$ rpki-client -vvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: zzyCTskUvKo6Lg6OKoAmcQEz0BVQvGuU1Ov4+EQYIxk= Subject key identifier: 64:D4:AD:A7:36:B5:5C:3E:6D:09:72:CE:7B:24:95:A2:8C:BF:B7:E3 Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 18BEEDA35066930DB3FD07469ED9B1FAFA7C3CF2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 16:01:16 +0000 Manifest this update: Mon 20 Jul 2026 15:56:16 +0000 Manifest next update: Tue 21 Jul 2026 19:54:16 +0000 Files and hashes: 1: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) 2: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) 3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 4: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: Y89Ko5sFdfCmwas+7agfKbUTPTHQnMpQyUgFnJYI9ks=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 19:54:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:be:ed:a3:50:66:93:0d:b3:fd:07:46:9e:d9:b1:fa:fa:7c:3c:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Jul 20 15:56:16 2026 GMT Not After : Jul 21 19:54:16 2026 GMT Subject: CN=64D4ADA736B55C3E6D0972CE7B2495A28CBFB7E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:85:83:90:11:cc:ab:14:ab:ee:8f:66:c0: d3:19:c7:d5:14:45:b9:d7:5a:49:15:15:ae:a4:30: 51:c8:0e:04:ec:56:e9:b7:04:42:8f:ac:03:27:6e: 9d:5a:71:57:7b:cc:27:eb:52:8d:eb:fc:7a:63:77: e0:f2:14:37:8e:2d:22:55:3e:93:f3:2b:f9:fe:7a: a5:17:47:0e:54:66:e2:b8:56:29:d6:52:ca:ac:81: 35:78:48:7e:63:c4:bd:2d:b4:86:fb:e8:ae:1f:5d: 5f:a1:15:8e:d6:55:8e:4d:1f:66:ae:0e:ce:b9:15: ef:79:c2:84:51:81:1c:b6:cd:72:6c:0f:17:c2:30: 93:52:dc:fb:e2:70:98:2b:f1:d9:67:fb:8d:e6:10: e2:45:fb:c4:41:72:db:79:a9:d1:75:a7:9a:dc:29: 83:fa:fc:b3:26:3c:ad:78:b9:ef:0e:0b:31:ea:2c: 66:25:de:01:2a:47:21:7c:9c:60:79:dd:f9:46:99: fb:1d:66:2c:99:2f:7e:4e:55:88:81:00:ab:06:d5: 66:f7:8d:39:95:28:ad:42:ff:98:eb:c1:39:bc:57: d7:fe:24:03:6e:07:76:9c:64:b2:30:d2:e5:c5:13: cd:2f:9c:66:d2:41:78:78:6b:85:0b:99:ea:a9:3a: ae:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:D4:AD:A7:36:B5:5C:3E:6D:09:72:CE:7B:24:95:A2:8C:BF:B7:E3 X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:88:1f:5f:32:90:1b:7d:5e:a1:17:81:1e:6a:9c:1f:d6:cf: 1f:24:e6:0e:65:78:67:ca:18:68:05:1e:e7:0b:f5:e9:79:5f: 24:ed:46:60:54:ce:34:3f:44:e6:46:af:c4:69:6c:7d:43:5e: 92:8e:e7:ae:df:31:33:53:ac:74:36:15:bf:f5:f0:da:34:60: 2d:f9:01:db:21:67:83:73:26:c2:66:1b:63:33:91:ba:b8:62: 9a:b9:1b:f2:43:16:36:87:72:d7:23:88:a9:4e:74:c2:4d:77: 11:7d:21:da:3f:4c:bf:5d:ae:3d:01:0c:69:2a:7f:ca:20:ee: 8e:cc:94:2e:5e:59:59:ad:6d:51:1a:ef:b8:aa:cc:36:18:dd: de:89:28:03:11:1c:13:cb:b5:04:44:49:9e:17:e3:6b:52:f2: 1b:7c:5e:47:aa:15:b3:85:ff:53:55:0b:94:6c:29:88:28:0c: 32:57:be:3a:26:48:72:47:b9:7f:d1:a2:32:07:3d:88:f6:bc: 3e:c5:3a:64:b5:ca:17:b4:e5:f2:07:60:b7:4d:4b:5d:0d:f1: a9:0c:9d:8a:73:5f:70:c1:5b:fe:60:61:96:a9:98:78:64:fd: b5:f5:51:77:d4:0a:3d:27:84:05:e0:5d:46:9d:65:97:9c:ae: 3b:98:c0:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGL7to1Bmkw2z/QdGntmx+vp8PPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjA3MjAxNTU2MTZaFw0yNjA3MjExOTU0MTZaMDMxMTAvBgNV BAMTKDY0RDRBREE3MzZCNTVDM0U2RDA5NzJDRTdCMjQ5NUEyOENCRkI3RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojIWDkBHMqxSr7o9mwNMZx9UU RbnXWkkVFa6kMFHIDgTsVum3BEKPrAMnbp1acVd7zCfrUo3r/Hpjd+DyFDeOLSJV PpPzK/n+eqUXRw5UZuK4VinWUsqsgTV4SH5jxL0ttIb76K4fXV+hFY7WVY5NH2au Ds65Fe95woRRgRy2zXJsDxfCMJNS3PvicJgr8dln+43mEOJF+8RBctt5qdF1p5rc KYP6/LMmPK14ue8OCzHqLGYl3gEqRyF8nGB53flGmfsdZiyZL35OVYiBAKsG1Wb3 jTmVKK1C/5jrwTm8V9f+JANuB3acZLIw0uXFE80vnGbSQXh4a4ULmeqpOq6/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZNStpza1XD5tCXLOeySVooy/t+MwHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCIH18ykBt9XqEXgR5qnB/Wzx8k5g5leGfK GGgFHucL9el5XyTtRmBUzjQ/ROZGr8RpbH1DXpKO567fMTNTrHQ2Fb/18No0YC35 AdshZ4NzJsJmG2Mzkbq4Ypq5G/JDFjaHctcjiKlOdMJNdxF9Ido/TL9drj0BDGkq f8og7o7MlC5eWVmtbVEa77iqzDYY3d6JKAMRHBPLtQRESZ4X42tS8ht8XkeqFbOF /1NVC5RsKYgoDDJXvjomSHJHuX/RojIHPYj2vD7FOmS1yhe05fIHYLdNS10N8akM nYpzX3DBW/5gYZapmHhk/bX1UXfUCj0nhAXgXUadZZecrjuYwOM= -----END CERTIFICATE-----Generated at Tue Jul 21 08:22:47 2026 by rpki-client