$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft File: 0987C7F8639A5EC739826F640C8E04FD53A0800E.mft (raw, json) Hash identifier: w4fvrPOqBr0T93Fu1d0aAikoTevVyAqxbNRfUs5qKdY= Subject key identifier: F5:7E:09:9A:38:39:53:92:8F:C8:4B:EF:3D:F8:80:A6:27:79:4B:4D Authority key identifier: 09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E Certificate issuer: /CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Certificate serial: 123785311799BAB4895DA0C7322CD85AFF9DEFFB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft Manifest number: BF Signing time: Mon 21 Sep 2026 21:02:39 +0000 Manifest this update: Mon 21 Sep 2026 20:57:39 +0000 Manifest next update: Tue 22 Sep 2026 23:37:39 +0000 Files and hashes: 1: 3130332e3137352e34362e302f32342d3234203d3e20313437313039.roa (hash: rwJybuB0Xuh51eX44OUj0FA9N+xl/VzvgF/HSTs9GfM=) 2: 3130332e3137352e34372e302f32342d3234203d3e20313437313039.roa (hash: s3V5AB5+bA2d5/svBoGY/0k9sggx8nw5uup6zerO5YY=) 3: 0987C7F8639A5EC739826F640C8E04FD53A0800E.crl (hash: NuvcWkeKw+8xH8a5p1OA1CU25sCQAKT9iTugIS0brkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 23:37:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:37:85:31:17:99:ba:b4:89:5d:a0:c7:32:2c:d8:5a:ff:9d:ef:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0987C7F8639A5EC739826F640C8E04FD53A0800E Validity Not Before: Sep 21 20:57:39 2026 GMT Not After : Sep 22 23:37:39 2026 GMT Subject: CN=F57E099A383953928FC84BEF3DF880A627794B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:99:a2:e6:d9:13:ee:b0:02:4f:33:3b:6e:a9: a2:46:cb:0d:0b:f3:8e:39:8d:65:cd:40:87:b6:e1: 2b:a5:55:fa:7f:fb:69:1d:f1:8b:f2:6b:aa:2c:fa: 1d:63:8f:48:1a:87:8d:26:8f:59:9a:ac:68:de:8d: ec:67:db:01:cc:6e:46:43:41:ce:33:40:9b:b2:66: 84:e2:84:ff:ad:d1:77:49:a7:78:c3:a4:71:ca:e9: cc:8b:05:6f:3e:46:b1:12:2c:a2:4c:0c:fb:96:27: b1:5f:24:9f:37:9b:0a:fa:e9:ab:bd:76:8b:13:30: 29:f5:8f:68:6d:77:66:dd:8f:bc:b2:20:99:76:97: 53:9b:ef:07:67:f8:18:f5:c5:e3:ef:8e:66:94:00: 2d:0a:18:7c:2b:b9:bd:b7:32:44:81:d9:12:5a:8c: 85:18:4e:ff:42:11:33:ea:c9:fe:8d:ba:c2:98:54: 69:47:bb:77:22:0f:16:85:1d:c8:17:64:47:36:dc: eb:a5:82:3e:e0:a6:62:2b:92:6f:21:82:a2:43:8b: 74:58:e0:ba:4f:a1:dd:22:c6:73:c3:df:95:29:69: 44:b0:05:ff:43:76:62:f9:f8:bd:71:09:42:13:75: 84:8d:78:38:b0:3b:1d:40:eb:8e:b6:63:27:61:76: f2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7E:09:9A:38:39:53:92:8F:C8:4B:EF:3D:F8:80:A6:27:79:4B:4D X509v3 Authority Key Identifier: