$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: Pyp+s3DHKd5rD8glplPeHeEJbOrN9LKr1phqV7Y1RhI= Subject key identifier: EF:AA:96:02:62:C2:21:87:F4:CC:F8:EC:02:E2:93:FB:EA:52:09:AF Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 427EAF2E0D07C8471017C43B8429518AB40FD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:16:49 +0000 Manifest this update: Tue 22 Sep 2026 04:11:49 +0000 Manifest next update: Wed 23 Sep 2026 07:43:49 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: JlO1Ein2CO16mYg9S1Pj4GEYILFHaMbMW+8oEUs02N0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:7e:af:2e:0d:07:c8:47:10:17:c4:3b:84:29:51:8a:b4:0f:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: Sep 22 04:11:49 2026 GMT Not After : Sep 23 07:43:49 2026 GMT Subject: CN=EFAA960262C22187F4CCF8EC02E293FBEA5209AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:98:20:ae:f5:f6:ce:02:96:e5:a9:c9:57:49: 24:77:5e:83:14:d4:0c:b3:a0:5b:4c:6c:95:17:fc: e4:a4:9a:83:f7:d6:52:10:9b:54:61:3d:2c:36:ca: 81:c7:1d:a6:22:3b:cc:13:a7:c8:d8:69:9a:a7:17: c0:00:f7:30:7b:6d:a8:33:87:d6:18:43:af:4b:31: 94:58:e3:aa:51:15:bb:2a:7b:28:8e:c8:e8:72:52: b5:11:e6:df:0c:2e:ef:7b:06:f0:8d:ac:59:7f:f3: e8:db:16:84:ae:45:3a:32:11:1f:fa:04:3c:d4:5e: a4:80:51:f0:09:ce:ed:17:22:9b:49:79:d3:8f:79: 36:e4:37:4d:f8:8e:72:93:4f:70:7e:dd:ab:b6:3f: f4:97:ae:69:86:d3:ff:19:07:45:7b:73:45:3d:ec: fe:4c:29:c4:fa:7f:e7:83:c2:1f:dc:9c:7a:f5:3f: fe:ff:ff:96:65:f0:20:c4:2a:07:df:74:87:4d:52: 18:3a:e3:7a:72:24:c3:af:0a:94:e0:fc:2c:07:e2: f7:8e:40:c1:94:44:10:95:b1:cb:2c:e0:89:54:35: c7:fa:22:e5:72:34:50:5b:89:1e:1b:e4:4a:d3:9d: 2d:ad:8c:ee:e2:85:8b:25:74:b5:3d:c4:04:7d:ca: 57:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:AA:96:02:62:C2:21:87:F4:CC:F8:EC:02:E2:93:FB:EA:52:09:AF X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:98:05:03:76:ca:60:cd:c4:60:09:92:3f:8a:61:93:87:1f: 9c:3c:9f:93:79:02:1b:20:0b:06:23:d4:a2:ca:e7:83:e3:e9: 6e:f2:6b:cb:a6:3c:0b:1f:5a:96:71:e1:05:75:e0:0a:5f:dc: 4c:07:5d:77:da:a3:8a:8d:6e:fb:c5:05:ec:58:ed:34:5a:12: 1a:21:8a:68:a4:c4:5a:28:2c:b4:4d:48:28:da:aa:37:b1:72: a9:b1:6b:e3:a5:31:15:22:69:a1:e3:52:35:e7:1c:5a:66:b3: d3:9e:b5:4e:0e:48:6a:ec:21:b5:59:62:bd:a1:cd:8f:25:c2: 8a:f4:b3:eb:b0:b4:da:5e:fa:85:c2:f4:12:d2:84:fa:fa:bc: