$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: Z4zOJjKx+mk9CoBUOcFASJcrHOtsRKM0rVNKvca++8Y= Subject key identifier: 27:C5:13:13:A9:57:D2:A3:10:C1:E4:2E:D0:AF:00:01:2C:EF:22:F6 Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 307F825B2CA00D311F093DC900DE2169E25B8748 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 0156 Signing time: Sat 07 Mar 2026 13:21:37 +0000 Manifest this update: Sat 07 Mar 2026 13:16:37 +0000 Manifest next update: Tue 10 Mar 2026 21:48:37 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: /2jJPO3Er6sewDinbJyZDHA9B3o2kNcba+XnPeftBr0=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: rQxrJ6gKi4P4TIpuBli81YX9UaClvjl+/etgnFbVR9s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7f:82:5b:2c:a0:0d:31:1f:09:3d:c9:00:de:21:69:e2:5b:87:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Mar 7 13:16:37 2026 GMT Not After : Mar 10 21:48:37 2026 GMT Subject: CN=27C51313A957D2A310C1E42ED0AF00012CEF22F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8f:d2:33:06:a0:a7:d6:0e:0e:9b:49:2d:a0: a3:bc:7a:a6:1b:13:4c:06:e2:0f:2c:a8:01:a3:c4: 2b:c7:9e:73:93:ec:05:88:c7:87:ef:68:04:b4:cf: b4:ce:6a:c4:b4:6d:d3:54:b7:fd:4e:52:5d:dd:93: d3:51:67:f9:51:ff:85:26:b0:43:d9:17:39:75:5a: 1a:10:d1:14:93:dd:fa:87:0f:0e:63:02:1f:7f:a1: 7b:55:af:cd:5b:a3:a1:93:23:1c:ea:de:c3:15:99: 68:1a:7a:2a:8e:3f:59:64:c2:51:4e:8e:d2:f1:3a: b6:ee:e1:26:7d:c9:f0:4e:8f:e1:cb:26:6f:15:1c: 65:06:d1:a6:c9:b7:c3:7b:71:b2:bc:00:a5:15:3e: a6:09:b0:82:8d:5f:50:0f:04:f2:ad:2d:a1:3e:c9: 77:d0:e7:86:49:81:3a:94:6d:7e:ad:9e:cc:21:94: ae:85:9c:06:e0:e1:2e:91:79:c0:48:29:f2:9f:57: ab:68:9f:ef:37:e7:58:42:0e:8d:3b:73:52:b3:e0: 5c:3a:62:a7:16:4b:cf:b1:ee:a9:28:78:c3:72:a4: ca:d4:a4:e8:cb:39:df:4e:ab:ae:4e:4b:43:8c:47: 30:db:60:6f:cc:ba:0b:a1:59:37:eb:c3:59:93:a1: c7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:C5:13:13:A9:57:D2:A3:10:C1:E4:2E:D0:AF:00:01:2C:EF:22:F6 X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:33:14:5e:fe:f2:41:f3:77:ba:e4:0a:3f:b9:88:2d:ae:a9: 0b:bf:f4:5d:4e:c6:05:fb:2b:50:43:e6:47:42:2c:9b:25:50: 7e:3b:7c:af:65:96:40:30:b1:7c:87:ba:3b:2c:30:e0:2a:3a: 56:2e:5a:81:73:24:c9:a2:26:2d:06:58:fa:75:6d:ff:bb:34: ea:6a:a4:a2:c2:fe:e5:2d:69:49:da:60:6f:82:08:0a:b7:26: 0b:ae:67:d4:40:86:c4:84:ae:d3:81:ad:17:33:4e:bc:c9:33: 4a:72:1b:f3:3b:f0:ce:61:84:4a:b4:05:41:ee:3f:dc:95:95: d4:e3:f6:51:ac:a0:c6:46:5a:8e:92:ef:1e:54:72:5b:54:7d: 8b:98:16:18:10:67:2e:4b:ef:ea:da:99:99:c1:53:1c:65:a4: 77:c3:20:51:ed:a0:81:a7:1f:7f:e1:c0:a5:a0:27:f6:ed:ad: c9:1d:dd:d8:04:89:8d:a5:72:8a:89:e5:69:ba:7f:16:14:e6: 6d:8c:c2:06:9b:fe:62:89:4f:66:9f:f1:3d:fa:19:5e:38:c1: 3d:8a:39:21:81:09:e4:54:b3:2a:a5:78:ce:54:e4:ce:61:55: 1e:f4:6a:5c:d4:d7:2d:67:3e:32:20:df:9b:63:6b:9b:33:1e: 0e:e9:71:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMH+CWyygDTEfCT3JAN4haeJbh0gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNjAzMDcxMzE2MzdaFw0yNjAzMTAyMTQ4MzdaMDMxMTAvBgNV BAMTKDI3QzUxMzEzQTk1N0QyQTMxMEMxRTQyRUQwQUYwMDAxMkNFRjIyRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKj9IzBqCn1g4Om0ktoKO8eqYb E0wG4g8sqAGjxCvHnnOT7AWIx4fvaAS0z7TOasS0bdNUt/1OUl3dk9NRZ/lR/4Um sEPZFzl1WhoQ0RST3fqHDw5jAh9/oXtVr81bo6GTIxzq3sMVmWgaeiqOP1lkwlFO jtLxOrbu4SZ9yfBOj+HLJm8VHGUG0abJt8N7cbK8AKUVPqYJsIKNX1APBPKtLaE+ yXfQ54ZJgTqUbX6tnswhlK6FnAbg4S6RecBIKfKfV6ton+8351hCDo07c1Kz4Fw6 YqcWS8+x7qkoeMNypMrUpOjLOd9Oq65OS0OMRzDbYG/MuguhWTfrw1mTocf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ8UTE6lX0qMQweQu0K8AASzvIvYwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGwzFF7+8kHzd7rkCj+5iC2uqQu/9F1OxgX7 K1BD5kdCLJslUH47fK9llkAwsXyHujssMOAqOlYuWoFzJMmiJi0GWPp1bf+7NOpq pKLC/uUtaUnaYG+CCAq3JguuZ9RAhsSErtOBrRczTrzJM0pyG/M78M5hhEq0BUHu P9yVldTj9lGsoMZGWo6S7x5UcltUfYuYFhgQZy5L7+ramZnBUxxlpHfDIFHtoIGn H3/hwKWgJ/btrckd3dgEiY2lcoqJ5Wm6fxYU5m2Mwgab/mKJT2af8T36GV44wT2K OSGBCeRUsyqleM5U5M5hVR70alzU1y1nPjIg35tja5szHg7pcfQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:51:06 2026 by rpki-client