$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: u4juoDnxEpiqBmuLWKQ85n1nmP5Ji4Y2T1CDDMckRcM= Subject key identifier: FF:FF:1A:44:F1:6D:7B:8B:44:B6:F1:96:36:0F:8A:D7:1C:E7:D0:E3 Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 3D272A5DBD8366CD470A912EC88ACD1C47F37EC2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:41:52 +0000 Manifest this update: Thu 17 Sep 2026 06:36:52 +0000 Manifest next update: Fri 18 Sep 2026 08:34:52 +0000 Files and hashes: 1: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: 7w+RFWUpAErd68LSZcUV0A9fEnjBHDyZ8AXUuL3L6Kk=) 2: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:34:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:27:2a:5d:bd:83:66:cd:47:0a:91:2e:c8:8a:cd:1c:47:f3:7e:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Sep 17 06:36:52 2026 GMT Not After : Sep 18 08:34:52 2026 GMT Subject: CN=FFFF1A44F16D7B8B44B6F196360F8AD71CE7D0E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d6:13:78:a5:dd:5c:cf:9a:f8:dd:36:75:1d: 02:69:f8:f7:c8:0a:0c:c5:fd:01:c9:f1:34:46:70: 37:ec:56:0d:9d:e5:e0:c1:de:b5:fe:37:37:65:7c: 9e:52:22:f3:23:92:2a:e4:80:7a:22:4f:a4:82:ff: 55:7d:e5:20:13:00:7e:ec:db:4e:65:3a:6f:a8:23: fb:ed:bc:bd:87:df:6f:e0:aa:36:a3:44:ee:1a:62: 2b:9a:87:47:d5:82:16:6d:84:89:ac:4c:a4:71:19: a2:77:86:ff:53:6b:c4:a2:d7:06:a2:0e:6e:00:81: 54:ff:93:b8:f4:c2:6e:32:15:f4:de:d2:20:89:16: ef:38:40:92:f5:04:d9:61:3d:d0:5d:48:84:3a:6b: d9:a1:a5:55:f7:33:b1:85:a6:e4:ff:db:91:8b:2a: bd:87:a3:f1:78:8d:44:23:c1:49:06:7d:a7:04:89: 5d:89:e7:fb:9c:9d:9a:fb:ec:b1:70:fd:92:7e:37: 98:6c:a9:a3:d4:7f:79:bf:81:5d:8f:b6:b1:4e:9e: 33:a9:23:40:91:64:d4:83:7b:a0:d2:2e:a7:f0:96: d4:6f:f3:13:8f:85:84:ea:2f:37:ac:f4:44:54:b9: d9:ac:e9:07:a8:ed:eb:e5:ea:1c:b7:f7:d0:94:ec: 57:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:FF:1A:44:F1:6D:7B:8B:44:B6:F1:96:36:0F:8A:D7:1C:E7:D0:E3 X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:90:9c:e0:50:94:09:03:94:bc:44:31:11:a5:4f:e5:12:95: 4a:83:d8:9a:39:8f:7d:be:75:8d:d3:8c:d4:cf:4d:8e:38:b5: 92:b0:08:ca:76:37:1b:f3:e8:80:f4:e6:33:d9:31:c9:12:12: f3:00:96:e8:25:1f:ea:0a:f5:85:63:54:50:8b:36:3c:e7:14: c6:83:a3:ef:54:de:c5:80:85:02:2e:f3:b1:e2:5a:8b:cc:7c: 43:83:ca:bb:8b:b6:a1:9f:9c:b7:1c:3d:69:1f:77:68:e0:7b: 78:08:33:57:b6:04:4c:7f:cf:58:9e:1a:46:1f:7b:0d:47:14: 6f:e7:01:0f:e5:6a:d9:a6:34:7d:f7:56:7e:99:43:63:bb:b3: d7:3c:66:90:81:e0:bd:90:12:03:01:41:bc:a4:c5:8a:a0:3e: 18:1b:0b:b5:45:68:3d:16:dc:c8:ef:d3:c4:a4:fa:a1:43:a9: d6:16:dc:ad:42:ad:a2:35:90:c8:7b:9a:f7:c9:68:5e:a3:3e: be:a4:aa:1e:15:c9:42:b8:da:f3:6b:df:0c:f2:25:8a:bc:e6: e3:29:ce:bc:77:bc:0b:53:1c:d5:12:f6:07:07:85:33:14:c2: f7:a9:d5:0f:80:99:f7:01:ed:48:fb:74:ef:a3:3e:16:51:dc: 97:22:50:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPScqXb2DZs1HCpEuyIrNHEfzfsIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA5MTcwNjM2NTJaFw0yNjA5MTgwODM0NTJaMDMxMTAvBgNV BAMTKEZGRkYxQTQ0RjE2RDdCOEI0NEI2RjE5NjM2MEY4QUQ3MUNFN0QwRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1hN4pd1cz5r43TZ1HQJp+PfI CgzF/QHJ8TRGcDfsVg2d5eDB3rX+NzdlfJ5SIvMjkirkgHoiT6SC/1V95SATAH7s 205lOm+oI/vtvL2H32/gqjajRO4aYiuah0fVghZthImsTKRxGaJ3hv9Ta8Si1wai Dm4AgVT/k7j0wm4yFfTe0iCJFu84QJL1BNlhPdBdSIQ6a9mhpVX3M7GFpuT/25GL Kr2Ho/F4jUQjwUkGfacEiV2J5/ucnZr77LFw/ZJ+N5hsqaPUf3m/gV2PtrFOnjOp I0CRZNSDe6DSLqfwltRv8xOPhYTqLzes9ERUudms6Qeo7evl6hy399CU7FfFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU//8aRPFte4tEtvGWNg+K1xzn0OMwHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyQnOBQlAkDlLxEMRGlT+USlUqD2Jo5j32+ dY3TjNTPTY44tZKwCMp2Nxvz6ID05jPZMckSEvMAluglH+oK9YVjVFCLNjznFMaD o+9U3sWAhQIu87HiWovMfEODyruLtqGfnLccPWkfd2jge3gIM1e2BEx/z1ieGkYf ew1HFG/nAQ/latmmNH33Vn6ZQ2O7s9c8ZpCB4L2QEgMBQbykxYqgPhgbC7VFaD0W 3Mjv08Sk+qFDqdYW3K1CraI1kMh7mvfJaF6jPr6kqh4VyUK42vNr3wzyJYq85uMp zrx3vAtTHNUS9gcHhTMUwvep1Q+AmfcB7Uj7dO+jPhZR3JciUJc= -----END CERTIFICATE-----Generated at Thu Sep 17 10:03:10 2026 by rpki-client