$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: ymcWqCsg+4HO99kL5YArKOAREXpUVVbainFsiWpejb4= Subject key identifier: 5F:EE:E3:82:A1:8E:85:37:BB:BC:87:4D:B9:13:DA:D7:22:1E:CC:B7 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 0AE035B39EACC81EA8B18FC340E738970EF1CF6D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:11:51 +0000 Manifest this update: Tue 12 May 2026 20:06:51 +0000 Manifest next update: Wed 13 May 2026 21:54:51 +0000 Files and hashes: 1: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 2: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 3: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 4: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 5: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: 9s+Xr1bCaUWYuQiqgqQhp83zeUjB8iH64bqG5Fxy6+U=) 6: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 7: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 8: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 9: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 10: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 11: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 12: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 13: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 14: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 15: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 16: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 17: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 18: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 19: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:54:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:e0:35:b3:9e:ac:c8:1e:a8:b1:8f:c3:40:e7:38:97:0e:f1:cf:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: May 12 20:06:51 2026 GMT Not After : May 13 21:54:51 2026 GMT Subject: CN=5FEEE382A18E8537BBBC874DB913DAD7221ECCB7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:ec:ee:eb:5b:a3:68:8f:5c:79:19:f0:dc:70: 24:11:cc:47:6b:a0:a8:02:38:09:b3:88:10:2a:40: 7a:2e:41:f0:60:d8:b9:06:ca:6d:63:b2:b1:80:ae: 57:d9:a8:a8:d4:b1:7b:6d:77:0e:b8:0c:1b:5b:93: 6e:40:50:c1:e7:c5:56:45:36:1e:0b:e5:77:cd:23: e0:b1:38:64:3b:48:16:44:64:01:55:a2:2a:71:44: c8:dd:f2:52:11:2c:a6:6d:2d:d2:77:56:72:64:4c: b6:f1:54:a1:61:44:cb:4d:c8:52:f2:b9:74:9a:53: e7:3c:69:eb:d1:5f:a0:17:56:54:04:76:6b:a6:eb: b7:ba:e5:4e:45:d4:86:4a:f3:62:4a:a6:3d:4a:27: 4f:ff:92:4a:25:a5:39:8e:e0:24:dd:e4:7b:ad:c4: fd:3a:5e:0b:74:1f:b5:79:11:d8:48:b7:50:22:65: 2b:ef:00:f1:e3:5b:4d:73:cf:41:32:29:87:62:f6: 69:0d:5a:fe:37:94:39:bf:15:97:c9:bc:d6:9a:6e: c7:65:ab:30:73:74:f9:ad:b7:4e:9f:08:aa:91:12: e1:0b:a4:c8:53:9b:3e:6c:54:7b:56:22:e0:c0:78: c3:07:5f:76:80:8e:84:69:48:72:e5:9b:99:d3:e1: 0e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EE:E3:82:A1:8E:85:37:BB:BC:87:4D:B9:13:DA:D7:22:1E:CC:B7 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:15:65:16:f9:e9:6b:8c:65:26:86:08:d5:3f:5f:ec:b6:36: d8:09:8f:b3:79:9b:c3:27:42:ea:10:fb:77:fe:f0:6b:33:5f: cb:12:e2:33:84:94:47:21:de:74:81:88:24:7e:22:03:18:d1: e0:08:73:0c:4b:b3:21:82:26:6d:df:5e:f4:47:e5:8c:dc:cf: 2a:69:16:20:ee:8d:48:08:f8:6b:13:af:9d:04:a9:de:ed:81: d1:19:6e:55:b2:ab:31:5b:33:97:a7:83:b5:b9:0f:51:2b:2f: ae:3e:75:b8:91:ef:89:44:46:f1:e8:80:c0:3b:7f:47:32:9c: 46:a1:2f:b8:04:d4:0a:83:f8:71:b4:22:b5:d2:b9:ac:ae:58: fb:41:85:9c:dd:63:7b:25:c5:d6:ea:1d:e2:6f:bd:78:c2:33: 46:c5:4c:51:dd:8e:fe:a8:6f:0c:a0:00:8a:7a:e4:81:81:e4: 30:11:8a:f4:95:ff:9d:5f:19:9f:12:2c:12:be:22:db:61:c7: 46:7e:09:0f:b6:d1:5b:9d:19:11:75:8b:4b:56:08:58:02:0a: 86:9a:2c:f2:c0:e1:d7:4d:35:dc:75:dc:aa:19:72:41:bd:aa: 33:43:de:16:05:fa:f1:d0:34:d4:31:4c:79:e5:b4:e6:d8:fa: e6:a7:88:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCuA1s56syB6osY/DQOc4lw7xz20wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA1MTIyMDA2NTFaFw0yNjA1MTMyMTU0NTFaMDMxMTAvBgNV BAMTKDVGRUVFMzgyQTE4RTg1MzdCQkJDODc0REI5MTNEQUQ3MjIxRUNDQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7O7rW6Noj1x5GfDccCQRzEdr oKgCOAmziBAqQHouQfBg2LkGym1jsrGArlfZqKjUsXttdw64DBtbk25AUMHnxVZF Nh4L5XfNI+CxOGQ7SBZEZAFVoipxRMjd8lIRLKZtLdJ3VnJkTLbxVKFhRMtNyFLy uXSaU+c8aevRX6AXVlQEdmum67e65U5F1IZK82JKpj1KJ0//kkolpTmO4CTd5Hut xP06Xgt0H7V5EdhIt1AiZSvvAPHjW01zz0EyKYdi9mkNWv43lDm/FZfJvNaabsdl qzBzdPmtt06fCKqREuELpMhTmz5sVHtWIuDAeMMHX3aAjoRpSHLlm5nT4Q4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX+7jgqGOhTe7vIdNuRPa1yIezLcwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAVZRb56WuMZSaGCNU/X+y2NtgJj7N5m8Mn QuoQ+3f+8GszX8sS4jOElEch3nSBiCR+IgMY0eAIcwxLsyGCJm3fXvRH5Yzczypp FiDujUgI+GsTr50Eqd7tgdEZblWyqzFbM5eng7W5D1ErL64+dbiR74lERvHogMA7 f0cynEahL7gE1AqD+HG0IrXSuayuWPtBhZzdY3slxdbqHeJvvXjCM0bFTFHdjv6o bwygAIp65IGB5DARivSV/51fGZ8SLBK+Itthx0Z+CQ+20VudGRF1i0tWCFgCCoaa LPLA4ddNNdx13KoZckG9qjND3hYF+vHQNNQxTHnltObY+uaniNU= -----END CERTIFICATE-----Generated at Wed May 13 03:47:31 2026 by rpki-client