d:e7:96: d9:11:ce:d4:7e:a0:92:64:ee:08:88:92:24:4f:d5:54:83:97: 4f:1e:be:e1:5c:59:5b:40:36:fe:e9:72:a5:7c:4d:e6:48:8b: 47:49:3b:a1:5f:ff:89:1c:84:c4:72:4c:a6:f3:40:f4:a6:7b: 4c:ee:28:50:bc:b3:c8:e1:34:81:cb:e1:e7:48:ec:70:23:30: 74:38:f8:dc:c1:0b:5f:8a:d4:fb:a1:69:c7:0c:20:35:19:42: 5f:4d:a4:23:5e:31:6e:6c:d7:66:df:0d:3d:1c:fd:98:e9:3b: 6a:2b:0e:85:d0:8c:23:1f:d0:4b:88:47:6a:97:51:4b:38:34: fe:12:44:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ1kZZpfsy9CgOkqcLNPKFsJ66JwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA2MDIxMzQxNTdaFw0yNjA2MDMxNDAyNTdaMDMxMTAvBgNV BAMTKDc4Q0IwQTM3REUyNDE3MjNGN0IyODAzMTg4NzgwQzA0REE4MDFBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrT6q3xavfrE27XZyQvDSxrWkv 6kglJb7UJlfstM8akaYmJrHMyOMCEAroaX5wfIBXhspr/oy4PXGFc1N6pxDFG6Nm viF6SSKrr43MZ2s+E4OI4gEWwHjkFLCSweUTbq4O/hqh/iKLl5sH5JnexiEvnoYI K8ykvyIoWfxjk+DWGWsqYEm+7ZQQN0KCg4/xgNwDrrfSO/h+pD+8T87BIVPxgK2Z WGCUQVs1BAPn2v/xbg+PCz5hqr6bd94vtm7AOMAv6Ramzzy2B4KsfSaPbdf67H7b 5usqbAI4mEVFuEhrnxxW4K6uSVfrbugeCaiT08OljUcPwusO4kXa1/L1Inv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMsKN94kFyP3soAxiHgMBNqAGlYwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIzh97t8Dlh36Yaep0ikrUOh/OytknTdZlUh U6yU3FYJGDqoRMEDBPEqxvD9C2AWeIr3VyKjTeh0R5L/5oxNFAhkqev2VzLP+Gsm 7BIGZ5dfhRB/PkrWZa7bpL8UUAFbxrvAMkm5/X3D4v5hDF9JBSj/OMifwGgmUdXB qj3nltkRztR+oJJk7giIkiRP1VSDl08evuFcWVtANv7pcqV8TeZIi0dJO6Ff/4kc hMRyTKbzQPSme0zuKFC8s8jhNIHL4edI7HAjMHQ4+NzBC1+K1PuhaccMIDUZQl9N pCNeMW5s12bfDT0c/ZjpO2orDoXQjCMf0EuIR2qXUUs4NP4SRIA= -----END CERTIFICATE-----Generated at Wed Jun 3 03:39:39 2026 by rpki-client