$ rpki-client -vvvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: aaRPrJHuylQw5AZV7oErbu2JE7kXabyc+6WE/1zT3G0= Subject key identifier: F9:E0:33:F7:EC:59:A2:AE:4B:5B:66:4A:8C:3C:51:C2:EB:B3:24:44 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 32AE1ED34F0E52372A3216A14ED2199A3B04F856 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 18:16:41 +0000 Manifest this update: Wed 16 Sep 2026 18:11:41 +0000 Manifest next update: Thu 17 Sep 2026 21:51:41 +0000 Files and hashes: 1: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) 2: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) 3: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) 4: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 5: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 6: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 7: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 8: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: azYGfqSsh1y1ywRU43Cg3B7EwSb98yDeLsRthAnGmOI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 21:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:ae:1e:d3:4f:0e:52:37:2a:32:16:a1:4e:d2:19:9a:3b:04:f8:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: Sep 16 18:11:41 2026 GMT Not After : Sep 17 21:51:41 2026 GMT Subject: CN=F9E033F7EC59A2AE4B5B664A8C3C51C2EBB32444 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:be:71:ad:00:5e:e6:31:10:2d:eb:0e:56:bd: 60:15:0d:90:b3:9a:0b:cd:4c:a9:1a:1a:11:8b:58: aa:ba:33:38:08:ab:9e:ce:83:3e:80:ed:87:5c:31: 72:7d:a6:13:48:27:6b:12:b4:1d:a8:60:75:54:a6: 0a:60:c9:ca:84:31:ab:97:f0:5d:56:a5:af:05:b4: a6:04:b8:90:c4:d6:9b:aa:ab:e8:f3:75:90:ff:04: 2f:21:7f:e4:2d:c7:7b:ee:b1:3a:ba:14:81:f7:12: 90:84:da:84:f6:50:46:b7:c2:ea:bf:68:33:0a:af: af:41:24:74:e4:30:95:f1:b7:ee:68:fe:35:17:af: 1c:86:7f:28:68:c1:8c:b9:16:70:ef:02:ce:a0:8d: 5e:26:03:27:ec:24:38:31:3e:59:8a:80:a2:5c:71: 21:3b:24:d5:f4:16:1a:b2:cc:5d:a9:98:e2:b1:2b: 37:cd:d6:62:0e:63:9a:ce:1c:f2:fd:bc:e3:1d:19: bf:b0:2e:a0:92:3a:0f:ca:9e:17:77:04:42:10:3b: ed:20:6d:19:30:d2:6d:06:f4:d4:97:e9:56:ac:ec: 7b:ed:36:b9:52:e5:8e:55:25:c8:1a:52:4d:f0:80: c4:13:98:e5:67:c4:90:17:60:13:22:55:e1:6b:6d: fd:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E0:33:F7:EC:59:A2:AE:4B:5B:66:4A:8C:3C:51:C2:EB:B3:24:44 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:86:c7:9a:92:58:02:27:86:e0:3d:f3:8c:8f:02:fa:0e:2b: 93:14:99:f1:36:64:72:58:09:06:7c:1e:8c:f0:79:6d:50:62: 33:0b:9b:62:06:fa:17:89:cc:7d:0b:21:99:08:8e:a1:8d:74: 7f:74:7e:64:48:7b:39:4b:f3:a6:03:30:d3:66:33:24:1a:38: 77:00:4a:f8:11:ef:97:e6:9d:ce:dc:36:35:f5:18:2f:9b:74: c2:d2:bd:8f:ab:0b:ee:96:d9:a7:8f:b0:16:f1:4e:fd:fa:dc: 33:e6:16:43:ef:41:f6:dc:76:c5:1f:f6:ce:9b:b3:99:e8:eb: d3:bd:a8:ab:9c:ed:7f:20:c6:1c:d5:7f:86:67:b4:52:2a:31: 5b:a0:75:74:fe:c1:ea:68:97:bf:1b:15:6b:e2:80:f3:5f:f6: 2a:a1:67:c5:27:b9:e7:3e:f0:9d:d1:44:18:c8:86:9a:60:3b: 98:f7:fe:28:38:07:1e:f2:02:6e:9a:21:6c:2d:16:fb:c6:ab: f0:a9:c0:31:03:38:4f:aa:50:88:53:b1:2b:53:7a:e4:e0:50: 08:e7:9d:f2:8c:48:b3:db:06:0d:7b:37:a2:2a:63:ca:41:b8: 0a:a7:5a:82:ab:ea:d8:7c:ec:cb:15:39:bb:f4:03:27:a9:f1: d6:2c:db:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMq4e008OUjcqMhahTtIZmjsE+FYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA5MTYxODExNDFaFw0yNjA5MTcyMTUxNDFaMDMxMTAvBgNV BAMTKEY5RTAzM0Y3RUM1OUEyQUU0QjVCNjY0QThDM0M1MUMyRUJCMzI0NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbvnGtAF7mMRAt6w5WvWAVDZCz mgvNTKkaGhGLWKq6MzgIq57Ogz6A7YdcMXJ9phNIJ2sStB2oYHVUpgpgycqEMauX 8F1Wpa8FtKYEuJDE1puqq+jzdZD/BC8hf+Qtx3vusTq6FIH3EpCE2oT2UEa3wuq/ aDMKr69BJHTkMJXxt+5o/jUXrxyGfyhowYy5FnDvAs6gjV4mAyfsJDgxPlmKgKJc cSE7JNX0FhqyzF2pmOKxKzfN1mIOY5rOHPL9vOMdGb+wLqCSOg/Knhd3BEIQO+0g bRkw0m0G9NSX6Vas7HvtNrlS5Y5VJcgaUk3wgMQTmOVnxJAXYBMiVeFrbf3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+eAz9+xZoq5LW2ZKjDxRwuuzJEQwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuGx5qSWAInhuA984yPAvoOK5MUmfE2ZHJY CQZ8HozweW1QYjMLm2IG+heJzH0LIZkIjqGNdH90fmRIezlL86YDMNNmMyQaOHcA SvgR75fmnc7cNjX1GC+bdMLSvY+rC+6W2aePsBbxTv363DPmFkPvQfbcdsUf9s6b s5no69O9qKuc7X8gxhzVf4ZntFIqMVugdXT+wepol78bFWvigPNf9iqhZ8Unuec+ 8J3RRBjIhppgO5j3/ig4Bx7yAm6aIWwtFvvGq/CpwDEDOE+qUIhTsStTeuTgUAjn nfKMSLPbBg17N6IqY8pBuAqnWoKr6th87MsVObv0Ayep8dYs260= -----END CERTIFICATE-----Generated at Thu Sep 17 10:52:17 2026 by rpki-client