$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: midXMdSGTFSMreaTik+vpx9C0WGYdsM1mN+tG9lTQ5E= Subject key identifier: 70:29:80:93:FF:7E:53:64:16:85:89:2B:69:C5:CF:E2:64:A2:4F:9A Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 72BCE63A13AF0087AE34805BAE703AC59924F769 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 016A Signing time: Tue 21 Apr 2026 13:31:41 +0000 Manifest this update: Tue 21 Apr 2026 13:26:41 +0000 Manifest next update: Fri 24 Apr 2026 14:01:41 +0000 Files and hashes: 1: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: p2L5plmLy6K9HT7ilujp6mL5BseerPIVS9q3ZgFKy64=) 2: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: /2jJPO3Er6sewDinbJyZDHA9B3o2kNcba+XnPeftBr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bc:e6:3a:13:af:00:87:ae:34:80:5b:ae:70:3a:c5:99:24:f7:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Apr 21 13:26:41 2026 GMT Not After : Apr 24 14:01:41 2026 GMT Subject: CN=70298093FF7E53641685892B69C5CFE264A24F9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:58:73:6d:9c:fe:1f:a2:7d:31:e4:21:da:d7: b8:28:9d:4d:72:9d:85:5e:66:72:90:65:7b:f1:69: 63:8a:fd:60:a5:f0:2b:41:58:ab:d8:2c:36:64:ec: 84:22:b0:7a:d9:03:db:50:0a:bc:91:ed:36:f9:12: 68:03:e2:a0:ac:c7:4a:79:08:e7:82:42:5b:f9:3d: 3d:77:8d:ea:f2:ed:b4:e1:96:f7:c0:f5:d2:48:1e: 5d:33:c3:7e:26:8d:c9:5b:1c:80:0f:03:56:74:80: 70:cd:ae:5e:41:df:45:eb:4c:7d:93:90:5b:7e:c0: db:43:ae:e7:27:29:2a:8a:14:8c:27:b5:1d:a4:2c: 03:bb:4b:a0:e7:fe:9f:ca:1b:3c:7c:61:81:be:bc: 09:61:3b:fa:8d:c2:a6:c4:9d:db:f7:08:84:4e:30: e7:20:00:57:56:0b:07:5e:21:cb:99:52:ab:8c:f5: 59:e5:7c:a9:20:95:de:e0:b9:1e:db:9a:10:63:8a: e7:fe:6a:92:7b:ce:47:ff:b5:ea:b1:f1:41:31:f4: b6:08:a9:7d:e8:86:56:9a:61:95:80:93:90:38:22: 98:1d:3b:1c:cf:eb:36:82:f2:70:86:be:71:d3:bf: 23:ab:c0:0b:38:68:d1:d3:d2:26:41:f0:85:56:96: aa:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:29:80:93:FF:7E:53:64:16:85:89:2B:69:C5:CF:E2:64:A2:4F:9A X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:da:db:b8:2e:20:d2:a5:1a:f3:f7:24:e8:ec:bc:c5:ed:17: 53:b5:1d:fa:78:62:5d:eb:fd:70:ee:14:48:bc:e4:0e:54:74: c1:11:38:72:cd:f9:7c:d3:76:a9:76:3b:d6:4e:e2:84:56:1e: 5f:1c:d3:2a:0a:0a:b0:21:b6:63:90:4e:6c:96:44:16:2e:20: 61:3c:6f:0d:d8:fc:e6:1c:97:40:0c:9d:2e:00:fb:99:05:80: a6:48:38:b2:da:0d:73:22:39:f6:b7:2e:a0:2c:ce:ab:13:df: 42:6f:bb:ae:f4:1c:36:10:dc:57:6a:b0:81:74:8d:26:ed:c4: f0:44:14:17:d5:3b:52:2c:83:d2:74:bc:25:28:9f:50:27:7f: ef:1d:d8:a2:70:96:18:53:5f:05:1e:ba:60:69:fa:81:5b:74: 48:4f:d2:0b:92:ca:9b:d7:9b:89:28:ca:20:c5:98:60:50:27: 98:5a:93:94:0d:17:a4:d6:a1:09:69:d4:94:4f:41:65:80:d1: c6:a9:8e:9d:6f:8f:24:79:64:9a:73:9b:0b:5b:68:91:37:3d: 12:31:66:99:c2:82:0c:67:6c:5a:b8:e5:e1:13:e9:04:42:96: 68:4e:66:6b:b4:ef:87:e7:c8:ed:17:92:c6:e0:39:c7:67:01: 02:97:10:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcrzmOhOvAIeuNIBbrnA6xZkk92kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNjA0MjExMzI2NDFaFw0yNjA0MjQxNDAxNDFaMDMxMTAvBgNV BAMTKDcwMjk4MDkzRkY3RTUzNjQxNjg1ODkyQjY5QzVDRkUyNjRBMjRGOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1WHNtnP4fon0x5CHa17gonU1y nYVeZnKQZXvxaWOK/WCl8CtBWKvYLDZk7IQisHrZA9tQCryR7Tb5EmgD4qCsx0p5 COeCQlv5PT13jery7bThlvfA9dJIHl0zw34mjclbHIAPA1Z0gHDNrl5B30XrTH2T kFt+wNtDrucnKSqKFIwntR2kLAO7S6Dn/p/KGzx8YYG+vAlhO/qNwqbEndv3CIRO MOcgAFdWCwdeIcuZUquM9VnlfKkgld7guR7bmhBjiuf+apJ7zkf/teqx8UEx9LYI qX3ohlaaYZWAk5A4IpgdOxzP6zaC8nCGvnHTvyOrwAs4aNHT0iZB8IVWlqrlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcCmAk/9+U2QWhYkracXP4mSiT5owHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM7a27guINKlGvP3JOjsvMXtF1O1Hfp4Yl3r /XDuFEi85A5UdMEROHLN+XzTdql2O9ZO4oRWHl8c0yoKCrAhtmOQTmyWRBYuIGE8 bw3Y/OYcl0AMnS4A+5kFgKZIOLLaDXMiOfa3LqAszqsT30Jvu670HDYQ3FdqsIF0 jSbtxPBEFBfVO1Isg9J0vCUon1Anf+8d2KJwlhhTXwUeumBp+oFbdEhP0guSypvX m4koyiDFmGBQJ5hak5QNF6TWoQlp1JRPQWWA0capjp1vjyR5ZJpzmwtbaJE3PRIx ZpnCggxnbFq45eET6QRClmhOZmu074fnyO0XksbgOcdnAQKXEMI= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:19 2026 by rpki-client