
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
File: 87D1485E2D8D59808482A339E96F7B631508F371.mft (raw, json)
Hash identifier: g/dJ6j9J3xwFUMm7vHINu74Jp/I5XH4YrkAoQHSKOXU=
Subject key identifier: CC:2D:68:2F:95:8E:DE:E6:35:F4:06:2E:86:6E:93:F8:B5:22:B5:AF
Authority key identifier: 87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
Certificate issuer: /CN=87D1485E2D8D59808482A339E96F7B631508F371
Certificate serial: 776A178049CC9A80CE6E2766DEE538464D0213A9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
Manifest number: 3C
Signing time: Mon 15 Jun 2026 15:29:30 +0000
Manifest this update: Mon 15 Jun 2026 15:24:30 +0000
Manifest next update: Tue 16 Jun 2026 17:09:30 +0000
Files and hashes: 1: 87D1485E2D8D59808482A339E96F7B631508F371.crl (hash: l8d+/9sRGhI36E/Tsy7UinVCTOTGQUvrScZhx3hufAw=)
2: 3130332e36362e37302e302f32342d3234203d3e20313333383430.roa (hash: /NBNXAECvA7rchf/KEuYLeN9R7rXsZHxAXUURfMfPzM=)
3: 3130332e36362e36392e302f32342d3234203d3e203535363835.roa (hash: 0zJp7D5P7Wx8cncwvGTwfIjodHDRc8ua2EztHY2Ul18=)
4: 3130332e36362e36382e302f32342d3234203d3e20313431363330.roa (hash: 8Tzms9UNSztJ38WDL4YreIGGXV9FevurnhZ/GDo4a2o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 03:29:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:6a:17:80:49:cc:9a:80:ce:6e:27:66:de:e5:38:46:4d:02:13:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87D1485E2D8D59808482A339E96F7B631508F371
Validity
Not Before: Jun 15 15:24:30 2026 GMT
Not After : Jun 16 17:09:30 2026 GMT
Subject: CN=CC2D682F958EDEE635F4062E866E93F8B522B5AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5a:43:9d:e8:38:aa:e5:6f:34:d0:03:74:9f:
57:2b:2c:0e:ec:ee:7a:fe:3f:fb:52:47:48:77:06:
78:a4:7d:97:b4:6a:84:f8:27:40:7e:0d:83:52:56:
ce:a9:d2:2b:e7:7e:39:64:42:fb:f5:9a:20:c3:57:
f3:0a:75:d6:e0:cc:10:73:30:fb:ce:fd:36:42:8d:
f3:0b:0d:d6:24:12:4a:d2:1a:9b:76:90:aa:33:d3:
92:19:6d:c1:8c:60:4a:bc:e8:e3:29:65:0a:fd:d5:
31:3d:6b:84:68:c5:5d:16:f1:89:9c:8c:f5:69:24:
47:fe:62:15:90:83:9a:cd:f9:87:2f:ce:19:85:b9:
b8:a6:b7:94:5e:d5:bf:46:62:34:e9:bf:4c:0b:1f:
b8:b3:3b:61:95:7b:9f:cb:b8:15:bc:c9:7d:85:e8:
f2:5c:5d:3e:8f:43:a9:5a:c0:e7:99:30:f6:dd:34:
43:32:db:f0:d2:3f:7e:8d:5e:f8:56:9e:24:19:2a:
a2:cc:5f:b1:d2:0c:9e:64:18:90:dc:4b:27:f9:1d:
e0:b1:75:8e:50:4a:31:0e:06:44:40:7e:4b:a2:5b:
13:fa:d2:30:e1:04:54:cf:54:c8:cb:11:f2:0e:04:
7a:68:0c:d6:73:71:45:67:3d:e1:dd:a3:4e:9d:c4:
4b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:2D:68:2F:95:8E:DE:E6:35:F4:06:2E:86:6E:93:F8:B5:22:B5:AF
X509v3 Authority Key Identifier:
keyid:87:D1:48:5E:2D:8D:59:80:84:82:A3:39:E9:6F:7B:63:15:08:F3:71
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/87D1485E2D8D59808482A339E96F7B631508F371.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a2aa16ea-2aec-495d-a9a3-6925730d5e0f/0/87D1485E2D8D59808482A339E96F7B631508F371.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c3:ce:bb:42:e1:4e:3e:f1:08:32:8a:ee:50:e2:23:12:28:
89:3e:cc:92:6e:be:70:e4:92:2f:3a:95:10:66:30:1b:c1:f5:
8c:e0:38:ba:10:ec:89:fc:c4:b7:6a:ef:bb:27:36:61:2f:af:
4a:77:f2:c6:64:8a:4c:6e:42:db:0b:a8:72:fc:36:bf:82:ce:
9f:ed:a3:c2:6b:4e:19:1b:c9:b6:74:43:a6:6c:50:12:aa:35:
fa:a9:35:f0:58:0f:ec:63:a2:6b:2a:78:f4:15:2e:81:e0:5e:
a7:5a:54:a4:2f:4b:7b:38:39:78:64:b7:7f:48:c2:d0:27:2f:
40:47:cc:84:c6:6b:31:ee:15:df:fa:fc:24:33:77:13:d4:04:
64:bb:e2:86:b3:ab:46:e2:4d:9d:9a:5b:4c:9f:e2:8a:1c:61:
73:f0:23:e7:cd:9d:04:a0:44:04:96:e3:3b:e5:36:09:2c:a0:
a1:06:bc:2d:19:a9:fe:70:70:01:f9:09:d9:20:d4:18:62:0e:
96:69:1c:af:a5:cd:7f:eb:9a:63:58:15:71:f3:a4:0f:5c:20:
a4:2d:40:f9:6d:cb:be:aa:de:fd:0e:d1:bb:55:df:2d:fe:54:
be:ea:a5:ea:10:1f:39:e0:46:b9:a2:78:59:25:06:e0:4f:42:
7c:2e:c0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 19:05:18 2026 by rpki-client