$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: z6y3OapIgeNbKN3WkxBhOdm6CnDhVBhODDfQlxeiU7g= Subject key identifier: 79:06:4B:FE:48:9E:D5:1E:D5:2F:C2:39:CB:62:DA:11:2F:5A:C7:52 Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 2E0EEB55778FA32E953974A76AA9039CDA049AE3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 11:55:25 +0000 Manifest this update: Thu 24 Sep 2026 11:50:25 +0000 Manifest next update: Fri 25 Sep 2026 13:14:25 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: 5J2VOxlcs6GO/53YfHcEb1HANJMJsrIPFrwDjnm6niU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0e:eb:55:77:8f:a3:2e:95:39:74:a7:6a:a9:03:9c:da:04:9a:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: Sep 24 11:50:25 2026 GMT Not After : Sep 25 13:14:25 2026 GMT Subject: CN=79064BFE489ED51ED52FC239CB62DA112F5AC752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:06:e1:ba:34:c7:4e:94:a9:fe:9a:50:85:ed: 3d:95:24:65:ab:56:c6:26:d4:7f:f4:bb:75:68:e0: 84:34:70:6c:62:47:ce:47:bf:2e:a3:eb:ef:9c:32: 03:8f:a1:d9:84:ae:d8:f8:64:ef:d7:33:04:a5:05: 10:9b:80:1a:f8:08:dd:4b:0b:2c:db:78:d9:63:40: 01:4d:0b:ff:b7:5b:41:9b:01:3c:03:e4:87:d1:e4: f8:2d:57:7c:93:0b:be:29:b7:80:21:3a:fd:98:49: f7:8b:db:6f:d6:df:1d:5d:3c:dc:c6:bc:1e:a5:4e: ef:0b:e5:e1:de:38:f5:f3:75:b7:92:fc:38:6e:47: 1f:0e:80:13:da:53:c3:7d:4d:c5:56:05:07:da:4b: dd:ee:83:12:bd:da:6b:d1:c9:d0:b7:37:0c:19:95: 42:22:bf:70:87:20:4a:ea:49:02:a0:5f:74:93:d8: 28:bf:cd:8c:6a:06:7e:f6:73:3a:74:c2:39:40:a2: 21:a1:56:c3:52:dd:4d:dd:ff:00:a8:0b:36:08:7e: d1:83:2b:3f:bb:08:78:af:8b:39:47:ee:87:b0:df: 21:c1:e6:56:39:f2:9e:63:5c:38:48:97:a2:55:74: f3:0c:04:63:74:b2:0a:c1:29:a5:bf:a4:4f:fb:dd: ba:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:06:4B:FE:48:9E:D5:1E:D5:2F:C2:39:CB:62:DA:11:2F:5A:C7:52 X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:23:37:30:67:0c:56:55:5b:3c:45:7d:f0:26:90:e8:b3:ba: 26:a6:f7:cf:b9:09:e6:b2:8e:f2:38:64:c9:b2:23:10:5a:3b: 45:de:d4:e4:e2:76:6c:d2:34:72:fa:65:b5:59:25:47:dd:97: 33:3c:ed:ec:1c:39:6e:aa:d7:50:6f:6f:7f:d2:c3:76:dd:2b: d5:52:ae:a1:80:ac:92:c7:9a:59:93:9c:a0:4a:ec:f7:7f:eb: 16:f2:5d:ef:f5:26:e1:4b:70:d4:d8:da:0d:86:4b:4d:a7:93: 15:00:57:44:fc:b9:1a:79:72:30:3b:0e:08:a9:db:7e:37:40: 8c:04:6b:cd:ea:ea:b4:18:6a:05:08:25:df:cb:69:c2:73:6b: 2f:92:5e:50:82:7c:f2:63:59:36:89:ac:1c:4a:5d:56:58:e6: ac:47:f0:10:75:ac:a3:17:68:28:6e:9f:bd:82:0b:a9:63:80: ac:3c:f4:76:85:4b:0e:e3:d0:54:57:da:c6:29:12:bb:90:05: 1d:e4:e8:bb:24:85:95:26:41:34:43:9a:2c:36:79:69:34:d6: 98:16:a4:e9:06:a4:02:71:dc:fb:77:3b:71:76:a1:25:c4:a0: 40:6d:b8:fa:5c:3a:ad:06:fb:86:90:04:82:8a:d7:7c:32:d5: 35:77:59:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULg7rVXePoy6VOXSnaqkDnNoEmuMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQw ODRGMzlFMTAeFw0yNjA5MjQxMTUwMjVaFw0yNjA5MjUxMzE0MjVaMDMxMTAvBgNV BAMTKDc5MDY0QkZFNDg5RUQ1MUVENTJGQzIzOUNCNjJEQTExMkY1QUM3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwBuG6NMdOlKn+mlCF7T2VJGWr VsYm1H/0u3Vo4IQ0cGxiR85Hvy6j6++cMgOPodmErtj4ZO/XMwSlBRCbgBr4CN1L CyzbeNljQAFNC/+3W0GbATwD5IfR5PgtV3yTC74pt4AhOv2YSfeL22/W3x1dPNzG vB6lTu8L5eHeOPXzdbeS/DhuRx8OgBPaU8N9TcVWBQfaS93ugxK92mvRydC3NwwZ lUIiv3CHIErqSQKgX3ST2Ci/zYxqBn72czp0wjlAoiGhVsNS3U3d/wCoCzYIftGD Kz+7CHivizlH7oew3yHB5lY58p5jXDhIl6JVdPMMBGN0sgrBKaW/pE/73bqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeQZL/kie1R7VL8I5y2LaES9ax1IwHwYDVR0j BBgwFoAUhm19ElbW+TWjRry1HD50rQhPOeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzdiMzM0MTItYmU1Yi00NjNlLTgyMzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1 NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQwODRGMzlFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYz OUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0 QUQwODRGMzlFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGojNzBnDFZVWzxFffAmkOizuiam98+5Ceay jvI4ZMmyIxBaO0Xe1OTidmzSNHL6ZbVZJUfdlzM87ewcOW6q11Bvb3/Sw3bdK9VS rqGArJLHmlmTnKBK7Pd/6xbyXe/1JuFLcNTY2g2GS02nkxUAV0T8uRp5cjA7Dgip 2343QIwEa83q6rQYagUIJd/LacJzay+SXlCCfPJjWTaJrBxKXVZY5qxH8BB1rKMX aChun72CC6ljgKw89HaFSw7j0FRX2sYpEruQBR3k6LskhZUmQTRDmiw2eWk01pgW pOkGpAJx3Pt3O3F2oSXEoEBtuPpcOq0G+4aQBIKK13wy1TV3WTE= -----END CERTIFICATE-----Generated at Thu Sep 24 19:50:39 2026 by rpki-client