$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: MrCOa9um8HQAHync4MTRX17BZU0eh6h/M+g6OhB3+HE= Subject key identifier: 85:87:1E:E3:C0:91:97:04:5D:3A:3E:9F:F6:D5:E3:A4:DF:20:EA:C8 Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 461E4463A2C700C786B483F994B834F5116680E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 01C3 Signing time: Sat 28 Feb 2026 14:22:02 +0000 Manifest this update: Sat 28 Feb 2026 14:17:02 +0000 Manifest next update: Tue 03 Mar 2026 21:45:02 +0000 Files and hashes: 1: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: 9Uf76dZIFdBMNM0W73qpIzB0gYN7gVJckujXV2nfUWM=) 2: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: v1lwgCqlxe08nRCwq3Lx4ps146WIDqmds9glA+YHFpk=) 3: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 5bVYCcNqY9j6oBeZC80VBloRfTW/bvT7v0Ia+JzjUok=) 4: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: BRdWe9yqfnGAQJZe6FUhFrj1MxqGaHwICnHhQTzDEoM=) 5: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: mRt9s8dx5XONYgjndKwlbR6KAKE0HJjdy6sOgUCnV5I=) 6: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: sUAwamKHCQX+Nbe3UFwDzpaZhPWtBNMMXdH/RR2Wg1w=) 7: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: 2L4HSmsxablCXx47JsgA2H0123ARvFCTuxEu4LuFJLc=) 8: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: NSfIe4c98EYffkAG0qIIx6zRI4oubKLrA0VIjXToHO8=) 9: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: bclkgIIHxYvNhhuq/hH1lA6EKs8X7SbQPbYIFdc9uTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:45:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:1e:44:63:a2:c7:00:c7:86:b4:83:f9:94:b8:34:f5:11:66:80:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Feb 28 14:17:02 2026 GMT Not After : Mar 3 21:45:02 2026 GMT Subject: CN=85871EE3C09197045D3A3E9FF6D5E3A4DF20EAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1d:98:c4:ad:92:98:ef:24:23:5c:83:7f:9d: 45:3e:e1:31:0c:b2:57:e3:5c:db:b6:29:a6:0e:16: 4f:07:93:4e:80:b9:d9:e8:c4:f9:61:54:76:46:97: db:65:2d:24:27:09:6f:70:fd:c8:c1:31:53:89:8e: 18:10:97:04:d6:b0:6a:1b:d0:b5:fa:2b:a4:05:d3: 9f:64:86:dd:13:5a:4f:86:66:e1:ca:02:d2:08:f6: f4:a6:54:7e:a2:ee:84:f8:dc:0c:08:3a:b5:8c:b6: 91:c4:c1:0d:d2:87:28:b5:4d:f5:1a:3b:82:e1:c4: 93:7b:60:92:8e:d9:36:7a:b3:50:c4:dd:06:37:28: 1b:58:6e:6c:e8:6f:e9:24:89:da:bf:45:cc:23:d2: 24:1d:0c:47:51:f9:50:40:d8:ae:58:54:b9:70:c3: 35:6d:6e:34:1b:56:f8:b6:50:dd:43:40:73:04:aa: 70:69:ad:6c:67:7f:f9:f8:b9:b4:a9:96:98:29:36: 71:dc:c2:9f:eb:b4:79:72:55:82:77:90:ad:1a:12: 4f:a3:f8:b6:05:6f:ac:50:03:5e:3d:aa:46:c5:99: ce:e4:c0:98:2f:08:30:b4:9d:7e:ea:23:76:3b:31: 8f:34:c0:f7:f7:1e:6d:2a:0f:95:40:81:d9:8e:b2: 81:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:87:1E:E3:C0:91:97:04:5D:3A:3E:9F:F6:D5:E3:A4:DF:20:EA:C8 X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ee:0b:91:66:36:06:83:d6:85:0f:c6:3c:d3:3c:89:54:ef: f9:16:aa:e3:e1:6f:68:87:49:2e:4b:90:26:dd:ff:e2:4b:46: 29:e4:12:07:7d:87:0b:f4:58:15:e4:44:c0:b0:d9:cd:c9:5e: a7:30:6b:17:48:a1:db:a4:4f:0b:4e:5b:04:57:06:a0:38:f3: 03:73:4b:54:8e:00:e5:11:bd:bb:68:f6:48:ab:5b:7f:ae:1c: e5:63:50:65:35:63:8b:61:ef:82:c6:6f:cb:55:6a:ea:40:bc: f6:e9:df:67:ca:d0:ba:5e:cc:03:04:e0:32:5d:16:0f:36:1e: 2d:06:e7:03:2c:84:61:cd:6f:2e:01:a4:99:d2:00:d5:e9:cc: 0d:c5:5d:9d:df:f3:e5:fa:b4:fb:d3:a7:f7:77:99:6b:57:5b: 12:20:93:19:8f:27:12:a6:fa:91:77:38:87:6b:a4:7d:a6:ee: ce:2c:42:84:5c:3e:f3:b7:ec:70:b6:e0:dd:9a:20:05:73:7e: f1:3b:f3:2c:f6:38:37:f4:7d:8c:6f:7d:fd:29:d3:98:fe:ed: 6b:f5:85:ef:0f:dc:6e:36:a3:e7:5e:ce:eb:e0:31:a8:d3:1f: d9:ce:f2:88:40:d3:d8:6f:2c:ca:1c:2d:03:60:f6:a1:c4:5e: 53:04:ba:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURh5EY6LHAMeGtIP5lLg09RFmgOIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjAyMjgxNDE3MDJaFw0yNjAzMDMyMTQ1MDJaMDMxMTAvBgNV BAMTKDg1ODcxRUUzQzA5MTk3MDQ1RDNBM0U5RkY2RDVFM0E0REYyMEVBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHZjErZKY7yQjXIN/nUU+4TEM slfjXNu2KaYOFk8Hk06AudnoxPlhVHZGl9tlLSQnCW9w/cjBMVOJjhgQlwTWsGob 0LX6K6QF059kht0TWk+GZuHKAtII9vSmVH6i7oT43AwIOrWMtpHEwQ3Shyi1TfUa O4LhxJN7YJKO2TZ6s1DE3QY3KBtYbmzob+kkidq/Rcwj0iQdDEdR+VBA2K5YVLlw wzVtbjQbVvi2UN1DQHMEqnBprWxnf/n4ubSplpgpNnHcwp/rtHlyVYJ3kK0aEk+j +LYFb6xQA149qkbFmc7kwJgvCDC0nX7qI3Y7MY80wPf3Hm0qD5VAgdmOsoEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhYce48CRlwRdOj6f9tXjpN8g6sgwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFDuC5FmNgaD1oUPxjzTPIlU7/kWquPhb2iH SS5LkCbd/+JLRinkEgd9hwv0WBXkRMCw2c3JXqcwaxdIodukTwtOWwRXBqA48wNz S1SOAOURvbto9kirW3+uHOVjUGU1Y4th74LGb8tVaupAvPbp32fK0LpezAME4DJd Fg82Hi0G5wMshGHNby4BpJnSANXpzA3FXZ3f8+X6tPvTp/d3mWtXWxIgkxmPJxKm +pF3OIdrpH2m7s4sQoRcPvO37HC24N2aIAVzfvE78yz2ODf0fYxvff0p05j+7Wv1 he8P3G42o+dezuvgMajTH9nO8ohA09hvLMocLQNg9qHEXlMEui4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:31 2026 by rpki-client