$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: vXtFAtNShKa2CHLebPOwGn0WV2jt+j5VNjXOgyZqG5Q= Subject key identifier: D2:29:4B:16:42:44:5F:E0:73:41:84:9F:95:B5:F7:76:27:9C:F6:7B Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 104C30F5E4F47F9BE3C9DAF6052B5D52BE50D93B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01FE Signing time: Mon 23 Mar 2026 03:50:53 +0000 Manifest this update: Mon 23 Mar 2026 03:45:53 +0000 Manifest next update: Thu 26 Mar 2026 09:24:53 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: S5tGVAyN2nLnTD2ZntqREod7KIj4y+IyhoLUfV4aBHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:24:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:4c:30:f5:e4:f4:7f:9b:e3:c9:da:f6:05:2b:5d:52:be:50:d9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Mar 23 03:45:53 2026 GMT Not After : Mar 26 09:24:53 2026 GMT Subject: CN=D2294B1642445FE07341849F95B5F776279CF67B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:dd:b7:05:52:f0:50:d3:a3:a5:c1:9e:81:b0: b5:55:81:39:87:a2:af:ba:44:e0:82:44:c9:18:a2: 8d:47:64:9e:0d:73:0c:f7:45:81:bd:61:a7:07:2b: 41:5d:7a:72:69:f0:09:08:2d:3d:73:1d:26:ae:1c: 76:38:d3:97:1a:96:70:bc:d8:6f:4c:ec:42:ad:6f: 8e:73:d2:05:39:49:4f:4d:ac:c9:52:0d:b4:ee:1a: 92:03:f3:54:07:89:ac:94:6c:91:23:31:ad:af:19: 43:31:63:d6:b1:88:1e:01:06:a4:39:2d:57:4f:ab: b9:7e:ed:b0:74:0d:d4:82:84:88:d6:3b:8c:b2:a1: ca:4c:e1:66:a9:44:ae:c0:c2:61:0f:f4:a7:b0:d7: 78:11:6e:9e:ab:f6:9b:dc:2f:0e:d6:a5:19:79:ac: 44:d6:a2:a3:80:88:54:e9:ea:ea:d8:05:9e:a6:23: 81:24:1e:a6:92:98:6f:37:c0:5a:c1:2b:f5:4e:41: 37:ef:b1:c7:60:51:89:6b:82:fb:54:f8:86:ee:29: dd:47:98:59:43:8d:c6:83:17:f8:76:11:f9:fc:d9: d9:fd:fc:db:78:12:d9:77:3d:6d:b3:ff:d0:a7:6e: af:ad:cb:c1:98:83:5b:80:6e:66:c4:ee:60:e6:12: 61:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:29:4B:16:42:44:5F:E0:73:41:84:9F:95:B5:F7:76:27:9C:F6:7B X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:3a:d4:8f:6f:db:50:15:3b:21:51:90:89:98:15:d7:02:4b: 2b:f2:5f:85:fe:81:f1:40:de:e0:4f:96:ca:19:2d:96:3a:87: d1:d6:d3:df:2b:a3:c0:82:e7:b1:32:ac:3f:19:19:f9:00:2b: 6b:72:cb:4c:d7:e5:b0:02:a9:3e:b4:4e:90:79:4a:6a:82:03: 8c:9a:7f:22:4e:67:6c:9c:50:18:51:ec:62:9b:61:ef:c5:b0: ba:a8:9a:33:a6:d8:ce:2a:b3:95:1a:68:da:13:b0:ad:d4:e5: 8e:c7:63:bf:1a:33:32:30:1f:e1:20:b7:c0:b1:5a:13:9f:65: 5b:52:f0:bc:3e:61:8b:bd:85:b2:83:b4:7b:d3:16:95:1a:d4: 09:29:96:30:7d:a8:67:f7:36:e8:97:0f:e4:a0:56:66:0f:5d: 0e:8d:85:c1:f7:8e:79:a6:94:8f:4b:52:b2:5c:e9:3e:12:56: 87:16:81:7b:13:66:22:e7:20:ce:bc:02:7c:d6:a3:66:3f:b0: 15:3b:39:b2:31:ae:e9:c7:af:36:e0:f6:d7:0d:04:b3:5d:a9: 92:28:fe:47:7e:38:26:dc:3d:4e:5f:85:a6:b1:4e:2f:1a:9d: a0:51:a7:31:2b:95:33:63:c5:29:f7:85:76:2a:ff:72:ef:3d: d9:d6:d6:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEww9eT0f5vjydr2BStdUr5Q2TswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNjAzMjMwMzQ1NTNaFw0yNjAzMjYwOTI0NTNaMDMxMTAvBgNV BAMTKEQyMjk0QjE2NDI0NDVGRTA3MzQxODQ5Rjk1QjVGNzc2Mjc5Q0Y2N0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC3bcFUvBQ06OlwZ6BsLVVgTmH oq+6ROCCRMkYoo1HZJ4Ncwz3RYG9YacHK0FdenJp8AkILT1zHSauHHY405calnC8 2G9M7EKtb45z0gU5SU9NrMlSDbTuGpID81QHiayUbJEjMa2vGUMxY9axiB4BBqQ5 LVdPq7l+7bB0DdSChIjWO4yyocpM4WapRK7AwmEP9Kew13gRbp6r9pvcLw7WpRl5 rETWoqOAiFTp6urYBZ6mI4EkHqaSmG83wFrBK/VOQTfvscdgUYlrgvtU+IbuKd1H mFlDjcaDF/h2Efn82dn9/Nt4Etl3PW2z/9Cnbq+ty8GYg1uAbmbE7mDmEmGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ilLFkJEX+BzQYSflbX3diec9nswHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQ61I9v21AVOyFRkImYFdcCSyvyX4X+gfFA 3uBPlsoZLZY6h9HW098ro8CC57EyrD8ZGfkAK2tyy0zX5bACqT60TpB5SmqCA4ya fyJOZ2ycUBhR7GKbYe/FsLqomjOm2M4qs5UaaNoTsK3U5Y7HY78aMzIwH+Egt8Cx WhOfZVtS8Lw+YYu9hbKDtHvTFpUa1AkpljB9qGf3NuiXD+SgVmYPXQ6NhcH3jnmm lI9LUrJc6T4SVocWgXsTZiLnIM68AnzWo2Y/sBU7ObIxrunHrzbg9tcNBLNdqZIo /kd+OCbcPU5fhaaxTi8anaBRpzErlTNjxSn3hXYq/3LvPdnW1v8= -----END CERTIFICATE-----Generated at Tue Mar 24 22:57:35 2026 by rpki-client