$ rpki-client -vvf repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft File: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft (raw, json) Hash identifier: eP3Jfj43XCnOoZqUSJ6bw2qUTbfo3bRxxAuN1+kDgG4= Subject key identifier: D3:63:C1:F5:C4:F1:53:DB:F4:60:89:61:23:6A:0A:81:60:18:66:85 Authority key identifier: 86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 Certificate issuer: /CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Certificate serial: 5DF70436E9609F80DC62BF6C2C03A5CBB903EB46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft Manifest number: 01FF Signing time: Wed 25 Mar 2026 09:30:53 +0000 Manifest this update: Wed 25 Mar 2026 09:25:52 +0000 Manifest next update: Sat 28 Mar 2026 16:15:52 +0000 Files and hashes: 1: 86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl (hash: LCgRWps4/JuwrYEZhSjBLS32Zlej9/9ZorvfXSDhUnw=) 2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: p8Wpmus070CsJXDUA1KtLJSmqgm7fEGDDNW/LuX/AC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:15:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:f7:04:36:e9:60:9f:80:dc:62:bf:6c:2c:03:a5:cb:b9:03:eb:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58 Validity Not Before: Mar 25 09:25:52 2026 GMT Not After : Mar 28 16:15:52 2026 GMT Subject: CN=D363C1F5C4F153DBF4608961236A0A8160186685 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:bd:8b:2e:f2:04:68:9f:24:79:3a:62:61:43: 96:c2:69:f0:62:99:7b:cc:48:58:ae:55:e1:ad:02: de:23:ca:cb:b5:5c:c7:4f:eb:1e:e7:1c:77:96:ef: f7:90:b4:2a:e9:fb:e2:60:f0:0d:9f:a6:63:f1:ae: 86:81:d3:cf:52:3b:5a:f5:3e:a4:4f:2c:96:41:2d: 45:44:ec:43:c6:4f:a5:02:68:a4:1e:2d:a0:cc:23: d0:86:aa:29:7d:18:0d:25:13:5b:2d:ed:a0:2b:d2: 4b:11:31:2b:9c:c1:20:c1:cd:f3:1a:8e:5d:78:1b: 17:67:b3:f7:99:b8:fb:1a:ba:39:64:9a:79:e9:ba: eb:92:77:5b:8e:29:e6:30:03:74:11:a9:6f:85:c2: 38:ea:66:03:1e:72:42:f7:2c:b1:61:59:b7:f9:e1: 61:48:ea:c2:6a:86:35:5f:b1:8a:92:5f:ee:d7:07: c7:cf:be:ce:82:15:25:0a:11:7c:9b:7a:22:17:09: 5c:b4:ce:dd:15:3a:07:7f:b4:4f:9e:bd:48:df:7f: 4f:ad:b6:eb:19:19:5e:1a:97:ed:be:fa:e6:c2:18: 45:28:dd:f1:9e:dd:72:47:bc:a7:9d:a5:d2:5b:e0: 63:17:f0:7f:9b:21:d4:49:c0:0f:01:73:c3:40:03: eb:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:63:C1:F5:C4:F1:53:DB:F4:60:89:61:23:6A:0A:81:60:18:66:85 X509v3 Authority Key Identifier: keyid:86:C2:F4:D0:6A:11:B8:6B:AC:FF:0F:D3:DB:A4:7B:FA:56:13:8F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/86C2F4D06A11B86BACFF0FD3DBA47BFA56138F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:5a:9f:45:db:48:83:0d:d2:c5:09:65:17:b7:b9:98:b0:52: 