$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: JojqAnPdW0Bl8SLtOqE6UApdKRNPDu7VjLcHOYOyFog= Subject key identifier: 7D:FA:3D:AA:E8:A6:58:F6:1F:AE:9F:DE:65:2B:05:5A:54:70:13:7D Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 3D585FCA546173E19631715554BCBF3CF86B5233 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 13:51:29 +0000 Manifest this update: Sun 15 Nov 2026 13:46:29 +0000 Manifest next update: Mon 16 Nov 2026 15:00:29 +0000 Files and hashes: 1: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: WEaEhMqs0gL+e5xGjb9Vz/1817DbWvmb48J1vLKQWb0=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:35:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:58:5f:ca:54:61:73:e1:96:31:71:55:54:bc:bf:3c:f8:6b:52:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: Nov 15 13:46:29 2026 GMT Not After : Nov 16 15:00:29 2026 GMT Subject: CN=7DFA3DAAE8A658F61FAE9FDE652B055A5470137D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:52:ce:32:15:98:ed:14:25:74:5f:d6:20:02: b9:1c:b1:83:5b:99:83:65:38:40:9a:56:be:b5:a7: bc:eb:87:2d:1a:23:6e:ad:2d:ef:cd:5e:b3:7c:68: f0:6d:9a:e3:22:8e:c5:8c:dc:c6:00:36:43:a5:75: cc:ea:f5:02:41:7a:9c:28:04:38:f2:c4:bf:c2:9e: 85:1b:9e:23:81:fb:8f:a3:62:ad:02:79:c8:c0:72: e0:5b:67:92:f3:74:c9:e9:44:f0:16:62:58:b0:1b: c6:91:69:5e:b3:5c:a7:98:e5:77:9c:c4:ea:34:21: 62:b4:5c:1e:eb:6c:e9:e1:3f:55:1d:5b:0b:95:a5: d9:24:61:8e:47:ce:10:e4:63:72:8c:e1:70:ab:e0: 02:9f:a3:a5:d1:c2:08:a8:05:9f:06:78:bd:3d:df: f2:5c:75:8a:25:f5:cf:59:9c:b7:2a:c9:97:57:9a: d3:98:55:b3:c7:d6:83:ad:22:4d:6b:8e:d2:19:c1: 11:57:aa:bb:1c:22:bb:f0:81:f6:a1:87:fa:f5:fb: 09:76:d2:c4:ac:e3:25:0c:c8:4d:93:3f:96:56:43: 4a:7f:df:f5:c5:cb:c5:ed:c1:59:a7:12:d3:8e:05: bb:cc:00:6e:16:8d:65:42:da:92:31:f5:11:72:1b: b0:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:FA:3D:AA:E8:A6:58:F6:1F:AE:9F:DE:65:2B:05:5A:54:70:13:7D X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4e:3e:ea:a6:6e:43:5e:fa:fb:92:3d:a4:74:cd:34:f7:ef: d6:a0:82:b8:b7:4d:d5:dd:0e:6d:6a:a3:8c:3c:09:c8:c9:61: 16:e0:8f:a5:4b:96:a0:74:15:6d:51:85:28:91:4a:7e:24:84: 40:fd:8c:80:ad:cf:a4:b5:cd:b5:05:59:44:66:f2:e4:cf:f4: b7:fc:49:12:9f:ae:6d:63:b5:c7:d4:b1:51:10:60:b5:20:02: 9b:59:c0:4a:2e:d7:b3:f4:e9:29:bb:5f:bf:55:7a:e3:fc:34: e8:5f:7d:4e:91:c3:59:63:b4:bd:83:56:2c:30:9c:d7:5e:46: 3e:3f:70:78:77:9e:84:31:d4:f5:78:71:4f:61:a7:1b:fc:e1: 85:f4:cf:8d:05:b9:87:ab:08:00:30:6a:14:6b:0e:b3:16:a6: df:72:10:08:d6:77:8f:e9:4d:e1:b0:e3:f0:28:8c:4a:f5:8d: aa:15:84:33:7c:d3:4c:45:3d:e5:eb:29:53:de:99:8c:37:35: ed:ff:ba:02:0f:8a:eb:48:f2:83:2f:be:a1:c6:af:78:ff:f3: 6b:dc:03:cc:2e:3a:33:cb:eb:fd:ac:cd:5f:23:ce:3b:6a:79: c8:f0:d7:ac:d0:25:99:d1:34:cd:4f:9a:a5:82:62:50:86:92: 06:67:d8:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPVhfylRhc+GWMXFVVLy/PPhrUjMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjExMTUxMzQ2MjlaFw0yNjExMTYxNTAwMjlaMDMxMTAvBgNV BAMTKDdERkEzREFBRThBNjU4RjYxRkFFOUZERTY1MkIwNTVBNTQ3MDEzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Us4yFZjtFCV0X9YgArkcsYNb mYNlOECaVr61p7zrhy0aI26tLe/NXrN8aPBtmuMijsWM3MYANkOldczq9QJBepwo BDjyxL/CnoUbniOB+4+jYq0CecjAcuBbZ5LzdMnpRPAWYliwG8aRaV6zXKeY5Xec xOo0IWK0XB7rbOnhP1UdWwuVpdkkYY5HzhDkY3KM4XCr4AKfo6XRwgioBZ8GeL09 3/JcdYol9c9ZnLcqyZdXmtOYVbPH1oOtIk1rjtIZwRFXqrscIrvwgfahh/r1+wl2 0sSs4yUMyE2TP5ZWQ0p/3/XFy8XtwVmnEtOOBbvMAG4WjWVC2pIx9RFyG7A1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUffo9quimWPYfrp/eZSsFWlRwE30wHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJOPuqmbkNe+vuSPaR0zTT379aggri3TdXd Dm1qo4w8CcjJYRbgj6VLlqB0FW1RhSiRSn4khED9jICtz6S1zbUFWURm8uTP9Lf8 SRKfrm1jtcfUsVEQYLUgAptZwEou17P06Sm7X79VeuP8NOhffU6Rw1ljtL2DViww nNdeRj4/cHh3noQx1PV4cU9hpxv84YX0z40FuYerCAAwahRrDrMWpt9yEAjWd4/p TeGw4/AojEr1jaoVhDN800xFPeXrKVPemYw3Ne3/ugIPiutI8oMvvqHGr3j/82vc A8wuOjPL6/2szV8jzjtqecjw16zQJZnRNM1PmqWCYlCGkgZn2Jo= -----END CERTIFICATE-----Generated at Sun Nov 15 22:11:53 2026 by rpki-client