$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: tkTA6VHv9P8GTgXBRwHNBiIFJD495/MkR3y0ilfK9KU= Subject key identifier: 54:90:3A:76:FD:FE:BD:35:DB:3B:DC:DB:EA:E8:09:70:A8:C0:69:AC Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 7E79B8ADD42DD03AF9328410ABB9689890B10490 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 17:47:40 +0000 Manifest this update: Thu 24 Sep 2026 17:42:40 +0000 Manifest next update: Fri 25 Sep 2026 19:36:40 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 2: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 3: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) 4: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: 0MerLF8aJWY7/Xfypi2B6x82LBI3eP8LcFWwc1BgOLQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 19:36:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:79:b8:ad:d4:2d:d0:3a:f9:32:84:10:ab:b9:68:98:90:b1:04:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Sep 24 17:42:40 2026 GMT Not After : Sep 25 19:36:40 2026 GMT Subject: CN=54903A76FDFEBD35DB3BDCDBEAE80970A8C069AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d4:1e:93:94:a9:83:18:d6:c2:e9:25:6b:7f: d0:de:6b:eb:14:4e:02:c6:80:f3:64:16:c3:b2:43: 96:d8:0e:6c:53:db:40:c9:0a:d9:60:97:7b:ed:92: be:15:d2:ad:b1:ff:b0:5f:41:76:c0:97:95:6a:19: b6:21:6b:41:7e:3b:cc:bc:2f:76:17:4a:13:ba:28: 25:aa:7d:b6:6d:db:ad:22:37:d3:59:71:c5:34:f6: 8d:f7:89:73:aa:41:06:b1:ca:5e:1c:7f:51:d6:00: 74:15:7f:83:22:bb:98:4f:b0:0a:93:70:24:6d:f3: 7f:90:85:b5:34:63:f1:f8:f3:94:09:16:a6:fa:c2: 74:ec:45:dd:41:ce:1c:6e:d0:95:be:7f:4e:c4:73: a5:30:f3:f6:7b:6c:12:cf:8f:d7:84:d5:38:db:a9: 87:85:2a:9b:ef:d5:01:d6:13:5f:a9:68:2b:17:f5: 9a:1b:06:ac:cc:ac:c5:cd:42:7d:d5:68:76:b9:4d: cf:10:9a:46:f0:69:a6:1d:54:44:95:cc:7b:72:a9: dc:86:91:4f:47:f1:f9:e5:d3:f5:78:89:67:04:e5: 5b:d3:3e:2e:37:13:03:68:32:11:3b:c1:99:7f:f1: 6f:d7:f0:bc:50:4a:28:d9:a2:b1:21:b4:c0:e7:a9: cb:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:90:3A:76:FD:FE:BD:35:DB:3B:DC:DB:EA:E8:09:70:A8:C0:69:AC X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:94:8d:ef:7a:4d:38:95:4b:49:77:70:b8:f8:35:2a:be:79: d3:eb:08:13:31:0b:11:3e:cc:fb:be:25:38:b1:53:4f:b4:12: 91:b0:24:55:a4:9e:98:b6:07:a1:a5:b5:45:27:23:c6:69:93: ce:d5:a3:55:43:09:7f:d0:bd:c9:c6:fc:00:84:33:34:6d:90: 2f:98:9f:84:35:ae:76:f3:a7:f8:35:f1:f7:a6:58:38:d0:69: 10:57:c8:0d:12:6a:0e:c0:07:af:38:3b:24:55:0d:0c:c0:cc: 75:69:18:47:67:eb:f8:1f:ee:a2:9b:b3:65:a1:70:01:1b:d4: 2a:7c:90:e2:9e:2e:61:36:47:ff:25:ab:42:ad:81:17:8a:47: 04:1a:15:67:fa:a4:f3:11:5d:43:02:9f:f7:a7:b1:7b:97:13: e9:41:32:8c:d4:c1:97:46:22:41:d3:c5:60:20:34:05:8d:4d: 24:4a:3d:f7:61:63:2c:69:d0:db:51:b6:7c:d5:08:60:c7:ec: de:22:50:fe:3c:cf:9c:12:a9:ce:62:f4:19:b5:eb:30:ce:62: e1:1a:53:e0:96:66:b4:1a:58:55:74:dc:96:b6:f2:0b:cb:56: 69:a9:3d:8b:51:d0:39:92:8a:9c:81:b6:45:a9:19:8d:3e:75: 82:9b:47:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnm4rdQt0Dr5MoQQq7lomJCxBJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA5MjQxNzQyNDBaFw0yNjA5MjUxOTM2NDBaMDMxMTAvBgNV BAMTKDU0OTAzQTc2RkRGRUJEMzVEQjNCRENEQkVBRTgwOTcwQThDMDY5QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01B6TlKmDGNbC6SVrf9Dea+sU TgLGgPNkFsOyQ5bYDmxT20DJCtlgl3vtkr4V0q2x/7BfQXbAl5VqGbYha0F+O8y8 L3YXShO6KCWqfbZt260iN9NZccU09o33iXOqQQaxyl4cf1HWAHQVf4Miu5hPsAqT cCRt83+QhbU0Y/H485QJFqb6wnTsRd1Bzhxu0JW+f07Ec6Uw8/Z7bBLPj9eE1Tjb qYeFKpvv1QHWE1+paCsX9ZobBqzMrMXNQn3VaHa5Tc8QmkbwaaYdVESVzHtyqdyG kU9H8fnl0/V4iWcE5VvTPi43EwNoMhE7wZl/8W/X8LxQSijZorEhtMDnqcsHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJA6dv3+vTXbO9zb6ugJcKjAaawwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGiUje96TTiVS0l3cLj4NSq+edPrCBMxCxE+ zPu+JTixU0+0EpGwJFWknpi2B6GltUUnI8Zpk87Vo1VDCX/QvcnG/ACEMzRtkC+Y n4Q1rnbzp/g18femWDjQaRBXyA0Sag7AB684OyRVDQzAzHVpGEdn6/gf7qKbs2Wh cAEb1Cp8kOKeLmE2R/8lq0KtgReKRwQaFWf6pPMRXUMCn/ensXuXE+lBMozUwZdG IkHTxWAgNAWNTSRKPfdhYyxp0NtRtnzVCGDH7N4iUP48z5wSqc5i9Bm16zDOYuEa U+CWZrQaWFV03Ja28gvLVmmpPYtR0DmSipyBtkWpGY0+dYKbR6g= -----END CERTIFICATE-----Generated at Fri Sep 25 12:01:33 2026 by rpki-client