$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: HK4AEO8or8dd8LU41azwBmy283lrTEiBfwBTjgVj51o= Subject key identifier: 74:AA:D4:16:1A:CC:54:9E:B2:97:4E:CC:49:F9:5F:B1:B9:25:84:1D Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 703E4B8EBE8D0381401BED0C502A019D6F0A4D15 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 21:23:15 +0000 Manifest this update: Sun 02 Aug 2026 21:18:15 +0000 Manifest next update: Tue 04 Aug 2026 00:49:15 +0000 Files and hashes: 1: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: jkhx5fERKQ1kmAlfXtc1LBp7LKnXiL7buUIeaY3MA88=) 2: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:3e:4b:8e:be:8d:03:81:40:1b:ed:0c:50:2a:01:9d:6f:0a:4d:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Aug 2 21:18:15 2026 GMT Not After : Aug 4 00:49:15 2026 GMT Subject: CN=74AAD4161ACC549EB2974ECC49F95FB1B925841D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:79:b0:60:f4:73:bf:09:1e:fb:5b:95:02:94: b4:ed:6c:9b:9f:fe:db:13:ce:db:18:73:7d:96:33: e5:d3:b8:4d:cd:73:a4:6a:de:36:87:0f:ca:f1:24: 06:b1:8e:85:c0:87:0a:1f:47:93:0d:c1:72:db:fe: a0:27:34:40:aa:6f:66:3a:50:98:2e:3a:0a:7a:c3: e5:41:36:8d:42:18:83:5b:06:f2:de:1f:5d:4a:f9: ad:ec:b7:64:a7:bd:f3:45:c4:b2:ad:97:97:5c:2c: f0:8b:8b:c8:0f:f8:c7:a6:8f:12:2d:8e:32:f4:70: 7b:62:b4:96:78:47:6e:df:10:2c:6f:e5:79:64:a0: 1a:73:44:6a:95:2b:ab:42:e4:b4:20:6b:48:bd:cd: fc:c8:33:04:9f:09:29:f6:ce:ec:ef:3c:57:c4:84: 03:d6:72:fe:20:45:6a:c5:d3:81:62:2f:9c:af:11: 86:df:39:f3:50:6e:c1:59:e9:4a:04:42:1c:29:dc: c9:bd:fd:3d:e7:df:a6:03:a8:f1:3d:19:91:31:82: 67:52:eb:6c:40:69:24:45:bb:bc:f8:e7:96:9e:31: 87:e0:45:b4:65:90:02:e0:32:30:ea:0b:47:55:2e: 1c:b8:fb:81:6b:15:44:43:f1:e9:3b:cc:ad:30:40: cf:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:AA:D4:16:1A:CC:54:9E:B2:97:4E:CC:49:F9:5F:B1:B9:25:84:1D X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:19:8d:87:be:7e:89:5b:4d:5c:1c:33:70:6f:d8:aa:97:5e: c2:aa:5d:59:b9:05:8a:a3:6a:a8:18:a5:c9:1c:f8:05:d2:52: 24:08:39:38:06:98:a8:87:b6:d0:0e:3c:22:b6:36:1d:be:43: 3d:0f:5e:1c:e6:fb:89:8d:fa:bb:e3:7a:92:9c:60:62:d9:f3: 5d:a9:fa:61:05:fe:59:48:5f:c6:9a:ad:a7:df:5d:0c:2c:22: 59:a2:e1:58:bb:3c:bd:f1:80:60:70:b4:2f:c1:c0:8c:ab:cc: c0:06:30:c5:4e:cb:b8:8a:96:f2:d2:8e:8b:e3:04:bf:e6:b7: 11:34:88:d3:2e:2c:31:58:75:31:aa:d9:b9:c2:dc:1c:62:66: d2:4e:a9:36:ef:95:e2:9e:8d:03:0a:43:77:d8:93:63:1a:d8: b1:3f:11:ca:04:a2:1a:ac:dc:4a:58:12:36:2b:4c:ca:de:7d: 13:da:55:df:d6:11:4f:49:53:b7:c1:d6:a5:b6:92:a6:b6:2c: 86:ae:97:f9:81:cd:a4:a8:42:a6:39:9d:a5:08:c3:5e:90:25: 1b:03:da:5b:6b:be:d9:a9:80:ff:06:45:c2:07:33:6b:ac:c0: 2b:86:41:6e:dd:dd:b3:ed:12:4f:52:54:78:f4:ac:65:48:7c: 17:ac:fd:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcD5Ljr6NA4FAG+0MUCoBnW8KTRUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA4MDIyMTE4MTVaFw0yNjA4MDQwMDQ5MTVaMDMxMTAvBgNV BAMTKDc0QUFENDE2MUFDQzU0OUVCMjk3NEVDQzQ5Rjk1RkIxQjkyNTg0MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ebBg9HO/CR77W5UClLTtbJuf /tsTztsYc32WM+XTuE3Nc6Rq3jaHD8rxJAaxjoXAhwofR5MNwXLb/qAnNECqb2Y6 UJguOgp6w+VBNo1CGINbBvLeH11K+a3st2SnvfNFxLKtl5dcLPCLi8gP+MemjxIt jjL0cHtitJZ4R27fECxv5XlkoBpzRGqVK6tC5LQga0i9zfzIMwSfCSn2zuzvPFfE hAPWcv4gRWrF04FiL5yvEYbfOfNQbsFZ6UoEQhwp3Mm9/T3n36YDqPE9GZExgmdS 62xAaSRFu7z455aeMYfgRbRlkALgMjDqC0dVLhy4+4FrFURD8ek7zK0wQM+PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdKrUFhrMVJ6yl07MSflfsbklhB0wHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIZjYe+folbTVwcM3Bv2KqXXsKqXVm5BYqj aqgYpckc+AXSUiQIOTgGmKiHttAOPCK2Nh2+Qz0PXhzm+4mN+rvjepKcYGLZ812p +mEF/llIX8aaraffXQwsIlmi4Vi7PL3xgGBwtC/BwIyrzMAGMMVOy7iKlvLSjovj BL/mtxE0iNMuLDFYdTGq2bnC3BxiZtJOqTbvleKejQMKQ3fYk2Ma2LE/EcoEohqs 3EpYEjYrTMrefRPaVd/WEU9JU7fB1qW2kqa2LIaul/mBzaSoQqY5naUIw16QJRsD 2ltrvtmpgP8GRcIHM2uswCuGQW7d3bPtEk9SVHj0rGVIfBes/ZE= -----END CERTIFICATE-----Generated at Sun Aug 2 22:43:31 2026 by rpki-client