$ rpki-client -vvf rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft File: E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft (raw, json) Hash identifier: ehujbZquIwpI69hMxP3ihFP0PbLyyKf5yS6KG7sitow= Subject key identifier: CD:E9:E5:AB:BC:21:1D:E6:01:0E:CB:3C:FB:B6:09:DB:F0:46:E7:A3 Authority key identifier: E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 Certificate issuer: /CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Certificate serial: 07EE6057348707F3FA484D85EAAFB2BCF527AF16 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 18:48:02 +0000 Manifest this update: Thu 23 Jul 2026 18:43:02 +0000 Manifest next update: Fri 24 Jul 2026 22:40:02 +0000 Files and hashes: 1: 3130332e3132372e3134342e302f32342d3234203d3e203633383732.roa (hash: b2H2J9oU1FTem9NxnIqJBxJ6q92fSr/bX1QAdywuSTE=) 2: 3130332e35322e3137302e302f32342d3234203d3e203633383732.roa (hash: BkJTNl2EaGlXKx/0oxL6MDW8bV/3huXeq9qOcksMrJo=) 3: 3130332e35322e3137302e302f32332d3233203d3e203633383732.roa (hash: MQJVRwYJnTX2QpJhcgqI//Yd9f8cE6OV9xHlB/+R9PA=) 4: 3130332e35322e3137312e302f32342d3234203d3e203633383732.roa (hash: b/Ogd32BhDs9RrIQse7X4kUyjngtFlmzyV/u5hkoU2o=) 5: 323030313a6466333a6330303a3a2f34382d3438203d3e203633383732.roa (hash: z3UTfjn7LsK1eLHAQE8Fe9WFM0g5YMcTUPNSeasibaA=) 6: 3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (hash: IjEzO4J4/DAGMp7yw/Fv4jYmilXWlJ5CggUFR3MkMwg=) 7: E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl (hash: 2M0bly5ggmEzXZeV4+BJ5mmD+8jsYwy3dr5bFvUCB14=) 8: 3130332e3132372e3134342e302f32332d3233203d3e203633383732.roa (hash: YESQQe584DxGo0SLuNik4wkwCQuVf9tDli0g7fG2mUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 22:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ee:60:57:34:87:07:f3:fa:48:4d:85:ea:af:b2:bc:f5:27:af:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E86D81600C2E0C408A83A10FE1734F7CB80049B5 Validity Not Before: Jul 23 18:43:02 2026 GMT Not After : Jul 24 22:40:02 2026 GMT Subject: CN=CDE9E5ABBC211DE6010ECB3CFBB609DBF046E7A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6c:26:cb:7a:c4:3a:e4:e1:93:6c:38:c7:cd: e1:10:b2:23:5a:24:50:09:7f:73:05:e5:ee:05:13: ee:de:92:ec:f2:1f:b0:96:73:6d:a2:68:66:ad:95: 33:23:fa:76:a7:78:56:23:7b:a7:b5:92:87:92:53: ea:a5:f5:ef:91:ed:14:bf:4f:02:c8:07:3f:c1:9e: 89:91:79:58:24:52:90:28:57:a7:3d:19:4a:73:f9: 17:55:f4:c7:6f:e5:77:a6:f8:99:1c:a8:ff:72:88: 8e:9b:06:1c:1d:6c:64:e9:c2:26:2e:29:56:67:a7: 92:51:a1:2d:9c:2e:61:50:77:59:43:d7:a6:7c:f4: b3:7c:ab:5a:49:96:ec:5d:c8:8e:a2:54:ea:1a:ff: 56:19:b1:64:f3:c7:7d:1c:a8:d5:25:07:84:2e:c8: 94:34:10:be:f5:b2:38:d7:74:26:62:0b:71:a3:9d: 75:4a:04:95:e9:75:3d:ef:56:24:56:41:06:8f:28: d6:00:65:38:28:3d:5d:ca:55:b8:dd:bf:84:55:d7: 79:3e:f0:40:af:b5:92:2f:9a:4b:31:d5:91:93:5a: bf:ff:12:fd:9e:a2:16:70:24:bf:21:86:7d:cd:14: f7:63:8f:29:d2:80:53:f4:67:05:47:f2:9c:a8:f0: 