$ rpki-client -vvvf rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft File: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft (raw, json) Hash identifier: beTf/FWN7wR2BUqe5Eg0+WlnIcuN/gW5rktpgNvt1Uc= Subject key identifier: 86:A8:65:EC:99:52:2A:56:D7:84:A0:7C:54:2E:0E:9C:71:55:E8:D5 Authority key identifier: 87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5 Certificate issuer: /CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5 Certificate serial: 4412795D8930B2E08BF6C29C48C67B3A154E6777 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft Manifest number: BF Signing time: Tue 22 Sep 2026 10:44:52 +0000 Manifest this update: Tue 22 Sep 2026 10:39:52 +0000 Manifest next update: Wed 23 Sep 2026 12:07:52 +0000 Files and hashes: 1: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl (hash: CRjBzpApwV83iBE9Y3tWX9k6P+cwocdoxsWxtVftcNs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:07:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:12:79:5d:89:30:b2:e0:8b:f6:c2:9c:48:c6:7b:3a:15:4e:67:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5 Validity Not Before: Sep 22 10:39:52 2026 GMT Not After : Sep 23 12:07:52 2026 GMT Subject: CN=86A865EC99522A56D784A07C542E0E9C7155E8D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:bd:8d:27:50:60:e2:30:9d:f9:e3:af:f9:80: 77:91:c5:91:44:49:b8:9e:64:49:e0:6b:d9:cb:cd: 6a:2b:c0:9f:14:bf:3b:49:7f:ca:b0:eb:d4:8c:5b: 34:a5:7e:61:dd:71:26:5b:8a:8e:f6:61:0e:db:84: a8:c5:d7:8a:8c:ff:6a:3b:6d:98:dd:a0:cb:d1:8a: 77:45:e2:bd:8b:c5:c8:1b:21:c8:e7:87:4d:3c:94: 7e:3e:7a:e3:f2:fd:f6:83:45:49:7e:77:44:cd:40: 61:1c:ff:cd:aa:63:b1:da:9a:78:6a:8f:89:89:20: 88:8e:7a:e1:6f:f4:12:52:db:0d:eb:a1:14:78:70: 3c:3a:d9:6b:10:a6:84:cf:7c:53:a7:48:44:7c:b0: 7d:2a:f2:4d:0b:99:36:c4:5b:ea:dd:bb:8c:1b:32: 3d:7a:3c:d0:de:69:10:84:c5:b8:11:8e:fb:71:c3: 3d:88:da:26:0f:a0:d9:ad:a4:c5:69:e9:99:96:c5: de:4c:77:fc:99:8d:18:07:82:8b:c0:24:b6:e4:31: 01:23:1a:ef:b2:d2:9c:a4:37:0a:b3:fa:fc:25:2a: 2b:da:be:09:79:51:da:a6:08:b7:33:50:89:22:b8: af:8d:09:48:bf:8d:a5:42:b4:72:ae:d9:0b:4a:d3: 67:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:A8:65:EC:99:52:2A:56:D7:84:A0:7C:54:2E:0E:9C:71:55:E8:D5 X509v3 Authority Key Identifier: keyid:87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:35:4b:0f:04:4e:86:e3:bf:8b:09:e4:31:8c:e9:12:6c:2b: 48:57:91:35:71:0b:e8:6e:04:bb:f3:f0:b5:74:d1:8a:b3:8c: 