$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: MC07fSLE0KhEZGZ5rqRuWyLoNw/k4XrnqjMTVjAGU2Y= Subject key identifier: DB:99:BD:58:65:6D:26:EF:EB:8A:6D:18:C0:B5:FB:8F:DB:50:29:28 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 0E55DB9DD54B25A6DB04109857F3368D7E67651B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0251 Signing time: Sun 01 Mar 2026 23:31:37 +0000 Manifest this update: Sun 01 Mar 2026 23:26:37 +0000 Manifest next update: Thu 05 Mar 2026 07:55:37 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: 4LvET+lmmLkgahb2xTF6eFt5GDeIOaY6EaKFvG0owgU=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:55:db:9d:d5:4b:25:a6:db:04:10:98:57:f3:36:8d:7e:67:65:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Mar 1 23:26:37 2026 GMT Not After : Mar 5 07:55:37 2026 GMT Subject: CN=DB99BD58656D26EFEB8A6D18C0B5FB8FDB502928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:90:ca:76:a4:11:a8:9d:bb:3a:7b:15:92:f0: 08:16:e2:f3:63:19:e4:0b:06:81:1f:40:f0:a2:2c: 27:06:d9:e2:7d:ed:e3:cc:da:7f:c1:5d:44:7c:d0: e9:96:95:da:54:64:13:b0:81:92:3c:ff:da:5f:4a: 3d:63:09:fb:21:db:90:aa:ff:0c:ae:7e:b4:fe:e6: 36:43:46:7f:5c:4e:b6:58:2b:1b:dc:67:52:c9:5f: 81:3c:08:cb:68:28:88:b2:fa:c4:8d:79:03:92:fe: 59:24:82:a9:7a:84:ac:d8:97:f3:50:2e:e8:8e:ee: 63:73:64:e7:ac:a2:30:2f:a1:0e:63:6d:b8:1e:d5: 61:d3:04:07:3c:1c:5d:9b:a5:7e:cb:92:87:ce:02: 00:25:94:30:17:25:23:a0:02:f9:1d:e9:5f:5d:aa: 84:b0:56:95:d0:f9:b9:a7:01:68:40:6c:2b:8d:43: a0:10:5b:0c:79:b6:07:58:18:b3:4a:57:49:a6:51: ea:6c:55:1c:60:ad:d5:a9:06:50:ca:cb:c2:a0:75: 92:3b:6a:09:22:02:53:dd:89:1d:61:1b:05:a8:fd: 4b:81:d7:d4:d2:51:9f:4a:12:d0:04:35:fa:ec:d8: b2:c0:ff:10:f2:8e:bb:2e:37:fe:d2:8a:80:f8:29: b2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:99:BD:58:65:6D:26:EF:EB:8A:6D:18:C0:B5:FB:8F:DB:50:29:28 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f1:eb:bd:7b:26:fc:25:df:59:41:3b:d2:fc:99:f2:7d:31: 74:0e:72:af:42:c0:12:ea:51:07:3c:c5:e7:d8:85:5f:09:65: e9:d1:31:71:2a:6d:a3:b9:29:61:6a:cc:57:ac:61:df:ab:fc: a5:24:51:20:8a:7b:65:85:ae:3b:57:20:43:ee:85:76:a4:94: 4e:79:45:55:b4:af:a9:90:8e:d0:d2:07:8c:63:08:eb:44:9b: 5a:bf:23:de:43:d6:12:64:58:07:01:bf:95:e4:3b:8d:12:20: 36:f7:fb:53:24:58:7e:3d:e2:0b:de:77:26:6a:6f:28:41:70: da:45:4b:73:4f:d3:ce:de:63:34:fe:ef:b3:00:cf:60:7c:4a: b1:c7:4b:a3:dd:69:68:f5:d8:a5:51:54:20:5b:3b:4a:f0:fa: 8f:c1:b8:f3:3a:c9:48:10:0d:5b:ee:1d:50:4d:2c:19:8f:81: d9:03:82:d4:45:e1:f9:f0:e4:ab:10:5d:2f:22:cf:96:db:33: 34:ff:31:13:e9:34:be:b5:5b:7a:18:06:43:e2:fe:2f:90:2e: c1:60:69:e6:ff:44:de:ff:fa:48:9a:55:6c:eb:f3:a0:07:4c: 06:ab:24:e3:2a:cc:53:8c:30:e6:71:48:75:b7:54:26:7c:d8: 51:59:d1:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDlXbndVLJabbBBCYV/M2jX5nZRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNjAzMDEyMzI2MzdaFw0yNjAzMDUwNzU1MzdaMDMxMTAvBgNV BAMTKERCOTlCRDU4NjU2RDI2RUZFQjhBNkQxOEMwQjVGQjhGREI1MDI5MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxkMp2pBGonbs6exWS8AgW4vNj GeQLBoEfQPCiLCcG2eJ97ePM2n/BXUR80OmWldpUZBOwgZI8/9pfSj1jCfsh25Cq /wyufrT+5jZDRn9cTrZYKxvcZ1LJX4E8CMtoKIiy+sSNeQOS/lkkgql6hKzYl/NQ LuiO7mNzZOesojAvoQ5jbbge1WHTBAc8HF2bpX7LkofOAgAllDAXJSOgAvkd6V9d qoSwVpXQ+bmnAWhAbCuNQ6AQWwx5tgdYGLNKV0mmUepsVRxgrdWpBlDKy8KgdZI7 agkiAlPdiR1hGwWo/UuB19TSUZ9KEtAENfrs2LLA/xDyjrsuN/7SioD4KbLrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU25m9WGVtJu/rim0YwLX7j9tQKSgwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLx6717Jvwl31lBO9L8mfJ9MXQOcq9CwBLq UQc8xefYhV8JZenRMXEqbaO5KWFqzFesYd+r/KUkUSCKe2WFrjtXIEPuhXaklE55 RVW0r6mQjtDSB4xjCOtEm1q/I95D1hJkWAcBv5XkO40SIDb3+1MkWH494gvedyZq byhBcNpFS3NP087eYzT+77MAz2B8SrHHS6PdaWj12KVRVCBbO0rw+o/BuPM6yUgQ DVvuHVBNLBmPgdkDgtRF4fnw5KsQXS8iz5bbMzT/MRPpNL61W3oYBkPi/i+QLsFg aeb/RN7/+kiaVWzr86AHTAarJOMqzFOMMOZxSHW3VCZ82FFZ0ZM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:55:09 2026 by rpki-client