$ rpki-client -vvvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: x6Znjsf8u3bbvhiGHPcJkRj81p6QGufeMK/x7mHYZFM= Subject key identifier: A4:FA:D4:E4:4B:FD:61:36:B9:EA:89:5F:4B:90:EB:F3:E0:2A:09:64 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 46B3ECD3CD93BA6F544A0008C5161946B5A6005A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: BC Signing time: Sun 20 Sep 2026 19:25:50 +0000 Manifest this update: Sun 20 Sep 2026 19:20:50 +0000 Manifest next update: Mon 21 Sep 2026 21:29:50 +0000 Files and hashes: 1: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) 2: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: jPLJzXj9hgTqHsw2au0CebU0cbgPw4+aNen7TSCocDA=) 3: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b3:ec:d3:cd:93:ba:6f:54:4a:00:08:c5:16:19:46:b5:a6:00:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Sep 20 19:20:50 2026 GMT Not After : Sep 21 21:29:50 2026 GMT Subject: CN=A4FAD4E44BFD6136B9EA895F4B90EBF3E02A0964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f9:99:d8:14:65:64:6a:4b:b8:ea:91:43:f2: fc:a7:c6:d5:4e:94:d4:06:cc:43:a2:40:03:62:dc: e7:4a:6a:5d:b8:c9:77:a8:ec:23:0c:e3:98:c8:58: 09:95:d7:00:57:2a:4c:29:0e:48:6e:52:1b:c9:71: 27:63:43:10:55:ae:f8:22:49:d9:f8:ba:d6:b0:c8: db:6a:b9:a9:ac:33:2a:52:cf:c3:b2:05:58:aa:e3: 02:10:c0:d8:ff:5c:c9:e3:f5:d7:35:76:51:e3:28: ac:c2:b3:b7:8f:56:03:4b:4e:ce:74:66:e9:23:22: 10:81:f3:e3:e9:98:69:6c:7f:9a:8a:28:bd:52:23: 68:d8:f1:57:08:c7:63:fd:09:26:6a:e0:c6:2d:d7: 28:b2:c9:7e:a2:83:67:97:63:98:57:43:8b:18:91: c9:cd:14:f4:56:b0:8b:40:fb:66:bd:81:ec:0a:7f: 6d:64:18:61:e9:99:93:3b:6e:8f:c8:2f:fa:47:c3: a2:c4:27:2a:cc:fa:67:47:1e:60:da:6b:58:3e:4c: 62:b1:f0:22:89:8a:d3:e3:55:09:40:26:8d:be:2b: 90:46:70:77:db:69:00:13:72:57:22:e1:0a:27:fa: ed:41:1b:89:1b:64:f1:af:79:ea:3c:e8:f5:8a:57: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:FA:D4:E4:4B:FD:61:36:B9:EA:89:5F:4B:90:EB:F3:E0:2A:09:64 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:b5:8c:4f:e0:fb:80:ac:7a:5a:02:2b:22:e7:86:84:40:d4: d6:32:b5:ac:4d:91:05:7d:ee:e4:37:99:d1:f2:a0:6d:64:1f: 81:8c:26:e3:d7:56:77:dc:08:6a:65:ac:17:95:9a:f8:57:e9: ff:b8:24:8f:c6:02:69:5d:21:bb:7e:43:fa:2d:2f:2e:bd:53: e1:d8:9d:89:6f:ca:2d:84:d5:3b:de:c5:5a:3f:95:37:22:c9: 88:82:b4:91:34:36:9d:32:d9:a9:37:a0:92:dd:96:8d:0c:6a: 5b:e3:3b:5f:fc:9b:c7:ce:6a:de:45:ef:d4:0e:12:e1:c4:b6: fd:85:af:4c:b3:6b:5d:e9:15:ed:d6:c2:be:68:10:e7:ea:9b: eb:99:56:9f:b8:89:00:fb:a8:92:82:ff:d0:f0:20:58:e0:82: e6:d6:09:b4:6a:d0:bd:fa:df:78:a9:23:7d:60:d3:bf:b3:6d: a1:3d:f0:fb:18:54:75:06:0b:7b:50:47:86:06:a3:d5:80:2d: 76:0f:18:9e:fc:ef:28:a6:f9:af:52:64:b1:67:a1:7b:e6:3f: 02:5e:0d:27:7c:30:a1:c2:4a:90:ae:89:1a:a0:a1:b5:b1:c3: a7:d3:5f:65:61:2d:57:34:10:9d:df:86:b8:fa:3a:b7:71:69: 44:66:68:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrPs082Tum9USgAIxRYZRrWmAFowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjA5MjAxOTIwNTBaFw0yNjA5MjEyMTI5NTBaMDMxMTAvBgNV BAMTKEE0RkFENEU0NEJGRDYxMzZCOUVBODk1RjRCOTBFQkYzRTAyQTA5NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1+ZnYFGVkaku46pFD8vynxtVO lNQGzEOiQANi3OdKal24yXeo7CMM45jIWAmV1wBXKkwpDkhuUhvJcSdjQxBVrvgi Sdn4utawyNtquamsMypSz8OyBViq4wIQwNj/XMnj9dc1dlHjKKzCs7ePVgNLTs50 ZukjIhCB8+PpmGlsf5qKKL1SI2jY8VcIx2P9CSZq4MYt1yiyyX6ig2eXY5hXQ4sY kcnNFPRWsItA+2a9gewKf21kGGHpmZM7bo/IL/pHw6LEJyrM+mdHHmDaa1g+TGKx 8CKJitPjVQlAJo2+K5BGcHfbaQATclci4Qon+u1BG4kbZPGveeo86PWKV8wzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpPrU5Ev9YTa56olfS5Dr8+AqCWQwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEK1jE/g+4CseloCKyLnhoRA1NYytaxNkQV9 7uQ3mdHyoG1kH4GMJuPXVnfcCGplrBeVmvhX6f+4JI/GAmldIbt+Q/otLy69U+HY nYlvyi2E1TvexVo/lTciyYiCtJE0Np0y2ak3oJLdlo0MalvjO1/8m8fOat5F79QO EuHEtv2Fr0yza13pFe3Wwr5oEOfqm+uZVp+4iQD7qJKC/9DwIFjggubWCbRq0L36 33ipI31g07+zbaE98PsYVHUGC3tQR4YGo9WALXYPGJ787yim+a9SZLFnoXvmPwJe DSd8MKHCSpCuiRqgobWxw6fTX2VhLVc0EJ3fhrj6OrdxaURmaHw= -----END CERTIFICATE-----Generated at Mon Sep 21 06:17:34 2026 by rpki-client