$ rpki-client -vvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: X7kmOat7usInIebL3nnA1088UudIgjsmh3LcjluUt7A= Subject key identifier: D1:DB:C7:69:FC:F1:16:BA:14:42:40:78:43:3C:90:88:33:08:FA:BA Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 1EFD81BAB7EBA09FD7A958AD3358CAA152365202 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 19:08:30 +0000 Manifest this update: Thu 23 Jul 2026 19:03:30 +0000 Manifest next update: Fri 24 Jul 2026 19:50:30 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) 2: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: K0i5jqZi7VrIykRLEO/azc8Oaq5438FyRGWP8ITfIb0=) 3: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 4: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:50:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:fd:81:ba:b7:eb:a0:9f:d7:a9:58:ad:33:58:ca:a1:52:36:52:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Jul 23 19:03:30 2026 GMT Not After : Jul 24 19:50:30 2026 GMT Subject: CN=D1DBC769FCF116BA14424078433C90883308FABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:a8:0a:30:c9:38:69:96:fb:6b:10:ac:69:ad: 24:6f:d2:1b:99:c2:ee:37:4d:bb:86:85:21:3f:ad: 67:da:ee:a9:b7:a9:98:e6:ed:fb:33:2f:ca:b6:39: f2:3b:87:48:93:41:1c:86:24:f3:40:e0:33:8c:e3: e1:61:7f:d8:60:34:88:30:40:82:3c:0e:b4:21:0d: 03:fb:42:13:b4:8d:ea:b7:bf:4a:70:2e:49:e3:b3: 98:bb:98:ff:2c:08:e4:7d:3f:eb:3d:ff:02:1d:38: c9:13:ae:e3:4c:38:a3:12:54:11:15:51:e9:cf:56: 18:48:36:87:b4:2e:69:5f:d4:48:6a:ea:1c:2e:20: 6d:ce:80:0f:e2:5c:d4:1c:26:1f:e0:e5:44:47:22: 74:79:72:a3:7f:8c:b1:e4:be:f5:a0:a0:6a:2e:f8: 1d:d8:60:de:e3:91:74:9a:e3:3e:7b:c9:d2:b4:e4: 3d:72:50:02:ec:f2:51:1a:13:08:67:f1:7e:af:88: c0:2b:a6:fd:a8:b2:27:b4:56:e5:49:80:9d:36:fd: a7:e6:c3:a9:ca:1f:d8:63:46:2e:0b:00:ee:3f:0e: f5:7a:96:e5:b7:8e:c7:25:67:1b:c4:b4:02:92:cd: 8d:ac:8b:8b:01:27:c6:d8:2f:e7:64:de:11:f8:b1: d6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:DB:C7:69:FC:F1:16:BA:14:42:40:78:43:3C:90:88:33:08:FA:BA X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:8b:d3:54:41:9e:2e:aa:c3:1c:3d:f2:b4:09:2b:f6:69:da: e5:89:be:71:83:3f:67:cd:d6:37:42:36:f4:46:86:58:75:03: 1c:d9:7d:7a:3d:4a:73:f4:e0:a6:2d:12:10:12:bc:1f:94:12: 69:6d:09:a2:a6:08:f0:27:81:30:26:56:10:a4:4a:c0:aa:39: 12:f0:ce:20:ba:ec:af:c4:65:3c:91:bc:f8:3d:6f:74:7e:56: b6:d8:3b:39:9f:c5:03:db:91:08:40:7c:f0:97:8a:3f:42:d4: eb:0d:6c:bc:25:42:f3:bf:42:ed:28:f1:79:ee:29:b3:73:54: fe:6f:28:0f:7e:98:05:06:92:23:3b:aa:e5:91:ec:a8:37:ec: 3f:4b:c1:4e:41:a5:ee:62:a5:80:0c:0b:c5:f1:01:78:74:c2: ca:c9:b5:99:87:f4:93:87:5e:ab:5e:c3:49:8d:fc:da:04:12: 48:c8:c8:f6:1a:f2:44:16:3c:09:14:fa:8d:dc:22:40:89:ca: a4:0b:ba:4a:de:c2:ba:da:40:0e:d5:cd:25:9e:66:a6:d8:e5: 87:50:72:86:1f:06:02:cb:6c:93:53:d9:cd:77:46:25:c7:b2: 2c:71:91:bc:c2:c8:ce:97:5f:88:fa:fc:fb:b4:65:13:ee:30: 50:bb:19:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHv2BurfroJ/XqVitM1jKoVI2UgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA3MjMxOTAzMzBaFw0yNjA3MjQxOTUwMzBaMDMxMTAvBgNV BAMTKEQxREJDNzY5RkNGMTE2QkExNDQyNDA3ODQzM0M5MDg4MzMwOEZBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1qAowyThplvtrEKxprSRv0huZ wu43TbuGhSE/rWfa7qm3qZjm7fszL8q2OfI7h0iTQRyGJPNA4DOM4+Fhf9hgNIgw QII8DrQhDQP7QhO0jeq3v0pwLknjs5i7mP8sCOR9P+s9/wIdOMkTruNMOKMSVBEV UenPVhhINoe0Lmlf1Ehq6hwuIG3OgA/iXNQcJh/g5URHInR5cqN/jLHkvvWgoGou +B3YYN7jkXSa4z57ydK05D1yUALs8lEaEwhn8X6viMArpv2osie0VuVJgJ02/afm w6nKH9hjRi4LAO4/DvV6luW3jsclZxvEtAKSzY2si4sBJ8bYL+dk3hH4sdZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0dvHafzxFroUQkB4QzyQiDMI+rowHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyL01RBni6qwxw98rQJK/Zp2uWJvnGDP2fN 1jdCNvRGhlh1AxzZfXo9SnP04KYtEhASvB+UEmltCaKmCPAngTAmVhCkSsCqORLw ziC67K/EZTyRvPg9b3R+VrbYOzmfxQPbkQhAfPCXij9C1OsNbLwlQvO/Qu0o8Xnu KbNzVP5vKA9+mAUGkiM7quWR7Kg37D9LwU5Bpe5ipYAMC8XxAXh0wsrJtZmH9JOH Xqtew0mN/NoEEkjIyPYa8kQWPAkU+o3cIkCJyqQLukrewrraQA7VzSWeZqbY5YdQ coYfBgLLbJNT2c13RiXHsixxkbzCyM6XX4j6/Pu0ZRPuMFC7GWU= -----END CERTIFICATE-----Generated at Fri Jul 24 11:19:28 2026 by rpki-client