$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: ipRA/NKLucumj2nU7vxAGSV667GfiM/HqwjB/cvaEKs= Subject key identifier: 95:11:8F:50:69:41:1B:5C:0C:5D:51:C0:BA:32:ED:9F:D5:0A:68:00 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 2B6E72FDF78794A3655581775DC1E9575A5C3953 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: F5 Signing time: Sun 01 Nov 2026 15:01:08 +0000 Manifest this update: Sun 01 Nov 2026 14:56:08 +0000 Manifest next update: Mon 02 Nov 2026 16:50:08 +0000 Files and hashes: 1: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: vzTqC8JEr52plts5jxwASv3L7PTn9u6TFKYIWcFFYBI=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) 3: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) 4: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:6e:72:fd:f7:87:94:a3:65:55:81:77:5d:c1:e9:57:5a:5c:39:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: Nov 1 14:56:08 2026 GMT Not After : Nov 2 16:50:08 2026 GMT Subject: CN=95118F5069411B5C0C5D51C0BA32ED9FD50A6800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6b:49:99:08:7c:c4:fd:f3:db:a8:97:93:44: 49:56:5f:61:c3:67:a6:55:0d:d0:ca:dc:d9:8b:fe: dd:c5:cd:e4:ab:85:f8:a3:32:a0:db:11:5c:db:4b: cd:25:a8:62:f4:b1:8a:40:78:0e:3d:ad:11:40:6d: aa:c5:4e:4e:24:66:13:5b:cf:e0:d8:6c:1f:09:3a: 32:35:12:d4:3e:a1:f8:1b:57:16:f8:5e:81:19:3c: 4d:16:ee:e1:30:c6:76:2c:ad:c5:a0:e7:01:cd:32: 69:49:9a:28:6c:96:b5:db:9a:91:be:69:a7:4d:c7: 99:2f:a6:ae:ad:89:68:4e:fd:2e:73:6c:91:6e:89: 39:02:14:c7:02:3c:95:fa:98:db:48:5e:17:3e:cd: f1:0f:5f:74:80:08:75:a4:8e:79:25:b5:b9:99:7f: 48:26:f5:26:1d:01:68:04:47:e4:52:4f:07:28:5a: 79:6c:22:94:28:fc:c3:3a:e2:3f:e4:14:ff:64:32: 61:88:71:cc:6a:7a:1f:ed:3a:dc:73:3c:82:a5:74: 69:4b:08:af:b5:5b:dc:08:e4:ff:0a:86:c9:05:1e: 0f:01:9a:ec:4d:cc:be:ae:cf:16:32:32:a1:24:e8: dc:ce:5d:37:40:9c:68:15:35:23:64:84:55:90:3a: 3e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:11:8F:50:69:41:1B:5C:0C:5D:51:C0:BA:32:ED:9F:D5:0A:68:00 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:ac:12:f8:02:31:a8:22:f5:3d:54:3d:79:75:ea:f5:9f:f8: b0:16:02:f5:e8:b9:e1:02:a3:68:50:13:c0:25:b0:ed:33:ee: 4e:95:f2:7f:e3:fa:54:1a:2e:65:c1:3d:f2:d1:fd:7a:38:10: 52:e3:28:5d:46:10:37:a8:be:8f:9b:55:da:a2:8d:93:a0:18: 11:36:ce:b9:7f:69:9c:57:b1:0e:31:7e:4d:6a:12:33:5d:67: af:79:c9:6a:07:5f:5a:d6:cf:1d:9f:37:7b:50:9a:80:35:a6: 57:a6:a7:71:ed:33:8d:e7:df:51:cc:30:08:65:14:c9:dc:11: 3d:74:5d:9a:24:17:e5:6b:6f:66:44:fd:8c:f3:f6:d4:48:ad: b8:a5:3f:fb:74:13:58:3a:69:df:62:31:2b:3a:a5:57:45:20: b1:96:d4:d6:ab:a1:1d:a5:30:99:0e:d2:2e:4b:0b:01:ee:7b: 84:08:5c:7a:5a:08:e0:b7:2c:2d:94:57:f9:b9:74:09:94:9b: 08:bb:1d:cd:08:c4:74:10:b9:25:12:78:b6:3a:5c:d0:fe:80: 13:05:87:42:08:20:ce:c5:1b:01:68:e7:c2:54:7d:ab:cf:d3: 7d:7a:8d:be:3a:94:d5:c3:1a:8c:ab:38:72:00:f1:84:2a:1f: 1e:e7:69:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK25y/feHlKNlVYF3XcHpV1pcOVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjExMDExNDU2MDhaFw0yNjExMDIxNjUwMDhaMDMxMTAvBgNV BAMTKDk1MTE4RjUwNjk0MTFCNUMwQzVENTFDMEJBMzJFRDlGRDUwQTY4MDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYa0mZCHzE/fPbqJeTRElWX2HD Z6ZVDdDK3NmL/t3FzeSrhfijMqDbEVzbS80lqGL0sYpAeA49rRFAbarFTk4kZhNb z+DYbB8JOjI1EtQ+ofgbVxb4XoEZPE0W7uEwxnYsrcWg5wHNMmlJmihslrXbmpG+ aadNx5kvpq6tiWhO/S5zbJFuiTkCFMcCPJX6mNtIXhc+zfEPX3SACHWkjnkltbmZ f0gm9SYdAWgER+RSTwcoWnlsIpQo/MM64j/kFP9kMmGIccxqeh/tOtxzPIKldGlL CK+1W9wI5P8KhskFHg8BmuxNzL6uzxYyMqEk6NzOXTdAnGgVNSNkhFWQOj5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRGPUGlBG1wMXVHAujLtn9UKaAAwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKsEvgCMagi9T1UPXl16vWf+LAWAvXoueEC o2hQE8AlsO0z7k6V8n/j+lQaLmXBPfLR/Xo4EFLjKF1GEDeovo+bVdqijZOgGBE2 zrl/aZxXsQ4xfk1qEjNdZ695yWoHX1rWzx2fN3tQmoA1plemp3HtM43n31HMMAhl FMncET10XZokF+Vrb2ZE/Yzz9tRIrbilP/t0E1g6ad9iMSs6pVdFILGW1NaroR2l MJkO0i5LCwHue4QIXHpaCOC3LC2UV/m5dAmUmwi7Hc0IxHQQuSUSeLY6XND+gBMF h0IIIM7FGwFo58JUfavP0316jb46lNXDGoyrOHIA8YQqHx7naeA= -----END CERTIFICATE-----Generated at Mon Nov 2 04:20:33 2026 by rpki-client