$ rpki-client -vvf rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft File: 86E48412E2794F23453AA6C42466D4F6BB140BF3.mft (raw, json) Hash identifier: AiNqLhBs4bhfu5js3aQKGSo58/LLyVRzSoqUCdkOSAQ= Subject key identifier: 7F:8E:26:E5:80:AA:5F:BC:2D:37:2D:1F:F6:FD:4C:E5:8C:63:66:1D Authority key identifier: 86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 Certificate issuer: /CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Certificate serial: 34AE6073DDC5F2632D03B3222C8D3EBC1B40EEA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 16:35:08 +0000 Manifest this update: Thu 23 Jul 2026 16:30:08 +0000 Manifest next update: Fri 24 Jul 2026 20:22:08 +0000 Files and hashes: 1: 3130332e312e35302e302f32342d3234203d3e20313432333532.roa (hash: CQAOmVL0BeVkZhMKlloB0D2ChI2dfaXB8o923+9beY0=) 2: 86E48412E2794F23453AA6C42466D4F6BB140BF3.crl (hash: CzWrahnge49YO0aDiRENOhBtPFOAeGbwHckpKJk3zcI=) 3: 3130332e312e35302e302f32332d3233203d3e20313432333532.roa (hash: WkCdOFNVSI5rk7RbyP6H8qiF2D1vxHG5abEVefnC5z0=) 4: 3130332e312e35312e302f32342d3234203d3e20313432333532.roa (hash: h4rEvajucquztFw9Gur1NLOrixjikXkabRvpRGsZe/g=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 20:22:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ae:60:73:dd:c5:f2:63:2d:03:b3:22:2c:8d:3e:bc:1b:40:ee:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=86E48412E2794F23453AA6C42466D4F6BB140BF3 Validity Not Before: Jul 23 16:30:08 2026 GMT Not After : Jul 24 20:22:08 2026 GMT Subject: CN=7F8E26E580AA5FBC2D372D1FF6FD4CE58C63661D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a2:b4:d2:41:b8:48:71:b7:df:65:0b:6d:4a: cc:0a:84:aa:a8:71:c2:0f:f7:22:d5:16:c4:23:c5: 39:17:95:5d:76:5c:ef:c2:83:75:0d:92:c7:fa:de: ea:04:b7:70:06:34:1e:2f:fc:09:5c:13:67:71:7a: 86:57:77:5c:d8:d5:81:8c:68:f5:51:8d:99:ad:12: e9:fe:24:62:02:ec:05:8a:6f:45:cf:1d:ec:56:c8: 43:b1:c9:ea:81:de:73:07:34:aa:3a:d3:a8:cb:14: f4:1c:2c:a5:fa:db:e2:15:68:8a:b7:59:f5:95:97: 8a:dc:38:b3:58:54:ff:d8:d1:dc:cb:98:0f:ec:c3: 68:7f:eb:b3:28:6b:00:f6:03:bf:ad:04:06:4e:43: 47:b1:1d:3b:ed:13:82:17:ec:b7:dd:7a:e6:56:18: a0:e4:27:fe:5c:96:35:2e:4b:00:2c:46:12:15:2e: d2:ee:e5:dd:09:e4:5a:61:ce:b7:c0:fa:ed:f7:50: 02:aa:98:90:3c:b9:fc:1e:ae:a8:25:bd:77:8a:34: 5e:17:14:11:ba:13:1b:4d:1c:1e:55:5d:ef:c8:2e: e4:d5:06:38:28:c3:3e:b3:bc:e3:b9:bd:41:86:17: 84:df:b9:21:b7:c0:50:48:f9:f2:d4:c6:31:bc:96: 4c:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:8E:26:E5:80:AA:5F:BC:2D:37:2D:1F:F6:FD:4C:E5:8C:63:66:1D X509v3 Authority Key Identifier: keyid:86:E4:84:12:E2:79:4F:23:45:3A:A6:C4:24:66:D4:F6:BB:14:0B:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/86E48412E2794F23453AA6C42466D4F6BB140BF3.