$ rpki-client -vvvf rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft File: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft (raw, json) Hash identifier: nOw0lsrt2g/D5eRZPLXBsRnK4XC1hwzU9S1aA/A+SWU= Subject key identifier: FC:94:93:8D:B4:27:9E:51:F4:9C:67:AA:EE:AD:62:7C:7D:C6:A7:1E Authority key identifier: 87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E Certificate issuer: /CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Certificate serial: 645DA70A6AAA51D39198167B63ED38F20FBB296E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 03:40:14 +0000 Manifest this update: Tue 10 Nov 2026 03:35:14 +0000 Manifest next update: Wed 11 Nov 2026 07:08:14 +0000 Files and hashes: 1: 3130332e3134392e33342e302f32342d3234203d3e203234353334.roa (hash: LJE6Lm2wcgVrtTY0Ks0jc21WxZvYCmedmEwmMCEDJGg=) 2: 3130332e3134392e33352e302f32342d3234203d3e203234353334.roa (hash: AT/vW+1mibZFd0m2BuvAmzRKbLxo7YJ3Hgd+dPSbt3o=) 3: 87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl (hash: cWu3qzTobI/2x7UUE1Av9hLML5yKHKQBRWA8KvpPCy8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:5d:a7:0a:6a:aa:51:d3:91:98:16:7b:63:ed:38:f2:0f:bb:29:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87CE074A6FFD5FC570BB3C971B0DF3141885828E Validity Not Before: Nov 10 03:35:14 2026 GMT Not After : Nov 11 07:08:14 2026 GMT Subject: CN=FC94938DB4279E51F49C67AAEEAD627C7DC6A71E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fd:00:7c:85:dc:f9:e5:58:b7:e4:36:86:67: 20:3d:9a:ea:d7:7d:37:b3:c9:0a:98:97:e9:be:4f: be:68:a1:00:07:2f:09:97:9d:f2:85:06:4a:a1:14: 66:d9:91:fa:6b:6e:a5:f7:36:75:8f:df:0d:d6:99: ee:d6:93:b6:78:7e:5e:f2:a7:8a:c7:61:53:2c:af: 5d:25:49:9a:c2:8b:1b:ec:f3:42:21:df:75:1e:a6: 00:d8:c1:8a:d7:8c:2f:d2:f4:ed:c5:df:0a:cd:4d: cb:22:61:c7:1d:f2:75:6e:09:a7:aa:b1:5d:34:00: d3:30:d1:73:89:78:c3:41:f0:cf:42:87:bd:47:9d: 74:c0:bc:a3:ba:1e:23:ef:67:5a:34:53:ea:9b:f2: 2d:e5:8d:35:24:21:71:5d:03:89:fb:2e:c0:25:9e: 5e:a8:04:96:ee:a8:12:b3:8b:42:fb:11:4f:ca:47: 6b:f0:d6:13:bc:3a:38:e8:66:1b:54:3c:26:71:6b: 41:5c:e9:6f:9b:cb:92:cb:06:cb:47:14:8f:9c:83: 4e:91:74:4c:3f:72:ac:21:32:ce:e3:bd:c9:e5:0a: 23:9e:ea:ff:e0:e2:39:6c:6e:6a:dc:9d:d9:d0:67: 30:4a:9d:4b:2d:eb:18:2f:be:86:26:43:34:ef:81: 76:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:94:93:8D:B4:27:9E:51:F4:9C:67:AA:EE:AD:62:7C:7D:C6:A7:1E X509v3 Authority Key Identifier: keyid:87:CE:07:4A:6F:FD:5F:C5:70:BB:3C:97:1B:0D:F3:14:18:85:82:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87CE074A6FFD5FC570BB3C971B0DF3141885828E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/63635e25-8599-48ae-bdcb-e323dfc896ec/0/87CE074A6FFD5FC570BB3C971B0DF3141885828E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:c0:1a:36:a9:60:46:8f:92:76:53:a4:bc:69:62:4d:9a:67: 