
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
File: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft (raw, json)
Hash identifier: QL1XSa/lW3O+K5rQDBFquag58XAv1q9sMukEi/d1xho=
Subject key identifier: 11:FA:71:B5:93:58:70:C2:AB:CA:A4:70:24:9E:DA:38:15:4D:6D:97
Authority key identifier: 87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5
Certificate issuer: /CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5
Certificate serial: 7FA4E6C88FE04D0A44700C4F099A1CB5C7C8F736
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
Manifest number: B8
Signing time: Thu 17 Sep 2026 07:02:14 +0000
Manifest this update: Thu 17 Sep 2026 06:57:14 +0000
Manifest next update: Fri 18 Sep 2026 09:52:14 +0000
Files and hashes: 1: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl (hash: 2P3IxbJto85xc+xZMphySZFqPp/XK6jDJa6S56WVA1Y=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl
rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 09:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:a4:e6:c8:8f:e0:4d:0a:44:70:0c:4f:09:9a:1c:b5:c7:c8:f7:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5
Validity
Not Before: Sep 17 06:57:14 2026 GMT
Not After : Sep 18 09:52:14 2026 GMT
Subject: CN=11FA71B5935870C2ABCAA470249EDA38154D6D97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:d3:d4:85:b4:47:bf:31:f6:57:bf:6c:a2:a1:
97:23:94:3f:6d:bf:13:87:27:24:ef:82:83:3c:32:
80:d5:26:9a:15:49:a1:0c:d4:3d:01:20:77:59:1b:
22:9f:1a:f8:c2:2a:f7:c2:7c:1e:61:49:f0:4e:fd:
2b:76:70:cf:fc:e3:d8:e0:8e:6d:51:28:31:7c:ff:
15:c5:b3:60:63:cc:1c:dc:a9:d9:38:f4:44:47:8a:
3b:3f:d5:c5:d6:74:01:35:91:64:e7:b3:68:a5:f8:
4e:b2:4d:e7:b4:f9:eb:4d:68:d7:4b:ee:e4:e7:ec:
d6:ce:0b:a4:48:5e:09:50:2c:56:9e:4a:0c:1c:fc:
c4:1d:67:1c:61:84:fe:63:31:a8:14:95:cc:3d:70:
62:d6:04:c4:25:e5:0e:76:e4:5b:3e:7a:0b:19:14:
5d:e7:18:3c:bb:66:ac:99:01:6e:13:cc:e9:98:32:
20:d6:9e:42:f0:23:8c:82:db:00:a6:ed:28:1a:ff:
81:ff:fb:f6:b5:b4:3d:aa:83:00:35:e5:d0:45:4c:
80:f6:16:56:db:29:71:16:5f:6d:64:ca:0d:65:f6:
15:bf:6c:fe:f0:6f:d8:12:94:5a:f0:cb:07:33:8d:
22:69:3f:43:93:f3:d6:7d:4b:bf:02:f6:2a:d7:f4:
d8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:FA:71:B5:93:58:70:C2:AB:CA:A4:70:24:9E:DA:38:15:4D:6D:97
X509v3 Authority Key Identifier:
keyid:87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8f:0b:8c:a3:37:a3:53:36:9c:c5:50:a6:d3:12:4b:c9:9a:
b9:b0:84:4b:fd:9e:a7:d6:6b:c1:d0:08:a0:ac:2e:d1:65:14:
62:02:a3:f2:21:3e:c5:46:dd:5b:6e:23:5a:14:41:01:3d:7b:
4f:4c:7c:45:a2:dc:ff:87:3a:a6:a4:dd:ee:e5:ee:5d:fc:3d:
29:e5:9b:df:9d:fa:5b:40:42:08:38:19:80:c5:39:93:73:60:
94:3d:e4:6a:27:01:ce:c8:be:fd:9f:b3:13:6f:11:fa:b0:93:
d8:7d:dc:fd:76:8a:3e:b5:de:d3:8d:ad:2b:bf:b9:74:86:d9:
a9:13:91:40:d2:c4:7b:7d:7c:04:b0:75:28:b8:15:18:ff:0b:
c2:65:b2:01:f8:69:9a:7e:4c:5a:a8:34:17:b2:00:6c:7a:6d:
da:0b:a9:cd:7b:03:d2:a8:29:01:12:ee:c3:d4:d3:b1:d7:03:
78:ff:64:35:80:5a:e9:3b:ad:46:3c:17:68:fe:e5:9d:de:89:
27:f5:0f:4a:cb:62:2d:2e:0a:6a:9c:45:00:13:0f:b8:74:32:
10:10:9c:d8:5d:8b:d7:1a:10:98:51:7a:cd:b0:e7:33:40:65:
3a:17:96:ca:4d:09:8a:13:91:e7:f6:0f:71:15:57:46:26:70:
a0:36:8b:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:25:20 2026 by rpki-client