$ rpki-client -vvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: AFFVUtcCrJFLRGYHP9w3NMKeATMw9MOy7smlVmFCIek= Subject key identifier: F4:F1:EE:3E:FA:40:08:4E:B6:6A:BE:18:1D:5F:97:C3:88:C0:1F:A4 Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 2A59CA72F7BA7687CA2C834BFC1C40FD78B7D121 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 10:12:33 +0000 Manifest this update: Thu 23 Jul 2026 10:07:33 +0000 Manifest next update: Fri 24 Jul 2026 13:23:33 +0000 Files and hashes: 1: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) 2: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: OdpJ8OKYdOQ/zxlAa5AUvMN1Jor+CkfCWErCXpJjbY4=) 3: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 13:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:59:ca:72:f7:ba:76:87:ca:2c:83:4b:fc:1c:40:fd:78:b7:d1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Jul 23 10:07:33 2026 GMT Not After : Jul 24 13:23:33 2026 GMT Subject: CN=F4F1EE3EFA40084EB66ABE181D5F97C388C01FA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:20:c9:9a:cf:d9:52:f0:52:b8:a8:da:3d:b8: 1b:53:27:ab:7a:db:cf:54:f2:bd:b0:a3:ae:57:52: 87:ba:d8:c5:62:c2:f5:59:20:0a:65:3c:33:fe:b7: 9e:b2:a1:7b:2f:1b:f0:2a:f1:b4:3d:40:c6:b6:3a: 55:94:a9:6e:c7:2c:2b:ca:46:22:ec:d1:7f:06:7a: 57:68:94:e7:5d:05:0a:5b:ed:90:cc:0b:7f:fb:06: 9a:0e:c2:e1:dd:4f:71:b7:1a:d1:48:26:20:f4:f9: b2:55:45:af:64:cd:f3:23:6a:3c:5b:bb:bd:45:c3: 91:1d:76:8b:c8:43:3d:cc:d7:16:d1:79:16:eb:fa: fc:37:9e:7d:47:39:3e:6d:87:7e:25:ae:75:e2:d9: 9c:15:0a:c3:84:e5:a9:cc:3c:49:f9:76:ae:39:91: cf:8d:16:dd:a4:3e:7c:31:5e:1f:18:f4:4c:09:e7: 69:35:8e:1d:45:00:8e:46:65:a1:fc:63:5e:c4:d7: 74:30:36:51:45:10:c2:f6:ad:c3:f9:d8:c5:e4:d1: 03:56:72:7d:0f:12:50:6b:b1:0b:7a:8e:0e:3c:0e: 0a:50:c4:31:8d:2d:bd:82:57:35:7d:1f:a7:94:98: 13:9c:26:6c:97:f0:11:97:7b:ff:e3:ce:d3:d2:06: c8:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:F1:EE:3E:FA:40:08:4E:B6:6A:BE:18:1D:5F:97:C3:88:C0:1F:A4 X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:34:85:b7:d5:18:84:5f:be:5c:b2:e0:67:3d:92:f9:9e:52: 02:ac:02:4d:8c:5b:20:ed:a6:35:7c:03:55:3e:fd:5f:e0:2b: d2:51:09:fb:17:79:f3:cb:0c:b9:62:bb:b6:35:e2:f3:80:8b: 70:03:3d:d6:a9:77:65:d0:55:da:30:77:76:9b:0a:f8:89:39: cf:64:3a:07:d7:83:fc:f0:16:d1:23:2b:ed:d1:15:f7:b1:50: 0a:e0:73:fe:7d:90:ed:6c:f7:9d:7b:94:05:76:40:ef:9e:2d: ba:e7:84:d9:40:f7:88:85:9c:04:4b:60:41:ad:c2:e2:06:d2: 5b:e2:9c:59:f9:bd:0b:93:1b:6d:14:18:36:4d:53:25:23:d2: 78:96:d0:19:0c:a2:98:2d:c8:d4:1b:cf:9c:18:e4:f5:93:34: 5d:ed:bf:8f:76:b3:cb:7a:f8:1b:1a:ca:41:43:a3:0e:c9:e9: 65:7c:96:a4:7f:b2:87:f0:a8:a2:4f:81:a7:4a:72:3b:54:7a: ee:cd:70:c1:29:95:b4:2c:5a:9b:9a:36:a3:d5:9c:75:e1:89: cb:be:d9:3b:38:1d:86:ce:61:62:8e:0e:81:af:8c:e2:01:21: 18:fc:a3:25:18:7a:83:6e:ff:64:9b:75:c4:d6:16:bc:2f:01: b7:9c:be:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKlnKcve6dofKLINL/BxA/Xi30SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA3MjMxMDA3MzNaFw0yNjA3MjQxMzIzMzNaMDMxMTAvBgNV BAMTKEY0RjFFRTNFRkE0MDA4NEVCNjZBQkUxODFENUY5N0MzODhDMDFGQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSIMmaz9lS8FK4qNo9uBtTJ6t6 289U8r2wo65XUoe62MViwvVZIAplPDP+t56yoXsvG/Aq8bQ9QMa2OlWUqW7HLCvK RiLs0X8GeldolOddBQpb7ZDMC3/7BpoOwuHdT3G3GtFIJiD0+bJVRa9kzfMjajxb u71Fw5EddovIQz3M1xbReRbr+vw3nn1HOT5th34lrnXi2ZwVCsOE5anMPEn5dq45 kc+NFt2kPnwxXh8Y9EwJ52k1jh1FAI5GZaH8Y17E13QwNlFFEML2rcP52MXk0QNW cn0PElBrsQt6jg48DgpQxDGNLb2CVzV9H6eUmBOcJmyX8BGXe//jztPSBsjjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9PHuPvpACE62ar4YHV+Xw4jAH6QwHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC40hbfVGIRfvlyy4Gc9kvmeUgKsAk2MWyDt pjV8A1U+/V/gK9JRCfsXefPLDLliu7Y14vOAi3ADPdapd2XQVdowd3abCviJOc9k OgfXg/zwFtEjK+3RFfexUArgc/59kO1s9517lAV2QO+eLbrnhNlA94iFnARLYEGt wuIG0lvinFn5vQuTG20UGDZNUyUj0niW0BkMopgtyNQbz5wY5PWTNF3tv492s8t6 +BsaykFDow7J6WV8lqR/sofwqKJPgadKcjtUeu7NcMEplbQsWpuaNqPVnHXhicu+ 2Ts4HYbOYWKODoGvjOIBIRj8oyUYeoNu/2SbdcTWFrwvAbecvvM= -----END CERTIFICATE-----Generated at Fri Jul 24 05:11:07 2026 by rpki-client