$ rpki-client -vvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: K1vg5sAgGvvc5cWf20VX8LCQQVz5mAjsheXZCMhInbQ= Subject key identifier: 8A:D2:DD:CC:A6:90:D3:42:CA:EE:40:45:35:87:5A:2E:27:4C:6D:18 Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 28C377237A63E90D45F69BBFACF093064BEDB8D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 17:10:20 +0000 Manifest this update: Sat 13 Jun 2026 17:05:20 +0000 Manifest next update: Sun 14 Jun 2026 20:26:20 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) 2: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: L5BeWCcLm37ALM2iK3JbFML3j36aUSl1f9bV8gw7BG8=) 3: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 12:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:c3:77:23:7a:63:e9:0d:45:f6:9b:bf:ac:f0:93:06:4b:ed:b8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Jun 13 17:05:20 2026 GMT Not After : Jun 14 20:26:20 2026 GMT Subject: CN=8AD2DDCCA690D342CAEE404535875A2E274C6D18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7b:d3:80:58:a5:a7:71:c0:dc:28:b0:88:89: 5a:9e:00:2b:98:6f:af:6c:f9:9b:bb:76:9b:df:81: 8e:34:c2:60:b7:3e:07:b1:25:56:05:61:59:ba:b8: bd:b8:84:9e:93:61:38:d6:45:96:2a:51:9f:35:57: 9f:05:53:ab:40:6c:62:2b:08:b4:30:c2:07:6c:b1: 51:00:c7:a0:ac:5e:9b:d1:ae:46:df:3f:7c:fd:40: 95:dc:3a:0e:b7:c9:c9:a4:fd:f9:ee:44:7b:11:7d: e7:1d:9e:fa:e8:d5:70:8b:e5:07:af:a6:0c:07:fa: 16:d0:f7:01:2a:6b:01:5f:ee:5a:14:85:db:e8:34: e8:2d:06:04:47:8e:03:0c:e6:0b:bc:1a:e8:19:4c: 47:ca:3b:69:b3:34:5b:77:50:3d:9e:4e:d0:53:82: 11:f3:3c:02:c9:dc:df:37:d4:a8:eb:4f:96:d9:23: fd:8e:d2:86:04:6a:22:80:0a:43:db:0d:eb:cf:81: 71:a5:9d:9f:c9:ca:8b:1c:6a:36:88:12:6a:01:fe: f9:ba:de:ff:46:f0:93:1e:81:7c:ec:f9:11:25:c6: 9b:3e:36:31:eb:e1:c8:f6:61:7e:ca:e1:a4:8b:83: 5b:03:d2:2b:24:eb:67:67:ee:4b:3d:32:71:f1:df: 9a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:D2:DD:CC:A6:90:D3:42:CA:EE:40:45:35:87:5A:2E:27:4C:6D:18 X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:a1:b3:97:3b:54:03:ab:46:0e:af:ea:b1:76:fe:79:c8:91: 7d:d5:15:9b:83:e8:43:35:1f:9d:43:21:37:3c:c9:fa:81:74: 26:62:ea:07:4f:a8:bf:23:9d:48:ad:a8:ca:14:d0:6b:6c:e7: a1:ac:d5:6a:0c:e6:0b:30:09:2e:e8:62:e2:df:dc:17:00:20: 77:0e:64:5e:a6:39:a3:a7:3c:ea:ee:6a:0f:cb:62:d2:b4:c1: 60:98:dc:cc:75:fe:21:c0:1f:1e:95:99:02:37:9b:9a:65:75: 74:35:ba:f8:bd:22:ef:27:ff:99:4d:8b:00:5c:f6:ec:d4:db: 37:26:56:e5:e6:28:ab:c3:ca:8d:3f:ee:83:ea:1f:bd:1e:56: 80:de:d5:79:ce:85:f0:a9:93:f1:5c:ff:62:45:4f:b8:e8:6c: 59:ec:57:7d:3c:40:75:2e:14:0d:a1:58:99:4a:5d:cb:24:76: 0d:fd:ac:bf:57:ba:19:ba:07:ec:aa:0a:79:be:fa:9b:28:66: 10:34:e8:e8:de:92:13:60:0a:4d:8e:c9:5c:3d:95:84:d7:75: 6f:fe:5e:a7:11:2d:69:c3:38:ea:28:8b:6d:e3:ca:6a:e1:72: 84:2c:01:e2:d0:00:61:8f:5b:23:be:45:17:8f:30:29:ab:d2: c7:ce:03:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKMN3I3pj6Q1F9pu/rPCTBkvtuNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjA2MTMxNzA1MjBaFw0yNjA2MTQyMDI2MjBaMDMxMTAvBgNV BAMTKDhBRDJERENDQTY5MEQzNDJDQUVFNDA0NTM1ODc1QTJFMjc0QzZEMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5e9OAWKWnccDcKLCIiVqeACuY b69s+Zu7dpvfgY40wmC3PgexJVYFYVm6uL24hJ6TYTjWRZYqUZ81V58FU6tAbGIr CLQwwgdssVEAx6CsXpvRrkbfP3z9QJXcOg63ycmk/fnuRHsRfecdnvro1XCL5Qev pgwH+hbQ9wEqawFf7loUhdvoNOgtBgRHjgMM5gu8GugZTEfKO2mzNFt3UD2eTtBT ghHzPALJ3N831KjrT5bZI/2O0oYEaiKACkPbDevPgXGlnZ/JyoscajaIEmoB/vm6 3v9G8JMegXzs+RElxps+NjHr4cj2YX7K4aSLg1sD0isk62dn7ks9MnHx35rZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUitLdzKaQ00LK7kBFNYdaLidMbRgwHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyhs5c7VAOrRg6v6rF2/nnIkX3VFZuD6EM1 H51DITc8yfqBdCZi6gdPqL8jnUitqMoU0Gts56Gs1WoM5gswCS7oYuLf3BcAIHcO ZF6mOaOnPOruag/LYtK0wWCY3Mx1/iHAHx6VmQI3m5pldXQ1uvi9Iu8n/5lNiwBc 9uzU2zcmVuXmKKvDyo0/7oPqH70eVoDe1XnOhfCpk/Fc/2JFT7jobFnsV308QHUu FA2hWJlKXcskdg39rL9Xuhm6B+yqCnm++psoZhA06OjekhNgCk2OyVw9lYTXdW/+ XqcRLWnDOOooi23jymrhcoQsAeLQAGGPWyO+RRePMCmr0sfOA/c= -----END CERTIFICATE-----Generated at Sun Jun 14 01:22:31 2026 by rpki-client