$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: A+CHvJhua33YWjur9JapBJtzXpFheyLJoIcV4SGLoXc= Subject key identifier: 45:82:D6:A8:AF:75:D5:2D:43:44:4C:B5:0C:C5:E8:48:21:EA:64:C1 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 5645A2B16EC0C69ADFE7AB6AD877E92B043746C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 12:34:16 +0000 Manifest this update: Thu 17 Sep 2026 12:29:16 +0000 Manifest next update: Fri 18 Sep 2026 12:52:16 +0000 Files and hashes: 1: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) 2: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: NYli1CGrg6UK1TL5TiSPeR2HfSuNeRBvl6fgndfyKrg=) 3: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) 4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:45:a2:b1:6e:c0:c6:9a:df:e7:ab:6a:d8:77:e9:2b:04:37:46:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: Sep 17 12:29:16 2026 GMT Not After : Sep 18 12:52:16 2026 GMT Subject: CN=4582D6A8AF75D52D43444CB50CC5E84821EA64C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:11:87:df:36:f4:c0:76:f3:af:ff:4e:fc: c8:1f:57:2e:6c:b9:bc:4f:fe:13:b9:9b:9a:7b:c6: c9:7f:3f:b0:a8:2a:ce:f1:15:3a:10:93:31:39:d4: 76:8f:77:a6:15:ff:84:5b:ee:22:7f:00:b0:a4:43: 55:f4:aa:54:9d:08:3e:38:da:fb:9c:08:9a:a3:37: e8:60:df:fe:57:d9:3e:b2:72:4d:3e:52:b3:cf:42: 1b:61:09:93:d6:b5:4a:7d:ff:bc:74:f0:f7:62:bf: 0c:3c:f1:b8:d0:18:6b:ce:f6:5c:f1:1b:88:b1:4e: 25:42:c3:2b:7c:67:ad:90:23:21:8f:51:72:e3:c6: e5:36:51:1a:ce:88:bf:43:36:3c:b6:ec:06:60:71: 99:06:7b:1b:4a:b2:9c:87:40:17:41:3c:00:8d:a1: 4b:a9:21:bc:ff:72:04:cf:a7:03:22:93:94:79:bf: 5f:cf:7f:92:61:ff:04:fc:0d:3f:7d:ca:79:13:09: 07:5f:72:85:6c:8d:31:13:5e:d5:3b:69:32:87:f4: 61:02:3f:6c:5e:9a:82:c0:ef:d0:3a:f1:7a:de:72: 58:f7:c4:af:67:34:c1:b2:7f:8f:69:33:a9:7f:0b: 18:f5:5b:0e:bf:87:0b:fb:78:3f:42:fe:86:a3:b3: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:82:D6:A8:AF:75:D5:2D:43:44:4C:B5:0C:C5:E8:48:21:EA:64:C1 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:57:6c:57:bd:0f:cf:a0:86:17:03:01:9e:7a:41:4b:57:0d: b2:b7:20:15:b7:82:a1:74:a0:c6:b6:88:ff:91:81:9f:2d:db: 14:5c:99:57:69:df:27:d1:88:ff:ab:de:99:e6:02:25:a4:28: b8:69:ae:06:92:af:5e:bd:de:9e:87:48:7b:3c:b6:15:2d:df: 2a:de:a1:c6:c5:fe:50:06:5e:86:6f:e7:44:a4:31:c1:35:a7: c3:98:47:31:6e:86:d7:d3:9e:a2:80:02:48:64:d6:de:18:ac: aa:f4:36:11:c5:e4:dd:dd:ae:07:3c:59:cf:68:55:63:24:9b: 10:fb:f3:5f:df:40:4a:73:b4:df:48:9c:66:f8:83:19:3b:79: 66:d9:01:44:cb:f0:6b:b7:cf:b1:74:7a:c7:2a:c9:48:95:29: 85:5d:03:c9:f2:77:50:dc:07:59:d0:7d:c9:3d:ed:00:e6:64: 18:12:42:e5:95:ca:47:c1:a4:3c:1e:2b:2d:83:f5:d5:d8:a2: 2a:61:22:c1:5c:17:29:51:87:78:d0:2a:06:07:e7:31:1f:06: d2:56:87:be:0a:90:5d:ce:95:bc:23:59:96:44:3e:e9:af:ae: 95:c9:c0:52:8d:51:1f:c4:e0:0e:e6:b5:b3:bd:9a:c8:ac:e6: 67:e4:d9:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVkWisW7Axprf56tq2HfpKwQ3RsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjA5MTcxMjI5MTZaFw0yNjA5MTgxMjUyMTZaMDMxMTAvBgNV BAMTKDQ1ODJENkE4QUY3NUQ1MkQ0MzQ0NENCNTBDQzVFODQ4MjFFQTY0QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjhxGH3zb0wHbzr/9O/MgfVy5s ubxP/hO5m5p7xsl/P7CoKs7xFToQkzE51HaPd6YV/4Rb7iJ/ALCkQ1X0qlSdCD44 2vucCJqjN+hg3/5X2T6yck0+UrPPQhthCZPWtUp9/7x08Pdivww88bjQGGvO9lzx G4ixTiVCwyt8Z62QIyGPUXLjxuU2URrOiL9DNjy27AZgcZkGextKspyHQBdBPACN oUupIbz/cgTPpwMik5R5v1/Pf5Jh/wT8DT99ynkTCQdfcoVsjTETXtU7aTKH9GEC P2xemoLA79A68Xreclj3xK9nNMGyf49pM6l/Cxj1Ww6/hwv7eD9C/oajs+3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYLWqK911S1DREy1DMXoSCHqZMEwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJJXbFe9D8+ghhcDAZ56QUtXDbK3IBW3gqF0 oMa2iP+RgZ8t2xRcmVdp3yfRiP+r3pnmAiWkKLhprgaSr1693p6HSHs8thUt3yre ocbF/lAGXoZv50SkMcE1p8OYRzFuhtfTnqKAAkhk1t4YrKr0NhHF5N3drgc8Wc9o VWMkmxD781/fQEpztN9InGb4gxk7eWbZAUTL8Gu3z7F0escqyUiVKYVdA8nyd1Dc B1nQfck97QDmZBgSQuWVykfBpDweKy2D9dXYoiphIsFcFylRh3jQKgYH5zEfBtJW h74KkF3OlbwjWZZEPumvrpXJwFKNUR/E4A7mtbO9msis5mfk2aU= -----END CERTIFICATE-----Generated at Thu Sep 17 15:22:03 2026 by rpki-client