$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: ymYzbtpylwLdFykQXGChAxOeG+RfFLRJVUqajjyLz1s= Subject key identifier: 7B:85:63:9F:7E:EE:F7:10:D3:01:FB:8F:09:AD:B4:F8:99:B0:4F:B0 Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 4CDC26E456C3B1D3DF3745A9BAE69104B60AD6AA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: D0 Signing time: Mon 05 Oct 2026 05:13:48 +0000 Manifest this update: Mon 05 Oct 2026 05:08:48 +0000 Manifest next update: Tue 06 Oct 2026 08:30:48 +0000 Files and hashes: 1: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) 2: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: UzLE6uZVydd+V7y7RyY1M/iamLyutqBqWVt8McCGUPw=) 3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 Oct 2026 08:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:dc:26:e4:56:c3:b1:d3:df:37:45:a9:ba:e6:91:04:b6:0a:d6:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Oct 5 05:08:48 2026 GMT Not After : Oct 6 08:30:48 2026 GMT Subject: CN=7B85639F7EEEF710D301FB8F09ADB4F899B04FB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:f2:88:a5:29:07:e6:6a:8a:ca:43:a6:e7: cf:02:71:3b:68:ba:87:69:19:1e:60:2e:a9:7a:41: b3:a2:72:2b:2c:73:24:bc:47:72:07:4e:52:bc:ce: eb:e3:58:e7:cb:e6:a7:23:c9:0b:ce:9e:cc:a8:af: ef:b4:d3:9d:61:f3:71:de:a0:c3:16:c1:18:5b:10: 2c:6a:3d:b9:1f:23:0e:86:e2:83:d0:ec:02:19:ea: 73:64:e6:e2:a5:c0:0e:c5:cb:99:ac:e2:cc:86:18: e9:6c:bf:03:9c:a8:ca:dd:48:91:bc:f0:55:99:a4: 0a:e2:16:65:e1:fb:62:af:29:2a:6f:14:91:85:a6: 21:0b:89:d3:5c:2e:7d:6b:1d:2b:d5:03:87:9c:c2: 41:3c:b8:40:82:18:02:40:fb:0a:df:e1:26:fc:4a: c0:27:96:bf:70:21:0c:21:da:12:88:a0:8c:12:22: 5e:1e:d3:cf:62:6f:1a:33:56:ce:15:f3:c5:74:ff: 3e:0e:10:94:94:11:96:63:cd:83:21:a1:17:6b:52: fc:70:f9:c1:88:5e:28:f6:06:1f:e4:eb:a1:6b:78: aa:a1:ff:04:3a:68:03:47:4b:fd:3d:45:07:6d:5f: 6a:9f:d2:61:2c:b6:47:c5:a2:31:db:f3:f4:ad:9e: d2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:85:63:9F:7E:EE:F7:10:D3:01:FB:8F:09:AD:B4:F8:99:B0:4F:B0 X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:48:c2:7f:f3:66:4d:ce:47:c8:c0:4b:68:0f:a7:7a:c5:6a: 23:e2:d8:bb:a7:ef:89:8f:c4:46:b5:32:4e:ae:10:27:60:53: 30:03:ba:8e:9b:7d:20:0c:9b:0a:bd:d1:8a:95:09:88:ce:35: 46:21:17:ea:16:d2:ca:32:c5:59:68:7d:3a:82:3f:99:ab:b9: ce:6d:5e:9d:0a:e8:0b:54:9c:10:4c:3d:0f:6a:43:6c:03:d4: 57:eb:77:52:92:f6:57:c6:35:0e:23:aa:e6:b0:d3:de:17:65: 28:e9:ba:6f:06:33:73:1f:e5:c7:c2:a1:03:d3:b0:33:98:39: de:9b:20:ac:b7:cb:a9:ad:cb:94:25:50:cc:98:77:f3:4c:3b: 36:62:17:9f:c1:27:ca:be:cd:c7:3a:3a:04:ff:78:49:7f:3e: a2:e0:34:23:dd:05:98:ee:83:19:fe:95:f8:c7:77:da:f6:79: 8f:ff:31:88:60:54:62:a6:22:74:3d:53:30:94:3a:e4:ed:b3: 46:68:47:2f:e8:7c:e8:d0:5c:8a:84:c2:a9:40:2a:50:3c:c6: 6a:b9:7e:fd:97:27:46:c1:a4:3a:ac:69:61:6f:7b:94:a5:3a: eb:07:e6:46:7b:1e:8a:6a:0b:e6:90:d5:98:c7:2e:78:3a:76: a1:7a:44:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNwm5FbDsdPfN0WpuuaRBLYK1qowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjEwMDUwNTA4NDhaFw0yNjEwMDYwODMwNDhaMDMxMTAvBgNV BAMTKDdCODU2MzlGN0VFRUY3MTBEMzAxRkI4RjA5QURCNEY4OTlCMDRGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGvKIpSkH5mqKykOm588CcTto uodpGR5gLql6QbOicisscyS8R3IHTlK8zuvjWOfL5qcjyQvOnsyor++0051h83He oMMWwRhbECxqPbkfIw6G4oPQ7AIZ6nNk5uKlwA7Fy5ms4syGGOlsvwOcqMrdSJG8 8FWZpAriFmXh+2KvKSpvFJGFpiELidNcLn1rHSvVA4ecwkE8uECCGAJA+wrf4Sb8 SsAnlr9wIQwh2hKIoIwSIl4e089ibxozVs4V88V0/z4OEJSUEZZjzYMhoRdrUvxw +cGIXij2Bh/k66FreKqh/wQ6aANHS/09RQdtX2qf0mEstkfFojHb8/StntKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe4Vjn37u9xDTAfuPCa20+JmwT7AwHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtIwn/zZk3OR8jAS2gPp3rFaiPi2Lun74mP xEa1Mk6uECdgUzADuo6bfSAMmwq90YqVCYjONUYhF+oW0soyxVlofTqCP5mruc5t Xp0K6AtUnBBMPQ9qQ2wD1Ffrd1KS9lfGNQ4jquaw094XZSjpum8GM3Mf5cfCoQPT sDOYOd6bIKy3y6mty5QlUMyYd/NMOzZiF5/BJ8q+zcc6OgT/eEl/PqLgNCPdBZju gxn+lfjHd9r2eY//MYhgVGKmInQ9UzCUOuTts0ZoRy/ofOjQXIqEwqlAKlA8xmq5 fv2XJ0bBpDqsaWFve5SlOusH5kZ7HopqC+aQ1ZjHLng6dqF6RNo= -----END CERTIFICATE-----Generated at Mon Oct 5 18:46:53 2026 by rpki-client