$ rpki-client -vvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: 8aEU2Kk6NgWIaC1g3DGTgQl5O0Y/QZr+vGwP4P3q6jM= Subject key identifier: 4B:1A:02:D4:54:0F:12:17:0F:23:F5:70:06:EA:96:16:47:C4:3F:5A Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 114E9844565464E1210A27DB8C0C69A3C1A9502B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: 0F Signing time: Wed 13 May 2026 00:03:23 +0000 Manifest this update: Tue 12 May 2026 23:58:23 +0000 Manifest next update: Thu 14 May 2026 03:21:23 +0000 Files and hashes: 1: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: Qlm5NyNF43HVSguRNn1LzRF5swBVQwS9s306isFR61o=) 2: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) 3: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 03:21:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:4e:98:44:56:54:64:e1:21:0a:27:db:8c:0c:69:a3:c1:a9:50:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: May 12 23:58:23 2026 GMT Not After : May 14 03:21:23 2026 GMT Subject: CN=4B1A02D4540F12170F23F57006EA961647C43F5A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:a5:64:03:52:f8:9e:c2:7b:f0:df:ae:f2:48: 4d:fd:a4:6d:4c:29:16:21:77:fd:ec:34:07:ae:c2: c9:31:1d:3a:e2:8b:61:41:fc:b6:e2:10:4f:b1:9b: 95:e7:bb:a1:1b:35:3f:c6:c5:46:ab:77:00:3b:25: 7d:1d:67:18:9d:8e:29:c1:f4:07:7b:b7:9d:94:09: 5f:45:e3:fc:e4:4f:fe:77:2c:50:d3:4d:d4:13:b5: df:14:c2:89:2b:ee:42:95:7e:d4:0f:83:a0:05:a1: af:4f:3c:b8:9b:93:f3:98:a6:9b:e4:47:30:8c:df: 95:8b:6b:3b:92:ab:2d:6e:de:b6:fe:ce:ac:fc:ff: 57:13:66:8b:2e:fe:cd:cc:c3:f2:ea:15:29:9a:30: af:6b:3f:6f:36:32:03:5d:d5:74:0f:8d:35:53:79: 2e:c3:8e:b2:b0:10:0b:8d:a2:32:4c:67:12:cf:76: 27:0f:39:fd:d2:7d:d6:d3:38:21:09:51:55:36:32: db:25:a7:7b:05:53:90:bf:93:cb:01:29:24:99:c5: 6e:15:35:1d:f2:9b:84:cf:42:13:39:a8:43:67:c0: 5e:a5:39:3b:53:9e:b5:b7:8a:b4:95:44:13:0e:ba: ca:7c:43:4b:1f:b1:19:98:b6:cb:69:f9:80:7f:11: 3a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:1A:02:D4:54:0F:12:17:0F:23:F5:70:06:EA:96:16:47:C4:3F:5A X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:a3:8c:f6:39:ce:9f:25:f4:26:d0:0c:d4:2b:4c:10:65:8c: dd:a7:77:b7:07:a2:0d:37:7c:20:39:27:25:83:d3:89:97:4e: 86:ab:02:62:49:52:98:8b:0d:9d:c7:53:b2:a0:e3:5f:f3:fa: 81:55:e8:d3:1f:01:33:68:a8:c0:18:43:97:b8:12:f8:7e:70: 61:64:19:71:1b:89:fb:8b:66:7e:da:f8:3d:18:c4:cd:1d:2d: b5:1f:22:e1:39:89:04:ee:8e:15:f3:e5:35:03:39:89:61:9d: 4a:54:e2:21:2e:39:a3:73:ed:f5:4c:26:70:9d:cc:d6:9f:16: d6:b2:0c:4c:2c:b0:c8:ca:df:70:47:77:6c:1b:8d:3a:43:78: 1d:56:c6:1c:7a:06:88:de:bc:bc:c8:de:ff:db:8a:1b:11:85: 88:64:b3:3f:9c:67:91:74:69:75:bf:2d:d3:c5:88:f6:ff:71: a6:11:91:5b:3d:6a:bb:63:b5:14:a3:98:c6:7c:46:ed:3d:76: d6:f2:00:da:90:17:af:f8:dc:0e:19:27:1e:5a:bc:de:17:d1: 7c:3d:3f:53:cc:f9:fc:61:fe:c5:e3:47:b7:b5:f5:75:c9:59: d3:03:56:a7:e6:31:aa:14:69:a5:73:bd:40:5b:64:a1:a1:2e: eb:d0:61:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEU6YRFZUZOEhCifbjAxpo8GpUCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjA1MTIyMzU4MjNaFw0yNjA1MTQwMzIxMjNaMDMxMTAvBgNV BAMTKDRCMUEwMkQ0NTQwRjEyMTcwRjIzRjU3MDA2RUE5NjE2NDdDNDNGNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvpWQDUviewnvw367ySE39pG1M KRYhd/3sNAeuwskxHTrii2FB/LbiEE+xm5Xnu6EbNT/GxUardwA7JX0dZxidjinB 9Ad7t52UCV9F4/zkT/53LFDTTdQTtd8Uwokr7kKVftQPg6AFoa9PPLibk/OYppvk RzCM35WLazuSqy1u3rb+zqz8/1cTZosu/s3Mw/LqFSmaMK9rP282MgNd1XQPjTVT eS7DjrKwEAuNojJMZxLPdicPOf3SfdbTOCEJUVU2Mtslp3sFU5C/k8sBKSSZxW4V NR3ym4TPQhM5qENnwF6lOTtTnrW3irSVRBMOusp8Q0sfsRmYtstp+YB/EToJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSxoC1FQPEhcPI/VwBuqWFkfEP1owHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFijjPY5zp8l9CbQDNQrTBBljN2nd7cHog03 fCA5JyWD04mXToarAmJJUpiLDZ3HU7Kg41/z+oFV6NMfATNoqMAYQ5e4Evh+cGFk GXEbifuLZn7a+D0YxM0dLbUfIuE5iQTujhXz5TUDOYlhnUpU4iEuOaNz7fVMJnCd zNafFtayDEwssMjK33BHd2wbjTpDeB1Wxhx6BojevLzI3v/bihsRhYhksz+cZ5F0 aXW/LdPFiPb/caYRkVs9artjtRSjmMZ8Ru09dtbyANqQF6/43A4ZJx5avN4X0Xw9 P1PM+fxh/sXjR7e19XXJWdMDVqfmMaoUaaVzvUBbZKGhLuvQYYo= -----END CERTIFICATE-----Generated at Wed May 13 06:47:45 2026 by rpki-client