$ rpki-client -vvvf rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft File: 87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft (raw, json) Hash identifier: zdENdyP79qqKaTasr1IIr/XVttp1N7nJlykTPSuy/kE= Subject key identifier: 56:E2:90:77:DD:66:91:E9:F3:F4:10:C7:C7:62:EE:E0:93:15:F1:7C Authority key identifier: 87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74 Certificate issuer: /CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74 Certificate serial: 5561E46B2458C5AD7C3DA28627EC3FCF75F8CA7F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft Manifest number: 24 Signing time: Mon 26 Oct 2026 03:51:46 +0000 Manifest this update: Mon 26 Oct 2026 03:46:46 +0000 Manifest next update: Tue 27 Oct 2026 05:58:46 +0000 Files and hashes: 1: 3134342e37392e3232392e302f32342d3234203d3e20313432313933.roa (hash: z0l7Jg74I6/X1fUoqM2N8PY0DnkyoPTf46foVKvgxYU=) 2: 87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl (hash: EDWEW0UcxzEC8ZmtA9brh1RTeK9gu3xwXbeu96ZZojA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:58:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:61:e4:6b:24:58:c5:ad:7c:3d:a2:86:27:ec:3f:cf:75:f8:ca:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87357D7017B31FB08B42DD4ECE6B29F36D937E74 Validity Not Before: Oct 26 03:46:46 2026 GMT Not After : Oct 27 05:58:46 2026 GMT Subject: CN=56E29077DD6691E9F3F410C7C762EEE09315F17C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:18:b4:03:43:47:e4:5a:77:e0:a9:14:7e:d0: 1c:80:ec:d9:3a:23:fa:cd:e1:a4:4a:fe:b8:b5:2b: 38:40:44:1d:04:5b:36:77:be:2b:39:05:cd:30:d9: e5:68:55:ef:f3:d8:74:ab:8a:b1:9d:b4:a2:62:d4: be:48:a2:5c:fb:55:88:54:a8:5c:58:87:c5:a5:cf: 7c:d3:54:82:21:f9:ed:25:4f:30:89:c1:ff:10:6d: f1:d0:95:61:61:d9:8f:96:8b:22:a9:2a:66:e2:f9: 05:5b:0d:56:b2:78:22:f5:b8:4d:0e:a3:ae:6d:ab: c2:c2:9e:57:87:a6:67:11:ee:28:d3:4e:2f:b1:1f: 31:83:42:58:3e:34:31:b5:35:1f:9c:23:3a:f2:51: d9:45:00:51:9b:4c:34:7f:06:6e:c3:1d:10:15:85: 92:ac:3f:d6:2e:0f:6e:52:d1:68:0b:e9:50:7e:3c: 24:c8:e1:ea:9e:87:ac:39:83:19:d0:6f:6d:78:b2: 50:f1:8d:23:40:7f:84:aa:c2:8e:3f:89:72:7b:d7: bc:65:14:39:06:6a:8b:76:e6:a7:2f:1d:42:96:7a: 19:03:7c:3c:84:6e:b4:06:b5:53:aa:25:a1:f2:de: 4c:7a:a9:f5:50:8e:d6:4c:5f:2a:7d:d3:38:c5:75: 2d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:E2:90:77:DD:66:91:E9:F3:F4:10:C7:C7:62:EE:E0:93:15:F1:7C X509v3 Authority Key Identifier: keyid:87:35:7D:70:17:B3:1F:B0:8B:42:DD:4E:CE:6B:29:F3:6D:93:7E:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/87357D7017B31FB08B42DD4ECE6B29F36D937E74.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/357d07ae-3c74-457d-897f-5b806bedea87/1/87357D7017B31FB08B42DD4ECE6B29F36D937E74.