$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: EhfqBYIxJr67fkUNrq18vVzNWzQmSDovoLlkxjO5yt8= Subject key identifier: 9B:BC:B8:EE:3F:27:E1:E9:9A:F1:E4:BB:E7:AD:BD:AC:51:2F:62:FD Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 53871BD1194639E24F67FCDCB126F75D395728C6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: BF Signing time: Mon 21 Sep 2026 10:39:38 +0000 Manifest this update: Mon 21 Sep 2026 10:34:38 +0000 Manifest next update: Tue 22 Sep 2026 12:11:38 +0000 Files and hashes: 1: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: O1a/+QW/ZECZ6kv5q+kVfN/3yvf8g5ND5Y57LsIj8aQ=) 2: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:87:1b:d1:19:46:39:e2:4f:67:fc:dc:b1:26:f7:5d:39:57:28:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Sep 21 10:34:38 2026 GMT Not After : Sep 22 12:11:38 2026 GMT Subject: CN=9BBCB8EE3F27E1E99AF1E4BBE7ADBDAC512F62FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:fa:9b:0f:03:fb:68:75:7a:93:ce:2a:e4:01: 85:e5:50:9f:8c:56:d8:c7:6d:78:89:7a:78:41:76: 92:38:13:e7:6c:34:ab:19:42:1b:1e:64:55:cd:9d: c1:9d:de:15:c6:0e:a5:22:fa:38:6c:5c:33:69:1d: ce:49:c3:22:3d:4b:26:06:09:ff:4b:7d:18:87:41: 82:ae:6f:05:30:ff:87:f4:ae:c9:52:07:56:14:3a: d0:c3:f2:ff:dc:d4:74:ae:f2:52:46:52:40:89:72: 38:1d:15:86:08:ca:8d:05:ee:64:5d:83:df:32:f8: 61:f1:b8:55:53:db:e8:ea:b8:98:47:72:78:98:33: 2e:ac:45:57:16:08:a4:ef:e4:e6:a1:63:b7:26:41: 2e:0e:d4:28:e9:e6:20:1a:d3:81:db:36:aa:79:b3: 52:29:f6:aa:9b:48:4b:5f:5e:00:1e:ea:c8:95:5f: 41:fb:b8:79:95:be:e9:63:72:1a:68:08:05:1a:ed: c5:0e:31:c4:36:0f:2d:e9:3c:a9:7b:cb:69:0e:9a: 8b:9c:95:f3:31:9c:69:77:1d:bc:81:cc:ac:fc:f3: fc:9c:38:55:46:7d:38:3a:d7:20:99:fc:54:4d:0c: 31:da:d7:b5:e5:77:e2:8a:85:4b:ad:3f:53:36:f1: 5d:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:BC:B8:EE:3F:27:E1:E9:9A:F1:E4:BB:E7:AD:BD:AC:51:2F:62:FD X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:04:1e:2e:49:23:fd:1b:5e:ab:00:31:ff:a8:cd:6d:37:1f: 51:56:e0:f5:b3:b4:11:a3:af:d2:09:91:c6:83:5c:da:1a:8d: 7c:90:01:4e:ba:c2:e3:f9:6f:8e:bf:7c:34:20:af:d4:54:c5: b1:48:e6:15:00:60:1e:c3:ae:8e:57:46:8b:27:ae:cd:33:f5: 65:00:40:d0:34:4f:3b:8e:58:a2:5f:e9:43:da:7a:74:3b:50: 7d:9f:53:a4:eb:65:1f:4f:89:e8:94:2e:b7:62:26:12:e8:93: cd:8f:c5:43:90:34:ef:85:44:05:ef:3d:fa:dd:18:82:dd:da: 92:1c:04:54:dd:c4:32:a2:75:a1:b9:50:86:77:4f:2c:26:fa: 59:17:be:80:36:b0:82:4a:b4:da:38:38:ee:99:79:0a:87:42: 91:90:76:37:3d:6e:e0:dd:51:fc:bc:21:18:43:17:e5:1a:93: 63:9e:52:cb:62:f3:5c:0a:cc:e6:56:0e:0e:4a:6e:30:87:5e: 66:d1:16:bf:16:9c:5f:12:4d:d8:d1:31:23:e9:68:0c:19:2f: 80:b2:e3:43:d3:4a:98:58:fa:0a:a8:2a:be:48:0f:07:68:c9: 6b:ae:22:29:32:42:7c:cf:7f:50:9c:23:c1:25:59:26:ed:54: 41:5a:e8:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4cb0RlGOeJPZ/zcsSb3XTlXKMYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjA5MjExMDM0MzhaFw0yNjA5MjIxMjExMzhaMDMxMTAvBgNV BAMTKDlCQkNCOEVFM0YyN0UxRTk5QUYxRTRCQkU3QURCREFDNTEyRjYyRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK+psPA/todXqTzirkAYXlUJ+M VtjHbXiJenhBdpI4E+dsNKsZQhseZFXNncGd3hXGDqUi+jhsXDNpHc5JwyI9SyYG Cf9LfRiHQYKubwUw/4f0rslSB1YUOtDD8v/c1HSu8lJGUkCJcjgdFYYIyo0F7mRd g98y+GHxuFVT2+jquJhHcniYMy6sRVcWCKTv5OahY7cmQS4O1Cjp5iAa04HbNqp5 s1Ip9qqbSEtfXgAe6siVX0H7uHmVvuljchpoCAUa7cUOMcQ2Dy3pPKl7y2kOmouc lfMxnGl3HbyBzKz88/ycOFVGfTg61yCZ/FRNDDHa17Xld+KKhUutP1M28V3TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm7y47j8n4ema8eS75629rFEvYv0wHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsEHi5JI/0bXqsAMf+ozW03H1FW4PWztBGj r9IJkcaDXNoajXyQAU66wuP5b46/fDQgr9RUxbFI5hUAYB7Dro5XRosnrs0z9WUA QNA0TzuOWKJf6UPaenQ7UH2fU6TrZR9PieiULrdiJhLok82PxUOQNO+FRAXvPfrd GILd2pIcBFTdxDKidaG5UIZ3Tywm+lkXvoA2sIJKtNo4OO6ZeQqHQpGQdjc9buDd Ufy8IRhDF+Uak2OeUsti81wKzOZWDg5KbjCHXmbRFr8WnF8STdjRMSPpaAwZL4Cy 40PTSphY+gqoKr5IDwdoyWuuIikyQnzPf1CcI8ElWSbtVEFa6GY= -----END CERTIFICATE-----Generated at Mon Sep 21 17:32:06 2026 by rpki-client