$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json) Hash identifier: Aua3YxGGZ1csTfF59re1DnsCmD1tZmoep/dRAzDDEbg= Subject key identifier: F7:E2:12:65:0B:D0:08:7B:40:97:35:A8:67:70:B5:B1:6E:D8:93:0D Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Certificate serial: 1B3F81BD7A176D2CD8F6C404387F92A81D992C4E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:08:32 +0000 Manifest this update: Thu 23 Jul 2026 19:03:32 +0000 Manifest next update: Fri 24 Jul 2026 20:51:32 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=) 2: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: EqxvDoaSK0ZyaQeLEA2RfAtWq/ddojnivZsUx8q6mQo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:51:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3f:81:bd:7a:17:6d:2c:d8:f6:c4:04:38:7f:92:a8:1d:99:2c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Validity Not Before: Jul 23 19:03:32 2026 GMT Not After : Jul 24 20:51:32 2026 GMT Subject: CN=F7E212650BD0087B409735A86770B5B16ED8930D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:15:c8:0c:7d:13:1a:23:b6:a0:80:bb:66:a1: 26:6e:74:33:46:bc:d9:04:f7:c6:74:50:1a:c3:eb: 89:7a:25:46:3c:4e:7c:e1:cb:0a:d1:75:4b:3b:55: 64:4b:c9:39:45:32:3e:a9:31:ee:ef:f8:23:59:b9: 64:34:d6:72:2a:93:14:3c:47:84:ea:52:d5:af:03: a7:7d:97:4a:7d:ae:5f:e6:dd:7b:ec:17:66:48:8b: a7:e8:25:48:db:2f:7e:c8:25:5f:df:15:89:2c:6d: 27:ec:0e:0e:ab:a8:b6:80:ed:4e:93:a9:6b:9d:c5: 83:68:94:6a:0d:8b:ba:37:0a:06:e9:5d:cc:1f:5a: 3d:35:8b:3c:f0:bd:d4:d4:66:63:c7:4b:cd:4c:4e: 02:67:43:a9:14:83:90:58:ff:b0:7b:6b:5f:81:7d: 05:0e:b7:62:27:c5:21:5b:57:db:1d:6e:04:00:b9: 99:05:46:fc:d8:ab:f2:d6:ae:e4:66:55:9f:67:bb: 66:a2:26:43:af:c0:20:f4:11:6c:cc:69:79:62:ca: d6:7c:d9:07:cb:b0:6a:d0:3a:1c:12:ad:0a:f2:da: 8d:bd:cb:91:88:01:66:45:6c:8e:1e:08:06:1d:24: e9:d5:3e:61:b1:b2:76:3b:30:cd:07:78:8f:e8:c0: ee:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:E2:12:65:0B:D0:08:7B:40:97:35:A8:67:70:B5:B1:6E:D8:93:0D X509v3 Authority Key Identifier: keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:14:a1:bb:91:9d:07:32:31:9b:c4:84:57:98:81:b8:d2:51: 3d:ce:f0:65:78:31:a8:ce:8e:b1:c2:08:4f:60:12:a3:e9:e7: 0d:d2:b5:7f:2b:67:b8:00:d6:b1:00:2b:91:4d:fb:77:ec:00: 4b:ed:96:7e:63:ff:ac:33:59:c7:44:5e:84:e8:f3:7e:6b:4b: d8:d0:22:c6:2d:fe:9e:a6:77:84:8f:77:53:c5:e0:a5:43:78: 20:09:5d:1c:8b:e5:9b:99:35:39:8b:46:bd:d6:c7:f6:0d:18: d5:b9:22:1c:3d:0c:06:80:40:14:cb:64:2f:36:06:cc:11:ef: bb:31:aa:a6:73:b4:54:c3:a7:68:de:6a:67:c8:98:d2:d4:cc: ab:a0:27:eb:7d:af:23:11:fa:91:c5:79:42:52:26:64:4e:ee: a0:40:54:cc:63:a0:d1:05:18:33:a8:d4:99:af:c7:71:2a:df: d5:b3:0d:35:74:38:00:e1:57:91:17:65:d6:da:9f:57:46:8e: 57:c8:c0:a2:73:f1:d8:20:be:92:11:75:45:b9:03:7e:e9:72: 7f:6b:0f:a7:67:2e:fb:c1:20:16:36:48:2d:60:1d:12:8a:f0: ca:16:f7:37:49:16:66:80:01:25:59:b5:1a:84:07:30:e7:51: 34:38:05:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGz+BvXoXbSzY9sQEOH+SqB2ZLE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0Qx QkE1RjA4RDAeFw0yNjA3MjMxOTAzMzJaFw0yNjA3MjQyMDUxMzJaMDMxMTAvBgNV BAMTKEY3RTIxMjY1MEJEMDA4N0I0MDk3MzVBODY3NzBCNUIxNkVEODkzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmFcgMfRMaI7aggLtmoSZudDNG vNkE98Z0UBrD64l6JUY8TnzhywrRdUs7VWRLyTlFMj6pMe7v+CNZuWQ01nIqkxQ8 R4TqUtWvA6d9l0p9rl/m3XvsF2ZIi6foJUjbL37IJV/fFYksbSfsDg6rqLaA7U6T qWudxYNolGoNi7o3CgbpXcwfWj01izzwvdTUZmPHS81MTgJnQ6kUg5BY/7B7a1+B fQUOt2InxSFbV9sdbgQAuZkFRvzYq/LWruRmVZ9nu2aiJkOvwCD0EWzMaXliytZ8 2QfLsGrQOhwSrQry2o29y5GIAWZFbI4eCAYdJOnVPmGxsnY7MM0HeI/owO51AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+ISZQvQCHtAlzWoZ3C1sW7Ykw0wHwYDVR0j BBgwFoAUhg67ID/8I4lPCxrG9FkkzRul8I0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjQ1ZGUtNTE4My00YTNhLWIwNmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAz RkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0QxQkE1RjA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjBFQkIyMDNGRkMyMzg5NEYwQjFBQzZGNDU5MjRDRDFCQTVG MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0 Q0QxQkE1RjA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEUobuRnQcyMZvEhFeYgbjSUT3O8GV4MajO jrHCCE9gEqPp5w3StX8rZ7gA1rEAK5FN+3fsAEvtln5j/6wzWcdEXoTo835rS9jQ IsYt/p6md4SPd1PF4KVDeCAJXRyL5ZuZNTmLRr3Wx/YNGNW5Ihw9DAaAQBTLZC82 BswR77sxqqZztFTDp2jeamfImNLUzKugJ+t9ryMR+pHFeUJSJmRO7qBAVMxjoNEF GDOo1Jmvx3Eq39WzDTV0OADhV5EXZdban1dGjlfIwKJz8dggvpIRdUW5A37pcn9r D6dnLvvBIBY2SC1gHRKK8MoW9zdJFmaAASVZtRqEBzDnUTQ4BR4= -----END CERTIFICATE-----Generated at Fri Jul 24 03:51:21 2026 by rpki-client