$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: Bj/raqcmIU92b4UkQPxlikJnE24dYl7fJeSytQjiBBo= Subject key identifier: 65:E6:FC:FA:8D:95:55:D3:2F:21:EA:11:7B:4A:12:E7:CD:88:AA:7E Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 30A842FE077FD402BBC5D36FA4A445C36F724420 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: BE Signing time: Tue 22 Sep 2026 10:29:32 +0000 Manifest this update: Tue 22 Sep 2026 10:24:32 +0000 Manifest next update: Wed 23 Sep 2026 13:09:32 +0000 Files and hashes: 1: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: GBbv+SmkXm70aQYHQHP/nu7wJY2b4gPq3SazB0F9v6k=) 2: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) 3: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 4: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 13:09:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:a8:42:fe:07:7f:d4:02:bb:c5:d3:6f:a4:a4:45:c3:6f:72:44:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Sep 22 10:24:32 2026 GMT Not After : Sep 23 13:09:32 2026 GMT Subject: CN=65E6FCFA8D9555D32F21EA117B4A12E7CD88AA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d9:5f:6e:ce:ed:c5:3d:62:bd:56:a2:19:53: 1e:a8:91:17:ce:35:14:f7:a5:c6:ae:48:04:03:98: d1:79:7b:15:7b:79:dd:c1:74:61:de:28:4a:48:d5: 7e:65:86:2e:38:2c:4b:d1:be:d6:94:a7:6d:ac:4f: c5:e1:ce:1e:2d:eb:4a:c0:6b:e0:92:16:44:ca:cf: 1a:01:aa:f6:54:5c:97:d3:f3:a9:9e:12:47:62:90: 14:ad:ee:d9:7e:54:c1:11:9e:14:02:41:d4:b8:aa: 9b:f5:ac:f7:8b:eb:bb:42:cc:43:a3:64:f5:b0:0a: 85:7c:e2:69:00:37:20:13:c6:a1:ea:9a:b5:0e:8d: 8e:0b:1d:a2:96:92:52:c8:57:55:bc:e6:07:0a:2d: d6:f2:c3:6f:f1:b3:71:e5:4e:48:65:72:72:ae:a5: a3:6e:6d:2b:44:30:a2:ce:21:fb:74:45:ee:f8:8c: 88:2f:43:f0:c6:ab:72:f8:fe:e9:9f:de:a5:8a:e8: bb:ad:76:34:96:f7:e0:e2:4c:b4:fe:51:4f:bd:57: f5:9f:f1:f9:12:aa:d4:e3:c2:53:fd:7b:3a:8f:8a: b8:3a:aa:81:16:22:4c:24:64:ad:00:db:f1:e9:ac: 0f:a8:00:42:88:6b:f2:6a:d8:da:ea:55:25:8a:ff: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:E6:FC:FA:8D:95:55:D3:2F:21:EA:11:7B:4A:12:E7:CD:88:AA:7E X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:58:0c:aa:14:eb:7b:4e:2e:6b:76:da:1c:93:0c:9d:26:a0: 9a:eb:d1:4d:05:ff:c3:47:92:3f:07:19:94:8b:ba:d4:a5:76: 14:61:57:52:19:de:cd:5b:ec:b3:b5:bc:82:f8:62:6d:a7:8a: 21:a3:78:6e:9d:51:7c:c1:73:95:1b:c7:0a:d1:18:6f:01:b9: 39:b5:90:2e:11:de:22:95:5d:fc:74:1b:5f:42:c1:c0:4b:ea: 81:73:a5:44:2b:db:57:b5:f7:6d:38:ca:15:65:e5:e8:74:6a: 6a:8f:df:29:00:87:a8:47:b5:dc:c5:ea:b2:f9:b1:d0:b5:91: ee:87:53:38:21:76:6b:5d:93:bd:2f:8c:ce:02:37:2f:aa:36: b7:88:5b:df:d3:e4:e0:56:02:7f:41:a6:08:b0:39:c2:4f:bc: 83:f0:26:2a:48:c6:c6:6f:84:1a:34:aa:18:ab:d0:fe:f9:82: ad:99:c0:28:11:cd:1d:5e:ea:81:7c:e6:04:c4:de:53:38:2b: 5c:52:30:06:03:6d:9c:1c:fd:0a:53:49:3a:62:e9:19:66:a4: a2:a7:ab:9e:9f:6b:95:24:89:c3:5b:94:ca:bc:14:74:35:4f: b1:ce:7e:f4:29:4f:35:3e:8b:79:0b:55:6e:0c:6a:55:d9:76: 9d:69:61:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMKhC/gd/1AK7xdNvpKRFw29yRCAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA5MjIxMDI0MzJaFw0yNjA5MjMxMzA5MzJaMDMxMTAvBgNV BAMTKDY1RTZGQ0ZBOEQ5NTU1RDMyRjIxRUExMTdCNEExMkU3Q0Q4OEFBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2V9uzu3FPWK9VqIZUx6okRfO NRT3pcauSAQDmNF5exV7ed3BdGHeKEpI1X5lhi44LEvRvtaUp22sT8Xhzh4t60rA a+CSFkTKzxoBqvZUXJfT86meEkdikBSt7tl+VMERnhQCQdS4qpv1rPeL67tCzEOj ZPWwCoV84mkANyATxqHqmrUOjY4LHaKWklLIV1W85gcKLdbyw2/xs3HlTkhlcnKu paNubStEMKLOIft0Re74jIgvQ/DGq3L4/umf3qWK6LutdjSW9+DiTLT+UU+9V/Wf 8fkSqtTjwlP9ezqPirg6qoEWIkwkZK0A2/HprA+oAEKIa/Jq2NrqVSWK/xM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZeb8+o2VVdMvIeoRe0oS582Iqn4wHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhYDKoU63tOLmt22hyTDJ0moJrr0U0F/8NH kj8HGZSLutSldhRhV1IZ3s1b7LO1vIL4Ym2niiGjeG6dUXzBc5UbxwrRGG8BuTm1 kC4R3iKVXfx0G19CwcBL6oFzpUQr21e19204yhVl5eh0amqP3ykAh6hHtdzF6rL5 sdC1ke6HUzghdmtdk70vjM4CNy+qNreIW9/T5OBWAn9BpgiwOcJPvIPwJipIxsZv hBo0qhir0P75gq2ZwCgRzR1e6oF85gTE3lM4K1xSMAYDbZwc/QpTSTpi6RlmpKKn q56fa5UkicNblMq8FHQ1T7HOfvQpTzU+i3kLVW4MalXZdp1pYeo= -----END CERTIFICATE-----Generated at Tue Sep 22 22:28:24 2026 by rpki-client