$ rpki-client -vvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: r1UCl0/YAhAWMRPdQ5zobHOckgOMOzfx0k8/qEAWqAA= Subject key identifier: 90:6D:D2:D4:BC:4C:48:5E:6D:4C:53:E5:58:C1:37:83:C2:E7:88:AD Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 4436698A15B8AF95788645F3D0793ACB64C02FE7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: 0F Signing time: Tue 12 May 2026 21:55:02 +0000 Manifest this update: Tue 12 May 2026 21:50:02 +0000 Manifest next update: Wed 13 May 2026 22:52:02 +0000 Files and hashes: 1: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: 9d0GYwO3TjXZLbAnM+r4XSzuXFV3I6+OolnSbrO34H8=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:52:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:36:69:8a:15:b8:af:95:78:86:45:f3:d0:79:3a:cb:64:c0:2f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: May 12 21:50:02 2026 GMT Not After : May 13 22:52:02 2026 GMT Subject: CN=906DD2D4BC4C485E6D4C53E558C13783C2E788AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a3:31:8e:85:bb:0e:74:38:9a:58:b2:3a:f0: e1:c5:92:34:23:ef:2b:96:53:a5:60:29:2a:5b:6b: af:57:9b:90:56:10:2a:f3:1b:99:07:33:e7:15:88: c6:79:14:16:80:28:f2:c2:d3:b7:fa:e5:01:4e:61: b3:70:50:36:83:b8:5b:81:c5:3f:c0:52:53:da:fa: e4:d2:6f:9f:f5:76:61:43:3b:8c:54:2d:98:c8:b1: 4e:34:65:97:0e:94:41:cb:9f:4f:aa:0b:b3:3a:5d: 93:d6:6c:4f:d8:09:f2:ee:d3:87:dc:b9:dc:59:e3: c7:de:99:84:5a:0f:a7:4e:57:40:5b:74:a4:9c:3d: ee:0e:28:d5:27:de:28:14:5a:85:dd:88:73:fd:1a: 6d:07:10:5e:59:46:5e:d3:68:01:92:c4:33:59:7b: 15:4a:29:df:c5:4e:3b:ce:9a:c4:80:d6:76:96:a4: 26:ec:58:7b:7e:49:34:ca:0b:64:91:87:48:ab:07: 10:d4:fb:82:35:dd:af:78:f0:36:fb:3c:42:9a:d5: 62:57:cd:ed:7f:9b:49:39:51:3e:d1:5c:0f:82:70: a8:4f:53:bf:7d:3b:4c:95:11:a5:65:57:20:59:4e: aa:86:b7:75:f4:35:fc:ca:57:16:40:32:63:ad:43: 0d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:6D:D2:D4:BC:4C:48:5E:6D:4C:53:E5:58:C1:37:83:C2:E7:88:AD X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:65:ae:ba:19:dd:1b:78:f0:d6:82:08:bd:cc:c1:b7:e1:4e: 1b:b7:68:61:f7:48:37:f6:52:ed:0d:50:6c:54:55:69:ff:a9: 49:df:09:6f:83:3b:42:75:e6:a9:64:fd:13:5b:e2:4f:19:29: 2d:e4:67:f5:08:e2:ca:1a:0a:eb:2d:ac:2b:47:10:fb:82:a5: f9:65:b6:b1:71:86:67:56:a9:12:86:1d:93:3e:1a:0b:26:08: c1:38:00:e7:48:19:79:89:32:58:b0:91:cc:d5:05:27:ea:c7: bf:a6:9f:70:1a:a2:13:ab:a4:37:8e:67:bf:e1:49:3a:07:ee: 48:58:81:94:29:23:8f:47:96:94:74:86:44:9e:49:f3:2e:4d: 46:cc:dd:05:ee:5c:ff:06:6c:29:2d:15:e3:a6:48:a7:52:88: 05:94:7b:2f:55:ff:79:7d:bb:9d:b8:06:cb:16:2d:34:b6:aa: 41:f9:02:a9:22:ea:e6:93:83:af:81:3a:b3:47:7a:40:c7:26: 32:a1:81:91:1f:1a:9d:dc:29:06:10:70:59:26:bd:fe:9c:72: 2a:f6:9a:f5:b7:b5:51:b8:be:ae:1e:77:b7:49:f3:7d:08:b9: c0:50:6d:af:ed:7a:43:22:28:32:fb:ec:33:15:ce:40:dc:ff: 49:26:e9:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURDZpihW4r5V4hkXz0Hk6y2TAL+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjA1MTIyMTUwMDJaFw0yNjA1MTMyMjUyMDJaMDMxMTAvBgNV BAMTKDkwNkREMkQ0QkM0QzQ4NUU2RDRDNTNFNTU4QzEzNzgzQzJFNzg4QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfozGOhbsOdDiaWLI68OHFkjQj 7yuWU6VgKSpba69Xm5BWECrzG5kHM+cViMZ5FBaAKPLC07f65QFOYbNwUDaDuFuB xT/AUlPa+uTSb5/1dmFDO4xULZjIsU40ZZcOlEHLn0+qC7M6XZPWbE/YCfLu04fc udxZ48femYRaD6dOV0BbdKScPe4OKNUn3igUWoXdiHP9Gm0HEF5ZRl7TaAGSxDNZ exVKKd/FTjvOmsSA1naWpCbsWHt+STTKC2SRh0irBxDU+4I13a948Db7PEKa1WJX ze1/m0k5UT7RXA+CcKhPU799O0yVEaVlVyBZTqqGt3X0NfzKVxZAMmOtQw1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkG3S1LxMSF5tTFPlWME3g8LniK0wHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHFlrroZ3Rt48NaCCL3MwbfhThu3aGH3SDf2 Uu0NUGxUVWn/qUnfCW+DO0J15qlk/RNb4k8ZKS3kZ/UI4soaCustrCtHEPuCpfll trFxhmdWqRKGHZM+GgsmCME4AOdIGXmJMliwkczVBSfqx7+mn3AaohOrpDeOZ7/h SToH7khYgZQpI49HlpR0hkSeSfMuTUbM3QXuXP8GbCktFeOmSKdSiAWUey9V/3l9 u524BssWLTS2qkH5Aqki6uaTg6+BOrNHekDHJjKhgZEfGp3cKQYQcFkmvf6ccir2 mvW3tVG4vq4ed7dJ830IucBQba/tekMiKDL77DMVzkDc/0km6dY= -----END CERTIFICATE-----Generated at Wed May 13 03:15:29 2026 by rpki-client