$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft File: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft (raw, json) Hash identifier: Ozp9UktpYQWq4WggWvFkiz5cqESu8owRoaKzhXZwTRU= Subject key identifier: 54:33:EE:4A:06:AA:D7:E7:F1:58:CF:37:FE:64:25:D6:D5:FA:64:0B Authority key identifier: 87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C Certificate issuer: /CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Certificate serial: 1D05A843EA3017498C59BB3968D603F71F45C6EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft Manifest number: BC Signing time: Sun 20 Sep 2026 12:58:08 +0000 Manifest this update: Sun 20 Sep 2026 12:53:08 +0000 Manifest next update: Mon 21 Sep 2026 16:08:08 +0000 Files and hashes: 1: 3132322e34392e3232342e302f32342d3234203d3e203338353232.roa (hash: koEaap+TYC8WrFoTgxyiCmDzNLWvbtVD5J+Pgu293Ms=) 2: 3132322e34392e3233302e302f32342d3234203d3e20313431383931.roa (hash: c/jXznRH2rlcrGPGCw1yu+o/ohZ/N0ggw0jp/eYH0Nc=) 3: 3132322e34392e3232392e302f32342d3234203d3e203338353232.roa (hash: LLLZ+Uple1yDAhrgh87zmF9HRC1nu1L4DywSxKkqt4g=) 4: 3132322e34392e3233312e302f32342d3234203d3e203338353232.roa (hash: d4e56HgLh9AA7Y863xNC1lhRqueOBxmIf+oM0rBgMzo=) 5: 3132322e34392e3232352e302f32342d3234203d3e203338353232.roa (hash: YwK9zKWhCwEUulSxU5g8clKq/6rfBd7sqbMSAqcQZGU=) 6: 87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl (hash: q87RsF4L7QkihQOWIuA7/66DEcyqD3RUtt/HQMxgbUY=) 7: 3132322e34392e3232372e302f32342d3234203d3e203338353232.roa (hash: P6T6SjVrPXLutt26o6Ki+NfxhSmkmj/N4pjTNevrao8=) 8: 3132322e34392e3232382e302f32342d3234203d3e203338353232.roa (hash: 4cU77f0ZXamnF8DHTiKJUAABgb6TzKnx01pHiqRLsFw=) 9: 3132322e34392e3232362e302f32342d3234203d3e203338353232.roa (hash: dG3U2jGBDUThXsk32C3onzKHpV2boaMdLu/JAX5mj2U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 16:08:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:05:a8:43:ea:30:17:49:8c:59:bb:39:68:d6:03:f7:1f:45:c6:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C Validity Not Before: Sep 20 12:53:08 2026 GMT Not After : Sep 21 16:08:08 2026 GMT Subject: CN=5433EE4A06AAD7E7F158CF37FE6425D6D5FA640B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a3:57:d8:dc:2b:a0:2e:8e:5e:a6:b9:6a:d5: 02:b7:48:f2:6c:10:bb:80:80:4e:f7:16:2a:a0:b2: 6e:83:44:c3:20:42:a9:df:45:c9:11:77:19:a1:51: d5:8c:be:ed:f9:0c:bc:4e:7f:71:04:d5:d5:1d:16: 6a:fb:16:c0:cb:60:8c:25:de:88:46:8f:1a:67:9c: ba:9c:9d:f9:0f:58:66:c8:0e:a2:2f:3c:82:e9:f1: 29:01:31:03:2a:e0:01:08:e0:44:8c:ef:25:d3:64: b8:c6:1e:db:bf:3a:4b:74:3b:5d:cd:47:c5:72:95: 37:31:c1:75:3b:b2:4f:78:2a:93:4d:67:06:6c:15: 8a:37:ea:c8:43:d7:95:ac:02:92:a2:23:bc:3a:b4: 3b:8f:aa:fb:a4:79:55:9d:57:c4:ed:08:16:99:9a: 4b:bd:59:3b:e2:00:4c:a6:11:ab:1b:dd:1b:e3:7b: f4:22:5b:fb:06:65:ed:8d:31:15:1c:6c:ec:2f:e7: f6:fb:73:f9:33:b1:41:ce:b6:62:98:d0:74:ea:df: 91:0b:01:d3:b7:46:3f:ad:9a:81:e1:83:51:b8:b9: be:1e:13:5e:90:c4:17:d6:7e:e9:00:61:e3:17:34: 