$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: JNkyHJacmF8KwFdx7txBOv0IpYoOTKjm0RCulEBqAuo= Subject key identifier: 8B:30:65:63:22:B1:66:35:91:5C:DB:22:2C:16:23:86:A9:31:F7:6B Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 3872C74B124E2567451E162221FCB7E520D8DD48 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 05:07:10 +0000 Manifest this update: Tue 21 Jul 2026 05:02:10 +0000 Manifest next update: Wed 22 Jul 2026 05:48:10 +0000 Files and hashes: 1: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 2: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 3: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 4: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 5: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) 6: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 7: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: h9Ic0heflgiXWypH54G2fV7dSBSbm71GhgS22UevHVk=) 8: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 9: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:72:c7:4b:12:4e:25:67:45:1e:16:22:21:fc:b7:e5:20:d8:dd:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Jul 21 05:02:10 2026 GMT Not After : Jul 22 05:48:10 2026 GMT Subject: CN=8B30656322B16635915CDB222C162386A931F76B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:c9:cb:b8:a4:05:8e:c6:09:e9:03:12:77:40: ae:4a:95:4a:ef:17:8e:6e:05:89:c8:3e:31:54:0e: 00:91:e9:2e:ca:49:86:a1:00:31:c9:48:f9:74:bd: 76:1a:0e:31:bc:f4:e2:c5:81:bf:3c:ca:d7:fe:55: dd:45:1c:37:a6:e9:77:b8:43:c4:cf:65:a7:82:f2: d4:1d:b8:01:30:b2:c2:6d:b3:84:7b:b7:e9:db:00: 66:fa:52:3d:ca:d0:d9:0e:4b:6a:ed:5f:ed:50:41: c4:f9:aa:82:69:11:6f:4a:13:38:35:6e:01:4c:8f: fd:46:45:b7:86:1d:7c:e3:14:49:1e:ad:63:9f:75: 93:4f:8a:f3:a6:92:80:42:7e:08:49:c1:0b:d0:e6: 9c:f2:eb:78:c4:0f:23:e9:89:c5:a6:6c:b4:57:01: 43:df:2d:b9:50:ce:f8:3e:d7:c0:c8:cd:ef:21:46: 66:30:90:df:f8:51:5b:4b:f7:24:91:03:df:38:af: 95:6c:0e:51:cb:af:75:42:96:1d:0f:e5:0a:bc:75: d9:77:b8:2d:5d:44:69:c1:6a:79:17:3e:32:47:5b: 31:d6:fe:f1:10:f9:f0:57:67:ef:39:ea:45:fc:7c: 1b:fb:34:1d:0c:6c:d2:5e:33:f2:b0:bc:f4:c6:ba: 43:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:30:65:63:22:B1:66:35:91:5C:DB:22:2C:16:23:86:A9:31:F7:6B X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:d5:e5:cd:e9:a0:b0:38:01:cd:ec:d1:b6:af:bb:11:1a:7b: ea:28:e4:eb:9b:19:6b:33:3c:39:de:f6:27:23:22:f7:42:3f: dc:a3:72:a4:ee:d1:ac:42:4f:c7:17:ae:14:89:12:f0:24:dc: 39:3d:31:3e:f5:d9:74:49:26:e4:f3:c5:66:59:c8:ff:34:6d: 5d:3f:fe:f6:4e:2e:4e:7c:d3:7a:1f:20:57:db:90:40:52:f9: 3a:20:a5:79:78:03:cd:4e:eb:c5:d5:fe:df:3e:9b:03:9f:3a: da:a0:00:79:83:db:3f:ce:a8:78:57:5f:ea:6c:0e:64:be:0a: 6d:a2:10:36:95:a0:f2:b0:30:06:32:c0:af:65:9b:b6:f7:2f: 6c:41:3d:f5:d3:82:25:17:9a:de:74:c4:bf:5a:99:42:7d:7e: 61:0e:c0:a2:2d:21:06:27:bd:1a:ea:aa:4e:04:96:14:04:e1: ae:eb:90:0c:50:32:71:89:2e:23:cc:75:5c:1a:63:aa:15:a9: a6:7a:9d:b4:be:67:51:c9:d7:8e:11:5b:60:46:0f:e4:76:4d: 78:a1:35:c8:d2:0f:58:b3:ba:15:c7:89:29:28:d9:3c:43:2f: 5f:e4:0d:cb:bb:a8:7f:69:80:2e:ca:1a:60:7f:65:8a:da:9d: 85:07:15:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOHLHSxJOJWdFHhYiIfy35SDY3UgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA3MjEwNTAyMTBaFw0yNjA3MjIwNTQ4MTBaMDMxMTAvBgNV BAMTKDhCMzA2NTYzMjJCMTY2MzU5MTVDREIyMjJDMTYyMzg2QTkzMUY3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyycu4pAWOxgnpAxJ3QK5KlUrv F45uBYnIPjFUDgCR6S7KSYahADHJSPl0vXYaDjG89OLFgb88ytf+Vd1FHDem6Xe4 Q8TPZaeC8tQduAEwssJts4R7t+nbAGb6Uj3K0NkOS2rtX+1QQcT5qoJpEW9KEzg1 bgFMj/1GRbeGHXzjFEkerWOfdZNPivOmkoBCfghJwQvQ5pzy63jEDyPpicWmbLRX AUPfLblQzvg+18DIze8hRmYwkN/4UVtL9ySRA984r5VsDlHLr3VClh0P5Qq8ddl3 uC1dRGnBankXPjJHWzHW/vEQ+fBXZ+856kX8fBv7NB0MbNJeM/KwvPTGukPjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUizBlYyKxZjWRXNsiLBYjhqkx92swHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnV5c3poLA4Ac3s0bavuxEae+oo5OubGWsz PDne9icjIvdCP9yjcqTu0axCT8cXrhSJEvAk3Dk9MT712XRJJuTzxWZZyP80bV0/ /vZOLk5803ofIFfbkEBS+TogpXl4A81O68XV/t8+mwOfOtqgAHmD2z/OqHhXX+ps DmS+Cm2iEDaVoPKwMAYywK9lm7b3L2xBPfXTgiUXmt50xL9amUJ9fmEOwKItIQYn vRrqqk4ElhQE4a7rkAxQMnGJLiPMdVwaY6oVqaZ6nbS+Z1HJ144RW2BGD+R2TXih NcjSD1izuhXHiSko2TxDL1/kDcu7qH9pgC7KGmB/ZYranYUHFXw= -----END CERTIFICATE-----Generated at Tue Jul 21 08:31:29 2026 by rpki-client