$ rpki-client -vvf repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft File: 86C8E3A4B496EB93A6EEF684150362C295A428DD.mft (raw, json) Hash identifier: ykTICQpN+8Xyc0nwNwQEpPGOxWWqcoQdkomkpn/hFVs= Subject key identifier: 7E:3C:50:EF:3A:B3:4F:27:C6:4B:C4:5C:E2:E6:3F:51:CE:44:C1:A2 Authority key identifier: 86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD Certificate issuer: /CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Certificate serial: 7DE52D01951455652FC43617D974DCEC684EFBDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft Manifest number: 025B Signing time: Tue 24 Mar 2026 14:41:42 +0000 Manifest this update: Tue 24 Mar 2026 14:36:42 +0000 Manifest next update: Fri 27 Mar 2026 15:36:42 +0000 Files and hashes: 1: 3130332e3139302e3133342e302f32332d3234203d3e203538343935.roa (hash: NAu4MIqb2SIHlGa2lR/f4p07SuQ7a/mw3Vk71QHChF8=) 2: 86C8E3A4B496EB93A6EEF684150362C295A428DD.crl (hash: CNb3j3tkWbLXQoKxsgjanrY+pMNL5cEvFAXALDe99Hg=) 3: 3130332e3139302e3133352e302f32342d3234203d3e203538343935.roa (hash: ZAxHbiLP6Hqcx4Z+YjqoTqhIgfPAeHtLOg2HhiZ1uS0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:36:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:e5:2d:01:95:14:55:65:2f:c4:36:17:d9:74:dc:ec:68:4e:fb:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C8E3A4B496EB93A6EEF684150362C295A428DD Validity Not Before: Mar 24 14:36:42 2026 GMT Not After : Mar 27 15:36:42 2026 GMT Subject: CN=7E3C50EF3AB34F27C64BC45CE2E63F51CE44C1A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:11:97:13:05:eb:f2:92:90:8a:da:78:00:60: 33:a6:d6:c9:da:16:23:16:17:06:86:93:47:c8:17: c4:a5:04:c2:f6:64:22:1f:34:8e:1c:78:fc:f2:f2: a4:42:58:ab:5d:d8:ad:a0:02:a9:2c:ec:c6:22:2f: 52:34:ae:83:75:e6:b0:23:f3:45:08:89:4f:1a:7f: 66:07:5c:71:d8:d4:18:d4:fa:d3:2f:28:53:12:13: ce:5b:0b:ab:8f:a3:8c:29:ca:ef:f1:fb:e7:e1:b3: d5:46:63:70:e8:0c:82:e3:86:4c:9a:3c:59:8d:7d: 25:95:6a:03:66:5c:6d:8b:c4:a8:56:d3:77:96:47: 1a:f5:2c:14:3f:46:1c:95:72:13:82:7f:76:10:de: 8a:99:ca:e2:a0:28:28:33:db:39:be:b5:3d:a3:41: 08:46:0f:08:9c:c5:03:db:89:ee:24:82:b4:e6:ac: 12:6c:9b:7d:5a:4b:9f:2e:c4:36:49:b1:c7:88:4c: 65:6d:d7:97:4b:f2:7f:28:c3:a0:84:56:d1:5e:b2: 10:9f:cf:20:43:5f:27:c5:27:3a:0a:4f:cd:d9:37: 15:88:1d:8d:11:c2:79:54:13:5f:6d:72:6e:bd:de: 8c:5b:c4:c2:eb:b8:4e:8e:c4:86:23:f9:98:11:36: e5:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:3C:50:EF:3A:B3:4F:27:C6:4B:C4:5C:E2:E6:3F:51:CE:44:C1:A2 X509v3 Authority Key Identifier: