
$ rpki-client -vvf rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
File: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft (raw, json)
Hash identifier: ag2Yy7He8PPF6K/T85/GHL+yOkFz4sbjpdPJRDw8bkw=
Subject key identifier: 1C:D1:C4:93:52:32:E6:66:F4:33:FB:49:03:48:7C:16:F5:3D:23:10
Authority key identifier: 87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5
Certificate issuer: /CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5
Certificate serial: 0B7310AC36E7F2F1FB92AA4BD5C5DB091DAAFA69
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 21:35:24 +0000
Manifest this update: Tue 16 Jun 2026 21:30:24 +0000
Manifest next update: Wed 17 Jun 2026 23:22:24 +0000
Files and hashes: 1: 87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl (hash: RWh9zMQaQKGAQT9YCQjz2BDCjYdlkkF1YbvWKkzx1Oo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl
rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 23:22:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:73:10:ac:36:e7:f2:f1:fb:92:aa:4b:d5:c5:db:09:1d:aa:fa:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87C6DB06108050D15C2314C816BCB5DA6CB101C5
Validity
Not Before: Jun 16 21:30:24 2026 GMT
Not After : Jun 17 23:22:24 2026 GMT
Subject: CN=1CD1C4935232E666F433FB4903487C16F53D2310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0a:f7:0c:9c:83:fb:57:df:c7:28:02:c2:70:
d8:e8:9b:c0:7a:fc:f7:9e:be:ea:03:21:50:93:46:
99:aa:ca:2c:49:05:57:e8:6e:52:0a:f5:2a:d7:ce:
c1:da:e1:6d:9d:44:b4:90:cb:fc:3f:26:ea:54:3b:
df:43:48:62:28:e5:2c:dd:f4:c5:97:07:80:07:28:
63:17:21:82:8c:4a:cd:84:17:9a:4c:ba:60:f2:70:
2f:db:eb:14:cf:c1:49:81:ee:66:3c:e9:53:7b:f0:
37:0e:83:63:09:5c:44:70:e0:ee:ca:23:89:5c:b7:
c2:d5:6b:3e:b0:28:5a:e8:49:88:99:91:36:ad:bf:
61:79:4e:5c:ec:f1:6f:cf:cb:b3:4a:e4:9e:b8:c3:
f0:7a:d4:61:4a:31:89:e1:b3:04:e9:ca:34:a2:4c:
f8:d5:c6:80:42:4f:36:d3:89:4e:f3:8a:c5:c5:86:
1b:7d:d1:6f:64:7e:85:65:8e:76:e0:7a:63:61:e1:
1f:9f:77:e9:13:a8:28:e0:5f:88:d6:e2:ed:d1:f8:
5d:01:37:4a:3e:62:fd:79:11:37:92:e3:e0:2b:41:
56:fc:fa:dd:2a:6a:4e:6f:7d:e1:01:b0:f0:09:23:
90:04:cd:b4:53:d9:ac:ec:ac:7b:22:dc:28:c1:ce:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:D1:C4:93:52:32:E6:66:F4:33:FB:49:03:48:7C:16:F5:3D:23:10
X509v3 Authority Key Identifier:
keyid:87:C6:DB:06:10:80:50:D1:5C:23:14:C8:16:BC:B5:DA:6C:B1:01:C5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87C6DB06108050D15C2314C816BCB5DA6CB101C5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/87C6DB06108050D15C2314C816BCB5DA6CB101C5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:07:4f:a2:07:0a:02:39:42:4b:e2:0b:f8:fb:04:3c:9b:48:
bc:c7:38:cb:5d:8a:94:26:86:6f:c4:2c:c8:67:e5:cd:17:28:
2d:42:52:50:a9:40:fe:0d:b9:fb:8f:0a:88:39:4a:0a:fc:44:
e8:56:65:ec:8c:8c:90:da:3c:06:4b:33:45:f9:5c:4c:f7:47:
6a:1c:f8:64:14:45:56:1b:57:e1:3a:f8:48:e9:19:43:eb:13:
1c:1d:31:27:11:30:d9:e0:43:58:ab:1a:be:dd:75:d4:96:ff:
1c:fc:94:df:c6:d7:c8:0b:a2:a5:41:16:df:b4:08:5a:5b:ad:
7c:51:6b:cc:5f:26:21:96:b7:92:dc:b7:65:7d:8f:fc:d2:ce:
a4:20:eb:6a:44:09:fc:5b:5e:dc:70:21:f0:96:29:a5:9d:07:
d1:eb:b5:3c:a3:e5:5f:84:7a:c7:b5:4f:64:96:12:e4:d3:a1:
67:83:69:b0:9d:6a:ff:eb:a6:95:aa:94:fe:ce:ba:48:34:6f:
13:42:4e:7a:be:3e:bf:09:aa:85:20:20:b3:fd:82:e0:2c:ca:
48:6a:dc:d1:37:a9:d8:34:6d:25:0f:8f:12:4c:53:b1:ad:ee:
eb:e2:06:ee:ce:db:2d:0b:ba:cd:c4:cd:fa:fc:bd:49:4c:83:
4c:61:66:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:10 2026 by rpki-client