$ rpki-client -vvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: I9wD07PO7AeD5nHY44uwSmhurwgB/LWp3LlkPq6whFk= Subject key identifier: 11:F6:0E:85:A0:F8:FC:FA:00:F1:7E:D3:69:A1:15:C1:43:8F:C6:B2 Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 57317834033BA22373E2CB9E17BF0FC0B4F49431 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 08:38:29 +0000 Manifest this update: Wed 17 Jun 2026 08:33:29 +0000 Manifest next update: Thu 18 Jun 2026 10:32:29 +0000 Files and hashes: 1: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 2: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) 3: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) 4: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 5: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) 6: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 7: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 8: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 9: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: gpOF5h25OFXfceJKfmh+orxQUYsxj1fyhcsYHHvFJR4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:31:78:34:03:3b:a2:23:73:e2:cb:9e:17:bf:0f:c0:b4:f4:94:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Jun 17 08:33:29 2026 GMT Not After : Jun 18 10:32:29 2026 GMT Subject: CN=11F60E85A0F8FCFA00F17ED369A115C1438FC6B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a7:fd:20:ee:3e:fd:28:99:18:ad:c6:65:eb: 69:dd:0f:7d:20:c5:8e:75:a3:6f:68:84:db:83:a3: 5a:8c:7b:60:55:fb:a3:85:ee:ef:71:f9:11:5f:c3: 20:a9:4d:a8:c7:d7:fd:a6:1e:5e:d2:35:e5:5e:1d: 31:19:25:0b:f4:f1:fd:83:61:e4:eb:67:8a:20:78: c7:7a:cd:eb:60:a9:36:6e:11:da:9d:85:f5:65:4c: 01:ed:56:3d:99:de:f2:ea:4e:ac:64:cc:1b:96:f1: 65:4d:d1:5d:58:bd:b2:e5:8e:17:e1:a8:28:c2:bc: 69:2a:ec:f8:a3:5f:eb:2b:50:eb:c4:59:bf:74:25: 9c:67:fb:2b:9c:17:ea:4d:0b:c4:b9:a7:85:50:36: b7:66:5b:80:c2:15:0e:ba:c6:59:01:15:9a:79:42: 90:e2:03:ca:22:22:80:35:ba:7b:2d:fb:0e:02:b7: be:02:a8:68:78:e6:c0:2d:41:89:42:ee:f7:da:b2: 4f:da:90:fb:6e:e4:81:cb:fb:5f:ec:fb:6f:71:a3: 23:cf:af:4f:c3:de:57:3b:7d:c2:18:fa:0f:c7:4f: 86:ba:fd:48:9a:6b:c5:9e:26:04:32:37:22:16:7a: 71:a1:23:67:50:9a:26:e5:b7:c1:7b:f2:6c:20:ef: d3:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F6:0E:85:A0:F8:FC:FA:00:F1:7E:D3:69:A1:15:C1:43:8F:C6:B2 X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:00:9e:88:f1:6c:9f:fb:4f:92:63:66:1f:23:c4:8f:fe:74: 53:1f:59:7d:5c:4c:2a:1f:36:29:74:53:54:b9:b2:ec:ea:76: cf:76:cf:0b:1e:96:ca:6e:27:b8:09:56:98:0e:34:37:b8:4e: 4a:bc:31:41:9c:fe:ed:1f:1c:50:e9:39:4c:c0:04:8b:3c:79: 0a:96:71:e9:67:71:82:59:b2:1a:db:c3:7a:87:d5:71:51:5e: 44:8c:58:73:40:4f:f8:f5:77:53:d5:2d:2e:da:fc:17:be:ec: 3b:c4:fd:72:97:de:49:fe:13:7e:d1:93:ef:8d:d9:65:f7:de: d3:dd:8d:9d:44:00:fc:fd:0e:a2:db:f1:38:03:8d:05:51:fe: c7:ab:25:31:dc:b0:3d:a1:40:e9:ae:1c:1d:f3:ed:fd:b3:7e: 11:57:62:16:74:0e:ba:ae:87:91:2a:37:ba:85:24:6d:a3:00: 9f:e9:35:0a:41:c1:b1:5f:2d:11:f3:ad:c9:2f:14:a9:df:a7: 5e:8c:4b:cd:81:fb:56:1e:d5:b4:8c:e4:da:4f:01:a9:53:02: 60:b9:97:ec:e0:a8:d6:26:c4:79:c3:64:f9:0f:64:4f:fe:3f: 1f:e2:d4:95:72:4d:37:d4:38:bb:6f:1a:37:6d:2e:cd:ba:ba: 4e:cb:a0:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzF4NAM7oiNz4sueF78PwLT0lDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA2MTcwODMzMjlaFw0yNjA2MTgxMDMyMjlaMDMxMTAvBgNV BAMTKDExRjYwRTg1QTBGOEZDRkEwMEYxN0VEMzY5QTExNUMxNDM4RkM2QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8p/0g7j79KJkYrcZl62ndD30g xY51o29ohNuDo1qMe2BV+6OF7u9x+RFfwyCpTajH1/2mHl7SNeVeHTEZJQv08f2D YeTrZ4ogeMd6zetgqTZuEdqdhfVlTAHtVj2Z3vLqTqxkzBuW8WVN0V1YvbLljhfh qCjCvGkq7PijX+srUOvEWb90JZxn+yucF+pNC8S5p4VQNrdmW4DCFQ66xlkBFZp5 QpDiA8oiIoA1unst+w4Ct74CqGh45sAtQYlC7vfask/akPtu5IHL+1/s+29xoyPP r0/D3lc7fcIY+g/HT4a6/Uiaa8WeJgQyNyIWenGhI2dQmiblt8F78mwg79PdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEfYOhaD4/PoA8X7TaaEVwUOPxrIwHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC8AnojxbJ/7T5JjZh8jxI/+dFMfWX1cTCof Nil0U1S5suzqds92zwselspuJ7gJVpgONDe4Tkq8MUGc/u0fHFDpOUzABIs8eQqW celncYJZshrbw3qH1XFRXkSMWHNAT/j1d1PVLS7a/Be+7DvE/XKX3kn+E37Rk++N 2WX33tPdjZ1EAPz9DqLb8TgDjQVR/serJTHcsD2hQOmuHB3z7f2zfhFXYhZ0Drqu h5EqN7qFJG2jAJ/pNQpBwbFfLRHzrckvFKnfp16MS82B+1Ye1bSM5NpPAalTAmC5 l+zgqNYmxHnDZPkPZE/+Px/i1JVyTTfUOLtvGjdtLs26uk7LoHE= -----END CERTIFICATE-----Generated at Wed Jun 17 11:13:50 2026 by rpki-client