76:72:58:80:25:7b:9f:38:b4:d4:b8:ff:40:78:3f:a8:0f:ab: 57:77:4a:83:b9:6e:2f:fc:bb:07:b4:c2:25:48:2c:53:a5:c6: dc:44:c8:d1:77:1b:e0:06:08:12:e6:f0:a7:1a:a4:71:26:ed: 17:65:05:7f:82:ab:27:36:1c:1c:e4:84:d5:7a:25:cf:b9:05: bd:72:28:e8:11:64:b7:4a:4e:35:04:c8:e4:79:fb:d8:73:6d: 9e:ca:a1:9c:68:29:b6:05:e1:5a:67:93:aa:0c:9d:26:b2:25: db:98:b2:7d:61:49:a2:6e:c0:e8:50:93:1b:3c:01:d5:5e:82: f2:1a:5b:2c:2b:87:87:b4:80:e8:cb:bc:ca:5d:73:72:f7:7d: e1:ce:4c:40:19:b6:8a:ea:87:2f:ce:a2:1e:97:e6:17:91:b3: 9a:a6:bb:36:a4:2c:0a:40:f4:0e:eb:68:d0:4f:33:3f:9c:67: 37:61:9a:b8:43:74:23:7b:6c:bf:80:1d:81:f6:2d:c5:a4:ab: 8a:d0:56:2c:55:be:45:57:77:38:35:a8:40:41:e6:0b:b6:f6: 36:72:b4:e0:6e:c4:79:3f:68:e5:29:89:d6:64:39:b9:07:96: cc:08:25:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfcENulgn4DcYr9sLAOly7kD60YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1 NjEzOEY1ODAeFw0yNjAzMjUwOTI1NTJaFw0yNjAzMjgxNjE1NTJaMDMxMTAvBgNV BAMTKEQzNjNDMUY1QzRGMTUzREJGNDYwODk2MTIzNkEwQTgxNjAxODY2ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDevYsu8gRonyR5OmJhQ5bCafBi mXvMSFiuVeGtAt4jysu1XMdP6x7nHHeW7/eQtCrp++Jg8A2fpmPxroaB089SO1r1 PqRPLJZBLUVE7EPGT6UCaKQeLaDMI9CGqil9GA0lE1st7aAr0ksRMSucwSDBzfMa jl14Gxdns/eZuPsaujlkmnnpuuuSd1uOKeYwA3QRqW+FwjjqZgMeckL3LLFhWbf5 4WFI6sJqhjVfsYqSX+7XB8fPvs6CFSUKEXybeiIXCVy0zt0VOgd/tE+evUjff0+t tusZGV4al+2++ubCGEUo3fGe3XJHvKedpdJb4GMX8H+bIdRJwA8Bc8NAA+snAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU02PB9cTxU9v0YIlhI2oKgWAYZoUwHwYDVR0j BBgwFoAUhsL00GoRuGus/w/T26R7+lYTj1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YWRjNzY1YS1mZjhkLTRiMWYtYTU5YS0yNWZmN2JkNGY1OGEvMC84NkMyRjREMDZB MTFCODZCQUNGRjBGRDNEQkE0N0JGQTU2MTM4RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdCRkE1NjEz OEY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWFkYzc2NWEtZmY4ZC00YjFmLWE1 OWEtMjVmZjdiZDRmNThhLzAvODZDMkY0RDA2QTExQjg2QkFDRkYwRkQzREJBNDdC RkE1NjEzOEY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhan0XbSIMN0sUJZRe3uZiwUnZyWIAle584 tNS4/0B4P6gPq1d3SoO5bi/8uwe0wiVILFOlxtxEyNF3G+AGCBLm8KcapHEm7Rdl BX+Cqyc2HBzkhNV6Jc+5Bb1yKOgRZLdKTjUEyOR5+9hzbZ7KoZxoKbYF4Vpnk6oM nSayJduYsn1hSaJuwOhQkxs8AdVegvIaWywrh4e0gOjLvMpdc3L3feHOTEAZtorq hy/Ooh6X5heRs5qmuzakLApA9A7raNBPMz+cZzdhmrhDdCN7bL+AHYH2LcWkq4rQ VixVvkVXdzg1qEBB5gu29jZytOBuxHk/aOUpidZkObkHlswIJRc= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:27 2026 by rpki-client