6d:c1:f5:fd:a8:16:db:76:63:ea:2a:85:89:e7:cd:f3:ca:41: af:27:4d:1d:15:84:79:51:11:fa:74:ea:af:bf:4b:c0:77:a3: f1:b8:7b:e4:f6:2b:f2:64:b2:e3:16:6e:6d:aa:09:78:06:9d: a5:12:53:35:3f:ea:90:3d:f9:91:fb:eb:4e:28:99:ec:bd:c9: 53:63:41:8a:71:cd:60:20:7f:68:f3:cb:00:d5:85:59:db:dc: 58:c2:ef:f1:bb:bc:1c:31:f1:cd:9a:d6:31:0d:96:1c:02:97: 12:7d:da:04:e7:00:f7:4e:b9:91:67:b4:0e:15:88:4f:34:a0: 2d:d5:37:7e:3c:56:9a:fe:b6:7c:71:a4:bc:a8:a8:86:0c:95: 77:5b:be:31:ce:f4:db:5f:3f:8c:36:4a:f0:a4:0b:18:a0:2e: 4e:e3:78:19:0b:4c:96:94:3a:0a:59:4e:0a:06:cb:f8:b2:52: 46:39:d7:d3:81:3d:c8:ff:75:3e:c6:b6:65:70:4b:a0:dd:54: 9f:ef:9c:7e:e1:7f:15:74:5d:21:0b:65:e2:66:ab:55:19:20: 08:d0:93:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBJ5XYkwsuCL9sKcSMZ7OhVOZ3cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdDNkRCMDYxMDgwNTBEMTVDMjMxNEM4MTZCQ0I1REE2 Q0IxMDFDNTAeFw0yNjA5MjIxMDM5NTJaFw0yNjA5MjMxMjA3NTJaMDMxMTAvBgNV BAMTKDg2QTg2NUVDOTk1MjJBNTZENzg0QTA3QzU0MkUwRTlDNzE1NUU4RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUvY0nUGDiMJ3546/5gHeRxZFE SbieZEnga9nLzWorwJ8UvztJf8qw69SMWzSlfmHdcSZbio72YQ7bhKjF14qM/2o7 bZjdoMvRindF4r2LxcgbIcjnh008lH4+euPy/faDRUl+d0TNQGEc/82qY7Hamnhq j4mJIIiOeuFv9BJS2w3roRR4cDw62WsQpoTPfFOnSER8sH0q8k0LmTbEW+rdu4wb Mj16PNDeaRCExbgRjvtxwz2I2iYPoNmtpMVp6ZmWxd5Md/yZjRgHgovAJLbkMQEj Gu+y0pykNwqz+vwlKivavgl5UdqmCLczUIkiuK+NCUi/jaVCtHKu2QtK02c5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhqhl7JlSKlbXhKB8VC4OnHFV6NUwHwYDVR0j BBgwFoAUh8bbBhCAUNFcIxTIFry12myxAcUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTAyYjc4YWQtZGYyMy00M2UyLWE5NGQtM2I0NTRjYmM3ZmM1LzAvODdDNkRCMDYx MDgwNTBEMTVDMjMxNEM4MTZCQ0I1REE2Q0IxMDFDNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0M2REIwNjEwODA1MEQxNUMyMzE0QzgxNkJDQjVEQTZDQjEw MUM1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvODdDNkRCMDYxMDgwNTBEMTVDMjMxNEM4MTZCQ0I1 REE2Q0IxMDFDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFU1Sw8ETobjv4sJ5DGM6RJsK0hXkTVxC+hu BLvz8LV00YqzjG3B9f2oFtt2Y+oqhYnnzfPKQa8nTR0VhHlREfp06q+/S8B3o/G4 e+T2K/JksuMWbm2qCXgGnaUSUzU/6pA9+ZH7604omey9yVNjQYpxzWAgf2jzywDV hVnb3FjC7/G7vBwx8c2a1jENlhwClxJ92gTnAPdOuZFntA4ViE80oC3VN348Vpr+ tnxxpLyoqIYMlXdbvjHO9NtfP4w2SvCkCxigLk7jeBkLTJaUOgpZTgoGy/iyUkY5 19OBPcj/dT7GtmVwS6DdVJ/vnH7hfxV0XSELZeJmq1UZIAjQkxw= -----END CERTIFICATE-----Generated at Wed Sep 23 01:28:55 2026 by rpki-client