ad:39:f0:d2:37:24:5c:6a:92:3c:21:2b:cc:f0:5f:6c:95:b4: a5:1c:f5:d9:1e:a6:8d:2e:d4:62:e9:86:06:9e:83:94:63:8d: 53:af:b8:fc:28:0d:80:4f:d5:c5:5f:3a:b3:38:62:a3:81:5d: 6f:60:9c:fb:55:0d:2d:c7:53:db:95:88:01:0c:2d:77:65:91: fe:0a:89:b5:8a:d4:af:b8:df:35:a0:c3:98:6a:d2:24:63:af: 27:57:99:5e:57:d8:72:aa:f1:c2:ad:0e:2c:3d:52:a7:02:dc: cb:28:7f:ed -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITQn6vLg0HyEcQF8Q7hClRirQP2TANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg4NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4 NEYzOUUxMB4XDTI2MDkyMjA0MTE0OVoXDTI2MDkyMzA3NDM0OVowMzExMC8GA1UE AxMoRUZBQTk2MDI2MkMyMjE4N0Y0Q0NGOEVDMDJFMjkzRkJFQTUyMDlBRjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMOYIK719s4CluWpyVdJJHdegxTU DLOgW0xslRf85KSag/fWUhCbVGE9LDbKgccdpiI7zBOnyNhpmqcXwAD3MHttqDOH 1hhDr0sxlFjjqlEVuyp7KI7I6HJStRHm3wwu73sG8I2sWX/z6NsWhK5FOjIRH/oE PNRepIBR8AnO7Rcim0l50495NuQ3TfiOcpNPcH7dq7Y/9JeuaYbT/xkHRXtzRT3s /kwpxPp/54PCH9ycevU//v//lmXwIMQqB990h01SGDrjenIkw68KlOD8LAfi945A wZREEJWxyyzgiVQ1x/oi5XI0UFuJHhvkStOdLa2M7uKFiyV0tT3EBH3KV38CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTvqpYCYsIhh/TM+OwC4pP76lIJrzAfBgNVHSME GDAWgBSGbX0SVtb5NaNGvLUcPnStCE854TAOBgNVHQ8BAf8EBAMCB4AwgYYGA1Ud HwR/MH0we6B5oHeGdXJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8z N2IzMzQxMi1iZTViLTQ2M2UtODIzMy05ZWFiODQ4YTU5NzYvMC84NjZEN0QxMjU2 RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYzOUUxLmNybDByBggrBgEFBQcBAQRm MGQwYgYIKwYBBQUHMAKGVnJzeW5jOi8vcnBraS1yc3luYy5pZG5pYy5uZXQvcmVw by9JRE5JQy8xLzg2NkQ3RDEyNTZENkY5MzVBMzQ2QkNCNTFDM0U3NEFEMDg0RjM5 RTEuY2VyMIGUBggrBgEFBQcBCwSBhzCBhDCBgQYIKwYBBQUHMAuGdXJzeW5jOi8v cnBraS1yc3luYy5pZG5pYy5uZXQvcmVwby8zN2IzMzQxMi1iZTViLTQ2M2UtODIz My05ZWFiODQ4YTU5NzYvMC84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRB RDA4NEYzOUUxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAXZgFA3bKYM3EYAmSP4phk4cfnDyfk3kCGyAL BiPUosrng+PpbvJry6Y8Cx9alnHhBXXgCl/cTAddd9qjio1u+8UF7FjtNFoSGiGK aKTEWigstE1IKNqqN7FyqbFr46UxFSJpoeNSNeccWmaz0561Tg5IauwhtVlivaHN jyXCivSz67C02l76hcL0EtKE+vq8rTnw0jckXGqSPCErzPBfbJW0pRz12R6mjS7U YumGBp6DlGONU6+4/CgNgE/VxV86szhio4Fdb2Cc+1UNLcdT25WIAQwtd2WR/gqJ tYrUr7jfNaDDmGrSJGOvJ1eZXlfYcqrxwq0OLD1SpwLcyyh/7Q== -----END CERTIFICATE-----Generated at Wed Sep 23 00:12:09 2026 by rpki-client