$ rpki-client -vvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: Wo4rbtRsrtt9CE/YK1l8ZufB5iPsPJtvWJaj/Pojbsk= Subject key identifier: 36:15:08:1C:39:A7:B9:B8:35:68:02:FB:9B:B5:26:60:82:D1:18:93 Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 7DDE3BF29C7B5B06C288E5AA7627324C7C9B5AAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: 0E Signing time: Tue 12 May 2026 17:01:46 +0000 Manifest this update: Tue 12 May 2026 16:56:46 +0000 Manifest next update: Wed 13 May 2026 19:03:46 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: y2oHc2Ip+OJBKuYvjs7/swbB6dWhgqcKEN11kbdzfxA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:de:3b:f2:9c:7b:5b:06:c2:88:e5:aa:76:27:32:4c:7c:9b:5a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: May 12 16:56:46 2026 GMT Not After : May 13 19:03:46 2026 GMT Subject: CN=3615081C39A7B9B8356802FB9BB5266082D11893 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fb:0f:df:e7:fe:1f:ad:23:17:de:f3:cd:99: 0a:fb:4d:f7:86:c9:5a:ba:83:0a:1d:81:c7:a6:ce: 2c:41:2b:87:0a:bf:ec:73:c6:3d:26:e0:2d:d9:39: b9:e1:21:8a:1b:ef:a4:9b:bc:b9:7c:f6:4a:65:ac: 57:8b:74:75:6c:88:8b:20:44:ef:04:29:b4:cd:d0: cc:1e:00:6d:34:0c:3c:3c:6e:0d:ed:c5:6a:a2:2e: 47:53:a6:9c:5f:00:08:a5:29:49:ae:42:2d:ae:a1: d4:1f:dc:d8:a9:ff:73:33:9a:09:5d:5e:48:f1:ea: b5:8b:86:c0:5e:42:c7:ce:d5:75:cb:ce:80:a0:43: 92:3b:e5:c7:67:f7:83:68:b4:b0:58:ae:98:aa:cf: 62:40:86:55:99:41:11:cc:d5:7e:1a:bb:8a:e5:cb: b4:ad:d5:0f:2e:29:8d:54:94:92:ad:54:78:f3:25: 21:ed:ab:a3:58:28:43:09:03:66:d1:64:12:04:c1: af:d3:86:cc:a6:02:e3:1a:c2:d6:46:00:3b:89:a5: 6b:2d:e3:b7:82:67:0a:25:85:10:cd:80:c6:1d:d1: c1:1d:a8:21:74:04:c1:7d:a7:43:13:33:e4:11:10: 4a:9e:c4:e1:eb:65:fd:2c:c3:a5:98:cf:c6:95:19: d4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:15:08:1C:39:A7:B9:B8:35:68:02:FB:9B:B5:26:60:82:D1:18:93 X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:93:1c:87:a0:37:69:d8:c8:f3:40:e7:26:1d:07:d9:94:72: 31:aa:79:82:9a:fb:0f:08:d4:29:d8:56:43:9f:1f:5c:ae:c1: 90:a4:d7:79:a4:1b:3f:d8:30:06:3c:35:72:af:a5:16:84:8f: fd:d2:5d:56:29:cb:c3:b5:7a:8f:1f:4e:37:6c:21:da:c8:15: 84:20:aa:e6:c6:b3:1a:42:cd:6b:3a:34:c3:d1:7c:f3:bd:59: df:76:59:a4:ec:0e:fe:01:98:cc:b7:a7:69:bd:6d:01:64:53: ca:a4:46:7a:6b:05:85:76:33:80:ee:82:04:03:fa:da:7f:79: f4:ba:9c:09:77:bb:b9:e7:17:3b:5c:13:f2:52:0c:9c:f9:a6: a6:0a:cd:eb:37:f1:1a:2e:07:72:ac:92:27:0d:af:6b:7e:87: 80:57:7b:2c:3b:be:6f:68:ba:d5:96:42:bf:2f:b3:1c:fd:71: 9f:9b:30:27:50:47:6d:fd:93:6f:7f:2c:e5:13:b6:66:2b:08: 28:87:48:51:57:57:da:b9:26:16:fd:9a:ae:ad:09:58:8c:5c: 64:bc:cc:5b:c5:f5:bd:a7:6a:31:4b:b6:0a:23:69:4a:e1:24: ea:80:9e:62:f6:87:da:05:1c:8e:d3:48:1d:46:01:aa:c8:05: 80:c3:4c:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfd478px7WwbCiOWqdicyTHybWq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQw ODRGMzlFMTAeFw0yNjA1MTIxNjU2NDZaFw0yNjA1MTMxOTAzNDZaMDMxMTAvBgNV BAMTKDM2MTUwODFDMzlBN0I5QjgzNTY4MDJGQjlCQjUyNjYwODJEMTE4OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+w/f5/4frSMX3vPNmQr7TfeG yVq6gwodgcemzixBK4cKv+xzxj0m4C3ZObnhIYob76SbvLl89kplrFeLdHVsiIsg RO8EKbTN0MweAG00DDw8bg3txWqiLkdTppxfAAilKUmuQi2uodQf3Nip/3Mzmgld Xkjx6rWLhsBeQsfO1XXLzoCgQ5I75cdn94NotLBYrpiqz2JAhlWZQRHM1X4au4rl y7St1Q8uKY1UlJKtVHjzJSHtq6NYKEMJA2bRZBIEwa/ThsymAuMawtZGADuJpWst 47eCZwolhRDNgMYd0cEdqCF0BMF9p0MTM+QREEqexOHrZf0sw6WYz8aVGdRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhUIHDmnubg1aAL7m7UmYILRGJMwHwYDVR0j BBgwFoAUhm19ElbW+TWjRry1HD50rQhPOeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzdiMzM0MTItYmU1Yi00NjNlLTgyMzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1 NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQwODRGMzlFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYz OUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0 QUQwODRGMzlFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyTHIegN2nYyPNA5yYdB9mUcjGqeYKa+w8I 1CnYVkOfH1yuwZCk13mkGz/YMAY8NXKvpRaEj/3SXVYpy8O1eo8fTjdsIdrIFYQg qubGsxpCzWs6NMPRfPO9Wd92WaTsDv4BmMy3p2m9bQFkU8qkRnprBYV2M4DuggQD +tp/efS6nAl3u7nnFztcE/JSDJz5pqYKzes38RouB3KskicNr2t+h4BXeyw7vm9o utWWQr8vsxz9cZ+bMCdQR239k29/LOUTtmYrCCiHSFFXV9q5Jhb9mq6tCViMXGS8 zFvF9b2najFLtgojaUrhJOqAnmL2h9oFHI7TSB1GAarIBYDDTNc= -----END CERTIFICATE-----Generated at Wed May 13 03:22:58 2026 by rpki-client