$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft File: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft (raw, json) Hash identifier: /lMocGnfuQxLl8Ikvn9iXqsoXUi5L/4YVrtRYxNBSlU= Subject key identifier: 5C:9B:60:6A:CD:B3:30:CA:2B:21:0E:35:9B:79:3E:66:60:A0:9A:40 Authority key identifier: 86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 Certificate issuer: /CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Certificate serial: 3ED1A9DE858E4FE3FAE61EDB694E1BC1AB2F8D76 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 23:55:41 +0000 Manifest this update: Wed 23 Sep 2026 23:50:41 +0000 Manifest next update: Fri 25 Sep 2026 02:24:41 +0000 Files and hashes: 1: 3130332e3133372e3131302e302f32332d3234203d3e20313338383239.roa (hash: O1QbtY51VdyohEvVXHBxSrNdFt875yUSixP5xPAkYBQ=) 2: 86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl (hash: O2DeNQqjhLnEVrGnY0TA+YQd5rooCd2CKJ6CKMfBpL0=) 3: 323430343a616663303a3a2f33322d3438203d3e20313338383239.roa (hash: DN0zl+C7RPTYn8cVhIgfqevu4Mrybu56lQL63Rz+l+w=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 02:24:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:d1:a9:de:85:8e:4f:e3:fa:e6:1e:db:69:4e:1b:c1:ab:2f:8d:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86EA8C01BDC9597D130241AC29DEF660BADEC8D9 Validity Not Before: Sep 23 23:50:41 2026 GMT Not After : Sep 25 02:24:41 2026 GMT Subject: CN=5C9B606ACDB330CA2B210E359B793E6660A09A40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:0c:83:dc:5b:4c:2e:75:8e:2f:45:58:2f:83: 12:47:50:09:24:c8:e1:3e:02:08:a6:20:99:b6:11: f5:75:aa:47:12:44:b8:7c:8b:e6:1b:8c:39:74:fe: b3:1b:c1:c6:b8:08:7a:7f:0f:da:70:12:74:d9:a3: ae:6b:ca:61:b1:81:6f:40:a5:de:76:6a:3c:5e:c0: 61:17:26:6d:78:db:35:3a:34:2b:84:d4:f7:b7:15: c6:46:40:69:55:ed:72:d0:11:1d:89:c7:69:64:15: 3c:96:00:06:e9:8e:34:e1:2b:d9:04:58:c3:03:ac: f3:05:7b:eb:c4:e9:99:81:8b:31:9b:b2:e2:5d:16: 08:c3:f9:12:09:1e:3b:1e:8e:89:49:2d:07:2b:7c: 19:23:ee:f8:b4:97:30:38:72:e1:38:ff:a9:df:89: e9:d6:fa:b8:ae:d3:c7:a5:32:35:cc:03:aa:d4:a8: 13:19:af:81:6e:ea:05:74:60:cc:42:51:cd:b7:39: 2a:14:d6:a3:1f:9d:b6:b3:b1:4b:42:23:02:1d:3d: c6:cf:f9:74:4e:87:d1:78:5d:8c:2e:2d:39:25:39: cc:38:6a:57:aa:53:53:03:6d:08:cc:24:19:36:f4: a7:f4:71:9f:44:d9:6b:8c:ab:a1:3b:f4:d5:68:88: 5d:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:9B:60:6A:CD:B3:30:CA:2B:21:0E:35:9B:79:3E:66:60:A0:9A:40 X509v3 Authority Key Identifier: keyid:86:EA:8C:01:BD:C9:59:7D:13:02:41:AC:29:DE:F6:60:BA:DE:C8:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b0d880d4-c33e-401e-b468-a5a6a8aaf3d7/0/86EA8C01BDC9597D130241AC29DEF660BADEC8D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:36:be:b0:ed:e0:ea:99:e7:7a:ee:4f:12:ac:0d:86:12:0f: 