$ rpki-client -vvvf rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft File: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft (raw, json) Hash identifier: nZcG5jqB1wyd8hc+aSiyF2LgUNgn9qcBBZ45Mu5bG6o= Subject key identifier: 3A:D6:58:90:65:66:31:9F:F5:55:CA:1D:9A:57:0C:C8:B2:47:81:48 Authority key identifier: B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 Certificate issuer: /CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Certificate serial: 2E6452AEFB0A445FB3379290E47CBF7288519CD3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft Manifest number: 0106 Signing time: Sat 14 Nov 2026 18:17:34 +0000 Manifest this update: Sat 14 Nov 2026 18:12:34 +0000 Manifest next update: Sun 15 Nov 2026 18:43:34 +0000 Files and hashes: 1: 3130332e3135332e39372e302f32342d3234203d3e20313430343630.roa (hash: 2HdM5SxPhqs0v66pqKtYjA5YE63M2BNBs+YFxsyjHnE=) 2: 3130332e3135332e39362e302f32342d3234203d3e20313430343630.roa (hash: mGXPDNteQmthJU+D3Amlv44YcQ5dcoioU4ycJmjDVeo=) 3: B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl (hash: B2+lb8j9LQtq3a47BeIJ8sXrpuwh89s//Ej89vptTCQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 18:43:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:64:52:ae:fb:0a:44:5f:b3:37:92:90:e4:7c:bf:72:88:51:9c:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3 Validity Not Before: Nov 14 18:12:34 2026 GMT Not After : Nov 15 18:43:34 2026 GMT Subject: CN=3AD658906566319FF555CA1D9A570CC8B2478148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c9:bb:d7:09:83:0f:97:77:e0:63:4b:7b:2b: 78:33:c4:1f:75:38:53:1a:e3:84:ce:db:b0:32:07: 04:b5:ff:6f:2e:e1:cd:73:9b:d5:9f:f6:c4:4f:f0: 9f:32:7f:52:dc:c0:01:15:a1:c6:c8:92:21:f0:65: 2d:3b:a5:d4:47:bf:bb:8e:81:5e:68:73:4a:f2:14: 6a:05:af:32:cb:19:98:64:03:9e:9f:7e:c4:14:a0: 07:1e:56:26:53:47:14:4a:00:56:53:b7:27:64:0d: c0:4c:6b:88:aa:da:36:81:da:97:ca:d6:11:b5:d3: 9f:f2:4a:06:59:48:41:b2:d5:15:97:b8:63:60:75: 8c:e7:1b:72:0c:08:d0:b6:16:4e:88:6c:4a:9b:32: da:34:36:35:98:b7:62:9a:ee:ca:1b:26:a6:53:ad: 2b:f1:82:37:c4:4e:f2:2d:20:47:90:ce:8a:eb:48: df:52:b7:3b:bc:7a:6c:bc:29:ba:bd:55:18:33:ab: 41:be:6a:4d:9b:29:72:ba:69:b5:f8:5c:63:e1:e8: e9:c2:d9:54:fb:7b:21:86:ab:1c:3a:58:cf:1d:be: 23:8c:1d:81:f4:5d:40:08:f1:74:96:60:bd:60:29: ef:f6:b2:51:c9:e8:b8:21:8c:f3:9d:92:35:2b:8b: 1e:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:D6:58:90:65:66:31:9F:F5:55:CA:1D:9A:57:0C:C8:B2:47:81:48 X509v3 Authority Key Identifier: