$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: lj+V7A/UvXPdoNkudyutcFcS7SsYCkxS17Y1RQbyAdk= Subject key identifier: 40:DC:85:DD:61:FB:CA:D2:FB:35:35:C3:C0:4B:8C:55:B1:6D:1F:3B Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 4E467950A3A1F10C8B9EA7F8FBDEC2E5F360D897 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 06:06:50 +0000 Manifest this update: Fri 24 Jul 2026 06:01:50 +0000 Manifest next update: Sat 25 Jul 2026 08:10:50 +0000 Files and hashes: 1: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 2: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 3: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 4: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 5: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 6: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 7: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 8: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 9: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 10: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 11: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: ntjTvChn/gK4fyeoHc+sTN0sX2KUESzlZWHB5UW74qM=) 12: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 13: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 14: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 15: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 16: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 17: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 18: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 19: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:46:79:50:a3:a1:f1:0c:8b:9e:a7:f8:fb:de:c2:e5:f3:60:d8:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Jul 24 06:01:50 2026 GMT Not After : Jul 25 08:10:50 2026 GMT Subject: CN=40DC85DD61FBCAD2FB3535C3C04B8C55B16D1F3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2c:2c:f0:f7:f5:d7:4c:73:28:47:92:20:12: a3:52:8c:fa:79:33:f8:91:ed:a1:04:58:2c:e5:55: 0d:8f:da:e7:79:21:a6:b2:7d:95:c9:36:0e:b3:05: 62:ff:4f:d5:f5:8f:25:6d:be:86:34:91:aa:7f:d0: eb:9b:f3:46:17:71:25:3a:fa:4d:51:bc:1d:68:47: 69:52:13:b9:e6:30:0e:7d:6b:0f:a2:be:b0:b2:b2: 96:96:0e:38:5f:b4:f1:21:50:42:9a:7a:16:f0:04: 8c:ea:33:cf:9a:4f:5e:5f:56:53:66:a4:ae:47:53: 50:cd:d8:76:71:af:34:55:22:8e:75:f8:37:7e:62: 26:28:8d:0c:93:71:ad:03:fa:8e:d8:83:4a:4a:50: 46:b2:08:3e:72:2d:96:3f:20:8a:12:e2:8d:7c:70: fc:24:ad:e0:ad:22:20:66:e2:3f:1b:fc:62:99:e6: b9:3a:47:ed:04:9b:cc:bf:86:e6:2b:85:7d:27:68: 3a:c8:47:95:61:40:82:5b:64:72:e8:84:8c:81:e5: 59:16:de:fc:0f:a9:42:c9:62:26:83:f3:7d:bb:df: 34:af:9d:17:73:30:f2:f8:3a:b8:d1:bd:8d:9e:e0: 64:4a:98:09:aa:fd:ed:91:e3:87:f3:11:1a:22:ab: 59:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DC:85:DD:61:FB:CA:D2:FB:35:35:C3:C0:4B:8C:55:B1:6D:1F:3B X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:fb:47:f3:f4:85:1a:2d:d8:f4:2b:29:dc:07:18:23:b2:0e: d7:c7:50:96:fb:2a:58:df:e6:64:dd:ba:de:53:87:b8:07:55: 66:7f:b9:6e:3d:c3:3d:d9:7a:4b:1c:e2:7b:e1:21:ec:dc:18: 85:12:7e:ae:1e:10:db:7a:5e:76:6d:e3:02:00:28:46:9b:7b: 1c:44:76:9d:72:a7:bb:58:fe:3c:be:73:19:ce:f6:75:11:50: 23:88:b9:c4:66:b0:9d:e6:48:cf:49:e1:48:f1:0f:05:a0:e1: cf:6d:05:1f:6b:05:a3:0e:2d:cd:64:42:a4:28:fc:aa:d5:c1: eb:85:6e:f0:fe:4b:10:9d:64:f2:57:aa:d3:9a:de:a8:0e:57: 6c:df:52:d9:8e:96:a9:3b:b2:b5:67:b9:f2:9b:43:a5:02:37: c6:d6:bf:bd:5b:6d:73:7c:ca:13:67:6a:b1:41:80:14:af:9c: ce:1b:f8:b4:b8:b3:15:7d:62:a8:39:b1:a1:6c:d9:2f:82:99: ef:ab:71:59:ef:6a:8f:b1:f4:43:e6:94:bf:1e:29:16:c3:85: 04:b3:53:63:53:b1:b1:88:64:e2:9b:cb:8a:06:91:99:b2:29: 12:29:07:18:97:f4:28:a1:33:87:63:40:6c:81:a5:ef:f7:b9: 58:8c:27:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTkZ5UKOh8QyLnqf4+97C5fNg2JcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA3MjQwNjAxNTBaFw0yNjA3MjUwODEwNTBaMDMxMTAvBgNV BAMTKDQwREM4NURENjFGQkNBRDJGQjM1MzVDM0MwNEI4QzU1QjE2RDFGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoLCzw9/XXTHMoR5IgEqNSjPp5 M/iR7aEEWCzlVQ2P2ud5IaayfZXJNg6zBWL/T9X1jyVtvoY0kap/0Oub80YXcSU6 +k1RvB1oR2lSE7nmMA59aw+ivrCyspaWDjhftPEhUEKaehbwBIzqM8+aT15fVlNm pK5HU1DN2HZxrzRVIo51+Dd+YiYojQyTca0D+o7Yg0pKUEayCD5yLZY/IIoS4o18 cPwkreCtIiBm4j8b/GKZ5rk6R+0Em8y/huYrhX0naDrIR5VhQIJbZHLohIyB5VkW 3vwPqULJYiaD83273zSvnRdzMPL4OrjRvY2e4GRKmAmq/e2R44fzERoiq1kJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNyF3WH7ytL7NTXDwEuMVbFtHzswHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFT7R/P0hRot2PQrKdwHGCOyDtfHUJb7Kljf 5mTdut5Th7gHVWZ/uW49wz3Zeksc4nvhIezcGIUSfq4eENt6XnZt4wIAKEabexxE dp1yp7tY/jy+cxnO9nURUCOIucRmsJ3mSM9J4UjxDwWg4c9tBR9rBaMOLc1kQqQo /KrVweuFbvD+SxCdZPJXqtOa3qgOV2zfUtmOlqk7srVnufKbQ6UCN8bWv71bbXN8 yhNnarFBgBSvnM4b+LS4sxV9Yqg5saFs2S+Cme+rcVnvao+x9EPmlL8eKRbDhQSz U2NTsbGIZOKby4oGkZmyKRIpBxiX9CihM4djQGyBpe/3uViMJ5Q= -----END CERTIFICATE-----Generated at Fri Jul 24 08:22:47 2026 by rpki-client