$ rpki-client -vvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: u50btByvAT9tG1I0OM/KlWbNTgCTO0xBHHAzADXOAnk= Subject key identifier: FA:C7:AC:FE:78:E6:73:CA:B7:18:13:DD:75:4A:8C:F6:60:0E:5B:CD Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 56F9DA5B91F66EA98AF6F0D86A98CB5AD1126A3D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 18:48:09 +0000 Manifest this update: Fri 12 Jun 2026 18:43:09 +0000 Manifest next update: Sat 13 Jun 2026 20:59:09 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 2: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: 8NeCnx97gsVDLrhaylj1jVaNXa6sIo6vK3D8GdH3pMw=) 3: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 4: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 20:59:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:f9:da:5b:91:f6:6e:a9:8a:f6:f0:d8:6a:98:cb:5a:d1:12:6a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Jun 12 18:43:09 2026 GMT Not After : Jun 13 20:59:09 2026 GMT Subject: CN=FAC7ACFE78E673CAB71813DD754A8CF6600E5BCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:0a:58:0c:4e:dd:72:84:1b:fe:fa:2b:2b:cc: 4d:0c:05:02:e5:cb:05:68:3c:3e:14:2f:a6:c9:b0: ce:fb:e6:e9:32:ba:b4:54:f0:df:55:38:ac:15:22: 40:53:12:01:6a:1a:c9:1b:92:1c:6a:a0:1a:ff:f8: 71:f7:0f:92:48:5d:23:12:b7:c8:4f:5a:03:5f:97: 53:59:91:d9:7d:f4:8b:62:09:8a:9a:d6:30:12:eb: 1e:9b:15:f9:25:b4:5d:f7:05:f1:d6:46:07:ec:7f: 25:d4:b1:b8:cc:44:38:1d:02:fe:fd:16:9d:32:fe: cb:0b:41:6f:a1:9f:9b:d1:6d:48:2e:5f:7d:ee:61: cd:c3:6e:40:d7:3d:51:fb:3e:55:20:01:bf:92:d8: 69:3e:30:a1:d6:92:dd:26:d2:56:0b:fe:3f:da:2c: f6:ed:ba:c6:30:b8:80:85:e0:09:82:bc:82:1a:10: da:fd:d0:68:9e:94:ca:fa:66:ea:8f:dd:79:b6:f7: 75:04:12:92:18:68:9d:79:5b:2c:8f:13:97:65:b9: 39:9d:1e:6a:c7:5d:4c:78:f3:4e:5a:f7:23:63:bc: 7a:70:85:20:30:6c:63:a9:e0:a8:d4:2d:f9:73:e4: e2:fe:f1:b6:98:10:5d:77:75:d5:fd:0b:d5:9e:04: cd:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:C7:AC:FE:78:E6:73:CA:B7:18:13:DD:75:4A:8C:F6:60:0E:5B:CD X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:84:1a:8e:43:a0:55:35:f6:10:06:0b:a0:5c:b7:0e:79:da: e8:97:56:21:bb:f4:38:00:50:16:e9:0d:62:e0:f5:d8:44:d1: be:5d:0c:64:f5:04:62:ce:31:6b:51:df:a7:09:df:6c:3d:98: 5e:2b:fd:a7:77:0b:ff:b5:ba:ad:a5:c0:6b:ee:07:e2:2b:e3: a5:2c:df:91:c2:32:9b:2c:7c:ea:d2:2a:2e:4b:d8:94:59:69: f2:9c:db:ab:e5:21:86:ca:27:9c:d0:66:39:35:ff:46:3f:51: f6:a2:b0:c4:a6:8a:15:1c:83:84:37:85:7c:b5:ed:24:93:4c: cd:8b:09:5a:87:18:e6:ff:a9:1d:b4:49:08:4f:19:6a:a7:3f: 2c:98:e1:46:fc:d5:63:5d:0e:ff:0b:2b:1a:8e:12:2a:70:48: 19:31:60:6d:b9:ae:6e:bd:f6:b1:af:8f:e2:28:29:10:6d:88: 9f:ff:a1:d9:90:f1:fc:e9:c5:40:7f:3c:cf:59:b1:e7:28:09: 29:46:10:49:2c:80:09:21:49:89:d0:85:6b:b4:ca:1d:f0:14: 55:88:54:bb:da:13:0d:44:15:f7:71:3b:bd:c0:d2:7f:17:51: e7:e6:a1:99:66:05:35:d3:e4:e5:ac:0f:4f:0b:4f:c1:7f:b3: 74:67:99:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvnaW5H2bqmK9vDYapjLWtESaj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA2MTIxODQzMDlaFw0yNjA2MTMyMDU5MDlaMDMxMTAvBgNV BAMTKEZBQzdBQ0ZFNzhFNjczQ0FCNzE4MTNERDc1NEE4Q0Y2NjAwRTVCQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxClgMTt1yhBv++isrzE0MBQLl ywVoPD4UL6bJsM775ukyurRU8N9VOKwVIkBTEgFqGskbkhxqoBr/+HH3D5JIXSMS t8hPWgNfl1NZkdl99ItiCYqa1jAS6x6bFfkltF33BfHWRgfsfyXUsbjMRDgdAv79 Fp0y/ssLQW+hn5vRbUguX33uYc3DbkDXPVH7PlUgAb+S2Gk+MKHWkt0m0lYL/j/a LPbtusYwuICF4AmCvIIaENr90GielMr6ZuqP3Xm293UEEpIYaJ15WyyPE5dluTmd HmrHXUx4805a9yNjvHpwhSAwbGOp4KjULflz5OL+8baYEF13ddX9C9WeBM1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+ses/njmc8q3GBPddUqM9mAOW80wHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyEGo5DoFU19hAGC6Bctw552uiXViG79DgA UBbpDWLg9dhE0b5dDGT1BGLOMWtR36cJ32w9mF4r/ad3C/+1uq2lwGvuB+Ir46Us 35HCMpssfOrSKi5L2JRZafKc26vlIYbKJ5zQZjk1/0Y/UfaisMSmihUcg4Q3hXy1 7SSTTM2LCVqHGOb/qR20SQhPGWqnPyyY4Ub81WNdDv8LKxqOEipwSBkxYG25rm69 9rGvj+IoKRBtiJ//odmQ8fzpxUB/PM9ZsecoCSlGEEksgAkhSYnQhWu0yh3wFFWI VLvaEw1EFfdxO73A0n8XUefmoZlmBTXT5OWsD08LT8F/s3Rnmes= -----END CERTIFICATE-----Generated at Sat Jun 13 12:55:52 2026 by rpki-client