$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json) Hash identifier: rhjnBbtQd/Ks9swlP3gXqvZ8gtcyc0rNwGJ6dmUClH8= Subject key identifier: 53:B1:A2:5B:B4:84:8B:00:86:47:3F:BC:2A:D6:52:5A:78:1F:68:79 Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371 Certificate serial: 0CDEC8C6DC11A742964488A8EC3989AFFA2DB834 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft Manifest number: BF Signing time: Mon 21 Sep 2026 19:51:01 +0000 Manifest this update: Mon 21 Sep 2026 19:46:01 +0000 Manifest next update: Tue 22 Sep 2026 21:18:01 +0000 Files and hashes: 1: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=) 2: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=) 3: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=) 4: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: QkwDsbI2dRyBuxVdQrr/RvYPov8hEpwFzNZ01Qw+Scw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 21:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:de:c8:c6:dc:11:a7:42:96:44:88:a8:ec:39:89:af:fa:2d:b8:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371 Validity Not Before: Sep 21 19:46:01 2026 GMT Not After : Sep 22 21:18:01 2026 GMT Subject: CN=53B1A25BB4848B0086473FBC2AD6525A781F6879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1b:95:a3:a6:b3:b8:a2:5b:40:e4:96:f8:6c: 34:96:f0:cb:b2:1c:e5:28:b7:b1:92:e6:4b:09:38: 0e:e0:44:5e:f4:56:c2:b0:3f:1d:1c:a2:60:00:f7: 3e:95:ba:b1:e0:eb:b7:83:e2:de:43:e9:11:01:1f: 31:10:80:c3:18:37:37:12:dd:14:9f:dc:78:47:7f: 26:71:e3:6d:1b:5b:a1:03:fe:a5:58:c6:a3:50:d1: 0c:8a:b3:77:52:75:05:6c:15:2d:c2:2d:94:70:3b: cc:03:61:99:d7:bc:b7:53:87:45:82:82:e6:b9:82: 21:fa:35:7c:3f:0e:61:38:cb:9c:df:79:c0:df:4d: 6d:ea:d2:bb:65:48:91:33:17:20:2c:96:ed:a0:25: 72:18:e4:39:7a:24:95:2b:57:47:96:1e:e7:8a:74: a4:92:d6:c2:4d:27:b0:6b:36:fc:b8:ea:e4:b3:95: 75:99:3b:d0:41:c2:d2:f1:40:70:fe:1b:5e:49:65: f9:8b:d5:ed:13:0c:fe:0c:c9:bd:62:bd:dc:b2:9a: f8:f6:98:32:79:3b:9f:e6:ed:40:aa:33:5d:22:0f: c3:89:b9:97:b1:81:2f:f3:52:9c:de:a5:1f:ea:de: bc:23:98:87:e5:92:7b:ed:3b:8c:93:12:40:ff:12: 70:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B1:A2:5B:B4:84:8B:00:86:47:3F:BC:2A:D6:52:5A:78:1F:68:79 X509v3 Authority Key Identifier: keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:97:8a:70:02:2f:20:87:02:f5:c6:2c:eb:48:bd:2b:03:2e: 23:1b:ce:b8:94:30:40:e3:7d:16:3c:5c:82:fb:eb:42:1d:bf: 58:e5:8f:16:6b:26:26:d5:40:34:0e:9a:3b:53:6b:3e:75:37: 15:89:dd:c4:78:9b:36:83:03:1b:18:d0:c8:ef:f6:d3:2b:e5: d3:c4:58:ba:bd:05:e1:59:73:79:20:7b:22:37:a2:83:77:8b: 46:05:54:a1:d2:6e:2c:84:0b:bf:f4:f7:66:0d:53:a0:62:8a: 32:62:40:43:ac:e0:47:43:78:6b:8a:f6:33:45:f5:a3:ef:ec: 7c:b8:4e:6d:fe:09:dc:e8:ad:c9:26:69:53:4d:70:93:82:0d: 47:1d:d3:2e:6c:6f:82:be:7d:cb:39:67:ae:be:e9:d5:80:40: cf:53:2c:88:d0:bd:74:8d:33:fa:0e:22:50:e9:0f:48:1c:5c: 03:34:27:bf:ae:a5:0b:6d:9a:9e:31:5b:d5:09:0c:85:d2:9b: 05:2d:b5:93:1b:d1:39:27:90:ac:a3:36:22:78:4c:8d:8b:a7: e2:f4:e6:cb:61:46:73:d5:65:e0:3b:c5:05:d4:31:ad:33:22: 10:cc:59:e5:21:ea:0e:2d:18:4e:6a:b8:48:f6:02:d4:f9:e7: 2f:00:5f:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDN7IxtwRp0KWRIio7DmJr/otuDQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdCNjMx NTA4RjM3MTAeFw0yNjA5MjExOTQ2MDFaFw0yNjA5MjIyMTE4MDFaMDMxMTAvBgNV BAMTKDUzQjFBMjVCQjQ4NDhCMDA4NjQ3M0ZCQzJBRDY1MjVBNzgxRjY4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBG5WjprO4oltA5Jb4bDSW8Muy HOUot7GS5ksJOA7gRF70VsKwPx0comAA9z6VurHg67eD4t5D6REBHzEQgMMYNzcS 3RSf3HhHfyZx420bW6ED/qVYxqNQ0QyKs3dSdQVsFS3CLZRwO8wDYZnXvLdTh0WC gua5giH6NXw/DmE4y5zfecDfTW3q0rtlSJEzFyAslu2gJXIY5Dl6JJUrV0eWHueK dKSS1sJNJ7BrNvy46uSzlXWZO9BBwtLxQHD+G15JZfmL1e0TDP4Myb1ivdyymvj2 mDJ5O5/m7UCqM10iD8OJuZexgS/zUpzepR/q3rwjmIflknvtO4yTEkD/EnD5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU7GiW7SEiwCGRz+8KtZSWngfaHkwHwYDVR0j BBgwFoAUh9FIXi2NWYCEgqM56W97YxUI83EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTJhYTE2ZWEtMmFlYy00OTVkLWE5YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUy RDhENTk4MDg0ODJBMzM5RTk2RjdCNjMxNTA4RjM3MS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84N0QxNDg1RTJEOEQ1OTgwODQ4MkEzMzlFOTZGN0I2MzE1MDhG MzcxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTJhYTE2ZWEtMmFlYy00OTVkLWE5 YTMtNjkyNTczMGQ1ZTBmLzAvODdEMTQ4NUUyRDhENTk4MDg0ODJBMzM5RTk2RjdC NjMxNTA4RjM3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByXinACLyCHAvXGLOtIvSsDLiMbzriUMEDj fRY8XIL760Idv1jljxZrJibVQDQOmjtTaz51NxWJ3cR4mzaDAxsY0Mjv9tMr5dPE WLq9BeFZc3kgeyI3ooN3i0YFVKHSbiyEC7/092YNU6BiijJiQEOs4EdDeGuK9jNF 9aPv7Hy4Tm3+CdzorckmaVNNcJOCDUcd0y5sb4K+fcs5Z66+6dWAQM9TLIjQvXSN M/oOIlDpD0gcXAM0J7+upQttmp4xW9UJDIXSmwUttZMb0TknkKyjNiJ4TI2Lp+L0 5sthRnPVZeA7xQXUMa0zIhDMWeUh6g4tGE5quEj2AtT55y8AX9I= -----END CERTIFICATE-----Generated at Tue Sep 22 16:11:35 2026 by rpki-client