8d:fe:2e:9a:99:99:c0:c6:b6:dd:cd:eb:9d:10:6b:93:57:7d: 37:ef:79:aa:c5:83:89:75:e6:02:4e:92:36:08:19:4b:79:0a: 5e:88:d5:fd:a3:42:e2:84:2b:b1:6b:4c:db:eb:8d:87:90:f5: c6:8a:69:f7:2d:f5:8c:2b:ca:73:e9:af:2e:6d:7e:2e:99:e1: da:e2:36:b8:21:3c:70:c2:7a:54:8c:3e:d9:76:bf:d0:0b:fa: 93:f1:eb:92:2c:ff:50:5a:bd:4a:c0:22:fc:04:25:61:1d:49: 63:99:3f:e2:e7:8e:a0:a1:d1:d2:13:c6:da:f8:73:75:91:ec: fb:37:ea:86:0a:46:ab:ca:8e:9f:cb:bf:fa:7b:53:17:58:23: f2:d6:ee:b7:29:f2:62:f0:47:f3:0f:d5:01:d9:29:d9:17:35: 77:23:21:d4:31:d6:4b:69:15:f8:71:8b:07:99:6d:4d:aa:3b: 3e:c9:5c:bf:d2:fa:c8:17:75:17:ad:a6:54:f1:b6:a4:f4:45: c8:ac:3c:d8:02:29:72:cb:c2:65:5f:c7:5f:5b:69:f7:08:a9: d4:99:0f:b2:96:49:68:b7:4d:e7:f9:81:64:e4:b4:17:5d:30: 37:78:39:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPtGp3oWOT+P65h7baU4bwasvjXYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2NjBC QURFQzhEOTAeFw0yNjA5MjMyMzUwNDFaFw0yNjA5MjUwMjI0NDFaMDMxMTAvBgNV BAMTKDVDOUI2MDZBQ0RCMzMwQ0EyQjIxMEUzNTlCNzkzRTY2NjBBMDlBNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTDIPcW0wudY4vRVgvgxJHUAkk yOE+AgimIJm2EfV1qkcSRLh8i+YbjDl0/rMbwca4CHp/D9pwEnTZo65rymGxgW9A pd52ajxewGEXJm142zU6NCuE1Pe3FcZGQGlV7XLQER2Jx2lkFTyWAAbpjjThK9kE WMMDrPMFe+vE6ZmBizGbsuJdFgjD+RIJHjsejolJLQcrfBkj7vi0lzA4cuE4/6nf ienW+riu08elMjXMA6rUqBMZr4Fu6gV0YMxCUc23OSoU1qMfnbazsUtCIwIdPcbP +XROh9F4XYwuLTklOcw4aleqU1MDbQjMJBk29Kf0cZ9E2WuMq6E79NVoiF23AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXJtgas2zMMorIQ41m3k+ZmCgmkAwHwYDVR0j BBgwFoAUhuqMAb3JWX0TAkGsKd72YLreyNkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjBkODgwZDQtYzMzZS00MDFlLWI0NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFC REM5NTk3RDEzMDI0MUFDMjlERUY2NjBCQURFQzhEOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkVBOEMwMUJEQzk1OTdEMTMwMjQxQUMyOURFRjY2MEJBREVD OEQ5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjBkODgwZDQtYzMzZS00MDFlLWI0 NjgtYTVhNmE4YWFmM2Q3LzAvODZFQThDMDFCREM5NTk3RDEzMDI0MUFDMjlERUY2 NjBCQURFQzhEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII2vrDt4OqZ53ruTxKsDYYSD43+LpqZmcDG tt3N650Qa5NXfTfvearFg4l15gJOkjYIGUt5Cl6I1f2jQuKEK7FrTNvrjYeQ9caK afct9YwrynPpry5tfi6Z4driNrghPHDCelSMPtl2v9AL+pPx65Is/1BavUrAIvwE JWEdSWOZP+LnjqCh0dITxtr4c3WR7Ps36oYKRqvKjp/Lv/p7UxdYI/LW7rcp8mLw R/MP1QHZKdkXNXcjIdQx1ktpFfhxiweZbU2qOz7JXL/S+sgXdRetplTxtqT0Rcis PNgCKXLLwmVfx19bafcIqdSZD7KWSWi3Tef5gWTktBddMDd4OTw= -----END CERTIFICATE-----Generated at Thu Sep 24 07:02:58 2026 by rpki-client