$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: tTiU09VPaZnpQ9eKfGjcze9mZ2AA0xCDffI7r63vNeY= Subject key identifier: 6F:34:4F:68:C1:3C:60:94:98:2F:5C:12:D5:AD:AE:5C:4C:90:E4:FB Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 7D5B8681B288962DC9CA7BB89E598A31A90DD096 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01F4 Signing time: Sat 28 Feb 2026 13:40:52 +0000 Manifest this update: Sat 28 Feb 2026 13:35:52 +0000 Manifest next update: Tue 03 Mar 2026 23:37:52 +0000 Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) 2: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: i+HEsRpdG6ThM1QDiYLuGvhLCggSFZKCtlXBPgZaEhc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5b:86:81:b2:88:96:2d:c9:ca:7b:b8:9e:59:8a:31:a9:0d:d0:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Feb 28 13:35:52 2026 GMT Not After : Mar 3 23:37:52 2026 GMT Subject: CN=6F344F68C13C6094982F5C12D5ADAE5C4C90E4FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a9:0c:e9:42:b5:74:e9:13:9f:21:da:9e:a2: 23:17:22:4c:ce:5c:19:24:91:b8:e4:d0:9b:27:a0: ca:44:fc:5a:b9:f9:c8:de:0e:eb:bf:4a:89:04:97: 93:cc:95:9b:25:14:bb:16:1f:6b:da:bd:28:36:67: 07:ee:ae:05:d4:e3:7e:2a:da:ab:80:87:f1:c3:ed: 7d:09:e8:c7:a6:2a:0f:fa:d8:48:5d:67:34:4a:66: 69:ff:c2:0f:c4:62:67:bb:1b:4b:45:32:a5:e5:b3: 65:ed:ce:48:d1:d9:63:a8:9d:37:16:14:46:88:ff: 51:1a:da:d1:c9:3b:5a:e9:0f:8e:ea:dc:1a:f0:b2: eb:c3:cb:81:af:a7:7d:34:79:84:b3:2d:2e:33:a2: c4:c0:d9:74:af:6e:da:d6:09:1c:12:2f:d2:68:97: ff:01:a3:57:cc:e6:25:95:a4:80:2e:e2:93:e6:58: 47:ef:8e:5e:7e:d4:aa:85:43:42:6d:df:a8:ed:82: 00:b2:ef:21:16:a9:1b:23:27:e3:1f:a6:50:6b:1a: 16:0e:f5:6b:eb:a6:5b:6c:a5:4c:73:bb:93:2e:94: 7e:0e:97:44:58:4c:a6:e5:f7:ad:8e:1a:d1:de:f1: cf:12:78:b5:c6:72:49:11:2a:c3:8f:6e:fd:3e:9d: 6d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:34:4F:68:C1:3C:60:94:98:2F:5C:12:D5:AD:AE:5C:4C:90:E4:FB X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:69:94:3b:b1:6c:a8:a2:bf:0e:e2:c4:1c:95:ba:2f:bf:2f: 39:e2:e7:49:6a:8b:ce:b0:d2:2b:6e:db:fa:54:22:f4:e1:f8: 4b:d0:0c:24:59:79:9a:f3:77:f1:82:f1:d1:b3:6d:7a:3e:38: 5c:b2:b8:4b:92:28:1b:a4:f5:d8:94:54:ec:d0:b0:2e:57:e6: c8:6d:f4:89:f3:f8:3d:68:1f:f2:a5:f2:f6:0a:4c:df:bf:ab: 0e:23:cc:58:8b:c1:1f:ae:96:62:16:b3:18:f4:f4:8e:d3:d4: af:2f:1e:7d:b3:bb:50:43:f1:1e:22:87:00:e2:fa:88:89:9b: fb:81:61:f2:4f:c6:1c:b4:c0:16:c6:3b:70:7b:d7:bc:81:23: e4:42:c7:de:73:9a:b4:43:a9:ee:78:14:33:18:9e:6d:5d:b3: 58:b2:cd:f0:51:b7:7e:5e:5e:69:bd:72:00:dd:0f:62:75:82: 7b:e8:3d:bb:4f:66:a2:72:32:34:ad:c4:48:99:80:24:04:1a: eb:96:be:07:4d:54:00:74:4e:c6:29:23:20:69:d9:5a:55:67: 4a:30:bc:15:df:e4:e5:f4:e2:71:01:94:6f:34:b4:3b:f1:0b: 0e:9a:17:0c:ad:4c:7c:0a:65:49:d3:a5:f1:b1:eb:07:d3:e2: bc:32:85:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVuGgbKIli3Jynu4nlmKMakN0JYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNjAyMjgxMzM1NTJaFw0yNjAzMDMyMzM3NTJaMDMxMTAvBgNV BAMTKDZGMzQ0RjY4QzEzQzYwOTQ5ODJGNUMxMkQ1QURBRTVDNEM5MEU0RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsqQzpQrV06ROfIdqeoiMXIkzO XBkkkbjk0JsnoMpE/Fq5+cjeDuu/SokEl5PMlZslFLsWH2vavSg2ZwfurgXU434q 2quAh/HD7X0J6MemKg/62EhdZzRKZmn/wg/EYme7G0tFMqXls2XtzkjR2WOonTcW FEaI/1Ea2tHJO1rpD47q3BrwsuvDy4Gvp300eYSzLS4zosTA2XSvbtrWCRwSL9Jo l/8Bo1fM5iWVpIAu4pPmWEfvjl5+1KqFQ0Jt36jtggCy7yEWqRsjJ+MfplBrGhYO 9WvrpltspUxzu5MulH4Ol0RYTKbl962OGtHe8c8SeLXGckkRKsOPbv0+nW0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbzRPaME8YJSYL1wS1a2uXEyQ5PswHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBplDuxbKiivw7ixByVui+/Lzni50lqi86w 0itu2/pUIvTh+EvQDCRZeZrzd/GC8dGzbXo+OFyyuEuSKBuk9diUVOzQsC5X5sht 9Inz+D1oH/Kl8vYKTN+/qw4jzFiLwR+ulmIWsxj09I7T1K8vHn2zu1BD8R4ihwDi +oiJm/uBYfJPxhy0wBbGO3B717yBI+RCx95zmrRDqe54FDMYnm1ds1iyzfBRt35e Xmm9cgDdD2J1gnvoPbtPZqJyMjStxEiZgCQEGuuWvgdNVAB0TsYpIyBp2VpVZ0ow vBXf5OX04nEBlG80tDvxCw6aFwytTHwKZUnTpfGx6wfT4rwyhdo= -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:18 2026 by rpki-client