$ rpki-client -vvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json) Hash identifier: 4e0Vqw/yAcGHsduNTkpqCKAQ2WwL5raNw+KlqRnsqeI= Subject key identifier: 11:2F:23:CE:2D:87:71:7A:EC:80:4B:6B:0E:44:30:49:AE:4E:BD:54 Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Certificate serial: 49153F0BEEBEC51646C7486E2DB3456505213893 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft Manifest number: 0F Signing time: Tue 12 May 2026 10:11:20 +0000 Manifest this update: Tue 12 May 2026 10:06:20 +0000 Manifest next update: Wed 13 May 2026 10:20:20 +0000 Files and hashes: 1: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: wl0SP/7DN/Y5KmvM6bStbkm8kOpxZfPOnZluR9SWxMw=) 2: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:15:3f:0b:ee:be:c5:16:46:c7:48:6e:2d:b3:45:65:05:21:38:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Validity Not Before: May 12 10:06:20 2026 GMT Not After : May 13 10:20:20 2026 GMT Subject: CN=112F23CE2D87717AEC804B6B0E443049AE4EBD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:68:f8:1c:06:f3:d0:6e:84:28:21:9f:2d: 05:d5:61:d3:a3:47:a3:ad:96:b0:c1:ad:2e:f7:99: 3d:15:12:16:0c:7a:10:28:58:d5:bd:61:4a:b3:6d: 50:56:e5:b6:a2:2c:40:4f:68:49:9c:3c:0e:35:2a: 24:f0:ec:ab:f6:c9:10:fa:21:bd:ea:40:06:8e:d9: f2:0f:20:ad:ae:44:ca:18:71:6e:bf:92:17:6f:ef: e6:00:3f:d8:4c:61:5e:1c:df:ca:51:a3:d3:9f:2e: 7c:f2:aa:c8:15:b4:80:da:50:dd:62:33:c4:2b:9b: cf:36:fa:6e:36:21:d6:e7:25:bf:69:95:3c:2c:6a: 22:cc:44:48:49:25:84:58:c8:be:9e:40:df:3d:bd: af:44:45:58:1d:3f:47:34:e0:d7:77:c1:bf:39:23: 36:f7:78:63:64:99:bf:ed:60:5a:40:6c:9d:a9:23: bd:67:b6:b1:27:bd:5a:36:1c:d3:7e:5c:9e:a2:cc: 56:9f:ce:06:f2:ac:75:1d:ad:c4:fd:2a:80:a5:ae: c0:ac:b1:37:26:2a:21:98:f3:6a:36:af:76:7f:e8: e1:a3:c3:cb:ed:7e:96:31:6a:df:56:67:78:df:9f: 53:fe:fd:7d:da:5b:1c:83:64:0d:1c:9a:48:ab:9b: 11:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2F:23:CE:2D:87:71:7A:EC:80:4B:6B:0E:44:30:49:AE:4E:BD:54 X509v3 Authority Key Identifier: keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:ea:6c:5e:73:7e:20:41:aa:e7:79:1e:d3:a9:57:a1:82:cf: 67:6d:0b:ab:59:70:46:c6:e1:ea:36:4d:96:ba:c3:db:6d:d6: 62:5e:da:40:d7:6c:b1:02:b7:80:2c:cc:d6:f3:36:d7:90:02: b8:7b:b3:98:83:86:bb:8d:7e:5c:28:0b:ac:28:af:ba:a9:f1: 0a:f8:dc:76:fc:b0:e7:b5:83:05:97:18:60:aa:16:8b:a4:87: aa:92:9c:f5:80:fa:c5:16:6d:0b:4e:71:92:40:c2:8c:3f:9f: 27:dd:3b:16:40:51:cf:c6:c1:f1:c2:f9:02:06:51:1d:76:b9: 61:ec:fb:c3:14:3c:dd:c4:4a:e3:be:84:33:58:96:3d:53:7a: 01:43:ac:7f:c2:b7:58:34:fd:30:ff:a1:2d:b2:e9:f8:95:ba: 1d:56:30:71:37:4f:c2:0a:66:35:97:06:0e:6c:73:e3:5c:7c: b8:fe:69:a1:ed:2c:06:dc:f1:8e:69:40:4b:ef:7d:20:23:f8: 01:80:8a:99:f7:1a:ca:c0:45:a8:7a:9c:89:d7:89:db:00:f5: 81:40:48:66:43:5b:37:c7:22:f6:b7:13:5e:3b:9e:5a:9f:68: bc:09:6c:53:21:ae:9e:f6:9c:6e:a9:36:b4:21:e1:aa:ba:f3: 23:01:54:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSRU/C+6+xRZGx0huLbNFZQUhOJMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0Qx QkE1RjA4RDAeFw0yNjA1MTIxMDA2MjBaFw0yNjA1MTMxMDIwMjBaMDMxMTAvBgNV BAMTKDExMkYyM0NFMkQ4NzcxN0FFQzgwNEI2QjBFNDQzMDQ5QUU0RUJENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIyWj4HAbz0G6EKCGfLQXVYdOj R6OtlrDBrS73mT0VEhYMehAoWNW9YUqzbVBW5baiLEBPaEmcPA41KiTw7Kv2yRD6 Ib3qQAaO2fIPIK2uRMoYcW6/khdv7+YAP9hMYV4c38pRo9OfLnzyqsgVtIDaUN1i M8Qrm882+m42IdbnJb9plTwsaiLMREhJJYRYyL6eQN89va9ERVgdP0c04Nd3wb85 Izb3eGNkmb/tYFpAbJ2pI71ntrEnvVo2HNN+XJ6izFafzgbyrHUdrcT9KoClrsCs sTcmKiGY82o2r3Z/6OGjw8vtfpYxat9WZ3jfn1P+/X3aWxyDZA0cmkirmxEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUES8jzi2HcXrsgEtrDkQwSa5OvVQwHwYDVR0j BBgwFoAUhg67ID/8I4lPCxrG9FkkzRul8I0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjQ1ZGUtNTE4My00YTNhLWIwNmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAz RkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0QxQkE1RjA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjBFQkIyMDNGRkMyMzg5NEYwQjFBQzZGNDU5MjRDRDFCQTVG MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0 Q0QxQkE1RjA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG7qbF5zfiBBqud5HtOpV6GCz2dtC6tZcEbG 4eo2TZa6w9tt1mJe2kDXbLECt4AszNbzNteQArh7s5iDhruNflwoC6wor7qp8Qr4 3Hb8sOe1gwWXGGCqFoukh6qSnPWA+sUWbQtOcZJAwow/nyfdOxZAUc/GwfHC+QIG UR12uWHs+8MUPN3ESuO+hDNYlj1TegFDrH/Ct1g0/TD/oS2y6fiVuh1WMHE3T8IK ZjWXBg5sc+NcfLj+aaHtLAbc8Y5pQEvvfSAj+AGAipn3GsrARah6nInXidsA9YFA SGZDWzfHIva3E147nlqfaLwJbFMhrp72nG6pNrQh4aq68yMBVMQ= -----END CERTIFICATE-----Generated at Tue May 12 22:47:48 2026 by rpki-client