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/86E48412E2794F23453AA6C42466D4F6BB140BF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:b8:19:56:ce:d6:0a:8b:c9:33:80:16:73:ab:4c:f6:ee:8f: 67:b2:64:37:b9:f2:40:26:7d:fa:21:e8:df:b6:bf:08:5e:02: bd:bb:f6:26:6e:ed:5f:35:29:b6:ed:c4:e3:db:14:1a:19:d2: 37:96:4b:65:8c:90:40:c7:46:a0:79:5d:6f:3b:a7:ba:2e:3d: 54:c1:84:51:db:75:c0:ae:58:c2:79:83:6b:4b:1e:0c:ac:92: d4:e4:57:ab:5c:45:35:4b:07:c1:bc:86:f5:30:aa:7f:b6:e6: b0:b4:e3:5e:f4:d8:9b:f7:81:cf:ab:10:6c:6e:88:a9:fc:77: c4:8f:4e:b0:fe:6d:6e:80:bf:d1:e2:15:66:36:eb:a9:cc:45: bc:73:63:16:3d:4e:6f:43:74:a8:56:76:7f:9e:dd:86:0d:3d: 31:9a:b9:07:97:90:de:cf:36:ed:5c:04:c7:95:e8:1e:3a:29: 22:36:9b:95:37:6a:04:03:2d:4b:d0:cb:d7:65:86:dc:48:1d: 52:0b:e6:93:ba:fb:72:de:19:ea:29:16:32:b4:6e:09:ef:d0: 54:b4:76:de:b7:65:b9:d7:84:8a:8e:41:11:52:3d:94:f6:ec: ba:c2:56:98:60:62:2b:b0:55:72:c6:e5:a7:12:c7:60:3a:46: cd:b7:c2:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNK5gc93F8mMtA7MiLI0+vBtA7qIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZC QjE0MEJGMzAeFw0yNjA3MjMxNjMwMDhaFw0yNjA3MjQyMDIyMDhaMDMxMTAvBgNV BAMTKDdGOEUyNkU1ODBBQTVGQkMyRDM3MkQxRkY2RkQ0Q0U1OEM2MzY2MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMorTSQbhIcbffZQttSswKhKqo ccIP9yLVFsQjxTkXlV12XO/Cg3UNksf63uoEt3AGNB4v/AlcE2dxeoZXd1zY1YGM aPVRjZmtEun+JGIC7AWKb0XPHexWyEOxyeqB3nMHNKo606jLFPQcLKX62+IVaIq3 WfWVl4rcOLNYVP/Y0dzLmA/sw2h/67MoawD2A7+tBAZOQ0exHTvtE4IX7LfdeuZW GKDkJ/5cljUuSwAsRhIVLtLu5d0J5FphzrfA+u33UAKqmJA8ufwerqglvXeKNF4X FBG6ExtNHB5VXe/ILuTVBjgowz6zvOO5vUGGF4TfuSG3wFBI+fLUxjG8lky5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf44m5YCqX7wtNy0f9v1M5YxjZh0wHwYDVR0j BBgwFoAUhuSEEuJ5TyNFOqbEJGbU9rsUC/MwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjY1MmJmOWMtNjM0Yi00MGI5LWFjMGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJF Mjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0RjZCQjE0MEJGMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NkU0ODQxMkUyNzk0RjIzNDUzQUE2QzQyNDY2RDRGNkJCMTQw QkYzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjY1MmJmOWMtNjM0Yi00MGI5LWFj MGMtYTg3YjQ3ZDU5ZjkxLzAvODZFNDg0MTJFMjc5NEYyMzQ1M0FBNkM0MjQ2NkQ0 RjZCQjE0MEJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIC4GVbO1gqLyTOAFnOrTPbuj2eyZDe58kAm ffoh6N+2vwheAr279iZu7V81KbbtxOPbFBoZ0jeWS2WMkEDHRqB5XW87p7ouPVTB hFHbdcCuWMJ5g2tLHgysktTkV6tcRTVLB8G8hvUwqn+25rC041702Jv3gc+rEGxu iKn8d8SPTrD+bW6Av9HiFWY266nMRbxzYxY9Tm9DdKhWdn+e3YYNPTGauQeXkN7P Nu1cBMeV6B46KSI2m5U3agQDLUvQy9dlhtxIHVIL5pO6+3LeGeopFjK0bgnv0FS0 dt63ZbnXhIqOQRFSPZT27LrCVphgYiuwVXLG5acSx2A6Rs23wgk= -----END CERTIFICATE-----Generated at Fri Jul 24 06:37:24 2026 by rpki-client