$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: GhYEwRaah6BzXEucuEN4hK9WvsgxIAtnNxTHA4t4ehI= Subject key identifier: 49:8C:C0:9A:3E:BA:BF:1F:86:1B:FC:E5:FE:79:70:E6:FC:D7:AC:9A Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 2E9E598FBC25C547BAB22C7B1A7C782F42A57769 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: EC Signing time: Mon 26 Oct 2026 09:49:14 +0000 Manifest this update: Mon 26 Oct 2026 09:44:14 +0000 Manifest next update: Tue 27 Oct 2026 10:06:14 +0000 Files and hashes: 1: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 2: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) 3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: Wy84bYtum79zYTBO8Gvmwa08a7sBeBpYSAY0M4Ez0kY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 05:22:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:9e:59:8f:bc:25:c5:47:ba:b2:2c:7b:1a:7c:78:2f:42:a5:77:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Oct 26 09:44:14 2026 GMT Not After : Oct 27 10:06:14 2026 GMT Subject: CN=498CC09A3EBABF1F861BFCE5FE7970E6FCD7AC9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:3e:bc:7f:e7:9e:fc:67:d4:41:07:4c:21:ca: 4c:2a:08:82:f3:3b:73:44:80:4c:a9:11:6c:be:03: f1:40:f5:e6:b1:6b:6e:dd:a8:ea:73:d9:95:c4:1a: e1:4d:18:01:a7:2c:46:fe:23:2a:26:a4:c0:d2:9f: 8f:06:11:5f:04:31:bc:da:cb:28:03:63:66:9d:1f: dd:15:ae:1e:8f:d5:ef:ff:71:d1:c0:fa:49:4d:48: e3:48:7e:ce:11:57:1c:7e:dd:15:56:7e:44:98:a7: 25:ce:cf:10:91:3e:ff:5a:d8:ff:01:c5:52:0f:c1: ea:a9:7f:22:1d:41:02:01:f9:89:39:9b:b0:8b:42: c2:a7:2a:d0:99:9e:95:b0:ba:ad:f5:ed:77:2e:d5: 7d:51:1f:bf:68:12:0e:37:6f:dd:fd:7a:ab:a8:8c: ff:b4:a3:ed:63:44:70:87:3f:2a:6c:1d:78:9b:40: ae:89:38:43:bd:32:0d:3a:ab:85:73:e3:58:93:d5: 85:c6:3b:ff:15:9d:6d:02:6f:87:4b:40:64:c7:d7: 64:15:c5:3c:3f:d1:4d:da:8b:2a:54:86:c8:89:b1: d0:f7:06:0e:94:b2:55:ec:d4:88:cb:36:de:8a:5e: 61:4b:35:53:dd:5c:cb:65:7d:48:0d:d9:d0:5c:e1: 54:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:8C:C0:9A:3E:BA:BF:1F:86:1B:FC:E5:FE:79:70:E6:FC:D7:AC:9A X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:ca:2a:09:9a:14:aa:34:a9:82:6a:fa:31:94:3a:11:9a:24: 34:f9:38:fc:20:8d:95:40:ba:44:0d:c0:84:49:c8:4b:23:17: e6:33:98:1e:f5:d1:b8:79:5f:45:b3:1d:b5:b9:84:0c:33:b0: 2a:02:a6:6e:09:58:e5:90:9e:d5:92:41:48:d4:b3:94:79:b1: f5:17:43:9e:12:4a:34:a7:de:0a:1f:08:09:10:2b:30:71:25: 23:5c:8f:f9:f8:76:bf:fa:5f:92:9c:4e:15:6f:f8:aa:d1:ad: 7c:94:4f:e9:65:8f:ea:92:d3:70:29:15:4e:f7:3b:df:50:ea: 27:5e:eb:16:14:f3:e1:d0:9c:dd:c1:60:0c:35:d3:fe:1e:df: 65:63:9a:01:4a:88:b4:e2:0e:5f:cc:7a:a0:35:ee:49:ca:c6: 90:09:c9:69:c4:da:a4:cb:86:52:44:8c:75:9e:bf:94:ce:d6: c6:33:8d:29:32:7d:b4:c9:ff:ae:66:4d:ad:24:6c:6f:75:bc: 14:43:e7:be:e8:1d:25:e0:de:e7:a0:3f:9b:54:91:df:cc:93: 4c:b0:32:c0:31:6f:c9:f5:52:a0:4c:39:b8:ad:02:56:79:18: 19:68:f9:c2:a8:61:bb:f5:86:df:2f:9f:81:37:70:92:bb:13: ef:ac:1d:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULp5Zj7wlxUe6six7Gnx4L0Kld2kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjEwMjYwOTQ0MTRaFw0yNjEwMjcxMDA2MTRaMDMxMTAvBgNV BAMTKDQ5OENDMDlBM0VCQUJGMUY4NjFCRkNFNUZFNzk3MEU2RkNEN0FDOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqPrx/5578Z9RBB0whykwqCILz O3NEgEypEWy+A/FA9eaxa27dqOpz2ZXEGuFNGAGnLEb+IyompMDSn48GEV8EMbza yygDY2adH90Vrh6P1e//cdHA+klNSONIfs4RVxx+3RVWfkSYpyXOzxCRPv9a2P8B xVIPweqpfyIdQQIB+Yk5m7CLQsKnKtCZnpWwuq317Xcu1X1RH79oEg43b939equo jP+0o+1jRHCHPypsHXibQK6JOEO9Mg06q4Vz41iT1YXGO/8VnW0Cb4dLQGTH12QV xTw/0U3aiypUhsiJsdD3Bg6UslXs1IjLNt6KXmFLNVPdXMtlfUgN2dBc4VRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSYzAmj66vx+GG/zl/nlw5vzXrJowHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjKKgmaFKo0qYJq+jGUOhGaJDT5OPwgjZVA ukQNwIRJyEsjF+YzmB710bh5X0WzHbW5hAwzsCoCpm4JWOWQntWSQUjUs5R5sfUX Q54SSjSn3gofCAkQKzBxJSNcj/n4dr/6X5KcThVv+KrRrXyUT+llj+qS03ApFU73 O99Q6ide6xYU8+HQnN3BYAw10/4e32VjmgFKiLTiDl/MeqA17knKxpAJyWnE2qTL hlJEjHWev5TO1sYzjSkyfbTJ/65mTa0kbG91vBRD577oHSXg3uegP5tUkd/Mk0yw MsAxb8n1UqBMObitAlZ5GBlo+cKoYbv1ht8vn4E3cJK7E++sHTM= -----END CERTIFICATE-----Generated at Mon Oct 26 13:24:11 2026 by rpki-client