$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json) Hash identifier: d1FwTP4FaLk+DFI9CZA4wfMq2ksvBIFtk3TnpE7lC3s= Subject key identifier: 47:F3:A7:DB:D4:AF:27:DE:1A:D6:DC:D2:23:A0:E1:C7:90:43:81:14 Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Certificate serial: 11F25AE08392E22B93FBDF56984B6ACDDBEE866A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft Manifest number: ED Signing time: Sun 25 Oct 2026 14:19:29 +0000 Manifest this update: Sun 25 Oct 2026 14:14:29 +0000 Manifest next update: Mon 26 Oct 2026 18:08:29 +0000 Files and hashes: 1: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: KfpmElW7rUSdxHUlqZNrqzq6Q+A7ReAPMH0w1droCxw=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 18:08:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f2:5a:e0:83:92:e2:2b:93:fb:df:56:98:4b:6a:cd:db:ee:86:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Validity Not Before: Oct 25 14:14:29 2026 GMT Not After : Oct 26 18:08:29 2026 GMT Subject: CN=47F3A7DBD4AF27DE1AD6DCD223A0E1C790438114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:81:fa:2f:dd:43:f4:ac:e6:09:a6:10:c5:35: d9:7d:b5:96:24:28:9d:5e:2b:8d:95:28:d8:ee:ab: de:56:83:95:b9:a1:3e:df:e9:23:b5:9a:77:22:d4: a7:47:c1:14:09:82:e3:b3:57:df:7b:5d:32:4f:85: b3:d3:fa:94:61:d8:46:5b:f8:18:33:23:4b:e9:62: 1a:5b:df:74:09:4d:5c:77:57:15:74:04:c2:b5:fb: d3:6e:91:77:e4:74:87:17:ee:5f:74:c7:b9:08:dc: 5f:31:bc:96:1b:29:ce:2f:7a:31:0e:c0:59:e0:27: 8d:7a:b6:10:b3:1a:c0:d2:e5:8d:21:70:ae:24:a7: 73:99:e5:e8:51:72:52:33:15:50:f0:2f:4f:08:5e: 13:26:c8:d2:de:bd:43:47:2a:4a:e4:c4:df:f0:9c: 96:4f:1d:03:cb:38:42:5b:f9:c8:15:99:6b:73:32: 74:18:26:28:0e:a0:4f:aa:d7:42:67:13:ce:fe:29: 1f:64:f4:8c:5a:54:f5:a5:fe:55:9d:c2:8e:c2:ba: ad:07:e1:48:27:59:2c:34:df:d7:a7:85:c2:f0:7e: f0:59:f0:03:f2:9b:79:31:38:76:7b:48:04:77:82: 53:b0:b4:51:c3:1f:2b:4e:58:6b:6f:89:9d:44:de: 25:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F3:A7:DB:D4:AF:27:DE:1A:D6:DC:D2:23:A0:E1:C7:90:43:81:14 X509v3 Authority Key Identifier: keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:45:bd:b8:36:8f:a3:05:c6:81:cc:ba:5f:f8:e0:52:92:5f: d6:f6:d6:e6:53:fd:e4:36:5c:93:a2:ca:33:70:1f:ba:33:c2: 44:61:da:c2:8c:a7:78:7f:53:bd:0c:68:32:0d:78:b5:49:b6: 67:b5:22:c6:73:a1:8b:61:a1:93:78:fb:a4:3c:e4:66:10:8f: 2a:64:ee:9c:c7:75:8f:d0:46:ae:8a:92:77:00:a3:1f:d6:3a: 71:d1:68:67:c3:e9:f7:b3:2b:a6:02:91:0c:04:0a:6c:8f:fe: ff:94:b1:d0:4c:26:26:49:62:8b:01:b9:70:9e:78:7b:f4:59: cd:88:3b:c0:1a:09:3f:bc:86:83:8e:fd:5f:b0:50:ac:dc:72: e4:3d:b6:18:dd:85:89:09:6d:9f:75:bc:ce:69:52:bd:1f:3f: 48:31:60:0c:fc:34:d6:96:7f:e6:e1:f3:e5:df:8d:18:56:2a: 7c:53:f3:79:01:c2:65:c5:7f:52:7b:2c:2c:02:2c:5a:04:c3: 2c:ab:0a:bb:57:bf:2d:89:30:6f:cb:32:83:e7:38:0f:9a:a4: 66:0f:a0:22:1b:e6:83:8b:56:2c:b4:c7:d1:34:33:42:c3:96: 09:ae:b3:26:58:1e:19:9f:5b:92:f7:06:2e:ec:a7:f2:55:34: c1:dc:f0:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfJa4IOS4iuT+99WmEtqzdvuhmowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0Qx QkE1RjA4RDAeFw0yNjEwMjUxNDE0MjlaFw0yNjEwMjYxODA4MjlaMDMxMTAvBgNV BAMTKDQ3RjNBN0RCRDRBRjI3REUxQUQ2RENEMjIzQTBFMUM3OTA0MzgxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtgfov3UP0rOYJphDFNdl9tZYk KJ1eK42VKNjuq95Wg5W5oT7f6SO1mnci1KdHwRQJguOzV997XTJPhbPT+pRh2EZb +BgzI0vpYhpb33QJTVx3VxV0BMK1+9NukXfkdIcX7l90x7kI3F8xvJYbKc4vejEO wFngJ416thCzGsDS5Y0hcK4kp3OZ5ehRclIzFVDwL08IXhMmyNLevUNHKkrkxN/w nJZPHQPLOEJb+cgVmWtzMnQYJigOoE+q10JnE87+KR9k9IxaVPWl/lWdwo7Cuq0H 4UgnWSw039enhcLwfvBZ8APym3kxOHZ7SAR3glOwtFHDHytOWGtviZ1E3iXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/On29SvJ94a1tzSI6Dhx5BDgRQwHwYDVR0j BBgwFoAUhg67ID/8I4lPCxrG9FkkzRul8I0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjQ1ZGUtNTE4My00YTNhLWIwNmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAz RkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0QxQkE1RjA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjBFQkIyMDNGRkMyMzg5NEYwQjFBQzZGNDU5MjRDRDFCQTVG MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0 Q0QxQkE1RjA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZFvbg2j6MFxoHMul/44FKSX9b21uZT/eQ2 XJOiyjNwH7ozwkRh2sKMp3h/U70MaDINeLVJtme1IsZzoYthoZN4+6Q85GYQjypk 7pzHdY/QRq6KkncAox/WOnHRaGfD6fezK6YCkQwECmyP/v+UsdBMJiZJYosBuXCe eHv0Wc2IO8AaCT+8hoOO/V+wUKzccuQ9thjdhYkJbZ91vM5pUr0fP0gxYAz8NNaW f+bh8+XfjRhWKnxT83kBwmXFf1J7LCwCLFoEwyyrCrtXvy2JMG/LMoPnOA+apGYP oCIb5oOLViy0x9E0M0LDlgmusyZYHhmfW5L3Bi7sp/JVNMHc8Ew= -----END CERTIFICATE-----Generated at Mon Oct 26 12:38:44 2026 by rpki-client