$ rpki-client -vvvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: NcnmQ4HWJfaF+7A9KeJ4VgiQjbJIW3qDnT893wq4l8o= Subject key identifier: 5D:FA:F4:A3:98:D1:08:2D:F5:8A:A6:33:19:79:76:DA:06:9F:42:0D Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 4CFD2791DA08F2A622EA5AE62EB991339C47085B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: EB Signing time: Sun 25 Oct 2026 19:31:13 +0000 Manifest this update: Sun 25 Oct 2026 19:26:13 +0000 Manifest next update: Mon 26 Oct 2026 23:18:13 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) 2: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: 7ymzFaMzVXgtISVFbWcEtIWBUNEGFWLjAOTVMShyXP8=) 3: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 23:18:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:fd:27:91:da:08:f2:a6:22:ea:5a:e6:2e:b9:91:33:9c:47:08:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Oct 25 19:26:13 2026 GMT Not After : Oct 26 23:18:13 2026 GMT Subject: CN=5DFAF4A398D1082DF58AA633197976DA069F420D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a3:87:ec:bf:c0:a5:14:2b:e2:5d:8f:71:73: 7d:51:9d:2f:df:b4:23:a6:8d:3f:e9:f2:37:a3:98: 5a:e5:57:ba:fa:a6:20:a9:f9:a4:e0:48:92:26:9a: 94:75:08:c3:76:c5:c2:0d:16:a9:db:4b:75:7f:86: b3:83:c1:17:36:d4:f8:d4:53:41:72:ec:56:d4:15: 66:43:c9:92:e7:6a:7e:d3:32:2d:e7:99:64:ed:32: 23:e6:7e:69:69:7c:27:3a:5c:7d:a4:1b:53:59:be: f4:d7:1c:4f:a3:d1:ac:b6:46:42:fa:b7:8e:df:12: 58:ee:4b:8c:1b:5a:93:db:06:9b:68:66:20:3b:12: 74:98:93:75:37:c1:c1:e3:ba:2d:78:b1:c4:06:c6: a2:c2:79:37:05:9a:b4:7e:77:0c:b6:49:9e:55:36: 9a:41:46:fe:f8:35:b4:f0:09:9a:88:07:57:86:35: 02:50:d4:3f:56:11:7d:14:2d:3a:32:0e:27:97:cb: 60:21:40:48:25:04:29:ff:43:fa:ab:f2:0d:81:19: 92:f6:16:93:f9:2e:a3:ff:ef:f3:d7:56:aa:ca:73: 6e:c6:f5:2b:df:32:dc:f7:df:25:e8:95:e4:dc:52: f8:a8:41:fb:88:4d:87:ea:e2:f0:0a:a8:0b:46:d2: fd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:FA:F4:A3:98:D1:08:2D:F5:8A:A6:33:19:79:76:DA:06:9F:42:0D X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:c4:5b:20:6b:9b:16:14:8c:7d:14:e2:7b:36:63:4f:e6:14: 7d:e0:c8:a7:db:fc:77:21:a5:89:2c:c1:0d:2f:1a:61:d3:c0: 7c:e4:ee:f1:1d:de:7b:54:f1:d6:7d:3e:0a:4b:01:0e:3b:b7: 10:07:4e:4d:d6:72:fd:78:3b:cd:83:4d:39:55:cb:a0:bc:e7: 38:8c:96:ac:92:7b:f4:fb:44:5e:9a:8a:24:fc:e2:b2:91:ce: 58:1b:23:45:e7:7c:fa:7b:4b:87:df:0e:56:a8:ab:2e:b7:97: 63:4e:f3:10:69:79:00:ba:a6:d9:83:be:e8:c5:3f:3c:21:b0: 9f:0b:0d:73:86:56:8a:07:fc:20:bd:64:f8:ee:57:b1:be:ef: e5:99:e4:8a:8e:0c:38:16:ca:4e:05:88:b0:26:4c:cd:83:df: d5:c9:5e:46:c2:38:e5:10:34:c3:25:98:c0:19:bc:4c:1b:5a: c9:90:65:c8:83:3f:17:59:4a:39:94:0a:1c:fd:31:77:96:e1: f5:be:9c:84:4a:1b:36:d3:64:49:83:5b:7b:e8:61:6f:bd:38: b4:9e:b6:51:08:fc:38:ef:77:6e:72:1c:ca:22:dc:46:73:f9: f9:ae:18:d9:e7:02:26:74:83:e0:02:29:04:e1:bf:77:55:a6: e8:98:8c:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTP0nkdoI8qYi6lrmLrmRM5xHCFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjEwMjUxOTI2MTNaFw0yNjEwMjYyMzE4MTNaMDMxMTAvBgNV BAMTKDVERkFGNEEzOThEMTA4MkRGNThBQTYzMzE5Nzk3NkRBMDY5RjQyMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmo4fsv8ClFCviXY9xc31RnS/f tCOmjT/p8jejmFrlV7r6piCp+aTgSJImmpR1CMN2xcINFqnbS3V/hrODwRc21PjU U0Fy7FbUFWZDyZLnan7TMi3nmWTtMiPmfmlpfCc6XH2kG1NZvvTXHE+j0ay2RkL6 t47fEljuS4wbWpPbBptoZiA7EnSYk3U3wcHjui14scQGxqLCeTcFmrR+dwy2SZ5V NppBRv74NbTwCZqIB1eGNQJQ1D9WEX0ULToyDieXy2AhQEglBCn/Q/qr8g2BGZL2 FpP5LqP/7/PXVqrKc27G9SvfMtz33yXoleTcUvioQfuITYfq4vAKqAtG0v09AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXfr0o5jRCC31iqYzGXl22gafQg0wHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTEWyBrmxYUjH0U4ns2Y0/mFH3gyKfb/Hch pYkswQ0vGmHTwHzk7vEd3ntU8dZ9PgpLAQ47txAHTk3Wcv14O82DTTlVy6C85ziM lqySe/T7RF6aiiT84rKRzlgbI0XnfPp7S4ffDlaoqy63l2NO8xBpeQC6ptmDvujF PzwhsJ8LDXOGVooH/CC9ZPjuV7G+7+WZ5IqODDgWyk4FiLAmTM2D39XJXkbCOOUQ NMMlmMAZvEwbWsmQZciDPxdZSjmUChz9MXeW4fW+nIRKGzbTZEmDW3voYW+9OLSe tlEI/Djvd25yHMoi3EZz+fmuGNnnAiZ0g+ACKQThv3dVpuiYjNw= -----END CERTIFICATE-----Generated at Mon Oct 26 07:33:47 2026 by rpki-client