$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: OYTSAoKKUZLon1D2iDzJTtqgXF8wof1pWz5G+Q7mvWM= Subject key identifier: 96:53:C5:F3:27:2A:18:BA:2B:1E:90:8C:62:A0:C3:77:07:E9:4A:47 Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 6229EF6AC80CD0B3041DE5E9D31CFD7378DAE07C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 11:45:09 +0000 Manifest this update: Thu 24 Sep 2026 11:40:09 +0000 Manifest next update: Fri 25 Sep 2026 13:57:09 +0000 Files and hashes: 1: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: e1S5jRIoNudLPFFE5aU/eZE0yMIPAwAmW5sj4X9mrIk=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 11:52:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:29:ef:6a:c8:0c:d0:b3:04:1d:e5:e9:d3:1c:fd:73:78:da:e0:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: Sep 24 11:40:09 2026 GMT Not After : Sep 25 13:57:09 2026 GMT Subject: CN=9653C5F3272A18BA2B1E908C62A0C37707E94A47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:1e:25:2e:7d:dd:a7:1e:88:5e:14:f4:81:fe: 5f:30:9e:46:a9:fe:84:52:66:1b:3b:b7:a0:48:e1: cf:a9:95:22:12:bf:44:58:34:8a:17:11:0e:35:82: 1e:1d:21:85:e4:c9:de:47:e9:5b:39:54:82:b5:51: 66:7b:f0:41:92:ba:16:77:7a:78:99:18:69:9f:ab: fe:9f:e9:67:9e:3b:b3:f4:3e:fa:c4:90:8d:f6:d9: fe:1c:8c:ad:c3:f1:b9:f9:6e:87:2a:ce:90:09:f5: 79:50:0b:c1:26:33:3a:2b:25:c3:68:d8:35:20:dc: 6f:d0:25:d8:4d:b3:ac:3d:87:a1:7f:fa:4d:db:e1: 64:4e:e0:c7:bd:fa:7c:d2:5a:03:49:55:ae:0e:c7: 1b:fd:4b:c2:aa:1c:fa:dc:b7:b0:b6:d1:00:68:42: 7e:8e:01:49:77:bd:42:e7:88:02:7b:ca:96:8e:86: f5:f4:47:04:ca:c6:10:59:99:4f:cf:30:b1:da:52: 76:69:a5:76:ce:87:e6:05:f7:ec:f2:28:f9:0a:60: d2:3a:9f:d3:59:c1:8f:d7:2d:51:5e:d5:9c:3b:ea: 12:4a:a7:35:25:d0:e7:f2:fc:60:57:27:bd:cd:98: db:93:80:25:8a:9c:73:d2:66:fe:15:a1:aa:60:99: ba:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:53:C5:F3:27:2A:18:BA:2B:1E:90:8C:62:A0:C3:77:07:E9:4A:47 X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:cd:66:b2:6a:27:d8:53:d3:0a:6f:b7:82:9b:a0:58:ec:08: 0e:4d:3d:49:bd:2b:6c:a8:9a:5c:cf:57:e0:82:40:83:65:4f: c5:1b:cd:da:cb:75:e1:b3:7b:01:82:9c:f2:7f:e8:e5:50:eb: 0a:80:ae:d1:8f:97:d4:f8:c5:3a:0c:59:f0:90:dd:b1:12:59: 53:0d:f7:59:d4:82:5e:d2:c7:83:f0:9c:9e:1c:e2:f0:14:70: 56:ff:b8:9a:5c:7d:f0:1b:e3:5e:59:c6:25:f0:ff:c0:b2:42: 70:51:22:73:bc:38:ba:9a:83:00:cf:11:04:64:b8:c3:8f:6e: c7:76:c6:d0:cc:89:b6:f5:6c:08:56:c7:61:c9:11:0d:f3:76: f5:8a:0a:44:e1:58:8c:96:f5:82:be:8d:39:12:82:36:f8:ec: 85:84:f3:02:84:67:ab:99:1e:cd:9c:ec:9f:8c:5c:9d:c2:f0: d9:76:d0:e8:39:aa:13:dc:95:95:5b:b9:0e:26:00:4c:85:5f: 0b:84:aa:c3:8d:92:d2:17:b4:c8:bc:e4:11:ab:ea:96:d1:62: bb:ad:e7:5e:a0:2f:33:d5:52:86:b4:b8:ac:b4:41:ac:97:97: 05:3f:53:d4:5f:29:5a:c6:04:5f:ad:69:21:9d:be:09:5a:a3: c7:e2:29:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYinvasgM0LMEHeXp0xz9c3ja4HwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjA5MjQxMTQwMDlaFw0yNjA5MjUxMzU3MDlaMDMxMTAvBgNV BAMTKDk2NTNDNUYzMjcyQTE4QkEyQjFFOTA4QzYyQTBDMzc3MDdFOTRBNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMHiUufd2nHoheFPSB/l8wnkap /oRSZhs7t6BI4c+plSISv0RYNIoXEQ41gh4dIYXkyd5H6Vs5VIK1UWZ78EGSuhZ3 eniZGGmfq/6f6WeeO7P0PvrEkI322f4cjK3D8bn5bocqzpAJ9XlQC8EmMzorJcNo 2DUg3G/QJdhNs6w9h6F/+k3b4WRO4Me9+nzSWgNJVa4Oxxv9S8KqHPrct7C20QBo Qn6OAUl3vULniAJ7ypaOhvX0RwTKxhBZmU/PMLHaUnZppXbOh+YF9+zyKPkKYNI6 n9NZwY/XLVFe1Zw76hJKpzUl0Ofy/GBXJ73NmNuTgCWKnHPSZv4VoapgmbrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUllPF8ycqGLorHpCMYqDDdwfpSkcwHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALbNZrJqJ9hT0wpvt4KboFjsCA5NPUm9K2yo mlzPV+CCQINlT8UbzdrLdeGzewGCnPJ/6OVQ6wqArtGPl9T4xToMWfCQ3bESWVMN 91nUgl7Sx4PwnJ4c4vAUcFb/uJpcffAb415ZxiXw/8CyQnBRInO8OLqagwDPEQRk uMOPbsd2xtDMibb1bAhWx2HJEQ3zdvWKCkThWIyW9YK+jTkSgjb47IWE8wKEZ6uZ Hs2c7J+MXJ3C8Nl20Og5qhPclZVbuQ4mAEyFXwuEqsONktIXtMi85BGr6pbRYrut 516gLzPVUoa0uKy0QayXlwU/U9RfKVrGBF+taSGdvglao8fiKVc= -----END CERTIFICATE-----Generated at Thu Sep 24 14:49:06 2026 by rpki-client