$ rpki-client -vvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: QME06HM3BnstcEP9e2J8o3wXljhPyQcr/h+hFhF9QsM= Subject key identifier: 5E:DD:81:50:32:2C:50:03:D8:3B:54:3B:54:D7:16:A9:53:8A:A5:CB Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 34B4EFD11F57F5B22BF3111445BD02F5CB199CCE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: 2F Signing time: Fri 05 Jun 2026 13:27:59 +0000 Manifest this update: Fri 05 Jun 2026 13:22:59 +0000 Manifest next update: Sat 06 Jun 2026 16:55:59 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) 3: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: /iz0mU9hl2pBxgrvr0UIfx+ZgJnP3DVnn/KYiGZqzo4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Jun 2026 09:26:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b4:ef:d1:1f:57:f5:b2:2b:f3:11:14:45:bd:02:f5:cb:19:9c:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Jun 5 13:22:59 2026 GMT Not After : Jun 6 16:55:59 2026 GMT Subject: CN=5EDD8150322C5003D83B543B54D716A9538AA5CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d9:3f:ed:62:88:cb:af:19:be:ee:ac:f4:22: 1a:d0:e6:84:c3:e0:1b:42:19:cd:02:2d:8a:c8:9b: c2:c5:23:27:43:5c:c5:e1:f5:55:b8:bb:02:a4:9d: 1b:34:6a:d0:0d:b2:0f:46:33:d7:f8:ad:c4:1a:77: 3d:bc:85:04:07:d9:dc:78:37:0b:da:5f:53:10:86: dd:ec:0d:39:6a:8a:aa:92:36:ba:bd:66:44:f2:63: 25:13:44:23:e1:68:2d:0d:de:fb:81:7b:d2:32:0f: 99:bf:8c:a7:dd:cd:bd:da:a1:b0:5d:61:1c:ee:28: 5f:88:6d:f1:16:b8:89:ed:a5:17:5b:94:58:a2:3b: 17:77:b2:c2:42:ae:40:0b:28:27:77:08:51:6c:23: f8:09:70:c7:c1:c1:5e:06:40:df:85:ba:1b:b5:55: b2:d3:00:c5:ce:73:db:6b:1e:77:2f:c8:6e:34:f5: c2:01:40:4e:fc:50:53:d7:6a:80:76:40:df:02:e8: 0d:0a:b1:f6:ad:33:3e:77:14:e9:ed:b0:cd:5c:16: d4:2e:1c:18:e0:9f:35:18:d4:cb:64:21:be:87:45: 92:0b:11:ff:5d:58:03:16:e7:8c:33:ad:03:75:a9: db:90:d5:2a:3c:f3:94:7f:b3:7a:f3:60:df:67:7d: 83:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:DD:81:50:32:2C:50:03:D8:3B:54:3B:54:D7:16:A9:53:8A:A5:CB X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0b:de:2d:0b:dc:6a:4b:37:08:e6:6d:42:f3:7d:84:e3:d0: 41:d8:d2:34:71:3f:0f:31:31:30:7c:5b:1d:04:f4:61:e6:08: 28:ad:87:fe:b6:d7:50:3e:df:c3:74:a8:f8:47:fc:76:6a:f9: 8d:23:ee:58:ac:0b:5f:21:da:49:33:3d:c3:e0:e2:c1:3a:05: bd:44:05:7e:a6:f7:54:be:7c:b4:fc:0e:27:a3:0b:18:16:c9: ad:8d:40:f0:a1:4e:19:b2:d9:39:4c:5b:2d:86:a8:fe:4a:ef: 48:d8:23:72:59:23:1b:72:ba:13:16:b0:fa:9b:14:68:02:44: 95:31:6a:67:80:28:96:31:62:04:32:6c:2d:bb:e5:c3:f7:e7: 4b:60:09:d4:30:20:de:29:dd:5f:d5:7e:92:63:56:29:9a:97: 78:a5:6c:6c:70:18:ad:85:a9:54:0a:fb:4e:84:2a:24:95:92: 9f:26:5f:db:4f:2a:06:be:58:45:f2:bf:31:ef:5a:88:4a:92: 20:52:bc:b3:89:19:81:96:17:1d:ed:75:ba:aa:30:fa:19:69: 17:68:7e:f5:be:fb:8b:1f:88:01:a1:67:cd:bb:c2:2d:2f:60: af:b1:c4:1e:b6:4f:f6:b4:1c:f7:d0:73:49:9d:92:2e:bb:44: ae:6b:21:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLTv0R9X9bIr8xEURb0C9csZnM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjA2MDUxMzIyNTlaFw0yNjA2MDYxNjU1NTlaMDMxMTAvBgNV BAMTKDVFREQ4MTUwMzIyQzUwMDNEODNCNTQzQjU0RDcxNkE5NTM4QUE1Q0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2T/tYojLrxm+7qz0IhrQ5oTD 4BtCGc0CLYrIm8LFIydDXMXh9VW4uwKknRs0atANsg9GM9f4rcQadz28hQQH2dx4 NwvaX1MQht3sDTlqiqqSNrq9ZkTyYyUTRCPhaC0N3vuBe9IyD5m/jKfdzb3aobBd YRzuKF+IbfEWuIntpRdblFiiOxd3ssJCrkALKCd3CFFsI/gJcMfBwV4GQN+Fuhu1 VbLTAMXOc9trHncvyG409cIBQE78UFPXaoB2QN8C6A0KsfatMz53FOntsM1cFtQu HBjgnzUY1MtkIb6HRZILEf9dWAMW54wzrQN1qduQ1So885R/s3rzYN9nfYNZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXt2BUDIsUAPYO1Q7VNcWqVOKpcswHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcL3i0L3GpLNwjmbULzfYTj0EHY0jRxPw8x MTB8Wx0E9GHmCCith/6211A+38N0qPhH/HZq+Y0j7lisC18h2kkzPcPg4sE6Bb1E BX6m91S+fLT8DiejCxgWya2NQPChThmy2TlMWy2GqP5K70jYI3JZIxtyuhMWsPqb FGgCRJUxameAKJYxYgQybC275cP350tgCdQwIN4p3V/VfpJjVimal3ilbGxwGK2F qVQK+06EKiSVkp8mX9tPKga+WEXyvzHvWohKkiBSvLOJGYGWFx3tdbqqMPoZaRdo fvW++4sfiAGhZ827wi0vYK+xxB62T/a0HPfQc0mdki67RK5rId0= -----END CERTIFICATE-----Generated at Fri Jun 5 19:51:03 2026 by rpki-client