$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: 2r75HIb4Z43PUi0u3U3Dc/gTJF0Azg7YujzMB/WHkNE= Subject key identifier: AD:A8:20:BD:1B:C4:F8:C0:44:13:83:8F:DB:4C:51:88:BD:B4:73:27 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 57DD4E8FF4FB206A2747642A3AA065F64C46A7D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 0265 Signing time: Thu 16 Apr 2026 00:41:42 +0000 Manifest this update: Thu 16 Apr 2026 00:36:42 +0000 Manifest next update: Sun 19 Apr 2026 09:24:42 +0000 Files and hashes: 1: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: decd6ZcXP8ZumumFcEy4YVqysi0luq/Vxmwu2I8VqI0=) 2: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) 3: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 09:24:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:dd:4e:8f:f4:fb:20:6a:27:47:64:2a:3a:a0:65:f6:4c:46:a7:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Apr 16 00:36:42 2026 GMT Not After : Apr 19 09:24:42 2026 GMT Subject: CN=ADA820BD1BC4F8C04413838FDB4C5188BDB47327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d1:84:16:2f:7d:a3:6a:ca:65:d4:3f:9f:7e: 1d:9e:3a:ee:90:cb:f1:97:f0:e0:db:58:04:fc:bb: ae:e6:de:af:86:78:98:fa:11:79:58:4d:8f:09:06: 97:54:a3:59:1d:8e:b2:f9:3e:d0:14:72:50:24:bc: 9f:4a:8f:d9:78:9b:0b:7e:ab:14:db:d4:70:89:b9: 0e:b5:da:a8:50:39:1f:d3:d7:f9:ba:59:58:5d:1c: b8:37:36:2b:14:0e:61:e4:09:05:55:c0:1e:56:fc: 67:79:52:96:70:dc:94:16:c7:36:de:1d:74:8e:24: 2c:75:3a:cc:81:29:8e:53:69:8e:e8:d2:b3:9a:e1: 91:9c:bf:b8:67:68:14:22:ed:d0:0d:a9:98:0a:dc: bc:7d:0e:02:fa:e5:e7:f0:ee:ab:81:02:79:6a:9e: a3:6d:c6:59:0b:11:00:9c:c0:2a:1b:96:da:b8:fc: 1e:12:26:a5:6f:0d:99:e9:7f:85:1c:d2:6f:6d:64: 29:6d:11:12:30:5b:19:0b:7f:53:61:6d:86:29:7c: cb:b4:51:9a:a8:01:a2:46:b8:48:bf:27:6b:77:c8: 4b:cb:d6:c2:90:06:73:27:11:85:87:2b:97:9d:7b: 74:3a:a6:e0:10:73:1b:23:d3:47:22:1a:83:16:16: 2f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A8:20:BD:1B:C4:F8:C0:44:13:83:8F:DB:4C:51:88:BD:B4:73:27 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:7d:d6:36:21:d5:e4:8c:73:fd:20:1f:c9:d0:fd:4c:6b:9e: 9c:a7:78:06:ea:00:d5:e6:10:25:a8:9e:43:bd:41:57:b9:77: 4b:83:35:32:fc:65:b2:75:0c:fb:64:3e:59:33:18:ad:ce:f9: 9c:d9:3f:5d:76:3d:eb:d3:78:08:e6:2e:05:14:2f:5d:a2:16: 7b:44:2a:25:8b:a0:e4:fb:7b:98:ee:93:f8:da:df:f9:09:c1: ee:40:82:74:00:ab:42:61:37:89:06:52:22:46:2b:99:d3:6f: 13:c0:5e:d4:63:5c:8c:11:20:ab:09:3d:b7:19:7a:3f:c0:e4: c2:5c:66:bf:cf:20:ff:6f:71:a4:27:c8:37:e2:a6:fa:39:b9: 33:0a:48:58:47:80:34:37:9c:d6:04:ff:13:da:3e:bf:d4:20: b6:0a:fc:ad:27:35:76:3a:ce:68:d2:ad:ac:be:ca:29:af:5a: a6:d6:3d:30:79:45:f1:14:ee:25:50:72:d3:f2:fe:3d:d6:67: 12:26:f9:13:88:f4:49:00:db:2a:de:6b:2c:60:b9:79:2f:41: 3f:18:eb:41:3a:fa:01:29:e0:97:45:c2:3c:54:c0:61:a2:2a: c8:5a:84:f7:61:26:3d:38:96:3e:2a:f1:00:15:b0:3d:25:82: 83:b8:1c:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV91Oj/T7IGonR2QqOqBl9kxGp9YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNjA0MTYwMDM2NDJaFw0yNjA0MTkwOTI0NDJaMDMxMTAvBgNV BAMTKEFEQTgyMEJEMUJDNEY4QzA0NDEzODM4RkRCNEM1MTg4QkRCNDczMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM0YQWL32jaspl1D+ffh2eOu6Q y/GX8ODbWAT8u67m3q+GeJj6EXlYTY8JBpdUo1kdjrL5PtAUclAkvJ9Kj9l4mwt+ qxTb1HCJuQ612qhQOR/T1/m6WVhdHLg3NisUDmHkCQVVwB5W/Gd5UpZw3JQWxzbe HXSOJCx1OsyBKY5TaY7o0rOa4ZGcv7hnaBQi7dANqZgK3Lx9DgL65efw7quBAnlq nqNtxlkLEQCcwCobltq4/B4SJqVvDZnpf4Uc0m9tZCltERIwWxkLf1NhbYYpfMu0 UZqoAaJGuEi/J2t3yEvL1sKQBnMnEYWHK5ede3Q6puAQcxsj00ciGoMWFi+9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUraggvRvE+MBEE4OP20xRiL20cycwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGN91jYh1eSMc/0gH8nQ/UxrnpyneAbqANXm ECWonkO9QVe5d0uDNTL8ZbJ1DPtkPlkzGK3O+ZzZP112PevTeAjmLgUUL12iFntE KiWLoOT7e5juk/ja3/kJwe5AgnQAq0JhN4kGUiJGK5nTbxPAXtRjXIwRIKsJPbcZ ej/A5MJcZr/PIP9vcaQnyDfipvo5uTMKSFhHgDQ3nNYE/xPaPr/UILYK/K0nNXY6 zmjSray+yimvWqbWPTB5RfEU7iVQctPy/j3WZxIm+ROI9EkA2yreayxguXkvQT8Y 60E6+gEp4JdFwjxUwGGiKshahPdhJj04lj4q8QAVsD0lgoO4HO0= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:55 2026 by rpki-client