$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: EpDa+nPMjaq4kI2TVcxvJIkON+eGYP690PZUZbyI/S8= Subject key identifier: FE:59:E9:F1:92:11:D5:5A:D2:74:60:82:25:7E:C7:13:34:87:3A:7D Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 3D551EA6E7308F526FE4D254934735AC5934F835 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 22:31:46 +0000 Manifest this update: Wed 16 Sep 2026 22:26:46 +0000 Manifest next update: Fri 18 Sep 2026 01:28:46 +0000 Files and hashes: 1: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) 2: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) 3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 4: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: gOdbWeYF6HwQWV+2urfPhfyUHvt37qh5vRNrJlGJAw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:28:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:55:1e:a6:e7:30:8f:52:6f:e4:d2:54:93:47:35:ac:59:34:f8:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Sep 16 22:26:46 2026 GMT Not After : Sep 18 01:28:46 2026 GMT Subject: CN=FE59E9F19211D55AD2746082257EC71334873A7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:24:53:fa:93:25:da:45:99:d8:d5:eb:a8: 11:02:c5:46:d5:7f:cb:10:85:06:a7:63:4b:a0:7a: 36:cb:ee:45:26:9c:71:1d:8a:de:da:80:94:fd:6d: 4e:b0:c4:00:43:cb:2c:f5:6b:09:3a:d9:78:5e:e6: b2:47:73:34:ca:e7:3e:ee:a9:b2:44:ca:5a:d9:ad: 56:c6:a2:da:e4:ed:b4:90:e4:77:0c:86:ea:52:c4: 31:ed:bd:f1:ca:d2:18:15:33:aa:c7:f5:29:ff:cb: 02:4f:c9:9f:e2:db:b5:d8:16:67:ba:d6:44:3d:3f: 4c:d8:fb:f8:a0:7b:3a:a6:ee:75:67:5a:d6:fa:63: e2:72:5a:f9:34:f0:68:08:45:ad:ed:48:70:9e:7a: 98:fd:db:d3:3d:3f:dc:23:c0:93:c8:be:b4:77:76: d8:ef:74:8c:d8:6f:e1:1e:5e:23:26:22:6b:0f:26: 5f:36:54:48:3f:c3:e9:8e:74:0b:87:f6:0b:cc:3c: a8:b1:05:8c:80:80:fd:5e:83:8a:43:6a:36:80:90: 51:6e:8e:49:bd:3c:65:b3:ee:64:82:77:2a:b4:9d: e8:f6:13:86:31:a2:71:98:8c:6f:86:4f:e6:17:43: a7:a1:02:b6:0a:13:5a:ba:eb:a4:20:53:fc:3d:7c: 81:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:59:E9:F1:92:11:D5:5A:D2:74:60:82:25:7E:C7:13:34:87:3A:7D X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:3c:3b:3b:5d:61:e6:cf:f2:35:76:69:29:1f:d8:32:74:99: ac:f6:7c:9c:93:54:ad:e1:e9:8d:c9:07:60:da:26:67:d2:54: 91:f4:c2:ed:a0:20:61:b7:a0:33:a2:35:ea:79:d5:c2:14:01: dc:15:27:ed:22:fa:76:bd:93:67:3b:56:63:e6:e3:e0:aa:3b: 82:10:f9:15:2e:31:a7:a5:78:59:28:6d:e6:19:1e:01:71:48: c4:bd:2c:7e:83:2b:17:15:70:6f:ce:ce:8d:eb:60:cd:0c:56: a6:0b:64:44:9f:1f:b4:98:c3:5f:d3:d1:7f:36:de:b3:0d:29: 99:0c:94:c9:6c:93:7b:fc:93:70:d5:1a:bf:b3:98:25:af:2f: 0b:a8:3d:fa:b4:8b:b9:4d:14:95:d8:dd:96:ee:a0:b7:62:11: a5:7b:26:6f:b5:70:7a:17:e1:5f:31:61:2d:6a:8b:f3:ef:cf: 3a:51:60:1f:25:42:ec:a6:d3:03:e0:0d:a8:c6:dd:ef:ed:60: 5d:d7:5f:4b:71:d0:d3:15:ad:f9:9b:23:7c:3a:cd:8a:89:67: 2c:2a:27:2f:d4:b7:83:06:51:28:33:0d:5d:14:14:5a:1f:4e: fc:53:9a:57:b1:89:58:be:c8:52:6f:f8:97:58:cc:35:98:62: c3:f5:c4:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVUepucwj1Jv5NJUk0c1rFk0+DUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjA5MTYyMjI2NDZaFw0yNjA5MTgwMTI4NDZaMDMxMTAvBgNV BAMTKEZFNTlFOUYxOTIxMUQ1NUFEMjc0NjA4MjI1N0VDNzEzMzQ4NzNBN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd2CRT+pMl2kWZ2NXrqBECxUbV f8sQhQanY0ugejbL7kUmnHEdit7agJT9bU6wxABDyyz1awk62Xhe5rJHczTK5z7u qbJEylrZrVbGotrk7bSQ5HcMhupSxDHtvfHK0hgVM6rH9Sn/ywJPyZ/i27XYFme6 1kQ9P0zY+/igezqm7nVnWtb6Y+JyWvk08GgIRa3tSHCeepj929M9P9wjwJPIvrR3 dtjvdIzYb+EeXiMmImsPJl82VEg/w+mOdAuH9gvMPKixBYyAgP1eg4pDajaAkFFu jkm9PGWz7mSCdyq0nej2E4YxonGYjG+GT+YXQ6ehArYKE1q666QgU/w9fIERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lnp8ZIR1VrSdGCCJX7HEzSHOn0wHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABk8OztdYebP8jV2aSkf2DJ0maz2fJyTVK3h 6Y3JB2DaJmfSVJH0wu2gIGG3oDOiNep51cIUAdwVJ+0i+na9k2c7VmPm4+CqO4IQ +RUuMaeleFkobeYZHgFxSMS9LH6DKxcVcG/Ozo3rYM0MVqYLZESfH7SYw1/T0X82 3rMNKZkMlMlsk3v8k3DVGr+zmCWvLwuoPfq0i7lNFJXY3ZbuoLdiEaV7Jm+1cHoX 4V8xYS1qi/PvzzpRYB8lQuym0wPgDajG3e/tYF3XX0tx0NMVrfmbI3w6zYqJZywq Jy/Ut4MGUSgzDV0UFFofTvxTmlexiVi+yFJv+JdYzDWYYsP1xAE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:43:36 2026 by rpki-client