$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: weiMhecEq1AcK2Tu+8fvruVYaVk6X53bP6nK3aY3M1A= Subject key identifier: 84:0F:5E:C8:DE:88:58:53:8F:CB:58:E0:14:71:C2:D9:62:CD:9D:21 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 5AC8742308A7237A14F6769D9517BEEC69CD5B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0259 Signing time: Fri 20 Mar 2026 02:31:41 +0000 Manifest this update: Fri 20 Mar 2026 02:26:41 +0000 Manifest next update: Mon 23 Mar 2026 05:52:41 +0000 Files and hashes: 1: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 2: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) 3: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: cGgYG36BvKECmEGp20n+W0tMaCH66sAURZATlurzTb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 05:52:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:c8:74:23:08:a7:23:7a:14:f6:76:9d:95:17:be:ec:69:cd:5b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Mar 20 02:26:41 2026 GMT Not After : Mar 23 05:52:41 2026 GMT Subject: CN=840F5EC8DE8858538FCB58E01471C2D962CD9D21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:20:72:81:c0:75:3e:6a:fe:68:81:7c:db:77: 53:bf:75:92:5f:00:09:a4:f2:c2:72:1b:fe:fb:06: e4:46:db:8d:e9:8c:86:bf:e9:95:4c:34:63:d4:13: 4d:de:47:91:8f:62:86:f8:75:ba:be:b4:e7:00:dc: 87:f1:c3:8c:e9:9e:fb:eb:8c:ec:0e:3e:a7:3f:f5: 6d:10:d2:75:ee:24:a1:e8:dc:8c:10:5b:65:46:ad: 78:51:bc:69:25:10:12:d0:d5:29:55:62:d0:f0:4d: da:a1:9a:eb:d5:44:46:bb:c1:cd:7d:b0:9f:13:df: 70:41:25:4d:b6:d4:b6:c5:7b:60:d7:37:39:27:b8: e9:8b:7a:94:fd:bb:16:16:64:82:7a:64:3d:a0:32: 71:41:75:1c:d6:42:4b:be:8d:35:f7:cd:fc:8c:18: 76:7b:8b:1c:b5:a5:60:af:79:9a:cb:aa:f9:68:f8: f4:e6:74:35:59:15:99:01:4c:2e:fe:26:2c:b8:d1: bb:87:c9:3d:e0:cf:ee:41:8e:6e:42:2c:9a:df:61: c8:cc:67:49:03:97:1c:75:70:25:ff:ce:ec:b4:fa: 69:75:75:e2:d0:8a:43:b1:b6:3b:65:8f:f1:a4:45: 85:b5:2e:63:00:ae:10:92:c2:ce:dc:c9:e4:22:e6: d7:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:0F:5E:C8:DE:88:58:53:8F:CB:58:E0:14:71:C2:D9:62:CD:9D:21 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:6a:67:c6:64:02:c2:e0:68:ce:3f:71:69:54:74:21:c4:a6: 66:f6:18:e9:d0:e8:b5:bc:62:63:19:72:16:b8:f4:4c:f4:00: f1:5c:21:ff:cd:04:49:d4:f2:6b:9f:05:23:d1:2d:59:3e:f8: ec:a7:2e:0f:c2:7e:3f:e0:82:a2:fe:a9:b9:b6:48:a6:29:e8: f5:c0:ce:13:e4:94:c8:4b:a4:a8:cf:3e:9c:df:a2:85:30:85: ca:f9:2a:f0:2d:d7:48:91:70:37:90:e2:6c:01:9b:5f:b1:82: 32:ca:ae:d1:4c:33:2e:fb:4f:5e:70:18:7b:40:68:53:1f:70: 5e:f0:42:e0:8b:d3:e7:1a:84:29:99:25:13:fc:9e:dc:61:22: c5:48:8b:26:6f:e8:fd:44:ac:89:85:58:18:6d:7b:da:57:de: b6:37:fc:ab:09:97:d1:f8:87:a0:61:3f:5d:9c:5d:20:d8:a5: 43:cc:ff:7c:c5:74:20:9a:9b:64:19:03:3a:dd:29:0b:ca:14: ec:60:c0:7d:d0:cb:21:e0:d2:ac:76:05:02:71:06:57:e7:1f: e7:ec:b4:4b:52:bf:c3:3c:6b:a6:ef:11:bd:26:fe:f9:74:53: 25:1c:5d:35:74:b9:bd:38:e8:90:4d:81:6d:6a:70:ef:36:48: 07:a3:02:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsh0IwinI3oU9nadlRe+7GnNW0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNjAzMjAwMjI2NDFaFw0yNjAzMjMwNTUyNDFaMDMxMTAvBgNV BAMTKDg0MEY1RUM4REU4ODU4NTM4RkNCNThFMDE0NzFDMkQ5NjJDRDlEMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCIHKBwHU+av5ogXzbd1O/dZJf AAmk8sJyG/77BuRG243pjIa/6ZVMNGPUE03eR5GPYob4dbq+tOcA3Ifxw4zpnvvr jOwOPqc/9W0Q0nXuJKHo3IwQW2VGrXhRvGklEBLQ1SlVYtDwTdqhmuvVREa7wc19 sJ8T33BBJU221LbFe2DXNzknuOmLepT9uxYWZIJ6ZD2gMnFBdRzWQku+jTX3zfyM GHZ7ixy1pWCveZrLqvlo+PTmdDVZFZkBTC7+Jiy40buHyT3gz+5Bjm5CLJrfYcjM Z0kDlxx1cCX/zuy0+ml1deLQikOxtjtlj/GkRYW1LmMArhCSws7cyeQi5tdZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhA9eyN6IWFOPy1jgFHHC2WLNnSEwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFqZ8ZkAsLgaM4/cWlUdCHEpmb2GOnQ6LW8 YmMZcha49Ez0APFcIf/NBEnU8mufBSPRLVk++OynLg/Cfj/ggqL+qbm2SKYp6PXA zhPklMhLpKjPPpzfooUwhcr5KvAt10iRcDeQ4mwBm1+xgjLKrtFMMy77T15wGHtA aFMfcF7wQuCL0+cahCmZJRP8ntxhIsVIiyZv6P1ErImFWBhte9pX3rY3/KsJl9H4 h6BhP12cXSDYpUPM/3zFdCCam2QZAzrdKQvKFOxgwH3QyyHg0qx2BQJxBlfnH+fs tEtSv8M8a6bvEb0m/vl0UyUcXTV0ub046JBNgW1qcO82SAejAkc= -----END CERTIFICATE-----Generated at Sat Mar 21 15:31:56 2026 by rpki-client