52:41:1d:ea:aa:d1:c1:b3:c1:8a:5f:17:cf:7a:32:e0:61:68: 9d:dd:23:04:65:d8:43:b9:6f:ce:51:f6:98:8c:1e:89:99:d8: b7:75:c1:45:75:cf:24:dc:b0:7b:3f:3e:7b:8e:2d:7e:73:46: 9a:80:04:6a:bc:a2:53:40:cc:8d:d5:26:1e:98:b5:f0:3a:90: 66:05:f0:20:b2:fa:1c:9f:13:ee:71:ef:13:5b:70:25:15:04: e2:0c:1b:ae:5a:e8:02:2b:36:bf:06:e9:a5:d7:71:11:04:7a: 73:ef:2d:4d:3c:93:1d:9a:f1:9f:d2:81:73:da:7c:39:4a:c0: 0f:eb:6c:65:25:ee:33:8a:03:ae:dd:25:62:e2:42:87:6b:dc: 76:5b:0e:c9:82:79:db:5f:a4:03:ef:5c:9f:90:ac:21:85:a4: ab:fb:c0:f3:4f:71:18:18:9a:6d:f4:40:17:8e:8a:20:52:77: 67:78:ae:35:39:fa:cb:ec:85:d1:5f:ab:e1:ff:1e:8e:32:20: 3e:91:df:3f:46:d7:f8:a1:2d:ad:95:ee:81:67:d6:79:8f:d5: d4:11:e3:a6:c2:4b:61:0e:4f:6e:98:16:95:82:58:6a:ca:0f: 39:92:52:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZF2nCmqqUdORmBZ7Y+048g+7KW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYzMTQx ODg1ODI4RTAeFw0yNjExMTAwMzM1MTRaFw0yNjExMTEwNzA4MTRaMDMxMTAvBgNV BAMTKEZDOTQ5MzhEQjQyNzlFNTFGNDlDNjdBQUVFQUQ2MjdDN0RDNkE3MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCK/QB8hdz55Vi35DaGZyA9murX fTezyQqYl+m+T75ooQAHLwmXnfKFBkqhFGbZkfprbqX3NnWP3w3Wme7Wk7Z4fl7y p4rHYVMsr10lSZrCixvs80Ih33UepgDYwYrXjC/S9O3F3wrNTcsiYccd8nVuCaeq sV00ANMw0XOJeMNB8M9Ch71HnXTAvKO6HiPvZ1o0U+qb8i3ljTUkIXFdA4n7LsAl nl6oBJbuqBKzi0L7EU/KR2vw1hO8OjjoZhtUPCZxa0Fc6W+by5LLBstHFI+cg06R dEw/cqwhMs7jvcnlCiOe6v/g4jlsbmrcndnQZzBKnUst6xgvvoYmQzTvgXY9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/JSTjbQnnlH0nGeq7q1ifH3Gpx4wHwYDVR0j BBgwFoAUh84HSm/9X8VwuzyXGw3zFBiFgo4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjM2MzVlMjUtODU5OS00OGFlLWJkY2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2 RkZENUZDNTcwQkIzQzk3MUIwREYzMTQxODg1ODI4RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0NFMDc0QTZGRkQ1RkM1NzBCQjNDOTcxQjBERjMxNDE4ODU4 MjhFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjM2MzVlMjUtODU5OS00OGFlLWJk Y2ItZTMyM2RmYzg5NmVjLzAvODdDRTA3NEE2RkZENUZDNTcwQkIzQzk3MUIwREYz MTQxODg1ODI4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPAGjapYEaPknZTpLxpYk2aZ1JBHeqq0cGz wYpfF896MuBhaJ3dIwRl2EO5b85R9piMHomZ2Ld1wUV1zyTcsHs/PnuOLX5zRpqA BGq8olNAzI3VJh6YtfA6kGYF8CCy+hyfE+5x7xNbcCUVBOIMG65a6AIrNr8G6aXX cREEenPvLU08kx2a8Z/SgXPafDlKwA/rbGUl7jOKA67dJWLiQodr3HZbDsmCedtf pAPvXJ+QrCGFpKv7wPNPcRgYmm30QBeOiiBSd2d4rjU5+svshdFfq+H/Ho4yID6R 3z9G1/ihLa2V7oFn1nmP1dQR46bCS2EOT26YFpWCWGrKDzmSUmE= -----END CERTIFICATE-----Generated at Tue Nov 10 17:24:16 2026 by rpki-client