$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft File: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft (raw, json) Hash identifier: oFO+04ItuK2kcFDe2qzZXpEe/ns3cB/sqCnHfCfCIJE= Subject key identifier: 3B:05:A8:F1:71:E8:8E:21:5F:74:D5:4E:BB:BF:AC:59:EB:E7:F9:9C Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 Certificate issuer: /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Certificate serial: 6EBA895555EBC1A981C189CE9685C2648E70FA3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft Manifest number: 01D9 Signing time: Sat 18 Apr 2026 00:52:08 +0000 Manifest this update: Sat 18 Apr 2026 00:47:08 +0000 Manifest next update: Tue 21 Apr 2026 03:27:08 +0000 Files and hashes: 1: 323430303a393134303a3a2f33322d3332203d3e203535363632.roa (hash: omacf/MlMTOtJi7pgs2aPCZclto1hvc9zlwr6k9i/3s=) 2: 87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl (hash: YQDkYLCR36i17czDqeWkO3xXE8EVhdTVbFA6XDs+rvY=) 3: 3130332e37312e31302e302f32332d3234203d3e203535363632.roa (hash: bEXXfN8D8Iwh6++6Sf4fNdlCeqEZEgaEYsFhbfU8XrA=) 4: 3130332e37312e31312e302f32342d3234203d3e203535363632.roa (hash: 1RATtgEQ2fC4CTZxbGq9E6JcRJ2nj2d+lfS9XKYbQiw=) 5: 3130332e37312e392e302f32342d3234203d3e203535363632.roa (hash: dYO4EYncz17AgE2NQ+gbu1sETsiNFmn4HcjMbsqN9Sk=) 6: 3130332e37312e382e302f32342d3234203d3e203535363632.roa (hash: UAGKGSjm0CH0zknVedkxHzDnhJTtYq6aJ2UvpPN4dUI=) 7: 3130332e37312e382e302f32322d3234203d3e203535363632.roa (hash: wgJ4l6Z4XSXlS4bEbbx1UlqQbPaEu6hH6VwQa4mHecg=) 8: 3130332e37312e382e302f32332d3234203d3e203535363632.roa (hash: gom2K2gkNEap6pRf8i6qpFWU+p3reMlN96fhfu6QcT4=) 9: 3130332e37312e31302e302f32342d3234203d3e203535363632.roa (hash: M465AGkIQVJLTD8mWLihVhmnQLcd44l1pfpYvPChqew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:ba:89:55:55:eb:c1:a9:81:c1:89:ce:96:85:c2:64:8e:70:fa:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9 Validity Not Before: Apr 18 00:47:08 2026 GMT Not After : Apr 21 03:27:08 2026 GMT Subject: CN=3B05A8F171E88E215F74D54EBBBFAC59EBE7F99C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:33:53:dc:2d:cd:aa:8c:6d:35:5a:01:d3:a3: a7:9c:d5:5c:c7:56:3a:e4:89:8b:d5:ee:af:ed:89: b1:58:f8:57:d9:4b:80:58:55:f4:8c:91:c4:26:b9: 8d:aa:a8:ae:d4:81:6e:d3:0b:f1:43:f1:3b:5d:4e: 1a:36:8f:a1:db:95:08:26:00:ca:51:85:65:85:ca: f8:e8:aa:06:46:9a:b9:44:07:86:d1:33:1b:ee:aa: 0f:6e:ba:52:54:a4:e5:ec:65:77:7b:0d:33:3c:a1: f9:c3:73:a4:44:c9:95:fd:91:27:47:69:9a:f1:2b: 9b:0c:b7:db:be:81:c1:af:5b:3a:2a:3c:e2:8b:cf: 3e:5f:e4:c0:bb:95:d2:f8:a0:38:52:56:3b:44:b6: 7a:a6:51:d8:5b:15:c0:57:09:10:fc:4d:ac:7d:83: ad:2b:b6:d9:28:1e:97:8c:86:15:fe:5b:9f:47:55: d6:ae:dd:89:99:73:d1:82:06:03:c2:9f:dd:3e:53: e4:0a:13:d1:d4:1c:27:4a:6a:80:d2:2d:22:2c:4c: 4b:a3:ca:90:cf:8a:06:52:95:33:5a:54:c8:31:bc: