$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: 0b/NzpSs+C2yz11TQ5w328G0Xq4zeKrWRbomrFrIXQE= Subject key identifier: 54:6A:CF:FF:FA:76:5B:BD:D3:32:EC:DB:0F:39:C8:5E:47:AA:68:70 Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 5621A3976246086DC52DD1FCC9C4D02BE680A022 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 14:56:38 +0000 Manifest this update: Mon 02 Nov 2026 14:51:38 +0000 Manifest next update: Tue 03 Nov 2026 18:17:38 +0000 Files and hashes: 1: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 2: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: ncuFGrHDbZK+E4qqhdcx1nWRRxzTg9Ki4KiX8mlI0eg=) 3: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:21:a3:97:62:46:08:6d:c5:2d:d1:fc:c9:c4:d0:2b:e6:80:a0:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Nov 2 14:51:38 2026 GMT Not After : Nov 3 18:17:38 2026 GMT Subject: CN=546ACFFFFA765BBDD332ECDB0F39C85E47AA6870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5b:ae:81:eb:ad:2e:36:3a:a5:fb:d2:ad:e8: 55:83:27:61:2c:3d:67:87:c8:fd:15:66:68:70:ac: d8:0c:ca:cd:b8:f6:33:df:62:4e:4b:47:13:ac:67: 95:a7:ab:e0:36:12:0e:b6:ba:0e:4c:b2:7e:12:23: 21:08:3a:50:99:0f:9e:87:eb:b1:d6:f5:c2:3a:ed: 9c:a7:1c:ca:06:ff:13:ee:f7:15:e8:a2:54:f0:ec: fa:d2:c6:31:58:c3:d0:bb:45:0b:da:03:72:46:6e: 60:90:15:8f:ed:34:f3:77:56:05:ae:87:a3:5a:eb: f7:4c:99:c1:46:7c:48:84:dc:26:60:7c:1a:e3:97: b8:f7:47:8a:07:9f:c6:eb:e0:98:7c:a7:b6:e9:53: a8:cb:2e:9d:ca:63:49:11:fa:39:9c:fc:da:55:92: 26:3f:a3:ac:c9:ee:2a:e6:36:71:88:69:8d:87:ff: 4b:56:6a:f6:ae:46:8a:f3:f4:09:b3:6a:f1:da:1f: 40:d4:f3:86:b5:f9:a9:aa:af:f9:54:94:47:6b:1e: 88:c8:65:7b:e9:27:0b:00:82:ec:15:8e:8c:92:09: 5a:4c:21:0b:f8:41:d7:8e:a4:80:37:85:23:c9:2c: bd:3e:43:6a:3e:68:e8:76:40:e3:bd:33:c9:73:20: 11:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:6A:CF:FF:FA:76:5B:BD:D3:32:EC:DB:0F:39:C8:5E:47:AA:68:70 X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:f7:41:b8:66:f6:9d:77:9d:b3:b5:77:7f:e3:77:3c:68:11: 31:f2:fe:b4:cf:23:42:da:61:68:4a:6e:21:5c:60:df:23:81: 4e:ce:85:f9:df:3a:dd:50:29:18:de:bf:a2:f4:e5:a1:97:95: d1:0e:5a:7f:81:9e:99:b0:6d:c8:5c:36:06:2d:7c:22:eb:90: 8e:a3:37:7a:2a:b0:09:f0:84:ed:42:2c:88:10:1c:b2:c3:a1: 8c:cb:a2:d5:eb:98:9b:56:42:ef:a4:9a:a0:0e:b2:54:3c:d2: c6:7f:6c:f6:3d:30:85:9a:36:4a:b3:98:59:4b:24:8a:b0:ef: 79:62:4b:20:ec:ad:f9:69:35:38:b2:9c:63:2c:16:c2:3d:d7: 7a:87:6d:bb:82:2d:f2:2a:20:86:bb:69:10:9e:fd:53:2b:45: 07:77:06:ee:e4:66:00:36:6c:17:08:4a:04:5f:2a:88:52:df: a6:e7:ab:f3:c6:22:04:d2:99:a8:e1:a5:17:60:53:c5:65:51: 92:e3:2f:97:ff:6b:83:c0:ec:df:5c:53:5f:a1:7a:57:1b:18: 0e:75:e2:0b:38:ae:97:61:f6:5e:bc:7c:88:c6:54:7e:f2:7b: 3f:74:ca:f3:e7:3b:06:df:52:3a:05:d7:53:54:89:70:ca:1e: 92:12:9d:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUViGjl2JGCG3FLdH8ycTQK+aAoCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjExMDIxNDUxMzhaFw0yNjExMDMxODE3MzhaMDMxMTAvBgNV BAMTKDU0NkFDRkZGRkE3NjVCQkREMzMyRUNEQjBGMzlDODVFNDdBQTY4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqW66B660uNjql+9Kt6FWDJ2Es PWeHyP0VZmhwrNgMys249jPfYk5LRxOsZ5Wnq+A2Eg62ug5Msn4SIyEIOlCZD56H 67HW9cI67ZynHMoG/xPu9xXoolTw7PrSxjFYw9C7RQvaA3JGbmCQFY/tNPN3VgWu h6Na6/dMmcFGfEiE3CZgfBrjl7j3R4oHn8br4Jh8p7bpU6jLLp3KY0kR+jmc/NpV kiY/o6zJ7irmNnGIaY2H/0tWavauRorz9AmzavHaH0DU84a1+amqr/lUlEdrHojI ZXvpJwsAguwVjoySCVpMIQv4QdeOpIA3hSPJLL0+Q2o+aOh2QOO9M8lzIBEZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGrP//p2W73TMuzbDznIXkeqaHAwHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMf3Qbhm9p13nbO1d3/jdzxoETHy/rTPI0La YWhKbiFcYN8jgU7OhfnfOt1QKRjev6L05aGXldEOWn+BnpmwbchcNgYtfCLrkI6j N3oqsAnwhO1CLIgQHLLDoYzLotXrmJtWQu+kmqAOslQ80sZ/bPY9MIWaNkqzmFlL JIqw73liSyDsrflpNTiynGMsFsI913qHbbuCLfIqIIa7aRCe/VMrRQd3Bu7kZgA2 bBcISgRfKohS36bnq/PGIgTSmajhpRdgU8VlUZLjL5f/a4PA7N9cU1+helcbGA51 4gs4rpdh9l68fIjGVH7yez90yvPnOwbfUjoF11NUiXDKHpISnYk= -----END CERTIFICATE-----Generated at Mon Nov 2 20:55:21 2026 by rpki-client