$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft File: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft (raw, json) Hash identifier: 7vIxju15vTaI/P7n69iiiyeGVCM3YcoAuQUR/B8gCcI= Subject key identifier: DB:84:47:95:95:3C:5B:A0:87:E6:CA:D4:03:45:5E:6C:82:3F:7B:FC Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E Certificate issuer: /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Certificate serial: 58D0C59605B871D4290AB47E37ED050F71088553 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft Manifest number: 027F Signing time: Sun 01 Mar 2026 10:52:02 +0000 Manifest this update: Sun 01 Mar 2026 10:47:02 +0000 Manifest next update: Wed 04 Mar 2026 12:42:02 +0000 Files and hashes: 1: 3130332e3138362e39322e302f32342d3234203d3e20313439363937.roa (hash: S2I1Rsjv579X48PlNdNNUlZ5cCuw34WCjOICWZBzNII=) 2: 3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (hash: yvcS+4k20Y8iRZaWxf96+9kxISErdYY6WtdAGoUwpMc=) 3: 86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl (hash: A1Rz4T8ELdT/dm8GjKM84VAZFaLnJcs+03vZ+fpiovA=) 4: 3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (hash: XXX3H+Kx4KtZFlR+1yxyZNf6/aQm/kvRNmPkGrt0bBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d0:c5:96:05:b8:71:d4:29:0a:b4:7e:37:ed:05:0f:71:08:85:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E Validity Not Before: Mar 1 10:47:02 2026 GMT Not After : Mar 4 12:42:02 2026 GMT Subject: CN=DB844795953C5BA087E6CAD403455E6C823F7BFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:80:78:fd:bd:14:24:29:99:67:16:79:26:b6: 77:46:8b:b1:c8:b6:25:07:db:ac:eb:3c:57:18:7c: 31:da:5f:ad:bb:ec:7e:3d:62:9d:1e:e3:10:67:49: 2b:32:97:e1:1b:76:c6:b7:02:14:82:ef:69:fa:8e: 16:82:2d:04:3e:d4:72:7c:1e:df:61:47:c3:6d:a7: 83:b3:77:8f:2f:ae:a8:e3:dc:8c:e4:30:6e:7c:7d: f2:03:36:1a:c9:c7:be:21:93:eb:3a:a1:e9:95:cd: cf:2c:af:be:d7:84:c4:2c:07:e6:d5:da:42:26:d8: 04:ad:50:c0:07:85:78:ae:49:f0:d7:31:3b:32:0b: d9:1a:8e:70:0d:09:fb:6f:9f:47:3d:f8:e7:d9:64: 75:c2:f3:77:d1:fc:d5:55:bd:76:27:7f:f2:a9:89: 39:a4:76:6a:ce:19:22:1d:58:c7:4a:3e:5d:50:c7: 19:6e:cb:0d:fc:9f:f0:a2:68:ee:10:01:d9:f0:9f: 11:ae:2f:66:90:ab:1c:62:62:d9:cd:40:99:df:a7: f3:d1:00:7c:19:f9:ef:67:a6:c2:fa:db:f0:65:ae: c3:81:ce:e7:17:f0:69:30:4b:78:1c:3a:72:3f:99: de:8b:85:aa:7d:e3:a8:73:57:14:57:99:52:a9:e1: c2:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:84:47:95:95:3C:5B:A0:87:E6:CA:D4:03:45:5E:6C:82:3F:7B:FC X509v3 Authority Key Identifier: keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:43:fe:65:15:e6:27:32:c2:6b:25:44:ae:e3:10:62:27:02: d2:fa:09:8b:53:58:e9:c1:8f:83:7f:a7:44:7d:7f:18:7d:7d: 97:9e:eb:7c:c2:4b:75:7c:87:20:de:4e:6e:46:ba:cf:18:d9: 00:75:81:b2:d7:23:2a:34:9a:b1:69:2b:4a:d7:c4:2f:d9:4a: 44:61:57:6a:b9:56:4f:94:27:7a:94:7a:52:cd:67:9a:74:c7: 5b:8e:c1:1b:e5:f2:da:e7:0b:62:3d:e2:be:79:a3:83:3b:eb: ea:96:e8:ee:2b:09:10:92:5c:fd:c2:0a:9e:0c:81:8c:4c:90: b9:62:6b:48:33:2b:d0:26:36:ff:56:67:37:10:0e:48:76:20: 42:d4:a5:8a:1d:1f:a1:23:18:13:f9:32:8b:3c:89:fe:30:34: 52:01:fe:fc:60:df:c9:e4:13:21:cc:83:df:d7:b4:d1:28:fb: ae:ba:e5:0e:e9:c5:5b:53:95:f2:e4:81:94:a9:08:e6:35:5f: a5:73:39:6e:87:cd:3d:df:2f:fa:de:5f:8e:c6:70:d3:6b:46: 2a:65:be:06:b8:43:25:f9:e0:d8:be:f6:bf:8f:19:cf:0f:95: c1:32:96:3a:62:4f:a8:c5:0e:5e:31:4a:ec:ca:97:a8:a3:ce: cd:9f:52:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNDFlgW4cdQpCrR+N+0FD3EIhVMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdF MkZGMjYzRTAeFw0yNjAzMDExMDQ3MDJaFw0yNjAzMDQxMjQyMDJaMDMxMTAvBgNV BAMTKERCODQ0Nzk1OTUzQzVCQTA4N0U2Q0FENDAzNDU1RTZDODIzRjdCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsgHj9vRQkKZlnFnkmtndGi7HI tiUH26zrPFcYfDHaX6277H49Yp0e4xBnSSsyl+Ebdsa3AhSC72n6jhaCLQQ+1HJ8 Ht9hR8Ntp4Ozd48vrqjj3IzkMG58ffIDNhrJx74hk+s6oemVzc8sr77XhMQsB+bV 2kIm2AStUMAHhXiuSfDXMTsyC9kajnANCftvn0c9+OfZZHXC83fR/NVVvXYnf/Kp iTmkdmrOGSIdWMdKPl1Qxxluyw38n/CiaO4QAdnwnxGuL2aQqxxiYtnNQJnfp/PR AHwZ+e9npsL62/BlrsOBzucX8GkwS3gcOnI/md6Lhap946hzVxRXmVKp4cJpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU24RHlZU8W6CH5srUA0VebII/e/wwHwYDVR0j BBgwFoAUhuZ5Wsq5nPKc58fhDX/M5+L/Jj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGUxYWM3Yy05MDRkLTQ5M2YtYmE1ZS01ZTA4MzdkY2JkMjkvMC84NkU2Nzk1QUNB Qjk5Q0YyOUNFN0M3RTEwRDdGQ0NFN0UyRkYyNjNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkNDRTdFMkZG MjYzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRlMWFjN2MtOTA0ZC00OTNmLWJh NWUtNWUwODM3ZGNiZDI5LzAvODZFNjc5NUFDQUI5OUNGMjlDRTdDN0UxMEQ3RkND RTdFMkZGMjYzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZD/mUV5icywmslRK7jEGInAtL6CYtTWOnB j4N/p0R9fxh9fZee63zCS3V8hyDeTm5Gus8Y2QB1gbLXIyo0mrFpK0rXxC/ZSkRh V2q5Vk+UJ3qUelLNZ5p0x1uOwRvl8trnC2I94r55o4M76+qW6O4rCRCSXP3CCp4M gYxMkLlia0gzK9AmNv9WZzcQDkh2IELUpYodH6EjGBP5Mos8if4wNFIB/vxg38nk EyHMg9/XtNEo+6665Q7pxVtTlfLkgZSpCOY1X6VzOW6HzT3fL/reX47GcNNrRipl vga4QyX54Ni+9r+PGc8PlcEyljpiT6jFDl4xSuzKl6ijzs2fUqI= -----END CERTIFICATE-----Generated at Mon Mar 2 07:27:59 2026 by rpki-client