$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: grgfC9PnfvQmFadLPMZL89VY5JyPBGkzAnPhrgbWNnU= Subject key identifier: 3A:90:09:D8:06:86:C5:BF:E9:63:33:EE:0A:5B:6E:63:05:A8:58:86 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 33FA27224288E1B32241C5122F337FEC75B54B30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 19:40:39 +0000 Manifest this update: Mon 20 Jul 2026 19:35:39 +0000 Manifest next update: Tue 21 Jul 2026 20:08:39 +0000 Files and hashes: 1: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 2: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 3: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 4: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) 5: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) 6: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: qf/B0YV1uoYfziBoJg2bdUEI/8KyDNuuT4ASsQW8nAk=) 7: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 8: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 20:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:fa:27:22:42:88:e1:b3:22:41:c5:12:2f:33:7f:ec:75:b5:4b:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: Jul 20 19:35:39 2026 GMT Not After : Jul 21 20:08:39 2026 GMT Subject: CN=3A9009D80686C5BFE96333EE0A5B6E6305A85886 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:62:cf:0f:70:63:71:37:7c:0c:19:1f:7c: 02:43:d0:a6:1e:96:c7:7e:6d:4b:1e:c1:28:75:e3: df:e1:ba:3f:71:1d:4a:ba:05:f3:b2:ab:48:50:3c: 03:96:4d:c7:2b:bb:c7:89:04:dc:c4:d4:c8:0c:0e: a5:ce:bc:1b:73:84:a2:36:3d:44:8c:5d:48:d5:71: a0:4c:b6:a0:2b:93:18:69:3c:5e:d9:30:db:79:79: 03:18:9b:f8:43:9a:8b:33:42:ce:ec:38:a5:3f:91: 36:13:12:73:7d:2b:f8:d0:5e:7e:43:63:a1:ba:3e: fc:a3:8e:82:06:11:73:b9:84:bc:52:d8:2a:9e:37: 53:d7:e0:78:0d:98:e5:18:6a:b6:3e:19:ac:dc:a5: b7:e4:33:08:a7:27:3c:a3:6f:ed:54:b6:31:f8:56: d4:d0:a0:1f:69:8d:0b:7b:3c:e2:21:15:a9:d4:9e: b1:c4:a1:74:81:16:ca:2c:b9:59:0a:19:03:61:6f: 4e:ad:75:db:2d:10:f6:8e:97:be:65:ba:37:d4:65: e2:aa:fe:4e:a6:95:7f:58:5c:eb:c6:ca:0e:72:01: a5:78:cf:6c:b0:b0:ca:6b:cc:09:92:e1:81:b7:c5: cc:5d:d7:cf:c3:5a:02:05:d2:b1:48:26:ac:eb:f4: 68:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:90:09:D8:06:86:C5:BF:E9:63:33:EE:0A:5B:6E:63:05:A8:58:86 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:a6:e4:ad:8f:0e:20:9c:39:0e:0b:66:94:0d:e4:44:fc:a3: 51:24:fd:fd:0f:7a:ef:f6:49:0f:83:b5:4f:b4:1b:9b:e0:e1: da:19:5f:7c:51:1d:ac:0c:3b:c4:3b:a0:36:f3:a8:4c:7c:8a: 8d:1b:8c:49:18:1a:7b:7b:de:43:29:03:9a:42:9a:e0:ef:d6: 55:9c:7f:11:f9:40:99:d7:6f:19:90:4d:56:1a:2d:b4:80:84: 6b:d4:11:c6:b7:db:24:18:3c:10:cc:73:63:62:d9:0c:79:97: 18:84:43:ef:45:c4:1f:d3:63:a3:31:09:66:4e:d5:2f:94:fb: 71:c7:5b:d8:5b:9a:a5:07:1b:47:82:d6:3c:6c:88:01:19:97: db:8c:31:c3:82:97:f4:67:19:a9:a0:8a:11:8b:de:7c:40:45: 2f:4e:54:d7:8c:57:6c:ed:58:c2:65:40:50:9e:c8:bd:84:88: a7:f1:d4:16:79:d1:e1:2f:ae:e1:29:50:2d:1a:ef:9f:17:7c: 02:15:73:78:08:5b:ff:97:ac:d4:c1:58:db:d6:80:b5:92:48: 57:95:54:9d:c5:cd:a1:48:bc:66:f6:54:3d:6e:ee:59:aa:11: 8e:ce:b4:3f:5e:a7:6a:7a:81:28:88:02:3a:95:17:0d:50:f8: 5e:3c:7b:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/onIkKI4bMiQcUSLzN/7HW1SzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA3MjAxOTM1MzlaFw0yNjA3MjEyMDA4MzlaMDMxMTAvBgNV BAMTKDNBOTAwOUQ4MDY4NkM1QkZFOTYzMzNFRTBBNUI2RTYzMDVBODU4ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bGLPD3BjcTd8DBkffAJD0KYe lsd+bUsewSh149/huj9xHUq6BfOyq0hQPAOWTccru8eJBNzE1MgMDqXOvBtzhKI2 PUSMXUjVcaBMtqArkxhpPF7ZMNt5eQMYm/hDmoszQs7sOKU/kTYTEnN9K/jQXn5D Y6G6PvyjjoIGEXO5hLxS2CqeN1PX4HgNmOUYarY+GazcpbfkMwinJzyjb+1UtjH4 VtTQoB9pjQt7POIhFanUnrHEoXSBFsosuVkKGQNhb06tddstEPaOl75lujfUZeKq /k6mlX9YXOvGyg5yAaV4z2ywsMprzAmS4YG3xcxd18/DWgIF0rFIJqzr9GiJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpAJ2AaGxb/pYzPuCltuYwWoWIYwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCm5K2PDiCcOQ4LZpQN5ET8o1Ek/f0Peu/2 SQ+DtU+0G5vg4doZX3xRHawMO8Q7oDbzqEx8io0bjEkYGnt73kMpA5pCmuDv1lWc fxH5QJnXbxmQTVYaLbSAhGvUEca32yQYPBDMc2Ni2Qx5lxiEQ+9FxB/TY6MxCWZO 1S+U+3HHW9hbmqUHG0eC1jxsiAEZl9uMMcOCl/RnGamgihGL3nxARS9OVNeMV2zt WMJlQFCeyL2EiKfx1BZ50eEvruEpUC0a758XfAIVc3gIW/+XrNTBWNvWgLWSSFeV VJ3FzaFIvGb2VD1u7lmqEY7OtD9ep2p6gSiIAjqVFw1Q+F48e6k= -----END CERTIFICATE-----Generated at Tue Jul 21 05:48:38 2026 by rpki-client