$ rpki-client -vvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: g7RGBnNqJqsf5f//s3XeEO0zBYZd4aw74ZO+m4zsMAI= Subject key identifier: 50:7F:3A:B4:9C:B5:25:A4:51:18:30:0D:22:8E:3F:0C:25:95:24:6D Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 6C51A84195C31358DF38665BCA6ED3668114FD4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 09:04:02 +0000 Manifest this update: Wed 17 Jun 2026 08:59:02 +0000 Manifest next update: Thu 18 Jun 2026 13:03:02 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: QIKI4Yec19+6mH5D0CfPwC173CXAvlczmiasICz1FMk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:51:a8:41:95:c3:13:58:df:38:66:5b:ca:6e:d3:66:81:14:fd:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: Jun 17 08:59:02 2026 GMT Not After : Jun 18 13:03:02 2026 GMT Subject: CN=507F3AB49CB525A45118300D228E3F0C2595246D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:19:c2:4e:03:69:a3:00:4e:dc:ca:53:01: 25:68:82:b6:2e:41:40:e3:b8:65:a1:d8:c8:f4:24: aa:91:be:2b:9f:90:c4:0c:83:70:22:50:43:95:c0: 2f:1c:81:23:86:49:58:e1:a4:33:4c:ea:38:08:35: 26:07:12:e4:a3:88:20:39:15:14:89:e9:93:83:bf: d6:c4:09:e5:fd:08:03:de:d1:cc:86:d5:32:16:43: c2:81:dc:1e:f9:2f:15:e5:59:2c:75:5b:62:ed:37: c8:1c:fd:0c:e7:72:25:1f:a9:d8:dc:91:c8:35:0b: 40:ac:8e:f3:f8:29:d3:93:4f:f8:d4:da:98:91:d5: 2d:d9:75:73:39:e4:cd:27:ef:ff:a2:f8:0d:16:61: ae:33:82:cc:b5:51:36:d3:ea:69:cc:40:dc:01:82: 64:62:30:f1:72:a8:11:ff:ca:71:da:7b:0d:4f:35: 8f:e9:ee:96:24:bd:00:e4:0e:4e:aa:94:f8:c4:09: f1:04:fc:40:93:f2:95:11:e6:bb:50:86:e1:3e:c1: 30:b3:2b:55:f1:83:6c:fb:88:f1:9f:88:ab:c3:3f: aa:d5:a1:f3:3c:c7:db:5d:89:0f:65:b8:c3:48:35: 65:39:6f:50:ea:37:5c:4b:74:07:5a:33:89:55:9d: db:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:7F:3A:B4:9C:B5:25:A4:51:18:30:0D:22:8E:3F:0C:25:95:24:6D X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:f9:2f:f2:6a:e5:cb:3b:10:c0:2f:c8:31:66:3e:d4:3b:4a: e3:d5:72:34:6f:0e:69:8b:fc:74:6e:7d:43:84:6d:b6:85:37: a3:59:b5:d6:0a:b4:d9:f5:0a:5d:87:a0:21:08:80:01:9e:24: 3c:85:68:04:38:c6:f0:b6:63:a1:b9:7b:3c:37:78:a9:23:1a: b4:66:1e:14:ea:85:9f:69:51:10:b9:c4:9f:a0:37:85:6c:d4: 0a:e5:5f:b2:b0:12:ac:5a:fa:97:a7:87:a0:e0:4c:7b:87:d1: 34:1b:b1:cb:e2:e8:09:f4:e0:70:c7:db:16:56:a5:9c:19:b1: a7:30:39:0d:b1:56:40:2c:f1:33:db:db:14:65:2f:3c:a6:03: 3d:4d:61:d1:97:51:04:73:c6:fc:e4:3d:6c:a4:0f:f7:05:69: c6:bd:7c:22:d2:2b:fc:a2:e0:ec:5b:0d:03:1c:d5:3f:21:0d: 5f:b5:ac:ef:69:b2:b6:c7:dc:30:05:c0:4e:26:35:ea:82:04: 2a:a1:90:be:30:92:cb:f8:de:b4:f1:9e:e4:4e:6c:da:62:f1: 78:3d:05:5c:9e:0b:6c:40:fe:18:04:15:46:ac:74:bc:3d:90: a2:76:5c:ff:66:b8:57:5c:10:31:9a:3f:86:4c:bd:0e:d2:7b: 9d:91:a0:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbFGoQZXDE1jfOGZbym7TZoEU/UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQw ODRGMzlFMTAeFw0yNjA2MTcwODU5MDJaFw0yNjA2MTgxMzAzMDJaMDMxMTAvBgNV BAMTKDUwN0YzQUI0OUNCNTI1QTQ1MTE4MzAwRDIyOEUzRjBDMjU5NTI0NkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6hnCTgNpowBO3MpTASVogrYu QUDjuGWh2Mj0JKqRviufkMQMg3AiUEOVwC8cgSOGSVjhpDNM6jgINSYHEuSjiCA5 FRSJ6ZODv9bECeX9CAPe0cyG1TIWQ8KB3B75LxXlWSx1W2LtN8gc/QznciUfqdjc kcg1C0CsjvP4KdOTT/jU2piR1S3ZdXM55M0n7/+i+A0WYa4zgsy1UTbT6mnMQNwB gmRiMPFyqBH/ynHaew1PNY/p7pYkvQDkDk6qlPjECfEE/ECT8pUR5rtQhuE+wTCz K1Xxg2z7iPGfiKvDP6rVofM8x9tdiQ9luMNINWU5b1DqN1xLdAdaM4lVndv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUH86tJy1JaRRGDANIo4/DCWVJG0wHwYDVR0j BBgwFoAUhm19ElbW+TWjRry1HD50rQhPOeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzdiMzM0MTItYmU1Yi00NjNlLTgyMzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1 NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQwODRGMzlFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYz OUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0 QUQwODRGMzlFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHH5L/Jq5cs7EMAvyDFmPtQ7SuPVcjRvDmmL /HRufUOEbbaFN6NZtdYKtNn1Cl2HoCEIgAGeJDyFaAQ4xvC2Y6G5ezw3eKkjGrRm HhTqhZ9pURC5xJ+gN4Vs1ArlX7KwEqxa+penh6DgTHuH0TQbscvi6An04HDH2xZW pZwZsacwOQ2xVkAs8TPb2xRlLzymAz1NYdGXUQRzxvzkPWykD/cFaca9fCLSK/yi 4OxbDQMc1T8hDV+1rO9psrbH3DAFwE4mNeqCBCqhkL4wksv43rTxnuRObNpi8Xg9 BVyeC2xA/hgEFUasdLw9kKJ2XP9muFdcEDGaP4ZMvQ7Se52RoGo= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:40 2026 by rpki-client