$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: kOorcs53kkIE9cqm93mk26/B7UF3aKPt1D8TvZaQ9qs= Subject key identifier: 3A:86:50:CF:D0:9A:03:10:23:C4:6C:7D:D6:89:E8:7F:24:FF:D7:E1 Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 1C319309DA5C3202598AB958AF12BE6F5FCC2FBA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 16:16:36 +0000 Manifest this update: Thu 18 Jun 2026 16:11:36 +0000 Manifest next update: Fri 19 Jun 2026 17:09:36 +0000 Files and hashes: 1: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) 2: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) 3: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: a/xIO/NihMMfYhJdhQFDesmaRZmiciDy8MdTV77j8Kg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:31:93:09:da:5c:32:02:59:8a:b9:58:af:12:be:6f:5f:cc:2f:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Jun 18 16:11:36 2026 GMT Not After : Jun 19 17:09:36 2026 GMT Subject: CN=3A8650CFD09A031023C46C7DD689E87F24FFD7E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1b:aa:4c:a1:f9:cf:38:3f:d5:95:94:d8:77: ba:c1:48:10:2d:3c:53:16:4f:47:43:7a:cf:2a:78: e9:0d:8d:3a:ba:b2:2b:b6:24:3f:aa:cc:5f:cd:1e: cb:74:c0:5c:f7:69:7d:de:3c:92:68:f7:23:3a:3f: 1f:b7:29:fb:71:fc:63:74:66:be:42:2d:45:71:fe: 2e:69:b0:6f:9f:ac:96:c2:b2:ea:ba:51:15:91:da: c4:0b:2d:76:c2:b2:72:ed:ab:c8:21:70:c1:a2:bb: c2:98:27:f8:78:55:af:1d:d3:35:67:2c:94:40:e6: bc:67:14:12:00:90:37:7d:68:88:07:8f:7d:cc:83: 60:e6:2e:e4:ba:34:08:76:d0:3e:d4:1d:2e:29:3b: 1e:8d:24:3d:cf:81:61:bd:33:ea:b8:79:89:82:2c: 12:90:6f:e5:84:3c:24:ce:59:39:12:92:30:aa:9f: 0f:67:1d:64:53:b9:a6:97:d9:8e:50:d2:2d:21:01: 60:c1:26:26:ac:b4:68:4b:9b:ad:7e:20:bc:11:b6: a6:b0:cd:df:5e:63:ee:81:43:0f:96:15:d1:68:b4: 28:1d:48:36:13:59:49:8a:a1:7d:3c:6e:e9:0e:a4: 91:d4:fe:e6:ac:20:4f:10:7d:09:f2:32:13:71:6b: 21:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:86:50:CF:D0:9A:03:10:23:C4:6C:7D:D6:89:E8:7F:24:FF:D7:E1 X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:3b:fa:01:9c:a5:38:77:38:f3:fd:7e:28:13:93:7e:81:a0: 66:96:45:d5:2d:45:9c:0f:1b:9d:a9:20:eb:73:5c:3c:d5:d4: d0:19:8f:55:5e:ae:6f:a3:88:9c:ae:bc:ae:da:64:d4:54:99: cd:07:d1:c4:ce:5a:1a:63:68:24:29:56:72:a9:6b:34:ab:55: 5e:57:68:41:e3:45:b5:43:4f:b1:e0:dc:5e:9f:f1:35:40:29: d5:8d:8a:45:eb:73:5e:12:bd:65:eb:2b:5d:1b:1a:70:f5:c3: b2:63:47:14:9e:ec:1d:6a:34:58:20:0b:45:b4:6e:ec:9c:9e: 62:b8:a6:2c:47:86:5b:d8:76:e5:ff:eb:43:65:83:28:31:76: bc:5c:50:4c:49:19:40:19:60:9e:58:a0:41:9b:fb:5a:17:d1: 14:e5:8c:1c:72:26:76:ca:09:ce:4b:6c:ba:a7:e6:ec:9e:50: 2d:2b:99:6f:37:c6:3e:fe:05:01:9e:b3:90:46:54:1b:e4:cf: cc:bd:f1:f6:1b:b4:aa:bd:d7:e9:7f:da:86:82:c6:58:fd:4f: c7:0e:63:6d:9c:86:c0:f3:85:95:85:f5:8b:df:21:ad:77:6a: 1a:f0:e7:a2:f5:07:5a:3a:18:51:2f:b3:95:f0:c6:67:ef:3b: 94:b5:45:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHDGTCdpcMgJZirlYrxK+b1/ML7owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA2MTgxNjExMzZaFw0yNjA2MTkxNzA5MzZaMDMxMTAvBgNV BAMTKDNBODY1MENGRDA5QTAzMTAyM0M0NkM3REQ2ODlFODdGMjRGRkQ3RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaG6pMofnPOD/VlZTYd7rBSBAt PFMWT0dDes8qeOkNjTq6siu2JD+qzF/NHst0wFz3aX3ePJJo9yM6Px+3Kftx/GN0 Zr5CLUVx/i5psG+frJbCsuq6URWR2sQLLXbCsnLtq8ghcMGiu8KYJ/h4Va8d0zVn LJRA5rxnFBIAkDd9aIgHj33Mg2DmLuS6NAh20D7UHS4pOx6NJD3PgWG9M+q4eYmC LBKQb+WEPCTOWTkSkjCqnw9nHWRTuaaX2Y5Q0i0hAWDBJiastGhLm61+ILwRtqaw zd9eY+6BQw+WFdFotCgdSDYTWUmKoX08bukOpJHU/uasIE8QfQnyMhNxayH/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOoZQz9CaAxAjxGx91onofyT/1+EwHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADI7+gGcpTh3OPP9figTk36BoGaWRdUtRZwP G52pIOtzXDzV1NAZj1Verm+jiJyuvK7aZNRUmc0H0cTOWhpjaCQpVnKpazSrVV5X aEHjRbVDT7Hg3F6f8TVAKdWNikXrc14SvWXrK10bGnD1w7JjRxSe7B1qNFggC0W0 buycnmK4pixHhlvYduX/60NlgygxdrxcUExJGUAZYJ5YoEGb+1oX0RTljBxyJnbK Cc5LbLqn5uyeUC0rmW83xj7+BQGes5BGVBvkz8y98fYbtKq91+l/2oaCxlj9T8cO Y22chsDzhZWF9YvfIa13ahrw56L1B1o6GFEvs5XwxmfvO5S1Ra0= -----END CERTIFICATE-----Generated at Thu Jun 18 19:03:00 2026 by rpki-client