$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: lTt6y3WuIctQ9h2kEqGXY+U0bcMZLIywug61iCTONyk= Subject key identifier: 6D:B6:A0:AE:C2:A0:EE:98:37:FE:1D:91:D0:E0:69:4D:60:53:19:25 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 41B39202D77A3AF364BFEB0FC4D29B7041DA323A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 0209 Signing time: Thu 16 Apr 2026 14:30:55 +0000 Manifest this update: Thu 16 Apr 2026 14:25:55 +0000 Manifest next update: Sun 19 Apr 2026 15:17:55 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: JBZTGMraHPZBHwoMgxKJDHJpJ9bXN4oxJsGKBgfGnYo=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:b3:92:02:d7:7a:3a:f3:64:bf:eb:0f:c4:d2:9b:70:41:da:32:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Apr 16 14:25:55 2026 GMT Not After : Apr 19 15:17:55 2026 GMT Subject: CN=6DB6A0AEC2A0EE9837FE1D91D0E0694D60531925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d1:6d:6d:da:12:42:37:b0:6f:68:ee:5a:bc: 0f:da:08:69:80:35:5c:e2:3a:2a:76:ed:d0:5f:8d: d6:68:3f:01:44:11:a0:95:3c:09:2f:bc:0f:f2:73: 11:f8:6c:f0:e2:53:05:50:42:13:1a:ef:3e:c7:7b: 24:60:76:81:ed:de:19:55:95:d8:10:bf:b3:eb:42: bb:0d:23:3e:21:90:6c:b6:34:1b:cb:af:2b:b2:12: a9:e1:44:a2:c4:1a:8d:e0:e9:bf:54:23:29:9d:be: 0c:ed:35:88:17:cc:c5:ce:c2:5e:d8:f2:0a:91:e8: 2f:94:5e:8e:f9:74:bc:5d:48:44:93:a6:8c:e1:00: 4f:fd:58:30:aa:ec:58:ce:d3:6a:aa:d6:df:9b:5f: 57:5a:43:23:9a:a2:af:71:67:45:48:9b:8e:52:07: 06:3d:95:79:b6:f8:1c:92:c8:0e:f4:03:ae:4e:b6: f7:1d:b1:b4:9b:bd:7f:de:06:9b:6d:af:cf:8c:2f: e4:cc:1d:55:22:c1:53:9e:8e:a5:2d:48:e9:0b:11: 18:86:74:92:41:55:53:e9:54:a6:f9:44:a4:1f:07: 7a:17:37:11:d0:e4:38:7a:a9:e1:c6:76:fb:92:1b: c2:fb:13:6b:de:4d:ce:ae:fa:a4:37:fe:2e:d8:e3: 73:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B6:A0:AE:C2:A0:EE:98:37:FE:1D:91:D0:E0:69:4D:60:53:19:25 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:b7:d2:f4:6d:74:d3:a6:9c:f7:96:90:c9:28:0d:a0:ff:df: 97:d8:b1:98:81:9d:ce:76:a2:bd:29:29:84:a2:e1:62:2b:88: 94:e4:51:c9:42:9e:e9:51:73:4f:02:3b:45:92:a9:4a:09:3a: 96:7f:4b:5b:4e:d2:18:8a:c9:05:e7:16:83:dc:91:bd:aa:2f: d8:8c:ff:ff:30:5c:7e:56:a4:a3:26:47:0d:ca:b4:23:d7:6a: 5f:7c:37:7b:f2:55:a2:3b:8b:ca:c6:34:0b:fc:87:c5:8a:a8: 35:49:c6:8a:a8:ef:8d:0d:b5:f5:3a:99:a1:5d:60:f8:18:f6: d1:4d:df:1f:92:bc:37:70:3c:fa:29:89:80:c4:e8:61:28:78: 8a:6a:fe:49:fe:da:0d:e1:a7:91:8e:98:6e:55:fe:ab:71:3e: 9d:f1:d6:2d:b3:b2:e0:fc:7c:99:23:78:b3:3c:4c:76:5d:2b: 8b:06:c9:98:b5:c6:e9:b4:67:53:07:05:53:8a:47:f9:b8:ac: 24:0f:c1:f1:e4:6f:9e:f1:87:aa:ac:99:c8:ef:6b:9c:38:57: b2:85:bf:33:80:d3:f3:20:b0:c7:a5:d9:3d:98:a4:98:c4:bf: f8:7a:8e:7f:15:d8:1b:a6:86:95:ca:01:85:56:cc:be:65:12: cc:c8:53:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQbOSAtd6OvNkv+sPxNKbcEHaMjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNjA0MTYxNDI1NTVaFw0yNjA0MTkxNTE3NTVaMDMxMTAvBgNV BAMTKDZEQjZBMEFFQzJBMEVFOTgzN0ZFMUQ5MUQwRTA2OTRENjA1MzE5MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG0W1t2hJCN7BvaO5avA/aCGmA NVziOip27dBfjdZoPwFEEaCVPAkvvA/ycxH4bPDiUwVQQhMa7z7HeyRgdoHt3hlV ldgQv7PrQrsNIz4hkGy2NBvLryuyEqnhRKLEGo3g6b9UIymdvgztNYgXzMXOwl7Y 8gqR6C+UXo75dLxdSESTpozhAE/9WDCq7FjO02qq1t+bX1daQyOaoq9xZ0VIm45S BwY9lXm2+BySyA70A65OtvcdsbSbvX/eBpttr8+ML+TMHVUiwVOejqUtSOkLERiG dJJBVVPpVKb5RKQfB3oXNxHQ5Dh6qeHGdvuSG8L7E2veTc6u+qQ3/i7Y43N9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbbagrsKg7pg3/h2R0OBpTWBTGSUwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAC30vRtdNOmnPeWkMkoDaD/35fYsZiBnc52 or0pKYSi4WIriJTkUclCnulRc08CO0WSqUoJOpZ/S1tO0hiKyQXnFoPckb2qL9iM //8wXH5WpKMmRw3KtCPXal98N3vyVaI7i8rGNAv8h8WKqDVJxoqo740NtfU6maFd YPgY9tFN3x+SvDdwPPopiYDE6GEoeIpq/kn+2g3hp5GOmG5V/qtxPp3x1i2zsuD8 fJkjeLM8THZdK4sGyZi1xum0Z1MHBVOKR/m4rCQPwfHkb57xh6qsmcjva5w4V7KF vzOA0/MgsMel2T2YpJjEv/h6jn8V2BumhpXKAYVWzL5lEszIUxs= -----END CERTIFICATE-----Generated at Fri Apr 17 20:12:25 2026 by rpki-client