$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: aTcqWgHBvve8OB7VHqZDdi4kbjAlg2V8d2riEVz5VoM= Subject key identifier: D3:E2:30:5C:A4:C2:2D:56:1C:2B:26:DD:55:30:47:E3:49:DE:08:A1 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 5F0084AD0225C666243E41D648B60557DB43BAE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 13:43:29 +0000 Manifest this update: Mon 20 Jul 2026 13:38:29 +0000 Manifest next update: Tue 21 Jul 2026 17:24:29 +0000 Files and hashes: 1: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: sn6N75GeYgeXV2PCC6ez7uC7alU1ILVX0LwelxxieSU=) 2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) 3: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) 4: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 17:24:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:00:84:ad:02:25:c6:66:24:3e:41:d6:48:b6:05:57:db:43:ba:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: Jul 20 13:38:29 2026 GMT Not After : Jul 21 17:24:29 2026 GMT Subject: CN=D3E2305CA4C22D561C2B26DD553047E349DE08A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ba:02:8f:10:c5:a5:7c:88:ed:a1:af:40:a5: c7:1d:19:c3:05:6e:53:73:92:d9:f2:c4:de:73:12: 6f:38:ab:92:ef:2d:92:d6:ef:4d:2c:0f:7d:35:0d: c7:e3:e4:e5:a0:ea:87:d8:f2:18:d4:59:6c:8b:24: a5:18:e8:47:ea:95:7f:33:1b:8e:cb:17:b9:b0:00: 8e:0f:bf:78:88:f3:c2:1e:bd:3e:90:cd:79:55:85: 64:13:d8:73:28:5c:26:fb:90:55:73:8c:ca:4c:04: 5e:04:9b:ed:78:82:69:e5:89:e2:ef:63:f3:f8:be: 44:34:7d:a7:d5:c0:4f:31:a9:c3:6e:bc:78:08:95: c8:8e:5b:cb:97:30:62:b3:be:02:80:3c:a6:7d:e8: 87:ec:f3:86:1e:9c:60:35:29:f5:97:ae:84:5b:07: e5:73:c8:42:2d:f0:04:40:8d:ae:38:94:28:17:64: 19:64:44:8d:f5:1f:a7:bb:69:ab:77:8e:9b:aa:76: e4:59:97:95:d0:da:d9:6b:ab:bd:fb:f9:61:54:89: 30:c5:1d:9b:9b:58:27:4c:d3:08:b0:17:73:29:24: ea:d1:06:28:fb:82:eb:63:41:ac:eb:05:93:c8:b8: a8:16:27:dd:85:63:ca:87:27:ba:fc:2a:8a:b4:70: 30:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E2:30:5C:A4:C2:2D:56:1C:2B:26:DD:55:30:47:E3:49:DE:08:A1 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:0e:5c:9c:1e:b1:27:5b:fe:f0:ce:50:4e:ef:d2:19:62:51: f3:de:40:15:fa:84:b0:3e:14:35:fe:bd:72:2b:19:be:59:5b: 6e:54:4c:b6:b3:fc:f6:18:22:00:6f:b3:f2:ad:03:93:41:e9: 7a:ab:1b:10:07:7e:e0:63:79:fd:d0:20:a9:eb:62:02:cc:e0: 6a:a9:a3:86:da:0b:e1:b6:82:ae:16:0f:53:55:3a:af:b6:1b: 14:ee:9f:6a:5f:55:32:eb:d0:36:c0:36:36:bb:c6:17:63:88: 7d:f7:00:ad:f2:3f:95:fa:4f:7e:40:40:ae:32:05:e2:80:24: 5b:87:20:fb:81:99:2d:d9:56:20:89:74:87:4a:eb:e0:67:cb: 8a:d4:99:73:6f:f3:24:8b:62:dc:e3:28:1f:47:4c:e0:4f:7c: d9:11:f0:27:ed:01:4f:9a:ee:60:21:56:7a:3b:0b:c1:52:78: 82:42:38:7d:3b:c5:d7:d5:e5:bb:e3:ab:3f:43:a1:43:5a:ee: bd:f3:c5:f6:84:e2:99:e3:01:f6:8e:86:99:5c:67:03:e3:7b: 24:23:e6:96:a0:d2:8d:95:16:69:dd:c5:18:92:41:1b:02:67: c2:ef:14:67:5b:36:e4:f2:e3:24:23:12:e9:35:df:25:72:a3: 23:5f:a3:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXwCErQIlxmYkPkHWSLYFV9tDuuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjA3MjAxMzM4MjlaFw0yNjA3MjExNzI0MjlaMDMxMTAvBgNV BAMTKEQzRTIzMDVDQTRDMjJENTYxQzJCMjZERDU1MzA0N0UzNDlERTA4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ugKPEMWlfIjtoa9ApccdGcMF blNzktnyxN5zEm84q5LvLZLW700sD301Dcfj5OWg6ofY8hjUWWyLJKUY6EfqlX8z G47LF7mwAI4Pv3iI88IevT6QzXlVhWQT2HMoXCb7kFVzjMpMBF4Em+14gmnlieLv Y/P4vkQ0fafVwE8xqcNuvHgIlciOW8uXMGKzvgKAPKZ96Ifs84YenGA1KfWXroRb B+VzyEIt8ARAja44lCgXZBlkRI31H6e7aat3jpuqduRZl5XQ2tlrq737+WFUiTDF HZubWCdM0wiwF3MpJOrRBij7gutjQazrBZPIuKgWJ92FY8qHJ7r8Koq0cDBdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+IwXKTCLVYcKybdVTBH40neCKEwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMOXJwesSdb/vDOUE7v0hliUfPeQBX6hLA+ FDX+vXIrGb5ZW25UTLaz/PYYIgBvs/KtA5NB6XqrGxAHfuBjef3QIKnrYgLM4Gqp o4baC+G2gq4WD1NVOq+2GxTun2pfVTLr0DbANja7xhdjiH33AK3yP5X6T35AQK4y BeKAJFuHIPuBmS3ZViCJdIdK6+Bny4rUmXNv8ySLYtzjKB9HTOBPfNkR8CftAU+a 7mAhVno7C8FSeIJCOH07xdfV5bvjqz9DoUNa7r3zxfaE4pnjAfaOhplcZwPjeyQj 5pag0o2VFmndxRiSQRsCZ8LvFGdbNuTy4yQjEuk13yVyoyNfo5Y= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:32 2026 by rpki-client