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:f3:39:c4:67:c1:d6:4d:1b:8b:94:77:8f:f9:03:94:43:da: 96:db:9f:c6:7d:6d:d0:69:4a:27:47:27:37:c0:22:c1:6d:13: 27:b1:dc:c6:73:05:2c:f7:b5:08:91:c4:b0:f0:45:e6:47:02: a2:41:0c:2e:b3:ae:ea:b5:ae:d3:7e:96:3d:eb:d4:be:ae:23: ae:fe:2b:b6:58:67:5b:bf:69:41:26:aa:79:3d:73:89:00:5d: 6e:94:10:a1:c0:8f:e9:06:02:5c:da:20:7d:82:87:c8:19:45: dc:45:24:97:41:dd:dd:6b:39:f6:38:e3:f0:44:fd:b3:8f:02: 15:00:97:b4:ea:96:a5:cd:d8:37:56:80:30:d0:38:0d:c4:bd: d8:15:89:7e:74:9c:73:b1:e4:e9:6e:56:0a:a6:9b:e9:09:ae: 72:d2:6f:52:53:00:9d:77:03:77:6d:30:1b:13:ef:74:cd:a8: 54:72:c9:c5:a0:46:d0:8a:e2:5c:df:b1:24:9c:fc:b3:9c:2b: 22:d1:49:98:44:85:f3:00:df:65:8c:3d:fd:eb:0e:1f:39:15: 2f:f4:ca:6f:33:14:49:70:34:62:b6:a3:86:7d:c6:da:39:f3: cc:5f:f7:8a:fc:d9:7a:ea:42:8c:de:2c:5b:1d:02:8b:fd:cb: fd:36:1d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVWHkayRYxa18PaKGJ+w/z3X4yn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODczNTdENzAxN0IzMUZCMDhCNDJERDRFQ0U2QjI5RjM2 RDkzN0U3NDAeFw0yNjEwMjYwMzQ2NDZaFw0yNjEwMjcwNTU4NDZaMDMxMTAvBgNV BAMTKDU2RTI5MDc3REQ2NjkxRTlGM0Y0MTBDN0M3NjJFRUUwOTMxNUYxN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGGLQDQ0fkWnfgqRR+0ByA7Nk6 I/rN4aRK/ri1KzhARB0EWzZ3vis5Bc0w2eVoVe/z2HSrirGdtKJi1L5Iolz7VYhU qFxYh8Wlz3zTVIIh+e0lTzCJwf8QbfHQlWFh2Y+WiyKpKmbi+QVbDVayeCL1uE0O o65tq8LCnleHpmcR7ijTTi+xHzGDQlg+NDG1NR+cIzryUdlFAFGbTDR/Bm7DHRAV hZKsP9YuD25S0WgL6VB+PCTI4eqeh6w5gxnQb214slDxjSNAf4Sqwo4/iXJ717xl FDkGaot25qcvHUKWehkDfDyEbrQGtVOqJaHy3kx6qfVQjtZMXyp90zjFdS1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVuKQd91mkenz9BDHx2Lu4JMV8XwwHwYDVR0j BBgwFoAUhzV9cBezH7CLQt1Ozmsp822TfnQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzU3ZDA3YWUtM2M3NC00NTdkLTg5N2YtNWI4MDZiZWRlYTg3LzEvODczNTdENzAx N0IzMUZCMDhCNDJERDRFQ0U2QjI5RjM2RDkzN0U3NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NzM1N0Q3MDE3QjMxRkIwOEI0MkRENEVDRTZCMjlGMzZEOTM3 RTc0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzU3ZDA3YWUtM2M3NC00NTdkLTg5 N2YtNWI4MDZiZWRlYTg3LzEvODczNTdENzAxN0IzMUZCMDhCNDJERDRFQ0U2QjI5 RjM2RDkzN0U3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjzOcRnwdZNG4uUd4/5A5RD2pbbn8Z9bdBp SidHJzfAIsFtEyex3MZzBSz3tQiRxLDwReZHAqJBDC6zruq1rtN+lj3r1L6uI67+ K7ZYZ1u/aUEmqnk9c4kAXW6UEKHAj+kGAlzaIH2Ch8gZRdxFJJdB3d1rOfY44/BE /bOPAhUAl7TqlqXN2DdWgDDQOA3EvdgViX50nHOx5OluVgqmm+kJrnLSb1JTAJ13 A3dtMBsT73TNqFRyycWgRtCK4lzfsSSc/LOcKyLRSZhEhfMA32WMPf3rDh85FS/0 ym8zFElwNGK2o4Z9xto588xf94r82XrqQozeLFsdAov9y/02HQQ= -----END CERTIFICATE-----Generated at Mon Oct 26 08:54:35 2026 by rpki-client