$ rpki-client -vvf repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft File: 87EF06CC72EA3A8D57019F6198CA40168384D259.mft (raw, json) Hash identifier: Lzd4L9y1GAp+0GMLAjyGSzzaOn5xvIG6UI0j3IimnwQ= Subject key identifier: 71:BE:F7:C6:98:1B:D8:B3:7E:1D:CB:9D:5C:BC:98:61:D0:5E:A2:6C Authority key identifier: 87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 Certificate issuer: /CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Certificate serial: 260B3B6D9EEF58B8FCAE32DF7E66BD975B54F70F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft Manifest number: 0153 Signing time: Sat 28 Feb 2026 19:31:38 +0000 Manifest this update: Sat 28 Feb 2026 19:26:38 +0000 Manifest next update: Wed 04 Mar 2026 04:46:38 +0000 Files and hashes: 1: 3135372e31352e35312e302f32342d3234203d3e20313530343934.roa (hash: /2jJPO3Er6sewDinbJyZDHA9B3o2kNcba+XnPeftBr0=) 2: 87EF06CC72EA3A8D57019F6198CA40168384D259.crl (hash: DwDLML1sS5zE5mVXeB7aP2FPGuKIsnae7cMLi7SO+o4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:46:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:0b:3b:6d:9e:ef:58:b8:fc:ae:32:df:7e:66:bd:97:5b:54:f7:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87EF06CC72EA3A8D57019F6198CA40168384D259 Validity Not Before: Feb 28 19:26:38 2026 GMT Not After : Mar 4 04:46:38 2026 GMT Subject: CN=71BEF7C6981BD8B37E1DCB9D5CBC9861D05EA26C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:12:2b:37:7c:1c:09:c6:34:99:b4:8a:f1:ae: c9:eb:d5:34:af:b5:df:32:84:d7:fd:db:b8:af:ab: b4:20:c3:d0:f5:fe:73:1e:73:3d:c2:96:b5:01:96: 32:4d:26:0d:5d:72:5b:6a:6e:f5:e0:0b:fb:2c:59: b3:1a:5d:33:be:92:d4:d8:b9:a2:fc:ce:5b:d0:ef: e8:c4:ff:6c:df:d0:26:a9:cf:8a:08:2b:e8:4d:16: a4:2c:47:47:35:b1:c4:11:8c:67:7a:fc:da:c7:aa: a3:92:6a:52:92:48:ba:2d:c5:7e:1b:b2:76:74:28: 18:7d:cf:59:7c:49:5d:ac:ca:26:d1:08:fb:fe:43: d5:24:68:80:9e:64:5b:a7:e8:68:42:60:c6:d0:61: b3:d4:ae:71:a8:09:58:2f:04:62:e9:a2:a8:52:01: 30:73:ed:e7:05:1e:6c:11:c2:51:0d:b3:da:7a:99: ce:8f:c9:18:c5:4b:ad:ff:84:1c:11:db:22:aa:7a: 9d:b4:b4:5f:e3:a5:43:fb:51:e2:73:28:c4:7d:58: 2e:68:a3:7f:97:28:43:34:1b:49:71:3c:6f:32:bb: 62:ce:0b:7a:e2:8e:3a:98:2f:5b:d3:6c:27:52:f8: da:13:6b:0c:5e:19:07:e3:46:f0:1f:cd:fd:dd:66: 81:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:BE:F7:C6:98:1B:D8:B3:7E:1D:CB:9D:5C:BC:98:61:D0:5E:A2:6C X509v3 Authority Key Identifier: keyid:87:EF:06:CC:72:EA:3A:8D:57:01:9F:61:98:CA:40:16:83:84:D2:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/87EF06CC72EA3A8D57019F6198CA40168384D259.