$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: xBVPf/DnXGY38FnAYcNesJa7iHm+ZwGnWIkxuudOXlc= Subject key identifier: 9E:02:DD:91:C2:E3:89:FA:B8:2F:49:5E:54:7B:36:6A:CD:1A:E7:B2 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 537D0387446B380AE9466D25990623A2083F5F04 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:40:58 +0000 Manifest this update: Wed 17 Jun 2026 10:35:58 +0000 Manifest next update: Thu 18 Jun 2026 11:51:58 +0000 Files and hashes: 1: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 2: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 3: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 4: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 5: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 6: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 7: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 8: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: jqstMy1C2FKWn3rfgmtlLnkJTlIGsH21THawsUddBkg=) 9: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 10: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 11: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 12: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 13: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 14: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 15: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 16: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 17: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 18: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 19: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7d:03:87:44:6b:38:0a:e9:46:6d:25:99:06:23:a2:08:3f:5f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Jun 17 10:35:58 2026 GMT Not After : Jun 18 11:51:58 2026 GMT Subject: CN=9E02DD91C2E389FAB82F495E547B366ACD1AE7B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:3f:4d:22:eb:b6:61:7e:6e:8a:1e:e2:a7:24: 2a:fe:77:16:84:f8:c3:fd:90:53:0a:78:01:81:b4: 53:a0:f9:9a:3c:76:1c:5d:33:bf:e6:b1:1d:06:39: 2c:cc:e1:56:21:f3:c9:67:34:22:75:b5:82:01:ca: 71:41:30:0f:d8:41:25:1f:9a:b9:61:e6:c5:e1:c8: 72:84:94:94:e3:f7:1f:43:c4:63:72:ed:a1:a6:7d: b2:08:20:46:52:f3:14:98:7d:10:b3:3f:7b:e6:87: 8f:64:6f:21:85:86:5c:61:62:04:d4:40:71:45:12: 0b:aa:54:63:04:41:0b:e0:f6:2f:ec:03:06:a8:7c: 61:70:3f:8d:4a:0e:00:48:77:0d:64:f1:cf:74:72: 90:83:18:b7:e3:a2:0c:73:e8:b9:90:95:c9:38:10: 4a:78:87:dd:3d:f7:f5:da:30:d7:93:14:82:1f:45: 75:69:17:1b:bd:9b:bc:4a:bb:2a:d6:57:1a:2e:96: c8:b9:72:03:ee:2d:8d:fe:a7:3a:a3:2e:ab:98:ea: b2:43:82:14:74:0e:0a:49:fe:11:69:56:88:81:a0: 05:39:6d:df:1d:d0:ed:2b:7d:70:77:0e:c1:e0:0d: a5:d1:66:b0:81:c8:7f:bf:1d:dd:99:37:ca:34:d4: 13:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:02:DD:91:C2:E3:89:FA:B8:2F:49:5E:54:7B:36:6A:CD:1A:E7:B2 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:6d:64:41:b2:73:9a:2b:20:73:87:2c:c2:a6:2f:25:1c:2f: 2c:ec:5b:d8:9c:15:dd:e1:da:89:a8:74:ba:4e:ba:59:f2:cc: a2:06:2c:03:67:e3:9f:1e:61:cc:bf:5e:ad:fc:ef:80:9b:e8: 46:95:c0:80:69:4f:80:e5:4a:be:7f:a2:dd:bf:d8:b7:32:58: a5:87:2d:55:fd:f3:61:44:5a:8a:7b:4b:1d:5e:8a:51:cd:70: 12:bb:22:6c:f1:cd:38:fc:87:b5:31:1a:f8:71:fa:78:0f:d6: a4:62:ef:f9:3c:3b:35:56:f8:a0:6a:c8:1d:1e:83:fd:f4:93: 80:f4:79:b2:95:0c:17:36:7b:fb:6a:74:a5:53:87:dd:fb:0e: 4e:81:d6:b2:7b:62:dd:2a:65:6d:90:a1:95:9b:31:d4:2b:22: fc:64:50:0d:34:7d:36:46:8f:09:69:fe:09:21:7a:d0:61:8a: a4:af:69:88:1b:82:1b:b6:a2:ec:f1:65:a0:f0:2b:41:28:72: a3:a3:e8:e8:81:f2:1a:be:ba:53:f7:b5:3b:c9:08:2d:9f:4e: ca:dd:88:9e:6f:1c:52:10:03:60:e2:5a:f5:ac:73:bd:91:32: f4:3f:0d:03:61:40:f2:35:8f:7c:b3:6d:60:48:68:f8:d3:1f: 48:c0:ca:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU30Dh0RrOArpRm0lmQYjogg/XwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA2MTcxMDM1NThaFw0yNjA2MTgxMTUxNThaMDMxMTAvBgNV BAMTKDlFMDJERDkxQzJFMzg5RkFCODJGNDk1RTU0N0IzNjZBQ0QxQUU3QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDP00i67Zhfm6KHuKnJCr+dxaE +MP9kFMKeAGBtFOg+Zo8dhxdM7/msR0GOSzM4VYh88lnNCJ1tYIBynFBMA/YQSUf mrlh5sXhyHKElJTj9x9DxGNy7aGmfbIIIEZS8xSYfRCzP3vmh49kbyGFhlxhYgTU QHFFEguqVGMEQQvg9i/sAwaofGFwP41KDgBIdw1k8c90cpCDGLfjogxz6LmQlck4 EEp4h9099/XaMNeTFIIfRXVpFxu9m7xKuyrWVxoulsi5cgPuLY3+pzqjLquY6rJD ghR0DgpJ/hFpVoiBoAU5bd8d0O0rfXB3DsHgDaXRZrCByH+/Hd2ZN8o01BPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUngLdkcLjifq4L0leVHs2as0a57IwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5tZEGyc5orIHOHLMKmLyUcLyzsW9icFd3h 2omodLpOulnyzKIGLANn458eYcy/Xq3874Cb6EaVwIBpT4DlSr5/ot2/2LcyWKWH LVX982FEWop7Sx1eilHNcBK7ImzxzTj8h7UxGvhx+ngP1qRi7/k8OzVW+KBqyB0e g/30k4D0ebKVDBc2e/tqdKVTh937Dk6B1rJ7Yt0qZW2QoZWbMdQrIvxkUA00fTZG jwlp/gkhetBhiqSvaYgbghu2ouzxZaDwK0EocqOj6OiB8hq+ulP3tTvJCC2fTsrd iJ5vHFIQA2DiWvWsc72RMvQ/DQNhQPI1j3yzbWBIaPjTH0jAytQ= -----END CERTIFICATE-----Generated at Wed Jun 17 15:10:49 2026 by rpki-client