$ rpki-client -vvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: oPaQM+LeGGhQs87QOq392K5vrXmHarQIOFCyzvVCy38= Subject key identifier: A8:6A:11:45:30:10:86:4C:AF:E7:60:6A:19:6A:C1:34:9D:59:51:DE Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 074A005850F8F3CFC21B60915231FE2D7140D5EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 05:29:29 +0000 Manifest this update: Wed 17 Jun 2026 05:24:29 +0000 Manifest next update: Thu 18 Jun 2026 05:53:29 +0000 Files and hashes: 1: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: KH/h+lUgqmTktObqjU1HEFYSVYQ6reqvhWJaEEeQ+oM=) 2: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 3: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:4a:00:58:50:f8:f3:cf:c2:1b:60:91:52:31:fe:2d:71:40:d5:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Jun 17 05:24:29 2026 GMT Not After : Jun 18 05:53:29 2026 GMT Subject: CN=A86A11453010864CAFE7606A196AC1349D5951DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ec:32:4b:34:ce:1a:e4:ba:8c:c4:30:ec:fb: cf:eb:80:f5:24:cf:dd:5e:e3:d7:a7:ec:f7:41:80: 91:67:7e:ce:a6:69:06:02:69:f2:53:ca:b2:4a:88: 40:2d:b0:76:24:3f:a2:f3:e5:9b:d5:e8:ca:3d:59: 29:ac:2f:dc:55:d5:5d:5d:35:8f:9e:ab:96:f0:80: fa:29:20:a5:4f:85:aa:11:13:af:98:04:25:46:5e: b3:1c:59:56:db:df:46:a5:ca:8c:c1:91:97:c9:03: 25:98:00:92:2d:bd:d0:55:45:41:ba:25:52:59:7c: 00:c0:96:2e:5b:b1:32:cf:fa:46:10:90:51:ca:32: 62:75:60:7c:b0:bc:f4:2a:45:42:ec:71:02:8d:4d: a9:3f:ab:3a:53:0c:50:4f:ea:02:fe:e3:86:f6:ae: 58:bf:62:7e:d1:d7:b9:7a:72:50:1b:45:01:dd:e4: 8b:e7:fd:cc:be:5f:8e:09:75:ad:d1:34:e8:29:15: 90:0e:14:d9:3c:b1:7e:9f:a2:57:52:46:5c:fd:61: 2e:cc:ea:a3:6e:d1:d8:39:65:4f:2f:29:d5:56:29: c7:eb:8c:1e:85:80:1e:c2:3e:27:cd:63:51:fb:e0: 0b:08:4a:77:bf:5e:f7:64:14:aa:e8:b7:ea:ca:8f: b0:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:6A:11:45:30:10:86:4C:AF:E7:60:6A:19:6A:C1:34:9D:59:51:DE X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:be:a7:b3:d3:56:81:47:12:53:86:fb:e7:e3:31:68:49:43: 72:53:1f:aa:aa:16:66:76:64:ea:56:a3:01:2f:3f:00:55:21: 47:6d:f8:7d:41:22:5f:cc:f3:ff:1b:ed:8a:4c:17:a5:a2:b7: 8b:ea:8f:1b:18:b3:1c:93:e0:81:f0:b6:fd:2b:69:73:71:80: 08:64:00:ff:fc:61:42:52:d5:46:ab:8d:0d:36:c7:bf:7c:b2: f0:4f:f4:4a:59:97:b6:17:c9:c4:ed:6b:e3:23:c1:13:bf:42: 80:ef:b9:18:b6:45:cb:fa:8a:8a:1d:71:92:d0:6d:bf:22:86: 88:75:04:14:f2:3d:60:36:f7:08:6d:53:05:9c:55:6a:26:1e: b7:6f:eb:25:7a:66:b2:f8:a8:c7:35:ac:23:93:91:11:1f:f3: 79:a5:fb:55:26:71:d2:b7:dc:fd:ab:78:d8:be:38:fa:00:c9: 35:68:08:b6:16:c7:37:42:30:40:9a:71:a6:b4:d7:31:b6:8c: 13:a0:2b:d4:f3:5d:b2:30:d8:03:24:42:dd:68:6a:ee:6f:69: 6f:2c:43:94:37:67:8e:68:35:1b:7e:39:10:af:f5:6d:ba:fd: 58:ac:1d:4c:ce:ed:08:d2:1d:91:2b:cc:9d:2e:6b:64:5a:67: 32:0b:42:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB0oAWFD488/CG2CRUjH+LXFA1ewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjA2MTcwNTI0MjlaFw0yNjA2MTgwNTUzMjlaMDMxMTAvBgNV BAMTKEE4NkExMTQ1MzAxMDg2NENBRkU3NjA2QTE5NkFDMTM0OUQ1OTUxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH7DJLNM4a5LqMxDDs+8/rgPUk z91e49en7PdBgJFnfs6maQYCafJTyrJKiEAtsHYkP6Lz5ZvV6Mo9WSmsL9xV1V1d NY+eq5bwgPopIKVPhaoRE6+YBCVGXrMcWVbb30alyozBkZfJAyWYAJItvdBVRUG6 JVJZfADAli5bsTLP+kYQkFHKMmJ1YHywvPQqRULscQKNTak/qzpTDFBP6gL+44b2 rli/Yn7R17l6clAbRQHd5Ivn/cy+X44Jda3RNOgpFZAOFNk8sX6foldSRlz9YS7M 6qNu0dg5ZU8vKdVWKcfrjB6FgB7CPifNY1H74AsISne/XvdkFKrot+rKj7BXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqGoRRTAQhkyv52BqGWrBNJ1ZUd4wHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACG+p7PTVoFHElOG++fjMWhJQ3JTH6qqFmZ2 ZOpWowEvPwBVIUdt+H1BIl/M8/8b7YpMF6Wit4vqjxsYsxyT4IHwtv0raXNxgAhk AP/8YUJS1UarjQ02x798svBP9EpZl7YXycTta+MjwRO/QoDvuRi2Rcv6ioodcZLQ bb8ihoh1BBTyPWA29whtUwWcVWomHrdv6yV6ZrL4qMc1rCOTkREf83ml+1UmcdK3 3P2reNi+OPoAyTVoCLYWxzdCMECacaa01zG2jBOgK9TzXbIw2AMkQt1oau5vaW8s Q5Q3Z45oNRt+ORCv9W26/VisHUzO7QjSHZErzJ0ua2RaZzILQm4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:34 2026 by rpki-client