$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: dzJ3kus5G/hcOB69BzqH5GrKu2XIKMjIpKsCu6NbABA= Subject key identifier: 3E:25:E1:E7:2C:8E:E4:8B:BF:33:01:C9:D5:9D:FC:0F:71:08:B0:8D Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 4E07CDC60FDCAE53FADCA78B04BA7BD0F92521FE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: C9 Signing time: Tue 29 Sep 2026 23:23:41 +0000 Manifest this update: Tue 29 Sep 2026 23:18:41 +0000 Manifest next update: Thu 01 Oct 2026 02:30:41 +0000 Files and hashes: 1: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 2: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) 3: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: LEuAlgy2v+Vz4h3g6l8nJXjKAVaFTHoojuMe2/H+hFA=) 4: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 02:30:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:07:cd:c6:0f:dc:ae:53:fa:dc:a7:8b:04:ba:7b:d0:f9:25:21:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Sep 29 23:18:41 2026 GMT Not After : Oct 1 02:30:41 2026 GMT Subject: CN=3E25E1E72C8EE48BBF3301C9D59DFC0F7108B08D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1a:b4:b2:ac:40:18:4e:6b:ce:48:30:ac:8f: b1:9f:9e:61:2e:4c:19:06:0a:bc:17:02:4d:2f:e1: 09:52:81:33:9b:e7:48:c2:76:66:5a:d9:dc:8c:94: 39:72:44:bd:87:d1:9d:37:b2:4b:71:89:56:30:17: df:21:6b:72:ba:6b:12:7c:17:e6:75:26:44:71:ac: f2:37:1b:9a:76:6d:a8:90:62:c2:fa:90:ce:d2:aa: f7:28:f4:d2:2a:ca:56:b1:c3:89:a8:f6:f1:5c:bf: 3d:9f:c7:71:0f:13:22:cd:59:09:4d:84:51:c6:56: 39:31:aa:59:42:46:e1:34:d7:0f:6a:4c:42:77:e5: 39:82:d8:0a:3d:da:29:b9:04:3a:21:9b:3f:a9:91: ff:4c:a6:3a:ac:cf:db:b8:2d:6e:8b:22:85:f8:e9: 0c:b3:84:88:7f:ad:dd:aa:e0:1c:d8:50:8c:ac:50: bf:a6:25:c9:80:93:d4:d6:2b:6e:ad:03:3d:6c:20: 04:c2:c1:bd:db:0a:06:ad:b2:89:23:ce:05:bd:dd: 0e:a8:8e:cc:d3:1b:5c:10:0f:d1:e5:4c:2a:eb:59: 7c:ba:99:f0:0c:f9:61:43:6f:a3:7f:f6:d2:31:3f: 88:15:99:1a:35:1b:5f:f1:9f:ad:6b:2e:ca:b1:e0: 6b:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:25:E1:E7:2C:8E:E4:8B:BF:33:01:C9:D5:9D:FC:0F:71:08:B0:8D X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c8:50:06:01:4d:42:ae:ea:d8:22:27:4d:81:17:e8:ef:b4: ab:57:4e:b9:da:f9:3b:e9:37:38:ea:21:f6:8f:ea:39:83:3e: d7:cd:ab:3a:95:1e:c8:b4:ba:60:6f:15:39:0e:fc:e6:3e:a8: ca:62:86:07:14:e7:37:b8:fb:06:98:4d:3f:10:36:6a:a0:76: 55:97:10:b2:a5:ff:43:f4:6e:1b:f7:60:e8:0b:3a:d7:a2:12: 6f:ab:ca:e0:81:df:f3:44:2b:d9:0a:2d:50:68:b6:d3:d8:99: 80:25:e8:7b:6c:28:f3:c3:fa:ac:6a:6e:58:d4:61:de:b7:d6: a2:ef:11:94:47:9b:e5:9b:09:ed:f9:42:08:14:2d:f7:19:ec: d5:fb:1b:96:af:c2:91:ee:d9:48:80:56:99:d4:74:83:45:42: f6:dc:47:62:69:d9:13:2c:b6:41:e3:01:ab:b4:d3:6f:00:3f: d0:19:9e:68:d7:6e:a3:d9:5c:3c:36:58:3c:3a:ff:94:ec:e2: b1:67:db:a4:b9:88:48:ee:26:39:29:41:c3:fe:10:c4:db:75: 19:41:cf:1f:37:b4:83:d3:97:a6:81:d4:56:6c:d1:fd:8e:c7: 61:52:6a:c8:0c:81:bb:ed:fb:68:60:92:8d:31:fa:0b:22:5f: 77:8b:9a:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgfNxg/crlP63KeLBLp70PklIf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjA5MjkyMzE4NDFaFw0yNjEwMDEwMjMwNDFaMDMxMTAvBgNV BAMTKDNFMjVFMUU3MkM4RUU0OEJCRjMzMDFDOUQ1OURGQzBGNzEwOEIwOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GrSyrEAYTmvOSDCsj7GfnmEu TBkGCrwXAk0v4QlSgTOb50jCdmZa2dyMlDlyRL2H0Z03sktxiVYwF98ha3K6axJ8 F+Z1JkRxrPI3G5p2baiQYsL6kM7Sqvco9NIqylaxw4mo9vFcvz2fx3EPEyLNWQlN hFHGVjkxqllCRuE01w9qTEJ35TmC2Ao92im5BDohmz+pkf9Mpjqsz9u4LW6LIoX4 6QyzhIh/rd2q4BzYUIysUL+mJcmAk9TWK26tAz1sIATCwb3bCgatsokjzgW93Q6o jszTG1wQD9HlTCrrWXy6mfAM+WFDb6N/9tIxP4gVmRo1G1/xn61rLsqx4GuZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPiXh5yyO5Iu/MwHJ1Z38D3EIsI0wHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvIUAYBTUKu6tgiJ02BF+jvtKtXTrna+Tvp NzjqIfaP6jmDPtfNqzqVHsi0umBvFTkO/OY+qMpihgcU5ze4+waYTT8QNmqgdlWX ELKl/0P0bhv3YOgLOteiEm+ryuCB3/NEK9kKLVBottPYmYAl6HtsKPPD+qxqbljU Yd631qLvEZRHm+WbCe35QggULfcZ7NX7G5avwpHu2UiAVpnUdINFQvbcR2Jp2RMs tkHjAau0028AP9AZnmjXbqPZXDw2WDw6/5Ts4rFn26S5iEjuJjkpQcP+EMTbdRlB zx83tIPTl6aB1FZs0f2Ox2FSasgMgbvt+2hgko0x+gsiX3eLmqQ= -----END CERTIFICATE-----Generated at Wed Sep 30 13:30:25 2026 by rpki-client