$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: +NzDXFBVd7vq/JaZiBkhDx2ZdRPzsrGxuq8Mmof3ID4= Subject key identifier: 21:D0:86:47:E4:54:1B:E7:44:A6:7B:D8:85:82:83:AB:62:E8:21:AD Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 3F7FF560B639C891096F719A64A23116D3FDF8D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: F4 Signing time: Sun 01 Nov 2026 19:57:39 +0000 Manifest this update: Sun 01 Nov 2026 19:52:39 +0000 Manifest next update: Mon 02 Nov 2026 22:53:39 +0000 Files and hashes: 1: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 2: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 3: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 4: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 5: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 6: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 7: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 8: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 9: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 10: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 11: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 12: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 13: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 14: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 15: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 16: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: AsC8BFL8+dvGdwJy4pZlzTVZmfXY9P7YtWySf9oNh90=) 17: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 18: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 19: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 02 Nov 2026 16:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:7f:f5:60:b6:39:c8:91:09:6f:71:9a:64:a2:31:16:d3:fd:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Nov 1 19:52:39 2026 GMT Not After : Nov 2 22:53:39 2026 GMT Subject: CN=21D08647E4541BE744A67BD8858283AB62E821AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:a3:31:ef:19:fd:65:05:07:82:6e:59:48:fa: 42:c0:60:52:17:c8:30:27:e6:57:2b:7d:8f:42:9c: d5:d0:60:7f:05:d1:09:45:55:66:78:c8:22:ea:11: 15:22:77:97:70:08:26:0a:c4:35:6b:60:fe:a3:6e: da:a8:79:ec:69:4a:0d:75:60:56:31:58:17:53:fd: 25:ba:60:3c:6f:10:1a:18:f0:65:48:6c:1d:3e:2f: 75:ee:42:b8:cf:f2:82:c2:ea:ff:9a:f1:3b:27:c0: df:5b:4a:29:9c:97:93:f6:f8:38:6e:22:44:8a:04: c9:5c:e3:ca:2e:cf:3d:f9:76:99:53:aa:9b:90:bd: 2b:36:96:a8:2f:08:7e:85:e3:19:dd:be:fb:97:66: d5:76:f5:b2:ab:cc:a4:2a:01:e3:b5:07:6e:ab:9b: 80:a9:71:61:2b:71:c8:2c:f7:c3:bd:3e:d7:5a:a8: 56:90:79:1a:df:df:3b:23:0b:80:95:07:b2:ad:14: 51:6b:e7:66:38:bc:ed:19:5d:6e:df:07:6f:59:bd: 0a:35:e4:96:64:f7:5d:73:de:3c:27:1a:83:8b:6c: c6:32:e6:32:58:f4:45:8e:ab:66:d2:d5:30:05:ba: 9e:8c:fb:fd:65:4e:67:a9:9b:06:9a:7f:f4:87:0f: f0:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:D0:86:47:E4:54:1B:E7:44:A6:7B:D8:85:82:83:AB:62:E8:21:AD X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f5:54:fb:24:97:6f:93:19:bb:c3:c3:c7:cd:8a:f2:ee:2d: bb:01:e1:ff:d9:16:50:5f:fc:ab:61:38:c4:28:b2:a0:a9:5c: cf:2a:04:b4:3e:f5:a4:84:c1:91:eb:26:96:b0:54:26:88:df: 66:01:b4:24:1c:57:a6:f9:1e:f8:d5:4b:48:c6:61:16:9a:25: f2:be:ea:75:66:29:73:8e:37:1b:ca:49:c9:d5:b0:20:f4:eb: 05:ff:f5:39:62:32:65:5d:8b:99:6f:ae:60:5e:93:da:29:bb: 5d:5f:92:8a:e6:f6:ad:cb:64:a5:d4:72:c1:38:53:5e:82:e2: 0b:89:44:60:3b:3c:2b:10:a3:f3:42:ae:87:14:0d:0f:a3:0d: 14:1e:2d:9d:26:5d:25:e2:7c:5e:ae:92:0f:d2:9e:02:cb:5d: b9:42:71:54:e2:a5:b7:d5:b1:9a:b2:b7:7c:00:eb:e0:43:6b: 4b:6e:93:71:6c:ae:d3:99:d5:fe:de:7d:46:a4:2a:55:b6:d2: d3:db:47:c6:da:73:bd:2e:b4:98:53:0d:21:fc:75:c7:d6:2c: 70:31:31:b4:56:94:72:f9:0b:a6:8c:cf:8a:f9:ea:0c:13:a0: be:d6:3f:f6:df:8d:47:e7:75:50:31:5d:e8:90:73:a7:d2:45: eb:f0:c5:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP3/1YLY5yJEJb3GaZKIxFtP9+NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjExMDExOTUyMzlaFw0yNjExMDIyMjUzMzlaMDMxMTAvBgNV BAMTKDIxRDA4NjQ3RTQ1NDFCRTc0NEE2N0JEODg1ODI4M0FCNjJFODIxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdozHvGf1lBQeCbllI+kLAYFIX yDAn5lcrfY9CnNXQYH8F0QlFVWZ4yCLqERUid5dwCCYKxDVrYP6jbtqoeexpSg11 YFYxWBdT/SW6YDxvEBoY8GVIbB0+L3XuQrjP8oLC6v+a8TsnwN9bSimcl5P2+Dhu IkSKBMlc48ouzz35dplTqpuQvSs2lqgvCH6F4xndvvuXZtV29bKrzKQqAeO1B26r m4CpcWErccgs98O9PtdaqFaQeRrf3zsjC4CVB7KtFFFr52Y4vO0ZXW7fB29ZvQo1 5JZk911z3jwnGoOLbMYy5jJY9EWOq2bS1TAFup6M+/1lTmepmwaaf/SHD/D7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIdCGR+RUG+dEpnvYhYKDq2LoIa0wHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED1VPskl2+TGbvDw8fNivLuLbsB4f/ZFlBf /KthOMQosqCpXM8qBLQ+9aSEwZHrJpawVCaI32YBtCQcV6b5HvjVS0jGYRaaJfK+ 6nVmKXOONxvKScnVsCD06wX/9TliMmVdi5lvrmBek9opu11fkorm9q3LZKXUcsE4 U16C4guJRGA7PCsQo/NCrocUDQ+jDRQeLZ0mXSXifF6ukg/SngLLXblCcVTipbfV sZqyt3wA6+BDa0tuk3FsrtOZ1f7efUakKlW20tPbR8bac70utJhTDSH8dcfWLHAx MbRWlHL5C6aMz4r56gwToL7WP/bfjUfndVAxXeiQc6fSRevwxQg= -----END CERTIFICATE-----Generated at Mon Nov 2 00:46:47 2026 by rpki-client