$ rpki-client -vvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: zviZ6SDeb53QDsoZStl19JDx8F8aspqXhaHOqMC2OPI= Subject key identifier: 18:89:B9:26:0A:15:E7:B4:38:90:C2:38:59:C4:AD:75:DD:DC:E8:F0 Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 3FEA9E884B050B27657EF063BC9AD699A463A38C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: 0E Signing time: Tue 12 May 2026 11:17:01 +0000 Manifest this update: Tue 12 May 2026 11:12:01 +0000 Manifest next update: Wed 13 May 2026 14:20:01 +0000 Files and hashes: 1: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 2: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: NWpPYi/AIR3VAPYDrP0jiUAFPbnr3BszSqxd+xri83M=) 3: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 4: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 14:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:ea:9e:88:4b:05:0b:27:65:7e:f0:63:bc:9a:d6:99:a4:63:a3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: May 12 11:12:01 2026 GMT Not After : May 13 14:20:01 2026 GMT Subject: CN=1889B9260A15E7B43890C23859C4AD75DDDCE8F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:5e:ed:40:70:6d:c4:f0:1f:6f:d2:5e:c6: d5:1b:0b:43:62:23:8c:0c:92:a3:44:38:55:ce:1d: d8:ce:ee:47:63:f2:dd:15:cd:0e:23:de:bf:ce:5c: ab:6d:5c:e3:87:7d:83:af:89:6e:b9:44:2c:40:0b: 82:01:0f:95:77:2a:31:a4:fb:49:ea:fd:6c:ab:48: 8a:44:05:9e:15:59:9f:d3:d3:6b:d8:ab:90:b0:15: 00:f8:f8:56:21:1a:e1:19:fe:30:18:99:20:36:9b: 84:f3:b9:a3:d6:05:b6:b2:34:a6:11:9f:70:52:66: 4f:26:39:7e:2b:44:46:e6:1d:ed:2e:67:6d:4d:74: 4c:04:57:cf:fc:6d:28:49:0a:25:77:a8:94:f3:3f: c2:a0:f6:06:cf:fb:f3:d6:fe:80:ac:49:06:a8:34: b3:9b:09:80:2f:f3:ff:28:7d:02:5d:60:e4:bd:c3: 91:0e:bb:36:83:14:15:80:0d:5d:cd:a2:d4:46:61: 1a:b6:55:df:a3:84:b8:1d:6f:3f:1d:0d:d0:b5:8b: 2c:e5:eb:a3:53:d6:73:64:dd:ce:1a:a3:99:77:55: 11:23:6e:86:4a:22:bb:2c:f0:35:25:ee:6c:56:4e: 64:bb:d7:99:7e:12:d1:29:2f:81:62:2f:66:ee:66: d7:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:89:B9:26:0A:15:E7:B4:38:90:C2:38:59:C4:AD:75:DD:DC:E8:F0 X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:7f:70:3c:e7:2c:e7:a6:50:84:df:57:64:40:37:f0:22:24: 8d:7f:f2:02:bd:fe:b4:5c:e3:c8:02:79:80:7b:9a:bf:15:07: 2d:f4:33:af:99:50:50:5f:c2:6b:02:4b:cb:e5:49:6c:e9:42: 71:33:39:e3:4b:c8:21:cf:0f:91:0b:11:0c:79:9b:64:00:f5: 27:26:95:53:c4:bd:4b:70:29:6c:84:49:20:c2:f0:da:ff:67: 65:a1:bf:0a:92:56:ed:31:81:cb:21:d2:08:2f:6f:7f:97:cf: 3e:c6:e4:e6:4f:c5:fc:3e:eb:d3:b5:5c:76:f5:ed:8e:a0:c8: c7:dd:36:97:b4:cd:be:5f:4b:cd:e9:01:e9:6a:d6:d1:cb:4f: 11:3d:f1:cc:89:f8:fd:bf:fc:0c:24:f8:04:ef:4b:29:f8:02: 9f:9d:46:ed:db:34:01:cc:e0:05:50:b1:0d:de:83:c1:fa:f9: 92:78:48:50:65:d4:d5:4b:d0:55:29:a8:14:00:38:44:c7:ab: 0d:b9:28:a8:f4:f4:5e:59:46:6a:ed:47:9c:2f:16:98:84:57: 81:3b:31:8f:9f:ff:42:40:d8:20:9d:79:c7:a5:50:b2:79:5b: 5b:7b:48:b5:f6:78:5f:58:ed:2a:86:7d:8e:5a:a9:2d:50:ba: 8e:aa:4b:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP+qeiEsFCydlfvBjvJrWmaRjo4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA1MTIxMTEyMDFaFw0yNjA1MTMxNDIwMDFaMDMxMTAvBgNV BAMTKDE4ODlCOTI2MEExNUU3QjQzODkwQzIzODU5QzRBRDc1REREQ0U4RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3iV7tQHBtxPAfb9JextUbC0Ni I4wMkqNEOFXOHdjO7kdj8t0VzQ4j3r/OXKttXOOHfYOviW65RCxAC4IBD5V3KjGk +0nq/WyrSIpEBZ4VWZ/T02vYq5CwFQD4+FYhGuEZ/jAYmSA2m4TzuaPWBbayNKYR n3BSZk8mOX4rREbmHe0uZ21NdEwEV8/8bShJCiV3qJTzP8Kg9gbP+/PW/oCsSQao NLObCYAv8/8ofQJdYOS9w5EOuzaDFBWADV3NotRGYRq2Vd+jhLgdbz8dDdC1iyzl 66NT1nNk3c4ao5l3VREjboZKIrss8DUl7mxWTmS715l+EtEpL4FiL2buZtetAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGIm5JgoV57Q4kMI4WcStdd3c6PAwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACl/cDznLOemUITfV2RAN/AiJI1/8gK9/rRc 48gCeYB7mr8VBy30M6+ZUFBfwmsCS8vlSWzpQnEzOeNLyCHPD5ELEQx5m2QA9Scm lVPEvUtwKWyESSDC8Nr/Z2WhvwqSVu0xgcsh0ggvb3+Xzz7G5OZPxfw+69O1XHb1 7Y6gyMfdNpe0zb5fS83pAelq1tHLTxE98cyJ+P2//Awk+ATvSyn4Ap+dRu3bNAHM 4AVQsQ3eg8H6+ZJ4SFBl1NVL0FUpqBQAOETHqw25KKj09F5ZRmrtR5wvFpiEV4E7 MY+f/0JA2CCdecelULJ5W1t7SLX2eF9Y7SqGfY5aqS1Quo6qS7c= -----END CERTIFICATE-----Generated at Wed May 13 02:12:14 2026 by rpki-client