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0bb8e612-7bb3-48de-969d-71b45f46a161/0/87EF06CC72EA3A8D57019F6198CA40168384D259.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:1d:4c:a7:7c:d5:ee:dd:b9:a8:4f:24:22:72:11:10:f1:77: 06:ca:b3:b4:45:8a:14:b1:df:bf:ef:34:d7:73:0b:2b:e1:59: 50:2b:37:ac:8b:1e:c8:43:2b:9c:91:7c:c7:62:25:18:00:a8: 88:ae:21:6b:8a:f7:86:65:77:92:6c:12:a3:20:ca:94:6e:7f: c2:5c:5f:29:38:8d:c3:5b:88:de:8d:20:c4:f5:1f:ae:13:ed: be:84:dc:e4:8b:82:30:47:9e:fb:24:91:93:1b:90:4c:b6:22: 31:9c:5d:b5:63:12:6d:94:4d:e7:b0:02:18:46:90:78:2c:f0: e2:0e:4c:a5:1c:2c:fd:5d:74:7c:1b:92:fc:d5:f4:00:cc:e9: 16:54:fc:05:aa:e3:99:c5:aa:ac:d2:6b:94:da:e4:1b:14:3c: 3d:1a:5d:15:2d:c4:f4:9e:c6:c2:fa:ec:dc:e5:24:df:91:53: aa:c4:e6:0e:10:0f:16:1c:f3:4f:46:8c:98:22:60:88:96:a4: ae:a2:b1:e1:20:8c:07:1e:38:4c:0d:39:32:9a:a3:9c:8f:11: 98:51:d6:12:98:f0:23:d9:4b:d4:f2:db:2e:28:f6:0b:7e:20: 95:08:8d:0d:3b:58:2d:22:25:a5:fe:36:58:fd:9a:52:a6:8c: 93:18:7f:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJgs7bZ7vWLj8rjLffma9l1tU9w8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4 Mzg0RDI1OTAeFw0yNjAyMjgxOTI2MzhaFw0yNjAzMDQwNDQ2MzhaMDMxMTAvBgNV BAMTKDcxQkVGN0M2OTgxQkQ4QjM3RTFEQ0I5RDVDQkM5ODYxRDA1RUEyNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEis3fBwJxjSZtIrxrsnr1TSv td8yhNf927ivq7Qgw9D1/nMecz3ClrUBljJNJg1dcltqbvXgC/ssWbMaXTO+ktTY uaL8zlvQ7+jE/2zf0Capz4oIK+hNFqQsR0c1scQRjGd6/NrHqqOSalKSSLotxX4b snZ0KBh9z1l8SV2syibRCPv+Q9UkaICeZFun6GhCYMbQYbPUrnGoCVgvBGLpoqhS ATBz7ecFHmwRwlENs9p6mc6PyRjFS63/hBwR2yKqep20tF/jpUP7UeJzKMR9WC5o o3+XKEM0G0lxPG8yu2LOC3rijjqYL1vTbCdS+NoTawxeGQfjRvAfzf3dZoHNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcb73xpgb2LN+HcudXLyYYdBeomwwHwYDVR0j BBgwFoAUh+8GzHLqOo1XAZ9hmMpAFoOE0lkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YmI4ZTYxMi03YmIzLTQ4ZGUtOTY5ZC03MWI0NWY0NmExNjEvMC84N0VGMDZDQzcy RUEzQThENTcwMTlGNjE5OENBNDAxNjgzODREMjU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQwMTY4Mzg0 RDI1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGJiOGU2MTItN2JiMy00OGRlLTk2 OWQtNzFiNDVmNDZhMTYxLzAvODdFRjA2Q0M3MkVBM0E4RDU3MDE5RjYxOThDQTQw MTY4Mzg0RDI1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIdTKd81e7duahPJCJyERDxdwbKs7RFihSx 37/vNNdzCyvhWVArN6yLHshDK5yRfMdiJRgAqIiuIWuK94Zld5JsEqMgypRuf8Jc Xyk4jcNbiN6NIMT1H64T7b6E3OSLgjBHnvskkZMbkEy2IjGcXbVjEm2UTeewAhhG kHgs8OIOTKUcLP1ddHwbkvzV9ADM6RZU/AWq45nFqqzSa5Ta5BsUPD0aXRUtxPSe xsL67NzlJN+RU6rE5g4QDxYc809GjJgiYIiWpK6iseEgjAceOEwNOTKao5yPEZhR 1hKY8CPZS9Ty2y4o9gt+IJUIjQ07WC0iJaX+Nlj9mlKmjJMYf70= -----END CERTIFICATE-----Generated at Mon Mar 2 17:15:15 2026 by rpki-client