keyid:86:C8:E3:A4:B4:96:EB:93:A6:EE:F6:84:15:03:62:C2:95:A4:28:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C8E3A4B496EB93A6EEF684150362C295A428DD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a63b7d7-ea83-4be9-b2fc-b30eb0b44d0a/0/86C8E3A4B496EB93A6EEF684150362C295A428DD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:cb:1d:d0:57:1f:35:7f:77:d2:fe:72:d8:cd:42:1a:10:d9: c0:8b:3e:f6:d1:8f:d1:5b:ef:1c:bf:71:30:e9:28:2e:b6:30: c3:ff:cb:d2:9c:a0:90:6d:5c:e9:cd:c0:73:f1:0b:c0:7d:67: fa:46:3d:42:06:76:ac:c9:60:fa:56:94:61:72:9b:94:bc:12: 16:e9:0a:5a:6e:94:56:ca:ae:cc:b1:a8:77:1c:8b:71:87:47: 2c:51:97:3a:06:a9:38:8f:67:f2:a3:c5:0c:af:6e:50:b3:b1: cb:6d:e3:4c:c4:f7:58:a5:e5:89:5c:91:c3:71:b6:93:84:34: 4b:fa:66:60:25:a5:83:1e:ff:c4:63:43:38:cb:e0:c8:ea:52: 8f:de:93:31:27:36:c6:38:c5:54:3a:46:b8:24:5e:35:b0:03: 38:21:be:d3:4c:74:1f:e6:a4:d7:c2:ba:b3:e1:db:05:f6:a6: f1:34:c5:eb:e6:a9:f7:0c:11:a7:20:68:b2:76:7a:21:41:a7: 20:87:69:b5:1a:91:8f:7e:dc:6e:c1:1f:e4:af:67:90:1f:cf: 36:8c:6e:67:b8:9a:f9:a0:65:f1:37:c1:8b:19:b4:b1:67:8d: ae:3e:1f:53:24:e0:2b:c8:dd:ac:d3:32:e1:09:f3:68:3c:34: d3:5b:dd:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfeUtAZUUVWUvxDYX2XTc7GhO+9owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5 NUE0MjhERDAeFw0yNjAzMjQxNDM2NDJaFw0yNjAzMjcxNTM2NDJaMDMxMTAvBgNV BAMTKDdFM0M1MEVGM0FCMzRGMjdDNjRCQzQ1Q0UyRTYzRjUxQ0U0NEMxQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEZcTBevykpCK2ngAYDOm1sna FiMWFwaGk0fIF8SlBML2ZCIfNI4cePzy8qRCWKtd2K2gAqks7MYiL1I0roN15rAj 80UIiU8af2YHXHHY1BjU+tMvKFMSE85bC6uPo4wpyu/x++fhs9VGY3DoDILjhkya PFmNfSWVagNmXG2LxKhW03eWRxr1LBQ/RhyVchOCf3YQ3oqZyuKgKCgz2zm+tT2j QQhGDwicxQPbie4kgrTmrBJsm31aS58uxDZJsceITGVt15dL8n8ow6CEVtFeshCf zyBDXyfFJzoKT83ZNxWIHY0RwnlUE19tcm693oxbxMLruE6OxIYj+ZgRNuXVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfjxQ7zqzTyfGS8Rc4uY/Uc5EwaIwHwYDVR0j BBgwFoAUhsjjpLSW65Om7vaEFQNiwpWkKN0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTYzYjdkNy1lYTgzLTRiZTktYjJmYy1iMzBlYjBiNDRkMGEvMC84NkM4RTNBNEI0 OTZFQjkzQTZFRUY2ODQxNTAzNjJDMjk1QTQyOERELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYyQzI5NUE0 MjhERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE2M2I3ZDctZWE4My00YmU5LWIy ZmMtYjMwZWIwYjQ0ZDBhLzAvODZDOEUzQTRCNDk2RUI5M0E2RUVGNjg0MTUwMzYy QzI5NUE0MjhERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIHLHdBXHzV/d9L+ctjNQhoQ2cCLPvbRj9Fb 7xy/cTDpKC62MMP/y9KcoJBtXOnNwHPxC8B9Z/pGPUIGdqzJYPpWlGFym5S8Ehbp ClpulFbKrsyxqHcci3GHRyxRlzoGqTiPZ/KjxQyvblCzsctt40zE91il5YlckcNx tpOENEv6ZmAlpYMe/8RjQzjL4MjqUo/ekzEnNsY4xVQ6RrgkXjWwAzghvtNMdB/m pNfCurPh2wX2pvE0xevmqfcMEacgaLJ2eiFBpyCHabUakY9+3G7BH+SvZ5AfzzaM bme4mvmgZfE3wYsZtLFnja4+H1Mk4CvI3azTMuEJ82g8NNNb3WA= -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:53 2026 by rpki-client