$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft File: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft (raw, json) Hash identifier: Cestnj6eHC2U7NJmO2+Pt0jmA32EUMPwxx+cmNoL4uw= Subject key identifier: BF:32:99:E2:3F:9A:3E:31:1B:99:BF:E8:D0:3F:B6:BA:AB:4F:2A:A6 Authority key identifier: 86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D Certificate issuer: /CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Certificate serial: 6F5B043480A03C5C77C50FC53FAE9071DA76E8DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 11:04:50 +0000 Manifest this update: Wed 23 Sep 2026 10:59:50 +0000 Manifest next update: Thu 24 Sep 2026 11:27:50 +0000 Files and hashes: 1: 3130332e362e3136362e302f32342d3234203d3e20313439393335.roa (hash: 0F052+gSOkh9neLJMSmVWcXN0V0lC6T7+TyFIH8dSs4=) 2: 860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl (hash: gsat8/T1wmX4cfr113lJab5kfj/fXwNBIsF6q6XFP94=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 11:27:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:5b:04:34:80:a0:3c:5c:77:c5:0f:c5:3f:ae:90:71:da:76:e8:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=860EBB203FFC23894F0B1AC6F45924CD1BA5F08D Validity Not Before: Sep 23 10:59:50 2026 GMT Not After : Sep 24 11:27:50 2026 GMT Subject: CN=BF3299E23F9A3E311B99BFE8D03FB6BAAB4F2AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:56:5e:d3:63:f8:01:7f:17:1e:b4:d5:64:aa: af:0d:28:8e:0a:86:5e:f4:4c:43:4c:3e:84:eb:8c: 13:74:b0:23:6c:53:c4:d6:ca:0e:60:a0:00:ce:93: 9a:7d:5d:2c:e4:b5:45:82:a1:83:3b:07:62:ef:f2: 42:48:93:40:50:5e:10:26:d9:b6:a8:45:7a:22:be: 40:da:cf:c9:ec:0a:24:c6:70:61:57:9c:ed:7a:1d: f6:21:86:63:fd:ca:2d:ec:89:f8:5b:fb:03:0c:f5: 11:d3:21:84:b5:6e:92:4a:8d:52:f0:ba:a9:70:59: e0:33:21:1a:54:4c:69:38:0b:ca:60:b7:2c:e0:4d: 91:fa:6c:24:de:08:c1:a9:4d:e7:a6:17:f5:a5:fa: 3d:31:0d:2b:93:37:a2:9d:20:cc:25:9c:56:37:0a: ad:3a:23:ee:c7:d9:75:ff:eb:48:8d:ad:f8:a3:23: c2:f9:96:5e:1d:bc:c0:31:d2:74:c3:37:91:27:61: e8:d4:4c:1a:ba:56:e1:54:52:09:05:18:5f:f9:43: 9f:78:26:1d:86:53:77:82:00:d8:03:f9:a1:df:a8: 24:3d:c9:be:fb:e9:ae:ac:f4:25:c7:f1:72:4c:3e: 09:af:2d:04:6c:a3:e4:f5:6b:2b:3e:70:ec:b1:06: 9a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:32:99:E2:3F:9A:3E:31:1B:99:BF:E8:D0:3F:B6:BA:AB:4F:2A:A6 X509v3 Authority Key Identifier: keyid:86:0E:BB:20:3F:FC:23:89:4F:0B:1A:C6:F4:59:24:CD:1B:A5:F0:8D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9eeb45de-5183-4a3a-b06d-8bb8d4506b06/0/860EBB203FFC23894F0B1AC6F45924CD1BA5F08D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:49:e8:a6:89:8f:3d:c0:19:b2:16:d5:b7:fb:61:3b:e4: 