eb:5c:03:02:61:90:c8:ff:ed:47:1b:12:b7:6a:8b: 67:8c:af:cc:c9:93:83:f7:04:41:06:46:f0:8a:cc: a5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:05:A8:F1:71:E8:8E:21:5F:74:D5:4E:BB:BF:AC:59:EB:E7:F9:9C X509v3 Authority Key Identifier: keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:02:48:4c:4a:f0:f3:af:3d:0c:8e:63:ec:1e:cc:d0:22:4a: 5f:62:0a:1c:b8:bb:15:87:2e:a9:1e:1b:64:13:43:69:02:92: ed:ab:48:d4:6d:7c:de:03:d2:12:83:9d:c8:31:d5:03:54:e0: d3:79:43:71:c3:84:33:c6:bd:46:07:63:e6:c8:0f:82:04:d2: 4e:ed:71:02:dc:16:4e:37:34:a4:f2:38:29:ee:c8:40:7c:95: f5:26:c0:a1:85:18:e6:3a:57:c3:ff:3f:b7:d9:9c:73:59:78: 1b:b2:fa:bb:82:59:3c:94:45:b8:a8:ca:e1:db:ff:18:fd:e8: 97:05:32:67:9b:aa:0c:01:e3:1c:8f:ef:e9:9f:37:97:91:70: 3e:03:4f:2c:80:b7:02:93:90:cc:75:fa:44:04:6a:0e:43:b4: fd:0e:5b:7d:c6:01:f6:ce:50:e8:a4:cc:f8:06:db:9d:72:63: fc:8c:e3:7c:45:09:3f:4e:f0:83:2d:cb:19:0d:28:19:0b:c4: 33:b7:f8:a2:ac:56:f0:60:f9:e1:35:bc:ca:b9:c4:b0:0b:92: 2c:fa:dd:03:5d:5f:a0:d9:ea:0e:55:1a:7b:94:6e:71:57:96: f3:c5:d8:a7:69:aa:d0:9d:c2:81:9a:a1:1f:89:61:bd:3f:71: b2:df:7d:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbrqJVVXrwamBwYnOloXCZI5w+j4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZD NkYzQjJGOTAeFw0yNjA0MTgwMDQ3MDhaFw0yNjA0MjEwMzI3MDhaMDMxMTAvBgNV BAMTKDNCMDVBOEYxNzFFODhFMjE1Rjc0RDU0RUJCQkZBQzU5RUJFN0Y5OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGM1PcLc2qjG01WgHTo6ec1VzH VjrkiYvV7q/tibFY+FfZS4BYVfSMkcQmuY2qqK7UgW7TC/FD8TtdTho2j6HblQgm AMpRhWWFyvjoqgZGmrlEB4bRMxvuqg9uulJUpOXsZXd7DTM8ofnDc6REyZX9kSdH aZrxK5sMt9u+gcGvWzoqPOKLzz5f5MC7ldL4oDhSVjtEtnqmUdhbFcBXCRD8Tax9 g60rttkoHpeMhhX+W59HVdau3YmZc9GCBgPCn90+U+QKE9HUHCdKaoDSLSIsTEuj ypDPigZSlTNaVMgxvOtcAwJhkMj/7UcbErdqi2eMr8zJk4P3BEEGRvCKzKVhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOwWo8XHojiFfdNVOu7+sWevn+ZwwHwYDVR0j BBgwFoAUh85mcAcg+wsx6h6jKVr2NsbzsvkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTQ5NjA4Mi1hMGFhLTQ4MzYtYjU4Ny05NzNkZDdlMjk3YWYvMC84N0NFNjY3MDA3 MjBGQjBCMzFFQTFFQTMyOTVBRjYzNkM2RjNCMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2MzZDNkYz QjJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE0OTYwODItYTBhYS00ODM2LWI1 ODctOTczZGQ3ZTI5N2FmLzAvODdDRTY2NzAwNzIwRkIwQjMxRUExRUEzMjk1QUY2 MzZDNkYzQjJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgCSExK8POvPQyOY+wezNAiSl9iChy4uxWH LqkeG2QTQ2kCku2rSNRtfN4D0hKDncgx1QNU4NN5Q3HDhDPGvUYHY+bID4IE0k7t cQLcFk43NKTyOCnuyEB8lfUmwKGFGOY6V8P/P7fZnHNZeBuy+ruCWTyURbioyuHb /xj96JcFMmebqgwB4xyP7+mfN5eRcD4DTyyAtwKTkMx1+kQEag5DtP0OW33GAfbO UOikzPgG251yY/yM43xFCT9O8IMtyxkNKBkLxDO3+KKsVvBg+eE1vMq5xLALkiz6 3QNdX6DZ6g5VGnuUbnFXlvPF2KdpqtCdwoGaoR+JYb0/cbLffQA= -----END CERTIFICATE-----Generated at Sun Apr 19 10:20:46 2026 by rpki-client