$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: wrrA+nOYxCRnvrKLNzuNZRVCJYyUVZmks72Djjp+0tw= Subject key identifier: 32:6F:B4:FA:CC:CC:89:4A:9B:5D:C3:24:0D:7C:98:E8:27:9C:05:A7 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 28A4B0D5695443DA9B5881FBEB150A12AA62EF8C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 23:44:53 +0000 Manifest this update: Thu 24 Sep 2026 23:39:53 +0000 Manifest next update: Sat 26 Sep 2026 00:03:53 +0000 Files and hashes: 1: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 2: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 3: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 4: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 5: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 6: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 7: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 8: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 9: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 10: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 11: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 12: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 13: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 14: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: yopVHQog3D0QftFTZ1aWeKdEl3Txms95poyJFwVkKIs=) 15: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 16: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 17: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 18: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 19: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 00:03:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:a4:b0:d5:69:54:43:da:9b:58:81:fb:eb:15:0a:12:aa:62:ef:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Sep 24 23:39:53 2026 GMT Not After : Sep 26 00:03:53 2026 GMT Subject: CN=326FB4FACCCC894A9B5DC3240D7C98E8279C05A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:a4:d1:2d:63:55:28:09:6d:8c:53:e9:74:e2: c8:20:b9:67:46:ec:2a:ac:18:00:7e:34:57:a4:42: 1e:54:46:85:5a:d9:d6:e4:1e:f2:12:02:a6:9c:17: 36:3d:b1:9d:f5:bd:b0:fe:22:f4:4d:7f:bf:8b:c8: 4c:89:4b:77:2f:28:4a:ec:be:b6:3c:63:70:46:d9: a5:e7:06:4b:27:9f:d5:50:04:71:ae:99:3e:79:54: 0f:f5:a7:e8:cc:e2:da:f4:54:ac:2d:47:cc:41:2f: 4c:5e:47:ff:64:46:60:02:ec:f5:f5:3c:6e:26:59: 80:bb:1e:60:59:d4:24:6e:20:d2:70:ab:0c:ed:1a: 55:fe:9f:4c:b2:b0:24:e2:a8:17:ac:b0:0a:c4:d2: c5:f6:0e:bc:13:47:86:1f:eb:90:0a:36:18:ce:26: d4:47:86:85:85:d9:4a:58:41:44:00:78:92:55:7b: 34:0d:39:57:aa:46:36:41:b3:6f:d4:bb:45:f9:06: 93:8c:51:1a:8a:1d:09:55:94:11:47:48:0d:ca:b0: ea:68:f4:0a:79:f0:fe:06:c6:e1:c8:ea:8e:fc:af: f2:b8:c6:12:49:1d:6d:a0:4d:b5:00:f4:3e:31:1d: 0e:80:29:a2:37:14:30:82:92:c3:a7:3a:c8:8f:c8: 72:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:6F:B4:FA:CC:CC:89:4A:9B:5D:C3:24:0D:7C:98:E8:27:9C:05:A7 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:96:ba:0c:b2:b2:20:76:9a:7c:45:70:43:0a:9f:da:7e:39: 3b:f8:d9:51:ab:b8:a3:7e:94:48:19:90:88:4c:2b:7f:8b:37: 67:f8:cf:e2:70:a6:95:21:a3:ac:d6:8f:4f:11:4f:eb:7d:fb: 26:49:9f:e6:30:12:59:a9:35:ff:22:4d:94:49:20:68:5b:41: 8b:ea:f0:cf:a2:f1:ca:0d:89:8b:7c:43:b1:a6:1a:05:ac:6d: 88:89:2f:5e:c4:9f:ef:4a:31:c3:9c:b1:62:cb:b2:a8:44:bc: 5f:5a:57:4a:78:e2:ac:d9:22:e3:3c:f7:de:e8:7c:fc:fc:9e: 9b:15:d3:6b:c2:67:6f:69:90:e7:d1:7b:60:35:16:78:88:8d: 0a:42:11:99:8a:61:6b:4a:fa:1d:21:7d:9f:d5:e6:a1:05:19: 33:7e:6c:46:08:19:ae:38:bc:d7:7f:c4:a8:54:e4:fd:f6:4e: 3e:65:e8:a3:a3:5d:de:b9:ee:8f:f5:62:05:7f:e0:a4:08:4a: 5a:67:ca:f9:57:8c:23:93:91:f7:f5:49:38:08:b5:11:0d:e9: 32:15:21:3a:16:73:78:80:74:7e:4c:a5:e2:f4:8b:d2:6b:30: 6e:ce:90:35:46:e7:3b:90:2a:15:63:34:e4:7f:53:7c:89:1e: 0c:b7:91:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKKSw1WlUQ9qbWIH76xUKEqpi74wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA5MjQyMzM5NTNaFw0yNjA5MjYwMDAzNTNaMDMxMTAvBgNV BAMTKDMyNkZCNEZBQ0NDQzg5NEE5QjVEQzMyNDBEN0M5OEU4Mjc5QzA1QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnpNEtY1UoCW2MU+l04sgguWdG 7CqsGAB+NFekQh5URoVa2dbkHvISAqacFzY9sZ31vbD+IvRNf7+LyEyJS3cvKErs vrY8Y3BG2aXnBksnn9VQBHGumT55VA/1p+jM4tr0VKwtR8xBL0xeR/9kRmAC7PX1 PG4mWYC7HmBZ1CRuINJwqwztGlX+n0yysCTiqBessArE0sX2DrwTR4Yf65AKNhjO JtRHhoWF2UpYQUQAeJJVezQNOVeqRjZBs2/Uu0X5BpOMURqKHQlVlBFHSA3KsOpo 9Ap58P4GxuHI6o78r/K4xhJJHW2gTbUA9D4xHQ6AKaI3FDCCksOnOsiPyHITAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMm+0+szMiUqbXcMkDXyY6CecBacwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWWugyysiB2mnxFcEMKn9p+OTv42VGruKN+ lEgZkIhMK3+LN2f4z+JwppUho6zWj08RT+t9+yZJn+YwElmpNf8iTZRJIGhbQYvq 8M+i8coNiYt8Q7GmGgWsbYiJL17En+9KMcOcsWLLsqhEvF9aV0p44qzZIuM8997o fPz8npsV02vCZ29pkOfRe2A1FniIjQpCEZmKYWtK+h0hfZ/V5qEFGTN+bEYIGa44 vNd/xKhU5P32Tj5l6KOjXd657o/1YgV/4KQISlpnyvlXjCOTkff1STgItREN6TIV IToWc3iAdH5MpeL0i9JrMG7OkDVG5zuQKhVjNOR/U3yJHgy3kaQ= -----END CERTIFICATE-----Generated at Fri Sep 25 13:11:59 2026 by rpki-client