8f:87:8a:fe:7c:d9:e8:2b:bd:a0:be:11:60:1d:05: ab:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:33:EE:4A:06:AA:D7:E7:F1:58:CF:37:FE:64:25:D6:D5:FA:64:0B X509v3 Authority Key Identifier: keyid:87:BE:31:8D:9A:B9:E7:83:D2:D6:A8:E6:47:3B:14:BE:72:0F:4F:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2e434981-36bb-4539-9b55-07b67208fd06/0/87BE318D9AB9E783D2D6A8E6473B14BE720F4F5C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d7:73:b2:cd:50:3a:1a:4d:2c:c3:9f:30:de:72:cc:12:b4: c9:fc:9a:05:2a:79:0c:1b:9c:99:89:c8:18:17:a0:a5:d3:e5: b1:c3:d5:31:66:2b:1f:4f:69:66:00:1e:8a:d1:54:0c:f2:5b: eb:c5:06:e0:81:52:0f:43:3e:9a:c2:12:ca:ea:7e:31:77:39: 7f:1a:74:2b:1f:ad:b4:a1:52:7f:a0:7a:4c:6c:1a:80:77:6f: 41:4a:2b:eb:af:aa:d3:32:58:32:c2:77:40:da:73:10:db:7b: ce:23:b1:ef:54:ef:30:79:77:8a:7b:7c:be:92:43:ed:d9:4d: d6:35:8e:8c:1a:b8:aa:39:f4:2c:89:25:61:9c:80:d1:3b:9b: 76:b9:75:90:7f:24:e5:e6:10:06:65:d5:b0:97:2e:20:9f:91: 7f:4f:a4:b8:5a:d0:9e:e6:c1:bd:85:3a:e8:e8:ab:b0:97:10: 1f:28:2a:ed:99:a9:2e:b6:37:a0:fc:b2:3d:71:36:fa:93:d5: c9:9c:e3:99:3d:6a:25:db:a3:95:8a:04:b2:7e:07:be:8d:64: 2d:f4:9c:23:b5:df:38:65:64:5a:c4:26:15:c2:2a:05:42:7c: e3:a8:28:80:2a:59:39:a0:95:54:80:29:a4:c9:7b:0c:8e:69: d8:6a:e3:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHQWoQ+owF0mMWbs5aNYD9x9Fxu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3 MjBGNEY1QzAeFw0yNjA5MjAxMjUzMDhaFw0yNjA5MjExNjA4MDhaMDMxMTAvBgNV BAMTKDU0MzNFRTRBMDZBQUQ3RTdGMTU4Q0YzN0ZFNjQyNUQ2RDVGQTY0MEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVo1fY3CugLo5eprlq1QK3SPJs ELuAgE73Fiqgsm6DRMMgQqnfRckRdxmhUdWMvu35DLxOf3EE1dUdFmr7FsDLYIwl 3ohGjxpnnLqcnfkPWGbIDqIvPILp8SkBMQMq4AEI4ESM7yXTZLjGHtu/Okt0O13N R8VylTcxwXU7sk94KpNNZwZsFYo36shD15WsApKiI7w6tDuPqvukeVWdV8TtCBaZ mku9WTviAEymEasb3Rvje/QiW/sGZe2NMRUcbOwv5/b7c/kzsUHOtmKY0HTq35EL AdO3Rj+tmoHhg1G4ub4eE16QxBfWfukAYeMXNI+Hiv582egrvaC+EWAdBat1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVDPuSgaq1+fxWM83/mQl1tX6ZAswHwYDVR0j BBgwFoAUh74xjZq554PS1qjmRzsUvnIPT1wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmU0MzQ5ODEtMzZiYi00NTM5LTliNTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5 QUI5RTc4M0QyRDZBOEU2NDczQjE0QkU3MjBGNEY1Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0JFMzE4RDlBQjlFNzgzRDJENkE4RTY0NzNCMTRCRTcyMEY0 RjVDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmU0MzQ5ODEtMzZiYi00NTM5LTli NTUtMDdiNjcyMDhmZDA2LzAvODdCRTMxOEQ5QUI5RTc4M0QyRDZBOEU2NDczQjE0 QkU3MjBGNEY1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAzXc7LNUDoaTSzDnzDecswStMn8mgUqeQwb nJmJyBgXoKXT5bHD1TFmKx9PaWYAHorRVAzyW+vFBuCBUg9DPprCEsrqfjF3OX8a dCsfrbShUn+gekxsGoB3b0FKK+uvqtMyWDLCd0DacxDbe84jse9U7zB5d4p7fL6S Q+3ZTdY1jowauKo59CyJJWGcgNE7m3a5dZB/JOXmEAZl1bCXLiCfkX9PpLha0J7m wb2FOujoq7CXEB8oKu2ZqS62N6D8sj1xNvqT1cmc45k9aiXbo5WKBLJ+B76NZC30 nCO13zhlZFrEJhXCKgVCfOOoKIAqWTmglVSAKaTJewyOadhq43I= -----END CERTIFICATE-----Generated at Sun Sep 20 17:58:13 2026 by rpki-client