7f:b5:b1:2c:09:83:b9:5d:49:93:71:28:ac:2e:97:2c:05:eb: 34:26:9c:e1:94:d7:7f:81:eb:3b:b9:77:48:44:08:23:3b:a3: 81:c3:2c:11:3c:13:d1:21:86:39:8c:59:23:00:ff:46:48:22: e2:c8:e5:67:4f:59:55:57:f3:0d:de:67:50:08:3d:90:a6:46: a5:e1:78:ad:f3:17:8f:f1:b2:9d:52:71:80:49:c0:a7:fd:95: 98:2d:9c:1d:5c:f8:b0:21:1e:cf:4e:b8:33:86:45:70:60:2a: 94:2e:0d:cc:d6:5f:98:fe:1a:cf:b1:c6:f7:65:ce:c9:64:46: 60:0f:43:a1:93:5e:78:96:9e:01:79:1e:77:83:37:9d:a4:1b: 80:d6:11:79:b9:47:ce:e1:78:e2:30:f2:39:0c:ec:0c:da:84: 6e:c9:d8:fc:f2:37:f9:56:bc:3b:c0:5e:75:e5:a0:7b:1d:fc: 18:38:0d:6a:6f:c0:04:94:8b:e2:8a:4e:ad:5d:2e:95:7e:ad: e4:d0:6a:0a:45:ca:53:05:ed:a5:6b:a1:52:77:68:5b:d4:9d: 2c:bc:be:12:f6:59:7c:56:c7:ef:a2:bc:76:88:84:f7:15:89: dc:d7:15:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1sENICgPFx3xQ/FP66Qcdp26N4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0Qx QkE1RjA4RDAeFw0yNjA5MjMxMDU5NTBaFw0yNjA5MjQxMTI3NTBaMDMxMTAvBgNV BAMTKEJGMzI5OUUyM0Y5QTNFMzExQjk5QkZFOEQwM0ZCNkJBQUI0RjJBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Vl7TY/gBfxcetNVkqq8NKI4K hl70TENMPoTrjBN0sCNsU8TWyg5goADOk5p9XSzktUWCoYM7B2Lv8kJIk0BQXhAm 2baoRXoivkDaz8nsCiTGcGFXnO16HfYhhmP9yi3sifhb+wMM9RHTIYS1bpJKjVLw uqlwWeAzIRpUTGk4C8pgtyzgTZH6bCTeCMGpTeemF/Wl+j0xDSuTN6KdIMwlnFY3 Cq06I+7H2XX/60iNrfijI8L5ll4dvMAx0nTDN5EnYejUTBq6VuFUUgkFGF/5Q594 Jh2GU3eCANgD+aHfqCQ9yb776a6s9CXH8XJMPgmvLQRso+T1ays+cOyxBprzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvzKZ4j+aPjEbmb/o0D+2uqtPKqYwHwYDVR0j BBgwFoAUhg67ID/8I4lPCxrG9FkkzRul8I0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWVlYjQ1ZGUtNTE4My00YTNhLWIwNmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAz RkZDMjM4OTRGMEIxQUM2RjQ1OTI0Q0QxQkE1RjA4RC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjBFQkIyMDNGRkMyMzg5NEYwQjFBQzZGNDU5MjRDRDFCQTVG MDhELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWVlYjQ1ZGUtNTE4My00YTNhLWIw NmQtOGJiOGQ0NTA2YjA2LzAvODYwRUJCMjAzRkZDMjM4OTRGMEIxQUM2RjQ1OTI0 Q0QxQkE1RjA4RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmySeimiY89wBmyFtW3+2E75H+1sSwJg7ld SZNxKKwulywF6zQmnOGU13+B6zu5d0hECCM7o4HDLBE8E9EhhjmMWSMA/0ZIIuLI 5WdPWVVX8w3eZ1AIPZCmRqXheK3zF4/xsp1ScYBJwKf9lZgtnB1c+LAhHs9OuDOG RXBgKpQuDczWX5j+Gs+xxvdlzslkRmAPQ6GTXniWngF5HneDN52kG4DWEXm5R87h eOIw8jkM7AzahG7J2PzyN/lWvDvAXnXloHsd/Bg4DWpvwASUi+KKTq1dLpV+reTQ agpFylMF7aVroVJ3aFvUnSy8vhL2WXxWx++ivHaIhPcVidzXFY4= -----END CERTIFICATE-----Generated at Thu Sep 24 03:07:16 2026 by rpki-client