keyid:09:87:C7:F8:63:9A:5E:C7:39:82:6F:64:0C:8E:04:FD:53:A0:80:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/0987C7F8639A5EC739826F640C8E04FD53A0800E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4638bd21-be56-42b4-8278-05405dce5e88/0/0987C7F8639A5EC739826F640C8E04FD53A0800E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:7e:de:a1:8d:a3:c6:0f:18:f4:44:37:fb:28:93:ca:a2:76: 58:5e:2b:a9:66:b1:06:d6:8c:f1:ac:db:07:6e:b5:87:6a:3f: ec:68:4c:b4:79:80:5e:b3:af:0c:1b:6f:4e:b1:48:e0:54:3e: 0a:f0:4e:00:d5:e5:f8:8f:db:e7:43:df:cf:f5:dd:f8:fc:4a: f9:6b:8a:b5:0c:b2:11:a0:d2:64:5b:43:d4:fc:a3:59:b4:0d: 73:cc:2a:be:8a:f9:51:db:d6:42:1a:7a:79:61:0c:07:a6:16: c5:03:ff:39:a8:9f:75:2d:67:b3:7d:6b:31:0c:fa:63:ff:cd: c8:fb:9a:1b:6c:82:54:db:17:83:1c:84:63:8a:8e:a9:89:cd: bc:49:f4:54:09:2c:ec:82:05:6a:cb:b2:d2:51:bb:e8:71:3a: 96:44:ce:1b:9f:1e:d9:90:db:3c:e1:02:8a:58:b4:79:ee:f4: f0:26:7b:54:93:80:e3:63:8c:0c:92:71:b7:a2:b9:00:b4:af: f2:4a:f6:da:dc:55:bd:84:e1:af:d5:0f:31:6a:ab:b4:13:df: 0c:fa:76:55:08:19:a4:ab:d9:4c:fb:1b:78:57:3b:77:6b:4a: 94:0f:43:bf:a7:08:d0:43:20:90:66:63:2c:3d:f0:af:0a:b3: 20:c5:8e:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEjeFMReZurSJXaDHMizYWv+d7/swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1 M0EwODAwRTAeFw0yNjA5MjEyMDU3MzlaFw0yNjA5MjIyMzM3MzlaMDMxMTAvBgNV BAMTKEY1N0UwOTlBMzgzOTUzOTI4RkM4NEJFRjNERjg4MEE2Mjc3OTRCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCumaLm2RPusAJPMztuqaJGyw0L 8445jWXNQIe24SulVfp/+2kd8Yvya6os+h1jj0gah40mj1marGjejexn2wHMbkZD Qc4zQJuyZoTihP+t0XdJp3jDpHHK6cyLBW8+RrESLKJMDPuWJ7FfJJ83mwr66au9 dosTMCn1j2htd2bdj7yyIJl2l1Ob7wdn+Bj1xePvjmaUAC0KGHwrub23MkSB2RJa jIUYTv9CETPqyf6NusKYVGlHu3ciDxaFHcgXZEc23Oulgj7gpmIrkm8hgqJDi3RY 4LpPod0ixnPD35UpaUSwBf9DdmL5+L1xCUITdYSNeDiwOx1A6462YydhdvLZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9X4Jmjg5U5KPyEvvPfiApid5S00wHwYDVR0j BBgwFoAUCYfH+GOaXsc5gm9kDI4E/VOggA4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NDYzOGJkMjEtYmU1Ni00MmI0LTgyNzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2 MzlBNUVDNzM5ODI2RjY0MEM4RTA0RkQ1M0EwODAwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8wOTg3QzdGODYzOUE1RUM3Mzk4MjZGNjQwQzhFMDRGRDUzQTA4 MDBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDYzOGJkMjEtYmU1Ni00MmI0LTgy NzgtMDU0MDVkY2U1ZTg4LzAvMDk4N0M3Rjg2MzlBNUVDNzM5ODI2RjY0MEM4RTA0 RkQ1M0EwODAwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGd+3qGNo8YPGPREN/sok8qidlheK6lmsQbW jPGs2wdutYdqP+xoTLR5gF6zrwwbb06xSOBUPgrwTgDV5fiP2+dD38/13fj8Svlr irUMshGg0mRbQ9T8o1m0DXPMKr6K+VHb1kIaenlhDAemFsUD/zmon3UtZ7N9azEM +mP/zcj7mhtsglTbF4MchGOKjqmJzbxJ9FQJLOyCBWrLstJRu+hxOpZEzhufHtmQ 2zzhAopYtHnu9PAme1STgONjjAyScbeiuQC0r/JK9trcVb2E4a/VDzFqq7QT3wz6 dlUIGaSr2Uz7G3hXO3drSpQPQ7+nCNBDIJBmYyw98K8KsyDFjqc= -----END CERTIFICATE-----Generated at Tue Sep 22 14:47:36 2026 by rpki-client