$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: sIUzCLn8PcJqLPZLYtj4udOq3CfMSDRyE+VcF4Jq1HE= Subject key identifier: 36:39:B2:35:0C:7B:A7:46:DD:3D:14:9E:B8:14:42:D2:6B:07:7F:E3 Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 451D0E487CF295BD34B558EF5C2A08BEF6A4BD3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 06:41:05 +0000 Manifest this update: Sun 01 Nov 2026 06:36:05 +0000 Manifest next update: Mon 02 Nov 2026 07:30:05 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) 3: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: 32/l3kZLZu/cbImK3U2USxImSCDwYgi0BBArOYL1KeM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 01 Nov 2026 23:43:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:1d:0e:48:7c:f2:95:bd:34:b5:58:ef:5c:2a:08:be:f6:a4:bd:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Nov 1 06:36:05 2026 GMT Not After : Nov 2 07:30:05 2026 GMT Subject: CN=3639B2350C7BA746DD3D149EB81442D26B077FE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7b:c8:73:73:37:25:31:fa:99:ea:56:74:72: 47:08:fa:74:09:dd:5d:83:61:d3:6f:c1:62:7c:61: e0:59:c7:fe:d4:12:b4:bf:10:04:82:e9:ef:86:63: c0:59:f6:0b:95:1b:63:de:4f:ef:ad:b7:02:82:57: 37:e1:81:8d:d9:de:5a:68:d5:34:e9:0d:a3:d5:7c: 34:1f:d6:3f:b9:f6:24:5d:b4:ba:18:42:65:05:35: 38:bc:2e:47:71:69:6b:cb:98:56:e9:aa:04:0b:cb: b1:b3:d7:53:33:88:49:41:2b:3d:fd:2d:eb:ed:30: 12:4a:14:a6:cc:ba:1f:ce:75:03:aa:a1:22:0e:60: 89:6b:9d:52:f9:b2:7a:7e:e6:f9:95:05:55:de:60: 38:5c:fe:1b:38:ac:67:76:fc:84:b8:82:ec:02:c3: 20:94:9a:81:20:4f:2e:d6:bd:04:98:e6:92:ed:e4: 47:bf:58:d7:b7:66:25:92:2b:9e:9d:7c:e8:09:07: 3f:2a:9e:11:a7:97:7d:91:e3:2a:76:7e:5d:3f:09: 22:b4:d6:6d:79:c9:c4:c6:ed:ce:cb:f8:2c:16:16: 9b:36:f2:ae:7f:1a:38:aa:2f:4e:db:cf:0a:a5:fe: 63:63:75:54:a1:31:f9:c9:9a:ab:08:df:9b:6a:5b: 4a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:39:B2:35:0C:7B:A7:46:DD:3D:14:9E:B8:14:42:D2:6B:07:7F:E3 X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:fb:bb:f2:d7:d0:a3:94:ac:90:a9:d0:13:a5:6d:89:fc:3f: 90:72:de:62:fc:ee:80:79:1f:04:6f:9f:cf:09:e4:f9:de:7f: a6:f5:47:8f:cb:e9:e6:f3:ee:61:9b:a9:07:61:9d:98:78:5a: 32:0a:39:21:76:99:ea:02:b8:b3:31:2e:68:a1:7a:d7:8a:48: 21:ec:81:ad:a9:ea:f8:a1:1a:1c:7b:bc:6e:2f:50:2b:1d:c1: f5:98:2c:ce:b4:3d:2d:d2:e4:71:51:60:85:54:62:23:77:f0: 93:30:ca:99:bb:b1:d0:4c:90:55:8e:05:4b:ff:0c:63:cd:1d: 90:dd:70:86:1b:24:9c:ad:46:c1:d5:3f:47:ba:ad:16:f3:f5: 57:e5:56:e3:ad:ae:ea:1c:0c:55:40:c2:ce:41:35:0f:25:9d: 0d:74:3b:96:fe:3d:c5:b9:c8:bb:33:cb:9b:ec:a9:a9:78:09: ec:9a:a1:72:7a:92:e4:dd:6e:b6:0d:ba:16:a7:f7:ae:47:01: d7:6e:22:4d:07:89:fd:d0:04:af:25:3a:50:c5:5f:22:e7:f7: 3f:b8:43:f0:62:35:7e:6e:08:e9:4e:27:8a:f5:aa:3a:fb:93: 99:11:79:4c:0a:1c:c4:ce:20:18:37:7b:94:5f:fb:eb:1a:ba: b0:b2:94:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURR0OSHzylb00tVjvXCoIvvakvT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjExMDEwNjM2MDVaFw0yNjExMDIwNzMwMDVaMDMxMTAvBgNV BAMTKDM2MzlCMjM1MEM3QkE3NDZERDNEMTQ5RUI4MTQ0MkQyNkIwNzdGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+e8hzczclMfqZ6lZ0ckcI+nQJ 3V2DYdNvwWJ8YeBZx/7UErS/EASC6e+GY8BZ9guVG2PeT++ttwKCVzfhgY3Z3lpo 1TTpDaPVfDQf1j+59iRdtLoYQmUFNTi8LkdxaWvLmFbpqgQLy7Gz11MziElBKz39 LevtMBJKFKbMuh/OdQOqoSIOYIlrnVL5snp+5vmVBVXeYDhc/hs4rGd2/IS4guwC wyCUmoEgTy7WvQSY5pLt5Ee/WNe3ZiWSK56dfOgJBz8qnhGnl32R4yp2fl0/CSK0 1m15ycTG7c7L+CwWFps28q5/GjiqL07bzwql/mNjdVShMfnJmqsI35tqW0rTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNjmyNQx7p0bdPRSeuBRC0msHf+MwHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHr7u/LX0KOUrJCp0BOlbYn8P5By3mL87oB5 HwRvn88J5Pnef6b1R4/L6ebz7mGbqQdhnZh4WjIKOSF2meoCuLMxLmiheteKSCHs ga2p6vihGhx7vG4vUCsdwfWYLM60PS3S5HFRYIVUYiN38JMwypm7sdBMkFWOBUv/ DGPNHZDdcIYbJJytRsHVP0e6rRbz9VflVuOtruocDFVAws5BNQ8lnQ10O5b+PcW5 yLszy5vsqal4CeyaoXJ6kuTdbrYNuhan965HAdduIk0Hif3QBK8lOlDFXyLn9z+4 Q/BiNX5uCOlOJ4r1qjr7k5kReUwKHMTOIBg3e5Rf++saurCylFQ= -----END CERTIFICATE-----Generated at Sun Nov 1 12:00:07 2026 by rpki-client