keyid:B8:7B:C5:AB:56:61:C6:7C:3E:7B:D7:00:FA:79:EC:70:0D:DD:4C:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/696a74df-d907-4aaf-a836-43e4e1968525/0/B87BC5AB5661C67C3E7BD700FA79EC700DDD4CB3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:6d:d3:f2:ab:3d:89:37:3f:ae:8d:90:15:77:28:ee:d2:76: 9b:d7:4c:6c:c0:ff:02:ec:4c:92:5e:f7:42:a2:96:6f:7a:db: 0d:e9:0c:f3:e4:3e:89:db:5a:99:67:8e:76:0b:9c:8c:6e:1d: 35:a1:bc:9a:8c:fe:b3:bb:0b:9f:15:b6:ad:aa:9e:4a:41:e5: 7b:b1:1c:77:08:ba:c1:f4:09:ad:6c:be:08:d4:46:5f:a8:53: af:ec:7f:31:46:3e:d1:7f:47:f0:78:73:c0:5d:22:48:53:35: 05:56:91:97:a7:8a:bf:00:03:a2:16:19:8e:e5:42:8e:f3:5f: 1a:6b:49:90:39:43:f2:97:40:a9:e0:42:a1:50:75:0e:ba:c9: fc:a8:3c:16:cf:3e:ee:3a:41:54:df:bb:b5:c5:45:b6:41:f5: 30:1a:35:f8:f9:f2:4f:41:33:8c:2b:92:9c:0e:ae:d5:8c:68: 64:eb:92:64:cd:31:85:06:2c:98:70:99:3f:98:b6:04:9c:27: 56:7a:bd:19:84:e4:89:03:82:5f:02:a7:1a:df:c6:6d:9f:2f: 76:56:7e:20:38:f3:22:19:1d:e8:1f:be:3f:3b:8f:38:ab:3f: 84:47:32:e4:ff:79:a5:9e:6b:c0:db:9c:3f:94:e5:74:d5:86: f2:d5:43:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULmRSrvsKRF+zN5KQ5Hy/cohRnNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAw RERENENCMzAeFw0yNjExMTQxODEyMzRaFw0yNjExMTUxODQzMzRaMDMxMTAvBgNV BAMTKDNBRDY1ODkwNjU2NjMxOUZGNTU1Q0ExRDlBNTcwQ0M4QjI0NzgxNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaybvXCYMPl3fgY0t7K3gzxB91 OFMa44TO27AyBwS1/28u4c1zm9Wf9sRP8J8yf1LcwAEVocbIkiHwZS07pdRHv7uO gV5oc0ryFGoFrzLLGZhkA56ffsQUoAceViZTRxRKAFZTtydkDcBMa4iq2jaB2pfK 1hG105/ySgZZSEGy1RWXuGNgdYznG3IMCNC2Fk6IbEqbMto0NjWYt2Ka7sobJqZT rSvxgjfETvItIEeQzorrSN9Stzu8emy8Kbq9VRgzq0G+ak2bKXK6abX4XGPh6OnC 2VT7eyGGqxw6WM8dviOMHYH0XUAI8XSWYL1gKe/2slHJ6LghjPOdkjUrix51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOtZYkGVmMZ/1VcodmlcMyLJHgUgwHwYDVR0j BBgwFoAUuHvFq1Zhxnw+e9cA+nnscA3dTLMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Njk2YTc0ZGYtZDkwNy00YWFmLWE4MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1 NjYxQzY3QzNFN0JENzAwRkE3OUVDNzAwRERENENCMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CODdCQzVBQjU2NjFDNjdDM0U3QkQ3MDBGQTc5RUM3MDBEREQ0 Q0IzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjk2YTc0ZGYtZDkwNy00YWFmLWE4 MzYtNDNlNGUxOTY4NTI1LzAvQjg3QkM1QUI1NjYxQzY3QzNFN0JENzAwRkE3OUVD NzAwRERENENCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZt0/KrPYk3P66NkBV3KO7SdpvXTGzA/wLs TJJe90Kilm962w3pDPPkPonbWplnjnYLnIxuHTWhvJqM/rO7C58Vtq2qnkpB5Xux HHcIusH0Ca1svgjURl+oU6/sfzFGPtF/R/B4c8BdIkhTNQVWkZenir8AA6IWGY7l Qo7zXxprSZA5Q/KXQKngQqFQdQ66yfyoPBbPPu46QVTfu7XFRbZB9TAaNfj58k9B M4wrkpwOrtWMaGTrkmTNMYUGLJhwmT+YtgScJ1Z6vRmE5IkDgl8Cpxrfxm2fL3ZW fiA48yIZHegfvj87jzirP4RHMuT/eaWea8DbnD+U5XTVhvLVQ1Y= -----END CERTIFICATE-----Generated at Sun Nov 15 11:51:04 2026 by rpki-client