$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: C/Z5qTWjEkoOp8/dKzn0zaM9WNqYfVyOHlTk4YQnUZw= Subject key identifier: 9A:A5:3D:C4:84:FD:B4:F9:A3:2D:6F:04:14:21:0A:70:EB:B3:31:F6 Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 355C5F8A9A348459829C7DE8CBF7329CD44F6562 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: EA Signing time: Sat 24 Oct 2026 23:43:46 +0000 Manifest this update: Sat 24 Oct 2026 23:38:46 +0000 Manifest next update: Mon 26 Oct 2026 00:08:46 +0000 Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 2: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: 3g7d4D/2SBIyQPmH7EOfGqOZYl6Q24akim+jR8FvOwg=) 3: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 00:08:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5c:5f:8a:9a:34:84:59:82:9c:7d:e8:cb:f7:32:9c:d4:4f:65:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Oct 24 23:38:46 2026 GMT Not After : Oct 26 00:08:46 2026 GMT Subject: CN=9AA53DC484FDB4F9A32D6F0414210A70EBB331F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:9b:0a:e6:a8:96:2c:ab:02:5e:22:e1:96: 1e:71:eb:04:99:6d:05:35:49:ef:14:c6:52:6c:bc: 41:ef:3d:12:f5:98:67:34:ed:e7:37:94:57:01:3e: c2:7a:ad:ae:b8:e5:35:e8:22:cb:22:57:54:b2:db: 98:b2:e7:47:19:f2:fa:5e:2c:61:af:45:c4:24:c3: 92:0a:83:4d:5f:d1:92:40:97:31:81:dc:31:cc:20: a6:5f:48:ca:c0:5a:ec:a1:cb:66:a2:6d:ce:5b:1d: e5:9c:b9:37:ca:51:43:f4:ab:3a:ff:85:ea:35:8a: 85:34:6b:75:96:56:c0:d1:16:07:98:f6:99:82:77: 9d:76:7e:c2:40:dc:59:ec:e8:dc:e7:e9:8c:34:c8: 31:b4:df:79:99:5f:d7:95:fd:21:00:d9:24:4b:39: bc:96:e2:a6:da:9e:85:d7:e2:6f:75:13:9a:07:09: 4c:3c:39:4e:1a:fe:e5:47:c6:a5:65:d4:18:93:1b: 9a:45:d7:59:d7:e8:cb:fa:83:81:33:5d:94:00:6a: 04:7d:b6:33:11:9c:6f:bc:e9:ec:1e:12:1f:5d:f1: 0a:af:1b:ff:1f:38:13:42:8e:8f:1b:eb:6e:2a:fd: 1e:ed:e6:9a:9a:00:4b:fe:7f:0b:65:39:b2:98:4a: f0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:A5:3D:C4:84:FD:B4:F9:A3:2D:6F:04:14:21:0A:70:EB:B3:31:F6 X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ad:33:63:86:5a:a5:ec:b2:44:89:84:cb:f1:25:0c:8d:07: f8:11:00:d3:d7:b4:ee:9f:57:f9:55:65:45:87:ea:53:59:d5: 47:74:f0:a9:a9:84:4a:da:5a:a7:56:ad:ca:28:05:a2:78:8c: a2:16:9a:c8:af:ac:77:ad:ec:db:87:2d:83:08:db:e5:ea:d3: 01:00:4c:68:ce:9c:11:1b:17:0b:3e:bb:04:4a:26:5b:3b:8e: af:c5:a2:60:c4:1c:c7:e2:49:5c:96:4e:16:01:9c:3f:e5:3a: 69:53:e2:b8:43:90:af:4e:0b:ab:6d:45:eb:73:86:b8:98:61: 62:c3:38:cb:44:b9:bd:6a:02:f0:13:9c:30:4d:54:be:94:6d: 30:6b:b5:0f:db:1a:d3:13:9b:e2:bd:31:23:22:8f:4b:a5:64: 5b:db:a8:aa:38:25:2e:c8:a6:60:ab:5c:42:05:52:04:b8:2b: e1:a7:28:ef:14:1c:45:e8:0a:8e:c6:02:00:9d:11:0b:46:b2: 91:aa:d0:d9:7c:ba:8c:84:ae:93:c9:80:17:10:5b:04:ff:dc: c2:bf:13:13:9d:f6:c4:2f:4e:41:37:d8:ea:30:58:a0:49:6d: b1:17:eb:18:62:ea:17:b1:6f:5a:c0:4a:9e:95:c8:15:46:44: fa:b4:55:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVxfipo0hFmCnH3oy/cynNRPZWIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjEwMjQyMzM4NDZaFw0yNjEwMjYwMDA4NDZaMDMxMTAvBgNV BAMTKDlBQTUzREM0ODRGREI0RjlBMzJENkYwNDE0MjEwQTcwRUJCMzMxRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNSpsK5qiWLKsCXiLhlh5x6wSZ bQU1Se8UxlJsvEHvPRL1mGc07ec3lFcBPsJ6ra645TXoIssiV1Sy25iy50cZ8vpe LGGvRcQkw5IKg01f0ZJAlzGB3DHMIKZfSMrAWuyhy2aibc5bHeWcuTfKUUP0qzr/ heo1ioU0a3WWVsDRFgeY9pmCd512fsJA3Fns6Nzn6Yw0yDG033mZX9eV/SEA2SRL ObyW4qbanoXX4m91E5oHCUw8OU4a/uVHxqVl1BiTG5pF11nX6Mv6g4EzXZQAagR9 tjMRnG+86eweEh9d8QqvG/8fOBNCjo8b624q/R7t5pqaAEv+fwtlObKYSvBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmqU9xIT9tPmjLW8EFCEKcOuzMfYwHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2tM2OGWqXsskSJhMvxJQyNB/gRANPXtO6f V/lVZUWH6lNZ1Ud08KmphEraWqdWrcooBaJ4jKIWmsivrHet7NuHLYMI2+Xq0wEA TGjOnBEbFws+uwRKJls7jq/FomDEHMfiSVyWThYBnD/lOmlT4rhDkK9OC6ttRetz hriYYWLDOMtEub1qAvATnDBNVL6UbTBrtQ/bGtMTm+K9MSMij0ulZFvbqKo4JS7I pmCrXEIFUgS4K+GnKO8UHEXoCo7GAgCdEQtGspGq0Nl8uoyErpPJgBcQWwT/3MK/ ExOd9sQvTkE32OowWKBJbbEX6xhi6hexb1rASp6VyBVGRPq0VWU= -----END CERTIFICATE-----Generated at Sun Oct 25 14:45:55 2026 by rpki-client