$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: 4kKmmKG3mPKrxlOhFeOj4RCXUuShNLj4CG8Fo90OI7M= Subject key identifier: 1A:B3:38:D9:0C:EC:6F:D2:A9:79:64:E5:6B:09:7A:F3:F3:68:7E:57 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 2279FC43EC4CE7648ED96C805F007B45499379EC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 14:56:39 +0000 Manifest this update: Mon 02 Nov 2026 14:51:39 +0000 Manifest next update: Tue 03 Nov 2026 18:42:39 +0000 Files and hashes: 1: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 2: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 3: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 4: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 5: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 6: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 7: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 8: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 9: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 10: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 11: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 12: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 13: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 14: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 15: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 16: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 17: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: 7cJhpFFN0xGJ4DnMaHVAYOGFhWvfn+4JpBdhrasRVkE=) 18: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 19: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 12:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:79:fc:43:ec:4c:e7:64:8e:d9:6c:80:5f:00:7b:45:49:93:79:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Nov 2 14:51:39 2026 GMT Not After : Nov 3 18:42:39 2026 GMT Subject: CN=1AB338D90CEC6FD2A97964E56B097AF3F3687E57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:45:3d:11:f5:18:d4:18:f2:01:dc:dd:4d:52: 07:01:50:bd:cb:4b:52:c3:9c:5d:32:7c:1e:7d:5c: 25:d2:54:2c:45:e3:d1:88:e6:eb:55:29:a8:6a:c9: 33:d9:65:25:e6:f5:e2:62:55:79:f1:70:69:67:16: 0b:3f:c2:ad:c4:9f:63:ad:21:00:f8:98:12:d1:e2: 54:61:4d:29:7a:64:40:1a:16:68:ad:c0:6e:49:80: 60:c0:97:01:2d:1c:99:a7:6a:73:de:ef:c8:bd:cc: 69:dd:c2:99:4c:ac:07:d2:a2:32:b6:14:5a:57:e7: bd:fd:c0:86:e7:f3:37:5c:f3:03:cb:a9:99:30:53: 36:fa:a4:6d:99:87:73:4d:97:c8:1c:2e:d2:84:05: b7:ec:1e:01:ee:b0:97:ad:34:35:84:00:94:48:23: 73:00:4d:40:2d:6c:24:ed:4d:76:79:fd:f5:be:47: 64:4c:07:04:e9:d8:a8:02:04:49:bd:0c:e8:89:29: 91:72:8b:c8:21:5c:4a:07:a2:19:b5:46:f0:e2:b2: 24:b5:9d:36:4c:fe:4c:7c:91:14:33:4a:ef:8f:f1: 31:07:88:5b:e4:70:c7:8a:79:7a:49:c1:4b:b8:d4: 72:e0:02:e9:13:b5:5f:84:8c:3f:be:84:a1:6b:82: fa:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B3:38:D9:0C:EC:6F:D2:A9:79:64:E5:6B:09:7A:F3:F3:68:7E:57 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:51:08:b6:b2:fc:d0:46:bb:4c:ce:01:40:98:14:a1:8a:0b: 76:cd:12:ea:bb:32:84:7a:84:a4:40:a8:8e:42:e8:53:ba:ab: df:15:d6:66:bc:cd:45:56:8a:ae:e1:9a:30:a0:83:ed:28:af: ad:7e:ab:1e:4d:ad:54:94:28:0b:94:5d:51:36:4f:a7:38:13: b0:88:e1:83:c4:45:f4:34:11:3f:04:4c:6b:0e:54:d2:4f:82: 90:e0:9d:a1:74:ef:3d:ce:e6:17:1e:2a:80:58:c3:82:1a:fb: 3e:f4:ea:3a:0f:eb:63:17:21:80:32:8e:2a:0c:02:6c:a2:72: 37:6b:35:18:73:4f:ff:66:b2:16:72:bc:35:72:23:8f:05:27: 04:0b:37:44:e8:fc:97:31:16:5f:42:c1:55:ac:11:c2:46:93: f3:af:a2:01:e2:b2:2f:b4:b7:2e:37:44:cb:4f:97:e7:2f:fa: d9:f8:36:53:9d:a2:9c:5e:29:eb:35:f1:2b:f8:a3:14:9b:0e: c6:c9:83:ee:a4:d2:f3:ac:d2:a2:4f:e0:a7:36:c2:08:58:6d: 51:56:2c:3f:7b:3a:42:9f:6c:74:8c:b4:5b:02:34:8f:82:c9: 05:f9:d7:fa:3b:68:c7:38:3a:4a:7d:0f:4f:70:ce:65:57:2e: 22:d6:f3:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUInn8Q+xM52SO2WyAXwB7RUmTeewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjExMDIxNDUxMzlaFw0yNjExMDMxODQyMzlaMDMxMTAvBgNV BAMTKDFBQjMzOEQ5MENFQzZGRDJBOTc5NjRFNTZCMDk3QUYzRjM2ODdFNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtRT0R9RjUGPIB3N1NUgcBUL3L S1LDnF0yfB59XCXSVCxF49GI5utVKahqyTPZZSXm9eJiVXnxcGlnFgs/wq3En2Ot IQD4mBLR4lRhTSl6ZEAaFmitwG5JgGDAlwEtHJmnanPe78i9zGndwplMrAfSojK2 FFpX5739wIbn8zdc8wPLqZkwUzb6pG2Zh3NNl8gcLtKEBbfsHgHusJetNDWEAJRI I3MATUAtbCTtTXZ5/fW+R2RMBwTp2KgCBEm9DOiJKZFyi8ghXEoHohm1RvDisiS1 nTZM/kx8kRQzSu+P8TEHiFvkcMeKeXpJwUu41HLgAukTtV+EjD++hKFrgvr3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrM42Qzsb9KpeWTlawl68/NoflcwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFRCLay/NBGu0zOAUCYFKGKC3bNEuq7MoR6 hKRAqI5C6FO6q98V1ma8zUVWiq7hmjCgg+0or61+qx5NrVSUKAuUXVE2T6c4E7CI 4YPERfQ0ET8ETGsOVNJPgpDgnaF07z3O5hceKoBYw4Ia+z706joP62MXIYAyjioM AmyicjdrNRhzT/9mshZyvDVyI48FJwQLN0To/JcxFl9CwVWsEcJGk/OvogHisi+0 ty43RMtPl+cv+tn4NlOdopxeKes18Sv4oxSbDsbJg+6k0vOs0qJP4Kc2wghYbVFW LD97OkKfbHSMtFsCNI+CyQX51/o7aMc4Okp9D09wzmVXLiLW8w0= -----END CERTIFICATE-----Generated at Mon Nov 2 20:20:32 2026 by rpki-client