$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: SNOlszvJ8cHxYxOhBApbn+8NaQeFOknEh8dd1nxfFh8= Subject key identifier: 5E:9E:EA:34:C9:E6:46:48:6C:50:B9:CF:7A:00:14:7B:49:C2:AF:AD Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 286E32643E2568C0BA86873BFE7E11A5D582B2A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: BC Signing time: Sun 20 Sep 2026 23:15:41 +0000 Manifest this update: Sun 20 Sep 2026 23:10:41 +0000 Manifest next update: Tue 22 Sep 2026 02:26:41 +0000 Files and hashes: 1: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: Q35hSNrWi4pO/kvPVq8hMOcIBS/J1aKrwa2drap8r/w=) 2: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:26:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:6e:32:64:3e:25:68:c0:ba:86:87:3b:fe:7e:11:a5:d5:82:b2:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Sep 20 23:10:41 2026 GMT Not After : Sep 22 02:26:41 2026 GMT Subject: CN=5E9EEA34C9E646486C50B9CF7A00147B49C2AFAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d6:c9:50:2d:fb:56:42:ca:d5:98:ef:25:db: a0:f7:77:3d:a1:bf:8f:70:45:be:84:df:d2:11:cf: 4f:a3:fd:a7:29:c7:3d:b0:5c:6d:e2:d7:64:e1:95: 89:89:59:c2:40:d6:cc:d4:c1:e6:c7:cd:ce:5f:f0: 17:55:c1:11:ad:2a:7d:53:0a:59:6e:81:9a:0c:04: 6f:f1:81:57:bc:fb:5c:54:29:26:69:59:14:06:5c: 10:1d:51:87:97:14:f0:61:00:94:b6:a0:70:ee:f5: 82:8c:dc:91:c0:5f:b1:7b:5f:86:a0:68:d2:1c:47: 2e:7c:70:37:3b:4d:d4:c4:6c:2e:48:f0:41:2d:54: 03:2e:bf:7d:21:81:ee:e2:f9:29:68:19:aa:f3:8f: 12:9d:14:95:ba:44:64:be:fb:2d:63:64:8f:32:88: 70:1d:78:46:3e:e0:29:20:cc:26:3d:3f:cd:68:f4: ce:48:3d:16:8b:ad:17:aa:d5:a5:7a:c7:7c:1b:27: 10:3b:d8:db:19:96:97:d0:88:78:86:a2:44:5d:70: 56:28:be:7b:96:f1:7c:43:ce:30:0c:b7:8f:af:c7: f4:65:e1:b9:ef:6c:1e:05:07:68:3a:7f:1c:ae:e1: c8:23:fd:f1:5a:9b:af:23:e3:5f:8a:cc:0e:68:c4: 02:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:9E:EA:34:C9:E6:46:48:6C:50:B9:CF:7A:00:14:7B:49:C2:AF:AD X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:71:ec:ce:62:d3:af:d6:90:3d:7a:b3:ff:3a:a3:9b:18:f6: 10:e6:36:31:bd:d4:80:ad:24:ec:6a:13:1a:8a:71:11:35:20: 5c:60:9c:ad:ab:1f:87:b0:fd:b1:20:bb:7f:df:b6:de:50:50: e6:40:d9:cd:66:68:a0:24:61:d3:6e:90:61:96:22:a1:b4:09: 42:4b:c7:03:33:fb:32:83:e7:da:91:af:e2:fb:5c:b6:40:a4: 9a:23:a1:67:fa:df:a4:53:df:10:a6:ef:68:69:8f:70:7a:7e: 91:45:17:83:a4:3f:74:ac:c9:26:94:08:d3:d8:8f:e3:99:6b: 5f:14:06:9a:6a:dc:0b:fd:6a:f3:27:f6:53:ca:bd:d1:de:a5: 76:29:48:04:fb:a1:63:ec:f2:fc:72:93:e1:5b:8e:e0:db:a0: 6c:22:b8:85:22:ad:23:21:67:03:e5:ff:fa:b3:da:ce:bf:5c: 41:e2:42:85:0d:71:3b:98:94:04:3b:0f:ee:96:49:f4:c3:ac: 1d:63:2f:f8:73:61:93:33:55:5f:31:2a:4b:19:b6:3b:3c:48: 45:25:30:ca:ed:1e:40:46:17:e1:96:0a:9d:a1:03:e5:8d:ac: ca:39:a3:35:49:15:94:81:95:d9:52:18:58:62:8c:c2:77:63: 93:e1:14:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKG4yZD4laMC6hoc7/n4RpdWCsqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA5MjAyMzEwNDFaFw0yNjA5MjIwMjI2NDFaMDMxMTAvBgNV BAMTKDVFOUVFQTM0QzlFNjQ2NDg2QzUwQjlDRjdBMDAxNDdCNDlDMkFGQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW1slQLftWQsrVmO8l26D3dz2h v49wRb6E39IRz0+j/acpxz2wXG3i12ThlYmJWcJA1szUwebHzc5f8BdVwRGtKn1T CllugZoMBG/xgVe8+1xUKSZpWRQGXBAdUYeXFPBhAJS2oHDu9YKM3JHAX7F7X4ag aNIcRy58cDc7TdTEbC5I8EEtVAMuv30hge7i+SloGarzjxKdFJW6RGS++y1jZI8y iHAdeEY+4CkgzCY9P81o9M5IPRaLrReq1aV6x3wbJxA72NsZlpfQiHiGokRdcFYo vnuW8XxDzjAMt4+vx/Rl4bnvbB4FB2g6fxyu4cgj/fFam68j41+KzA5oxAKfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXp7qNMnmRkhsULnPegAUe0nCr60wHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5x7M5i06/WkD16s/86o5sY9hDmNjG91ICt JOxqExqKcRE1IFxgnK2rH4ew/bEgu3/ftt5QUOZA2c1maKAkYdNukGGWIqG0CUJL xwMz+zKD59qRr+L7XLZApJojoWf636RT3xCm72hpj3B6fpFFF4OkP3SsySaUCNPY j+OZa18UBppq3Av9avMn9lPKvdHepXYpSAT7oWPs8vxyk+FbjuDboGwiuIUirSMh ZwPl//qz2s6/XEHiQoUNcTuYlAQ7D+6WSfTDrB1jL/hzYZMzVV8xKksZtjs8SEUl MMrtHkBGF+GWCp2hA+WNrMo5ozVJFZSBldlSGFhijMJ3Y5PhFJw= -----END CERTIFICATE-----Generated at Mon Sep 21 21:21:49 2026 by rpki-client