$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: 68zRU2Vngd0koQPrxCwLJKPg+TlJvIDAInWpP0qZhMM= Subject key identifier: 27:8D:4C:AE:CB:27:E4:4A:BD:BF:91:B8:29:AF:C0:36:18:64:32:D4 Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 1F7AD4A39B74CBE6BF2F9C26BDCC55C446B4E8A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: B2 Signing time: Fri 11 Sep 2026 22:43:49 +0000 Manifest this update: Fri 11 Sep 2026 22:38:49 +0000 Manifest next update: Sat 12 Sep 2026 23:47:49 +0000 Files and hashes: 1: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) 2: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: lqanH11z0jBGcLxNFR+dDItI6tqmQMOvmHr0nUTB9oM=) 3: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Sep 2026 23:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:7a:d4:a3:9b:74:cb:e6:bf:2f:9c:26:bd:cc:55:c4:46:b4:e8:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Sep 11 22:38:49 2026 GMT Not After : Sep 12 23:47:49 2026 GMT Subject: CN=278D4CAECB27E44ABDBF91B829AFC036186432D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:15:7f:52:95:d3:ef:e5:d4:51:92:36:27:25: a5:54:23:2c:59:c2:25:73:9d:4d:22:7a:d7:47:b2: a8:96:41:8f:6f:16:2a:fb:6c:f9:e1:c1:00:c3:44: 64:d4:22:ca:0c:41:26:15:97:5a:a3:31:14:da:e9: 41:5c:45:6f:02:91:65:2f:5c:43:ef:0b:3c:4e:99: d7:d7:40:07:9e:d7:af:0b:72:5d:05:66:24:b0:3c: 5d:92:12:93:a5:aa:69:a6:34:9d:cc:11:56:b8:63: 1b:5a:72:43:96:20:33:92:d0:5e:37:0a:15:e6:ab: b7:21:1a:9e:59:49:14:26:c0:c9:9d:13:13:21:6a: 56:af:07:b6:9f:20:11:3a:ae:03:78:a1:99:69:74: a1:52:b6:64:8e:d1:a1:18:bb:b9:c7:02:2f:54:c6: 1b:88:dc:a6:98:3f:89:60:81:a0:70:3d:64:5b:ee: 0a:08:2a:bb:b7:05:a8:cd:03:3d:9c:fe:ed:e3:23: 6c:c8:40:9e:7a:26:44:ce:85:3f:85:99:3e:c6:0f: 50:f3:a2:0d:74:02:dd:fe:f1:f8:4f:f1:cf:41:b9: 58:24:f0:81:ea:0b:92:1b:fa:3d:5c:c7:bc:ac:b1: 9a:7b:d7:13:95:2d:2b:ac:7f:0e:cd:c1:ce:87:1c: 01:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:8D:4C:AE:CB:27:E4:4A:BD:BF:91:B8:29:AF:C0:36:18:64:32:D4 X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d5:c0:c3:86:5c:ce:93:0c:f1:b4:4b:09:b7:e2:e4:be:16: 23:3a:a2:04:38:af:c8:27:49:6f:75:0a:59:4c:80:1b:ba:a1: 33:04:53:23:c7:98:73:04:a1:48:8e:79:2c:54:ab:8a:19:9e: cc:dd:15:14:27:9c:fa:f1:0b:91:cc:7b:fa:01:56:26:f4:73: 1b:3f:54:c5:3a:f5:c1:b3:a2:90:31:12:65:5d:f3:11:e2:89: 4f:a9:64:c2:d4:9b:7e:77:65:50:2e:03:58:32:82:d6:ca:ff: ee:25:7a:d3:c5:fc:41:fd:5d:af:33:5f:d1:ba:2a:07:04:a8: 61:61:ee:cc:be:ba:36:ca:7f:f4:4d:37:95:ad:07:ae:ee:bf: e5:f1:be:ff:38:ca:07:e8:5b:2d:b0:da:67:86:f0:2f:65:6a: 61:7c:f6:90:99:d2:c8:66:c5:20:68:52:a2:dd:f0:1c:99:39: 38:ef:b3:f7:70:a0:35:5c:84:c6:52:fe:7f:84:d2:44:70:32: f9:39:0b:24:9f:41:ab:43:ba:a2:78:1a:a8:02:4c:67:68:40: 0a:26:bb:eb:cf:97:06:10:e7:88:c0:2d:99:36:5d:ee:cd:68: 97:7e:de:7a:f5:d2:98:98:7f:9b:21:fb:e4:32:0f:95:12:c9: 3b:b6:51:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3rUo5t0y+a/L5wmvcxVxEa06KIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjA5MTEyMjM4NDlaFw0yNjA5MTIyMzQ3NDlaMDMxMTAvBgNV BAMTKDI3OEQ0Q0FFQ0IyN0U0NEFCREJGOTFCODI5QUZDMDM2MTg2NDMyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FX9SldPv5dRRkjYnJaVUIyxZ wiVznU0ietdHsqiWQY9vFir7bPnhwQDDRGTUIsoMQSYVl1qjMRTa6UFcRW8CkWUv XEPvCzxOmdfXQAee168Lcl0FZiSwPF2SEpOlqmmmNJ3MEVa4YxtackOWIDOS0F43 ChXmq7chGp5ZSRQmwMmdExMhalavB7afIBE6rgN4oZlpdKFStmSO0aEYu7nHAi9U xhuI3KaYP4lggaBwPWRb7goIKru3BajNAz2c/u3jI2zIQJ56JkTOhT+FmT7GD1Dz og10At3+8fhP8c9BuVgk8IHqC5Ib+j1cx7yssZp71xOVLSusfw7Nwc6HHAFJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ41Mrssn5Eq9v5G4Ka/ANhhkMtQwHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArVwMOGXM6TDPG0Swm34uS+FiM6ogQ4r8gn SW91CllMgBu6oTMEUyPHmHMEoUiOeSxUq4oZnszdFRQnnPrxC5HMe/oBVib0cxs/ VMU69cGzopAxEmVd8xHiiU+pZMLUm353ZVAuA1gygtbK/+4letPF/EH9Xa8zX9G6 KgcEqGFh7sy+ujbKf/RNN5WtB67uv+Xxvv84ygfoWy2w2meG8C9lamF89pCZ0shm xSBoUqLd8ByZOTjvs/dwoDVchMZS/n+E0kRwMvk5CySfQatDuqJ4GqgCTGdoQAom u+vPlwYQ54jALZk2Xe7NaJd+3nr10piYf5sh++QyD5USyTu2UV4= -----END CERTIFICATE-----Generated at Sat Sep 12 09:42:26 2026 by rpki-client