$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: 1+WKRidPzxDY3Wa7JOTsyr8Z2xKpZD948Rl1mSZyPlA= Subject key identifier: 9A:BD:76:86:C6:9B:76:5A:36:44:1E:60:F0:C3:99:ED:48:43:FB:9D Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 4C12A736FAD051B08E502A3DD2B241EE1730C9DC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 05:57:50 +0000 Manifest this update: Fri 25 Sep 2026 05:52:50 +0000 Manifest next update: Sat 26 Sep 2026 08:24:50 +0000 Files and hashes: 1: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: x/6++EwTuCTvbbFfNCCgSKg3L3/Qm8aiGAigFmZmzvA=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 08:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:12:a7:36:fa:d0:51:b0:8e:50:2a:3d:d2:b2:41:ee:17:30:c9:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: Sep 25 05:52:50 2026 GMT Not After : Sep 26 08:24:50 2026 GMT Subject: CN=9ABD7686C69B765A36441E60F0C399ED4843FB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:6a:f0:ea:28:05:53:27:9a:1a:5e:55:82:f8: 4f:cb:7c:6c:d1:44:f2:a4:93:d8:a3:b8:7a:72:42: a7:30:e3:4b:65:a6:e2:88:83:68:3f:0a:19:8d:f5: 46:0e:8e:ca:33:07:58:dc:00:d1:d4:09:c7:90:9b: 4c:24:0d:3c:6b:19:0b:67:b0:52:44:ea:34:94:3d: 7b:7c:87:99:e7:06:e1:d7:bb:78:97:03:a9:29:d3: 13:d8:93:88:85:6c:07:bd:a4:9b:b0:55:ef:19:e2: 17:41:27:47:9f:5b:05:83:2b:5a:89:a4:5c:f3:e4: eb:5d:fa:1e:cd:19:f0:2f:f0:5d:a0:a6:b4:44:f1: 55:df:cb:ec:6d:8b:9c:be:19:f9:f0:0a:c2:69:7f: ed:1a:29:b7:d8:e2:40:27:bb:96:63:f0:62:c1:60: 19:cb:b2:5f:ac:8d:b7:04:24:e4:e3:62:e1:5f:73: c9:87:bf:77:a6:14:45:33:f0:c7:42:f3:54:37:58: 0d:6f:a8:de:93:73:6b:1a:3f:d8:b9:dc:71:5a:3c: 7e:9a:68:4e:67:cc:2c:30:2f:b1:f2:78:f8:31:c8: b9:c1:3c:f9:22:69:43:6d:67:c3:39:5d:4e:de:8f: 5f:0f:5b:0d:4b:bd:11:13:8b:88:f1:03:c8:7d:e3: c6:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:BD:76:86:C6:9B:76:5A:36:44:1E:60:F0:C3:99:ED:48:43:FB:9D X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:7f:3d:02:7a:39:c1:df:46:ec:00:e3:aa:90:da:21:24:36: 59:f3:42:b9:fa:47:16:30:44:3b:05:4b:8b:e5:00:7a:e3:07: 17:9d:3c:4c:13:f1:77:d4:9a:e5:5d:34:0f:42:0f:0f:50:b7: 66:44:0b:de:83:9c:5b:2c:ed:49:f7:6c:a0:8e:f7:d1:be:4f: 17:e8:63:2b:70:28:3d:8b:36:fa:9b:4e:90:90:86:49:31:aa: 5a:6e:bd:1a:67:95:b4:89:f4:38:ed:db:67:57:d5:0b:5e:2e: 39:e1:2a:7a:58:9d:80:8d:c5:67:44:b8:57:30:d1:f8:bf:f3: b1:16:b9:9f:6b:64:d6:e0:05:25:bf:36:9b:a4:5c:e3:de:48: 85:cf:a4:59:6a:f7:35:3c:78:00:ff:46:e2:c7:bf:22:10:82: 7f:24:48:d9:cb:36:b7:f4:57:b1:b0:04:a5:97:4b:23:06:84: ef:51:cc:93:4d:05:86:01:31:2b:48:ae:b6:fd:14:09:50:97: 19:5e:67:f9:3d:d9:f4:81:0d:bd:60:31:47:c8:44:29:30:fa: 1c:8a:de:7d:ed:4e:eb:95:0f:b6:76:6c:9a:c3:8d:43:39:c9: c9:06:7f:55:44:b9:f2:85:82:4d:dd:9c:61:52:f4:63:fa:23: ed:60:c3:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBKnNvrQUbCOUCo90rJB7hcwydwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjA5MjUwNTUyNTBaFw0yNjA5MjYwODI0NTBaMDMxMTAvBgNV BAMTKDlBQkQ3Njg2QzY5Qjc2NUEzNjQ0MUU2MEYwQzM5OUVENDg0M0ZCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbavDqKAVTJ5oaXlWC+E/LfGzR RPKkk9ijuHpyQqcw40tlpuKIg2g/ChmN9UYOjsozB1jcANHUCceQm0wkDTxrGQtn sFJE6jSUPXt8h5nnBuHXu3iXA6kp0xPYk4iFbAe9pJuwVe8Z4hdBJ0efWwWDK1qJ pFzz5Otd+h7NGfAv8F2gprRE8VXfy+xti5y+GfnwCsJpf+0aKbfY4kAnu5Zj8GLB YBnLsl+sjbcEJOTjYuFfc8mHv3emFEUz8MdC81Q3WA1vqN6Tc2saP9i53HFaPH6a aE5nzCwwL7HyePgxyLnBPPkiaUNtZ8M5XU7ej18PWw1LvRETi4jxA8h948YZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmr12hsabdlo2RB5g8MOZ7UhD+50wHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJ/PQJ6OcHfRuwA46qQ2iEkNlnzQrn6RxYw RDsFS4vlAHrjBxedPEwT8XfUmuVdNA9CDw9Qt2ZEC96DnFss7Un3bKCO99G+Txfo YytwKD2LNvqbTpCQhkkxqlpuvRpnlbSJ9Djt22dX1QteLjnhKnpYnYCNxWdEuFcw 0fi/87EWuZ9rZNbgBSW/NpukXOPeSIXPpFlq9zU8eAD/RuLHvyIQgn8kSNnLNrf0 V7GwBKWXSyMGhO9RzJNNBYYBMStIrrb9FAlQlxleZ/k92fSBDb1gMUfIRCkw+hyK 3n3tTuuVD7Z2bJrDjUM5yckGf1VEufKFgk3dnGFS9GP6I+1gw+s= -----END CERTIFICATE-----Generated at Fri Sep 25 22:44:55 2026 by rpki-client