5a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:E9:E5:AB:BC:21:1D:E6:01:0E:CB:3C:FB:B6:09:DB:F0:46:E7:A3 X509v3 Authority Key Identifier: keyid:E8:6D:81:60:0C:2E:0C:40:8A:83:A1:0F:E1:73:4F:7C:B8:00:49:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/E86D81600C2E0C408A83A10FE1734F7CB80049B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/E86D81600C2E0C408A83A10FE1734F7CB80049B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:9a:9f:e5:b0:1b:52:17:5e:eb:99:3e:f8:29:91:e4:61:82: 62:5d:a5:be:3d:1e:2f:d7:b9:a4:cc:66:03:8c:97:7c:8d:e8: 2c:3a:61:63:05:07:89:d5:04:54:e8:f6:cf:28:a7:b6:ec:0f: c2:5b:72:b9:e5:f2:b0:8e:4f:6f:15:22:6e:87:a3:31:af:de: df:f8:8b:2d:7a:fd:37:ad:1e:24:ca:57:96:00:48:18:e9:42: c5:75:30:ec:61:04:1b:e0:e9:89:10:6c:79:2b:dd:c8:15:bf: e2:37:00:de:0e:30:3b:14:83:a4:ee:b9:4c:50:5c:3f:77:27: d7:92:1b:a7:6d:02:b6:68:c2:e1:34:54:92:46:78:0a:63:8a: 44:b6:84:94:10:5a:6d:d0:1e:4a:c7:f9:11:ff:75:58:c1:3d: 62:16:36:99:96:24:10:cc:11:55:b4:86:2e:e5:61:92:94:ad: 74:9a:01:dd:ce:98:a4:ec:99:da:ba:dc:0d:ec:e4:26:79:9d: fb:66:de:5b:0d:bd:3f:2f:a3:e7:45:4e:28:77:2f:e0:14:a3: 08:b7:bf:a0:1c:5d:cf:df:08:c9:ef:22:1e:5f:e0:d0:b0:1d: 41:7d:40:f5:f8:0e:bd:49:13:8e:9e:36:37:58:6d:94:ba:ea: df:a3:e4:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+5gVzSHB/P6SE2F6q+yvPUnrxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRGN0NC ODAwNDlCNTAeFw0yNjA3MjMxODQzMDJaFw0yNjA3MjQyMjQwMDJaMDMxMTAvBgNV BAMTKENERTlFNUFCQkMyMTFERTYwMTBFQ0IzQ0ZCQjYwOURCRjA0NkU3QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bCbLesQ65OGTbDjHzeEQsiNa JFAJf3MF5e4FE+7ekuzyH7CWc22iaGatlTMj+naneFYje6e1koeSU+ql9e+R7RS/ TwLIBz/BnomReVgkUpAoV6c9GUpz+RdV9Mdv5Xem+JkcqP9yiI6bBhwdbGTpwiYu KVZnp5JRoS2cLmFQd1lD16Z89LN8q1pJluxdyI6iVOoa/1YZsWTzx30cqNUlB4Qu yJQ0EL71sjjXdCZiC3GjnXVKBJXpdT3vViRWQQaPKNYAZTgoPV3KVbjdv4RV13k+ 8ECvtZIvmksx1ZGTWr//Ev2eohZwJL8hhn3NFPdjjynSgFP0ZwVH8pyo8FrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzenlq7whHeYBDss8+7YJ2/BG56MwHwYDVR0j BBgwFoAU6G2BYAwuDECKg6EP4XNPfLgASbUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTZiYjMzM2MtOTgyYi00ZmNlLWFjODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAw QzJFMEM0MDhBODNBMTBGRTE3MzRGN0NCODAwNDlCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9FODZEODE2MDBDMkUwQzQwOEE4M0ExMEZFMTczNEY3Q0I4MDA0 OUI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTZiYjMzM2MtOTgyYi00ZmNlLWFj ODEtYmMwNjkyMjllMjQzLzAvRTg2RDgxNjAwQzJFMEM0MDhBODNBMTBGRTE3MzRG N0NCODAwNDlCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuan+WwG1IXXuuZPvgpkeRhgmJdpb49Hi/X uaTMZgOMl3yN6Cw6YWMFB4nVBFTo9s8op7bsD8Jbcrnl8rCOT28VIm6HozGv3t/4 iy16/TetHiTKV5YASBjpQsV1MOxhBBvg6YkQbHkr3cgVv+I3AN4OMDsUg6TuuUxQ XD93J9eSG6dtArZowuE0VJJGeApjikS2hJQQWm3QHkrH+RH/dVjBPWIWNpmWJBDM EVW0hi7lYZKUrXSaAd3OmKTsmdq63A3s5CZ5nftm3lsNvT8vo+dFTih3L+AUowi3 v6AcXc/fCMnvIh5f4NCwHUF9QPX4Dr1JE46eNjdYbZS66t+j5Go= -----END CERTIFICATE-----Generated at Fri Jul 24 04:25:50 2026 by rpki-client