$ rpki-client -vvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: lbxcZCKStNZHdtpt801IGOJZ46NKLvpK93ijYGy6ImA= Subject key identifier: 7B:A3:BE:82:FA:FB:F2:3D:98:9A:48:F3:EF:66:5C:BD:7F:89:B0:4F Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 2945B97BDFA3475A9E6D91AACA867634CB85E8CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: 6F Signing time: Fri 24 Jul 2026 02:27:20 +0000 Manifest this update: Fri 24 Jul 2026 02:22:20 +0000 Manifest next update: Sat 25 Jul 2026 04:06:20 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: +d47xckttKjj4iDjjlNVRsTTEMtkn4/f7H7FUkrdmxk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 04:06:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:45:b9:7b:df:a3:47:5a:9e:6d:91:aa:ca:86:76:34:cb:85:e8:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: Jul 24 02:22:20 2026 GMT Not After : Jul 25 04:06:20 2026 GMT Subject: CN=7BA3BE82FAFBF23D989A48F3EF665CBD7F89B04F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:37:b0:6c:d4:4a:48:e9:59:f3:42:34:db:f4: 9d:77:b2:b1:7b:e6:5c:8b:7e:be:34:0e:2c:3e:bd: 9d:9b:46:72:05:ef:01:80:72:19:80:1f:ed:9a:b2: 94:fe:fa:31:d0:c4:53:50:98:35:42:e8:60:02:aa: a5:d4:21:ee:f4:68:8d:69:a3:8a:9c:c5:2f:b2:3f: d3:5d:fd:04:70:71:57:f7:98:04:87:5c:dd:3f:bb: 81:ec:3e:a6:55:ab:b6:02:e8:dc:1a:3a:bc:f6:22: 69:84:22:75:49:64:28:e6:25:85:45:67:77:ad:1a: 18:8c:cc:b6:57:44:3b:85:a9:aa:b4:e0:ca:76:f9: 74:f9:39:41:9b:10:fb:41:a5:38:7b:78:e0:aa:22: ac:97:80:95:c6:3a:23:5f:d8:6a:c2:fd:f7:e1:f2: d1:00:a7:5d:e5:8a:aa:6b:b1:f9:4f:de:eb:3b:16: 09:6f:16:07:56:4d:f9:dc:e2:3f:91:ae:66:ea:3b: 24:8e:3f:dd:af:09:d6:1a:d3:b1:d1:fd:bc:36:57: c2:21:07:de:4f:c2:59:1d:6a:11:18:11:e8:42:3d: 52:db:0a:06:73:69:f2:55:3e:22:66:0e:4e:88:93: e9:8e:0f:41:61:30:0a:50:91:9c:d9:34:19:84:35: 9a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:A3:BE:82:FA:FB:F2:3D:98:9A:48:F3:EF:66:5C:BD:7F:89:B0:4F X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f1:60:14:c9:18:ba:4d:a0:01:b3:c8:2d:73:ad:c4:22:ab: 1c:e7:07:7b:f3:eb:a1:61:6d:cc:56:ce:7e:4e:88:51:35:88: cc:09:ea:70:68:af:5e:b3:e6:ec:cb:ce:42:08:f6:61:7d:c9: f0:79:81:9e:36:06:f9:1b:ed:e9:dc:5d:3d:1d:4a:fd:75:1f: ad:93:85:c3:46:32:0f:ab:98:1e:51:76:e3:85:13:c1:c1:d5: a3:aa:20:bc:e8:a6:d1:80:aa:cf:11:b1:3b:a6:4c:5a:de:04: 91:9b:9b:24:2e:93:94:ee:c0:11:f4:a7:61:01:14:da:35:eb: db:44:75:33:2b:b6:b2:24:0c:e2:94:e7:00:70:f7:cc:e9:51: 0b:c9:b8:eb:2d:65:b1:19:43:f4:dc:6d:25:64:82:83:f4:da: 44:d6:ac:a9:da:0e:fc:a2:dd:75:b2:b2:72:7a:6e:f7:ea:05: 80:e2:a3:54:a8:43:e0:68:95:3a:75:50:e4:97:a7:26:8e:7f: 89:a3:95:c7:56:bd:27:fa:fb:80:42:6f:ad:ef:8e:17:dc:fd: e2:d2:fc:25:15:43:94:c7:d4:4c:dd:d9:91:69:e6:cb:3d:39: 39:52:35:ab:03:ff:57:4b:77:e9:dd:5c:29:07:1d:31:0e:09: 2f:94:19:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKUW5e9+jR1qebZGqyoZ2NMuF6M0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQw ODRGMzlFMTAeFw0yNjA3MjQwMjIyMjBaFw0yNjA3MjUwNDA2MjBaMDMxMTAvBgNV BAMTKDdCQTNCRTgyRkFGQkYyM0Q5ODlBNDhGM0VGNjY1Q0JEN0Y4OUIwNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZN7Bs1EpI6VnzQjTb9J13srF7 5lyLfr40Diw+vZ2bRnIF7wGAchmAH+2aspT++jHQxFNQmDVC6GACqqXUIe70aI1p o4qcxS+yP9Nd/QRwcVf3mASHXN0/u4HsPqZVq7YC6NwaOrz2ImmEInVJZCjmJYVF Z3etGhiMzLZXRDuFqaq04Mp2+XT5OUGbEPtBpTh7eOCqIqyXgJXGOiNf2GrC/ffh 8tEAp13liqprsflP3us7FglvFgdWTfnc4j+RrmbqOySOP92vCdYa07HR/bw2V8Ih B95PwlkdahEYEehCPVLbCgZzafJVPiJmDk6Ik+mOD0FhMApQkZzZNBmENZp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe6O+gvr78j2Ymkjz72ZcvX+JsE8wHwYDVR0j BBgwFoAUhm19ElbW+TWjRry1HD50rQhPOeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzdiMzM0MTItYmU1Yi00NjNlLTgyMzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1 NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQwODRGMzlFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYz OUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0 QUQwODRGMzlFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrxYBTJGLpNoAGzyC1zrcQiqxznB3vz66Fh bcxWzn5OiFE1iMwJ6nBor16z5uzLzkII9mF9yfB5gZ42Bvkb7encXT0dSv11H62T hcNGMg+rmB5RduOFE8HB1aOqILzoptGAqs8RsTumTFreBJGbmyQuk5TuwBH0p2EB FNo169tEdTMrtrIkDOKU5wBw98zpUQvJuOstZbEZQ/TcbSVkgoP02kTWrKnaDvyi 3XWysnJ6bvfqBYDio1SoQ+BolTp1UOSXpyaOf4mjlcdWvSf6+4BCb63vjhfc/eLS /CUVQ5TH1Ezd2ZFp5ss9OTlSNasD/1dLd+ndXCkHHTEOCS+UGSg= -----END CERTIFICATE-----Generated at Fri Jul 24 08:55:14 2026 by rpki-client