$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: inDz9Dk6J5vP2LAqahkWSGdzzoGLtf11pa/V6+m7pWU= Subject key identifier: CE:06:05:1B:C3:7E:3A:D1:B3:38:DE:DB:A1:63:8D:04:41:59:9F:9B Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 4EBC314792B810EFD784F45C9BFC3832FF38C0A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:34:24 +0000 Manifest this update: Tue 02 Jun 2026 23:29:24 +0000 Manifest next update: Thu 04 Jun 2026 00:49:24 +0000 Files and hashes: 1: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 2: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 3: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 4: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 5: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 6: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 7: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 8: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 9: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 10: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 11: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 12: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: kHI1pmYxrN0JKzYYlgyf230sryKlH4r+RNmroIRdPvc=) 13: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 14: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 15: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 16: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 17: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 18: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 19: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:bc:31:47:92:b8:10:ef:d7:84:f4:5c:9b:fc:38:32:ff:38:c0:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Jun 2 23:29:24 2026 GMT Not After : Jun 4 00:49:24 2026 GMT Subject: CN=CE06051BC37E3AD1B338DEDBA1638D0441599F9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1a:87:d0:30:57:88:85:43:e2:64:49:27:e1: c4:10:a9:d4:db:70:3e:17:fb:ed:b0:25:e2:01:91: e7:15:2d:8c:ae:ec:c8:a0:a6:99:1d:fa:56:4d:08: dd:98:70:95:54:7a:9c:83:95:06:a7:31:6d:24:b3: 20:43:4c:52:33:ca:1c:10:6e:09:11:c8:06:fe:d6: 36:54:ec:bd:0f:94:5f:cd:cf:72:a2:78:23:d3:39: 65:38:fb:db:32:44:14:b7:25:6a:11:bf:14:e7:d7: c3:8b:2b:4c:3d:ad:ea:af:0b:d7:2c:6b:11:cc:20: 9e:b0:b8:ac:97:71:fd:c7:23:fc:7c:4a:75:cf:83: ff:7c:85:a5:08:91:ee:c4:c7:34:c9:d1:35:b4:ab: 50:11:e2:6b:c1:6d:00:bc:38:b9:eb:17:42:f1:4c: d2:13:77:9f:d2:26:af:51:20:d0:a9:04:93:9e:d4: a6:f4:01:a3:c0:90:80:39:c5:92:db:77:9d:09:22: fa:09:cf:0f:c2:0e:5c:a7:77:f8:a4:28:37:e6:7a: 4c:56:0a:4d:a4:0c:e7:9c:a5:fa:ba:c3:ea:97:6e: 13:76:f1:3b:70:ac:80:a2:75:9f:3b:d3:a0:ac:5c: e3:c5:08:4e:03:16:0f:13:aa:00:c9:57:2c:48:ff: f4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:06:05:1B:C3:7E:3A:D1:B3:38:DE:DB:A1:63:8D:04:41:59:9F:9B X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ec:ee:0c:7a:46:53:26:66:10:68:8f:85:37:27:84:ac:b3: d9:21:9c:59:79:fc:7d:ce:bb:75:62:76:52:cd:de:e0:91:64: a3:f1:99:47:9d:d5:5e:18:17:14:3b:68:9b:f4:16:00:f0:00: 65:c8:db:ee:85:ca:78:62:82:54:05:68:35:08:f8:18:68:3a: e8:22:57:78:8a:a4:9b:b0:13:9f:63:fd:9c:22:d5:25:1d:b5: 67:1d:bf:2e:bb:1c:2d:4e:8b:2e:ef:65:48:80:9c:2e:7e:1a: 96:a5:98:4e:25:33:e3:ef:bd:2f:fe:8c:a9:0e:f5:7c:fe:8f: bb:5d:a4:62:90:97:fc:8d:da:d7:ee:23:77:f7:2e:75:0b:89: 95:5e:7e:6a:59:93:2c:c5:07:e5:6d:54:a3:ed:78:a7:54:4d: 13:74:72:3e:a6:3a:59:86:5a:a0:4d:17:ea:c0:7e:a3:1c:ad: d4:5c:5d:c5:c2:d0:79:23:0f:6a:72:20:d9:1a:6d:aa:8d:64: 2b:e2:64:a7:f3:59:c0:0a:f2:a1:eb:10:70:b5:8a:43:6b:0b: 50:6f:ae:70:d7:29:f1:10:50:ac:34:be:fa:b3:d0:05:6a:3b: e3:33:99:60:18:24:1b:3e:e9:93:b1:4f:f5:27:67:4f:63:b6: dd:af:78:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTrwxR5K4EO/XhPRcm/w4Mv84wKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA2MDIyMzI5MjRaFw0yNjA2MDQwMDQ5MjRaMDMxMTAvBgNV BAMTKENFMDYwNTFCQzM3RTNBRDFCMzM4REVEQkExNjM4RDA0NDE1OTlGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJGofQMFeIhUPiZEkn4cQQqdTb cD4X++2wJeIBkecVLYyu7Migppkd+lZNCN2YcJVUepyDlQanMW0ksyBDTFIzyhwQ bgkRyAb+1jZU7L0PlF/Nz3KieCPTOWU4+9syRBS3JWoRvxTn18OLK0w9reqvC9cs axHMIJ6wuKyXcf3HI/x8SnXPg/98haUIke7ExzTJ0TW0q1AR4mvBbQC8OLnrF0Lx TNITd5/SJq9RINCpBJOe1Kb0AaPAkIA5xZLbd50JIvoJzw/CDlynd/ikKDfmekxW Ck2kDOecpfq6w+qXbhN28TtwrICidZ8706CsXOPFCE4DFg8TqgDJVyxI//TDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzgYFG8N+OtGzON7boWONBEFZn5swHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3s7gx6RlMmZhBoj4U3J4Sss9khnFl5/H3O u3VidlLN3uCRZKPxmUed1V4YFxQ7aJv0FgDwAGXI2+6FynhiglQFaDUI+BhoOugi V3iKpJuwE59j/Zwi1SUdtWcdvy67HC1Oiy7vZUiAnC5+GpalmE4lM+PvvS/+jKkO 9Xz+j7tdpGKQl/yN2tfuI3f3LnULiZVefmpZkyzFB+VtVKPteKdUTRN0cj6mOlmG WqBNF+rAfqMcrdRcXcXC0HkjD2pyINkabaqNZCviZKfzWcAK8qHrEHC1ikNrC1Bv rnDXKfEQUKw0vvqz0AVqO+MzmWAYJBs+6ZOxT/UnZ09jtt2vePw= -----END CERTIFICATE-----Generated at Wed Jun 3 04:12:25 2026 by rpki-client