$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: oL7ycNZ1o6WhgUGd8T+SGwyxZNP4OvlnDGaPM5r8wJo= Subject key identifier: 27:DC:BC:CD:E6:6B:17:E9:8B:24:8A:83:28:C8:70:DE:5F:6D:69:A1 Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 1A6AD27CAC9156B84E054C397AA9D312089304A5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 06:37:25 +0000 Manifest this update: Sun 15 Nov 2026 06:32:25 +0000 Manifest next update: Mon 16 Nov 2026 09:29:25 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) 2: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 3: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: BGcSlCNAjafVPLi+W4taRilsnXIlrzNkoUdy610zeDA=) 4: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 09:29:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:6a:d2:7c:ac:91:56:b8:4e:05:4c:39:7a:a9:d3:12:08:93:04:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Nov 15 06:32:25 2026 GMT Not After : Nov 16 09:29:25 2026 GMT Subject: CN=27DCBCCDE66B17E98B248A8328C870DE5F6D69A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:af:0e:b1:58:f4:4a:29:9d:fd:61:7d:e5:8d: ea:ac:39:1c:70:bf:dd:0e:57:f8:c1:6e:89:26:27: dd:08:7f:07:81:af:b9:60:b3:af:3d:6b:da:cf:f8: 9b:91:97:7e:f0:0e:c9:de:75:0d:74:55:8d:d3:c7: a7:19:1b:2c:56:c4:8e:e5:95:58:5b:30:e5:d8:96: b4:7f:4f:a1:9f:f7:a2:7c:8e:0a:b6:f6:4a:9c:bd: f8:1a:43:65:26:58:24:86:ae:9e:06:16:9f:4e:55: 26:59:2f:af:33:8f:54:b8:12:a8:ec:74:62:79:2a: ec:82:56:de:78:1e:77:ab:d5:b4:94:ff:9d:99:cd: b4:d6:82:87:c7:6b:28:b0:cd:e9:b5:c5:bd:d9:4b: b6:40:e8:ec:ca:7b:be:d3:70:3c:59:bb:5d:29:c2: cb:72:81:5e:2f:20:07:91:6c:6b:16:50:ca:d9:76: c8:6d:81:3f:6c:3f:28:1e:ea:6a:da:76:ca:9a:a8: 06:af:69:58:7d:8d:4c:5d:c0:f9:1c:67:65:b1:e7: dc:28:b2:e2:7c:f9:64:cd:b3:81:77:30:58:46:be: 59:29:3a:9a:43:b2:2f:fb:83:95:94:71:c8:14:74: b9:05:00:ea:8d:25:e7:9f:5c:2b:a6:21:48:ba:8d: cc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:DC:BC:CD:E6:6B:17:E9:8B:24:8A:83:28:C8:70:DE:5F:6D:69:A1 X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:88:7f:17:7e:78:d8:ea:3a:2d:82:76:bb:c8:59:46:31:f8: 9e:5a:1b:36:0a:d9:f9:29:34:78:02:2d:62:c5:24:05:d8:90: ea:ae:9c:7a:52:84:3d:fe:c9:65:ad:d8:f7:c8:e3:77:85:6c: d1:39:66:ee:72:06:ed:7b:64:94:05:2e:38:ad:58:3c:a9:74: d3:68:0d:d8:7e:ed:a8:44:d1:21:81:2a:12:04:23:2f:db:87: ff:f1:9e:35:ea:f7:94:ef:10:67:1c:f9:a1:fe:ff:6c:0a:8b: 53:85:c6:90:84:fd:68:d1:7a:e6:9f:b2:e4:8c:15:59:8d:46: 0c:fc:0a:0e:57:68:a7:12:05:fc:65:f5:5b:1f:ea:60:54:4c: 6e:15:92:4f:94:85:6f:dd:30:35:a6:35:ab:cd:95:0a:a5:b1: 6b:a7:34:db:6b:f6:68:96:ca:52:55:2f:ce:ec:76:1b:c0:2e: bb:c4:a7:50:f5:f7:81:63:3d:2f:dd:42:f9:a9:a0:04:6f:15: 00:b7:50:98:95:54:a6:b3:47:c9:1a:4b:d5:ff:86:54:a7:be: 15:de:e3:eb:74:6d:82:8e:b1:9c:74:bd:9d:e0:9d:9e:74:b3: 8f:a5:a4:e9:e4:6b:7c:13:2b:11:6c:57:8a:1f:5d:3a:fb:f9: 22:2d:d9:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmrSfKyRVrhOBUw5eqnTEgiTBKUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjExMTUwNjMyMjVaFw0yNjExMTYwOTI5MjVaMDMxMTAvBgNV BAMTKDI3RENCQ0NERTY2QjE3RTk4QjI0OEE4MzI4Qzg3MERFNUY2RDY5QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRrw6xWPRKKZ39YX3ljeqsORxw v90OV/jBbokmJ90IfweBr7lgs689a9rP+JuRl37wDsnedQ10VY3Tx6cZGyxWxI7l lVhbMOXYlrR/T6Gf96J8jgq29kqcvfgaQ2UmWCSGrp4GFp9OVSZZL68zj1S4Eqjs dGJ5KuyCVt54Hner1bSU/52ZzbTWgofHayiwzem1xb3ZS7ZA6OzKe77TcDxZu10p wstygV4vIAeRbGsWUMrZdshtgT9sPyge6mradsqaqAavaVh9jUxdwPkcZ2Wx59wo suJ8+WTNs4F3MFhGvlkpOppDsi/7g5WUccgUdLkFAOqNJeefXCumIUi6jcyDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ9y8zeZrF+mLJIqDKMhw3l9taaEwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWIfxd+eNjqOi2CdrvIWUYx+J5aGzYK2fkp NHgCLWLFJAXYkOqunHpShD3+yWWt2PfI43eFbNE5Zu5yBu17ZJQFLjitWDypdNNo Ddh+7ahE0SGBKhIEIy/bh//xnjXq95TvEGcc+aH+/2wKi1OFxpCE/WjReuafsuSM FVmNRgz8Cg5XaKcSBfxl9Vsf6mBUTG4Vkk+UhW/dMDWmNavNlQqlsWunNNtr9miW ylJVL87sdhvALrvEp1D194FjPS/dQvmpoARvFQC3UJiVVKazR8kaS9X/hlSnvhXe 4+t0bYKOsZx0vZ3gnZ50s4+lpOnka3wTKxFsV4ofXTr7+SIt2VE= -----END CERTIFICATE-----Generated at Sun Nov 15 11:28:24 2026 by rpki-client