$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: 8GDfWJvto9h+namNIu1yEYg2IJA7UxqAF/kBwg1ABiY= Subject key identifier: B2:A5:0C:D9:AA:62:80:4B:45:48:28:5B:75:B4:92:6D:F8:D0:AC:51 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 4D61D9E34D69DD75A756CA50E049FC6A65197C65 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 06:54:17 +0000 Manifest this update: Thu 24 Sep 2026 06:49:17 +0000 Manifest next update: Fri 25 Sep 2026 07:44:17 +0000 Files and hashes: 1: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 2: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 3: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 4: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 5: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 6: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 7: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 8: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 9: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 10: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 11: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 12: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 13: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 14: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 15: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 16: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 17: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: vbf9+BPAaiGJ7N4DlYpKcOEXgCw5YKzIS65fVhaE4ak=) 18: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 19: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 07:44:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:d9:e3:4d:69:dd:75:a7:56:ca:50:e0:49:fc:6a:65:19:7c:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Sep 24 06:49:17 2026 GMT Not After : Sep 25 07:44:17 2026 GMT Subject: CN=B2A50CD9AA62804B4548285B75B4926DF8D0AC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:0d:9c:a8:52:5b:17:af:04:d3:db:96:cb:5e: 36:be:f5:6c:4a:20:8d:ee:7e:09:6b:09:35:6e:de: 8a:ce:ee:c5:b6:2c:bf:bf:c4:44:93:35:46:bd:a6: c4:12:eb:8a:cf:f2:fa:8d:e7:72:af:99:f4:fa:a2: 8b:7c:b0:73:48:47:54:97:ce:87:78:41:59:f2:77: cf:d4:b9:16:f2:5a:84:4c:3c:08:4a:1e:cb:69:08: 4c:32:f6:88:a1:65:33:e2:f6:ae:a1:d7:89:c5:ed: 63:50:2d:3d:be:f0:58:6f:84:7c:1e:3c:96:c4:0f: 7f:85:b9:a5:f6:31:71:38:63:c6:ff:f2:31:87:ac: 7c:ce:4c:58:db:8e:31:39:2d:3d:34:f4:b0:37:46: 32:60:82:c0:66:7c:03:e4:a2:5a:54:76:4c:f8:ab: 47:49:4d:9e:e9:4f:45:c3:8e:ec:31:4a:1c:eb:88: b8:df:74:fa:c1:e8:ea:0a:1d:6c:5d:08:b1:84:4b: 99:fe:67:9d:e3:1a:2d:7c:47:e3:39:b5:fd:c3:38: 01:81:f5:d5:1b:2f:87:9c:cb:fe:9f:e6:05:5e:b5: ff:5e:91:51:8e:2d:95:43:8c:e1:5e:96:d0:d8:e3: d7:f1:51:64:5e:22:f9:73:d4:db:4a:9e:15:2f:92: d8:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:A5:0C:D9:AA:62:80:4B:45:48:28:5B:75:B4:92:6D:F8:D0:AC:51 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a4:2a:09:6f:b7:bd:43:e8:83:2c:17:7b:cd:80:d2:40:d7: e9:b8:7d:a2:74:5f:c2:a0:08:b3:54:f1:5e:98:c1:ce:ce:01: e4:b5:e8:15:47:f1:93:17:d4:99:07:57:b9:df:97:db:02:e9: 92:54:25:89:69:39:19:42:ea:5d:d3:df:37:dc:c6:89:c0:4f: 20:3a:c4:94:c6:79:18:fe:56:a5:9e:c7:5b:9d:94:a3:64:31: 60:a2:ac:c7:22:90:d8:aa:4c:d4:90:8f:9c:0f:1b:fc:9a:16: 63:62:90:8c:fe:81:ea:fe:e2:83:4c:61:b8:bb:f5:e9:02:d7: b7:91:dc:97:22:ac:1a:11:58:3e:08:18:ec:43:af:da:bf:07: d7:27:7c:cf:14:45:f6:ba:a1:5e:95:74:81:29:16:79:6e:cf: 04:12:be:b0:ac:b7:cf:48:a9:2a:ba:56:b7:a6:8c:19:1b:1d: 5a:ee:f5:22:91:f0:98:4f:59:5b:68:12:51:4a:c0:cc:98:f7: 9a:8a:98:ee:da:08:b2:c0:d0:4c:b6:d6:12:b1:dd:16:4a:32: e9:eb:f3:c3:55:dd:3e:6d:95:02:03:73:9b:c4:00:b3:18:75: d0:bc:08:10:7d:ea:76:11:82:2f:bc:e3:16:39:1b:83:8d:86: e7:f4:c5:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWHZ401p3XWnVspQ4En8amUZfGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA5MjQwNjQ5MTdaFw0yNjA5MjUwNzQ0MTdaMDMxMTAvBgNV BAMTKEIyQTUwQ0Q5QUE2MjgwNEI0NTQ4Mjg1Qjc1QjQ5MjZERjhEMEFDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFDZyoUlsXrwTT25bLXja+9WxK II3ufglrCTVu3orO7sW2LL+/xESTNUa9psQS64rP8vqN53KvmfT6oot8sHNIR1SX zod4QVnyd8/UuRbyWoRMPAhKHstpCEwy9oihZTPi9q6h14nF7WNQLT2+8FhvhHwe PJbED3+FuaX2MXE4Y8b/8jGHrHzOTFjbjjE5LT009LA3RjJggsBmfAPkolpUdkz4 q0dJTZ7pT0XDjuwxShzriLjfdPrB6OoKHWxdCLGES5n+Z53jGi18R+M5tf3DOAGB 9dUbL4ecy/6f5gVetf9ekVGOLZVDjOFeltDY49fxUWReIvlz1NtKnhUvkthfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsqUM2apigEtFSChbdbSSbfjQrFEwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKkKglvt71D6IMsF3vNgNJA1+m4faJ0X8Kg CLNU8V6Ywc7OAeS16BVH8ZMX1JkHV7nfl9sC6ZJUJYlpORlC6l3T3zfcxonATyA6 xJTGeRj+VqWex1udlKNkMWCirMcikNiqTNSQj5wPG/yaFmNikIz+ger+4oNMYbi7 9ekC17eR3JcirBoRWD4IGOxDr9q/B9cnfM8URfa6oV6VdIEpFnluzwQSvrCst89I qSq6VremjBkbHVru9SKR8JhPWVtoElFKwMyY95qKmO7aCLLA0Ey21hKx3RZKMunr 88NV3T5tlQIDc5vEALMYddC8CBB96nYRgi+84xY5G4ONhuf0xYA= -----END CERTIFICATE-----Generated at Thu Sep 24 21:27:56 2026 by rpki-client