$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: 3TSxpKP/NQTYTP73FQql67BiHpMMUHvPW/cZGlSS8uA= Subject key identifier: E8:A1:58:8E:F6:71:54:6E:C3:5E:94:22:0B:8F:6B:A1:4F:AB:DC:A1 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 501B0CAA96F39B5C3A52C68263F2778C865864CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 15:18:05 +0000 Manifest this update: Wed 16 Sep 2026 15:13:05 +0000 Manifest next update: Thu 17 Sep 2026 18:12:05 +0000 Files and hashes: 1: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 2: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) 3: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: IxI/40q24CE8W9fPJ+/0ICazi/dLcOlw9rEbvyncnsY=) 4: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 5: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 6: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 7: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 8: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 9: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:12:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:1b:0c:aa:96:f3:9b:5c:3a:52:c6:82:63:f2:77:8c:86:58:64:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Sep 16 15:13:05 2026 GMT Not After : Sep 17 18:12:05 2026 GMT Subject: CN=E8A1588EF671546EC35E94220B8F6BA14FABDCA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:bb:6d:0a:8c:ef:07:7b:55:27:c8:78:ee:9c: fe:71:cd:9f:cc:c6:9e:9f:55:72:24:55:29:fb:b7: cd:1d:aa:b3:77:7d:34:11:fb:73:7e:00:f4:f9:3d: 01:d0:63:6f:34:66:4b:0b:fb:8a:b2:4e:dd:6c:c3: 83:05:48:ca:20:e4:21:99:9c:2a:76:39:6e:0b:02: 33:51:ae:38:25:56:b9:d4:6f:03:92:ac:38:b9:11: ae:da:3f:79:24:bb:b9:e2:2d:e4:bd:77:40:05:41: 56:7e:4d:05:0b:1e:93:b6:3a:4f:87:30:b3:c8:4f: 02:b4:e8:b0:ab:66:18:64:e1:be:3d:f5:6b:37:61: 7c:30:a5:76:fe:18:d5:0a:51:25:6c:7f:6c:33:a6: 31:04:ff:59:fb:3b:07:1e:35:96:cb:1a:c6:67:c8: f3:6d:e7:c3:42:d3:f6:d2:3d:58:2c:50:3f:58:47: 46:7a:1a:3c:4c:21:13:32:86:04:e6:df:ec:36:36: 7d:9e:94:c9:97:43:9a:a4:f9:8c:2d:9e:2d:87:95: ea:77:95:92:04:d7:42:25:e9:64:cf:d9:e0:ae:57: 81:f6:d7:af:73:49:d3:a1:5c:08:e2:66:e7:f4:2b: bc:63:be:df:b9:b8:27:ba:65:86:87:c7:1f:39:76: 00:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:A1:58:8E:F6:71:54:6E:C3:5E:94:22:0B:8F:6B:A1:4F:AB:DC:A1 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:8f:d1:a4:a0:d5:ad:45:cf:bf:e6:d6:c1:aa:1c:5b:15:df: 8d:aa:fd:83:a8:75:f6:01:42:9c:31:b8:3c:83:a7:2d:ad:90: c1:51:1f:78:1c:88:86:d3:90:33:f3:b7:70:05:9e:e7:b5:fb: d3:f2:0a:c3:45:f3:51:6e:c4:30:eb:25:92:95:49:af:dd:fd: 55:77:13:4b:af:77:b4:a5:40:8e:03:e2:8c:43:93:5e:39:42: 59:66:ff:2c:0d:95:ed:60:3e:fe:c0:f4:32:69:eb:a2:66:91: 2a:53:8e:31:45:75:ce:1b:ba:2e:23:ea:7c:5f:6f:b4:ed:ba: 08:e6:32:ec:8c:1f:31:03:ee:6e:11:ba:92:c2:1e:c4:14:ba: 54:3b:b2:0f:c0:cf:60:7d:90:73:06:8a:3c:3c:7f:3f:f7:c5: 69:df:05:81:01:1e:58:47:0a:cc:30:3d:ce:8f:1c:8f:81:79: ef:90:54:69:a4:6e:ad:b9:ae:b6:07:0b:03:dd:b3:38:28:87: b5:43:d6:27:de:56:d6:56:0c:a9:ba:3e:8f:09:46:fa:f6:40: b4:5f:75:7e:e3:48:f9:eb:d5:09:d3:b5:01:71:ba:2b:cf:ce: 99:74:0d:c0:de:5c:c2:fa:2f:87:2e:3a:a4:5e:23:71:a9:36: 60:60:d2:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUBsMqpbzm1w6UsaCY/J3jIZYZM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA5MTYxNTEzMDVaFw0yNjA5MTcxODEyMDVaMDMxMTAvBgNV BAMTKEU4QTE1ODhFRjY3MTU0NkVDMzVFOTQyMjBCOEY2QkExNEZBQkRDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1u20KjO8He1UnyHjunP5xzZ/M xp6fVXIkVSn7t80dqrN3fTQR+3N+APT5PQHQY280ZksL+4qyTt1sw4MFSMog5CGZ nCp2OW4LAjNRrjglVrnUbwOSrDi5Ea7aP3kku7niLeS9d0AFQVZ+TQULHpO2Ok+H MLPITwK06LCrZhhk4b499Ws3YXwwpXb+GNUKUSVsf2wzpjEE/1n7OwceNZbLGsZn yPNt58NC0/bSPVgsUD9YR0Z6GjxMIRMyhgTm3+w2Nn2elMmXQ5qk+Ywtni2Hlep3 lZIE10Il6WTP2eCuV4H2169zSdOhXAjiZuf0K7xjvt+5uCe6ZYaHxx85dgDJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6KFYjvZxVG7DXpQiC49roU+r3KEwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADGP0aSg1a1Fz7/m1sGqHFsV342q/YOodfYB QpwxuDyDpy2tkMFRH3gciIbTkDPzt3AFnue1+9PyCsNF81FuxDDrJZKVSa/d/VV3 E0uvd7SlQI4D4oxDk145Qllm/ywNle1gPv7A9DJp66JmkSpTjjFFdc4bui4j6nxf b7TtugjmMuyMHzED7m4RupLCHsQUulQ7sg/Az2B9kHMGijw8fz/3xWnfBYEBHlhH CswwPc6PHI+Bee+QVGmkbq25rrYHCwPdszgoh7VD1ifeVtZWDKm6Po8JRvr2QLRf dX7jSPnr1QnTtQFxuivPzpl0DcDeXML6L4cuOqReI3GpNmBg0oM= -----END CERTIFICATE-----Generated at Thu Sep 17 07:33:55 2026 by rpki-client