$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: HkoO3kU52iduIMuGU8jKrz4Nl+GRiNE3eqMh/ZZB9PA= Subject key identifier: D4:EA:BD:4D:10:70:0B:CB:7B:C5:CA:CC:DF:D8:B0:6A:E9:B1:12:09 Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 2B4CDE2E6763B15F742AB7AD6EF08B9FFAA61231 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 02:56:20 +0000 Manifest this update: Wed 17 Jun 2026 02:51:20 +0000 Manifest next update: Thu 18 Jun 2026 06:00:20 +0000 Files and hashes: 1: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) 2: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) 3: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: NsCm/xUoiIe6D4MDi/I/fifPPcup/HlC3DBaWYgt4+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4c:de:2e:67:63:b1:5f:74:2a:b7:ad:6e:f0:8b:9f:fa:a6:12:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Jun 17 02:51:20 2026 GMT Not After : Jun 18 06:00:20 2026 GMT Subject: CN=D4EABD4D10700BCB7BC5CACCDFD8B06AE9B11209 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:5e:4c:61:1f:fa:9b:f0:60:24:1c:3a:1f:5e: ad:34:1c:ef:c0:ca:ce:64:14:d2:f4:06:c1:0a:35: 0e:d1:cb:61:d2:97:83:ee:ca:5b:64:ff:a9:86:d4: cb:0c:fa:29:72:cc:5f:28:7b:5a:d0:76:63:e9:69: 1b:5e:9a:40:1f:1d:d6:16:fa:c4:e7:a4:ed:b5:86: c1:ad:43:a2:25:a2:23:d5:3b:ca:a9:0c:a3:06:38: 99:09:3b:2e:91:61:69:36:8f:45:0a:c8:6a:d3:16: 35:6e:71:82:11:e0:41:31:99:90:fd:84:7b:85:a7: 0f:5d:ec:f0:cb:89:cd:f7:aa:1a:02:e4:6f:cb:82: 77:b1:3b:14:88:f2:4c:53:e3:e0:3c:f9:c7:03:25: f9:f8:ce:96:07:1a:6e:46:e9:51:f4:ec:04:7a:ce: 7d:06:8c:d9:3f:f0:55:1c:68:fc:7b:dd:08:27:43: 45:7a:8b:be:c3:d7:d3:51:49:ec:80:8d:e4:a1:2a: 68:df:93:70:d1:9b:d4:48:0b:3a:2e:37:53:20:b3: 6b:e4:eb:9a:fc:f7:17:b7:93:d1:70:47:d5:3e:88: 73:0c:e2:36:39:72:f5:c7:47:b5:12:8d:d0:44:0e: bf:a5:9d:cc:10:78:f7:f3:57:e9:f1:e2:13:51:ff: b3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:BD:4D:10:70:0B:CB:7B:C5:CA:CC:DF:D8:B0:6A:E9:B1:12:09 X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:0a:ca:89:0a:92:4b:a8:06:c9:4b:6a:3e:0d:03:8b:e2:4c: a9:db:ec:ac:cf:eb:76:1b:b1:b6:25:8c:a8:cd:70:87:dd:bb: 87:96:09:4e:1e:87:c3:53:be:af:61:8f:19:03:e4:c3:a8:5d: 4e:d9:7b:c1:b6:3c:a2:f6:37:fc:0e:ae:80:d0:c5:a1:ac:f6: 0b:4b:7b:3f:4c:0d:6e:b3:e5:ee:08:e2:a2:8e:a7:0c:e6:8b: 11:c7:4f:f9:83:40:03:7a:ab:70:81:3c:23:3e:b4:ad:25:14: 20:17:2d:18:56:c6:f6:d9:82:10:29:4e:c5:b3:7a:fe:e4:15: 48:55:49:13:7e:13:44:ac:98:f9:ab:06:11:84:72:5d:89:f4: b7:48:79:8c:9b:fd:b8:a3:f1:af:33:26:83:ad:04:1e:29:ae: ad:50:5e:0b:14:f9:0b:37:87:76:6b:2c:0a:ea:17:b0:29:16: 24:29:4f:f0:ad:76:9c:ca:35:e9:37:fd:4b:13:29:ef:cb:2b: 4d:08:db:09:c7:e8:7d:9f:3e:3b:8d:95:fb:85:8f:8c:45:3a: b0:e6:c0:13:df:f1:ed:da:6c:15:91:56:7d:fe:53:e2:02:97: 37:de:af:10:0c:ef:c4:93:00:55:92:c3:b4:2a:d9:32:6a:4e: e7:cd:93:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0zeLmdjsV90KretbvCLn/qmEjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA2MTcwMjUxMjBaFw0yNjA2MTgwNjAwMjBaMDMxMTAvBgNV BAMTKEQ0RUFCRDREMTA3MDBCQ0I3QkM1Q0FDQ0RGRDhCMDZBRTlCMTEyMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkXkxhH/qb8GAkHDofXq00HO/A ys5kFNL0BsEKNQ7Ry2HSl4Puyltk/6mG1MsM+ilyzF8oe1rQdmPpaRtemkAfHdYW +sTnpO21hsGtQ6IloiPVO8qpDKMGOJkJOy6RYWk2j0UKyGrTFjVucYIR4EExmZD9 hHuFpw9d7PDLic33qhoC5G/LgnexOxSI8kxT4+A8+ccDJfn4zpYHGm5G6VH07AR6 zn0GjNk/8FUcaPx73QgnQ0V6i77D19NRSeyAjeShKmjfk3DRm9RICzouN1Mgs2vk 65r89xe3k9FwR9U+iHMM4jY5cvXHR7USjdBEDr+lncwQePfzV+nx4hNR/7PjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Oq9TRBwC8t7xcrM39iwaumxEgkwHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJsKyokKkkuoBslLaj4NA4viTKnb7KzP63Yb sbYljKjNcIfdu4eWCU4eh8NTvq9hjxkD5MOoXU7Ze8G2PKL2N/wOroDQxaGs9gtL ez9MDW6z5e4I4qKOpwzmixHHT/mDQAN6q3CBPCM+tK0lFCAXLRhWxvbZghApTsWz ev7kFUhVSRN+E0SsmPmrBhGEcl2J9LdIeYyb/bij8a8zJoOtBB4prq1QXgsU+Qs3 h3ZrLArqF7ApFiQpT/CtdpzKNek3/UsTKe/LK00I2wnH6H2fPjuNlfuFj4xFOrDm wBPf8e3abBWRVn3+U+IClzferxAM78STAFWSw7Qq2TJqTufNk0I= -----END CERTIFICATE-----Generated at Wed Jun 17 11:02:41 2026 by rpki-client