$ rpki-client -vvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: VtTTbXLSjkOQN/vGYOJrtWbJybH6CX3YC4NajiPGSmI= Subject key identifier: B6:DA:99:81:6B:30:8D:3F:BC:27:1B:8E:FE:9C:69:D2:A8:BE:B2:60 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 648190C4D4AD848E4082A04183E0065D48B30F9D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 14:29:33 +0000 Manifest this update: Mon 20 Jul 2026 14:24:33 +0000 Manifest next update: Tue 21 Jul 2026 16:17:33 +0000 Files and hashes: 1: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 2: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 3: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 4: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 5: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 6: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 7: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 8: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 9: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) 10: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 11: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 12: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 13: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 14: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: XBUTLrIjJP+OE8N7ov4abCmTB5db5QQN4c2Z/8+Nurg=) 15: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 16: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 17: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 18: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 19: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:17:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:81:90:c4:d4:ad:84:8e:40:82:a0:41:83:e0:06:5d:48:b3:0f:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Jul 20 14:24:33 2026 GMT Not After : Jul 21 16:17:33 2026 GMT Subject: CN=B6DA99816B308D3FBC271B8EFE9C69D2A8BEB260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:97:fb:c3:51:bb:4f:56:ab:b0:06:12:3f:04: 41:d9:e0:39:f0:33:29:16:f6:8a:b1:cf:e6:85:b9: d2:63:f4:96:b2:64:68:bd:08:69:e2:a4:a6:fe:21: fe:e7:0b:c6:5d:9d:80:2b:fb:f3:da:57:33:50:e1: 01:38:eb:10:bb:49:51:7c:54:c3:04:53:ac:97:98: 79:70:a2:18:cf:2f:62:10:6f:d6:01:4d:a5:9e:2b: cf:60:67:87:8a:e5:fd:bc:d3:5a:f1:cc:32:ca:30: 31:ce:da:5f:7b:61:9d:be:cb:96:d1:a4:27:27:e6: 1b:b0:f6:fe:e6:db:88:35:ab:54:f5:0c:0a:fe:56: 1a:22:6c:38:da:79:9e:3b:56:90:11:4f:0e:8a:19: ef:3b:21:3e:7f:c2:84:98:72:d8:c9:95:66:fd:6d: 5e:d1:db:a3:db:f7:84:a2:89:ca:5f:21:94:54:ed: 1f:7e:2e:78:af:61:fe:87:3d:49:21:81:c1:1b:8a: 76:8e:8e:3d:ef:6e:9c:30:21:e6:e8:13:56:68:37: 20:d5:e7:a5:d8:69:6e:29:0f:50:a7:ac:d2:a8:97: a4:82:9f:c6:06:b2:76:fb:8e:7d:2c:4b:96:de:3b: 1e:d6:24:a1:e9:23:19:ab:10:d9:94:de:a6:a7:bf: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:DA:99:81:6B:30:8D:3F:BC:27:1B:8E:FE:9C:69:D2:A8:BE:B2:60 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6d:d3:9a:36:1a:7c:2f:cc:e6:b2:f5:f8:a4:74:b3:79:7b: 44:31:e3:d6:db:e4:6e:5f:fe:b1:06:58:31:a6:d7:40:12:1e: ae:54:43:4e:4e:18:24:90:df:87:9e:56:43:c2:3c:3a:bc:ac: f2:38:d4:ab:37:7c:d4:b1:b0:16:8a:64:3a:01:f7:d7:71:6b: 85:9a:65:56:3d:f5:ad:a0:f8:92:1c:46:94:31:d0:95:c5:f4: 4b:01:9b:fa:f2:95:5b:15:cc:fd:f4:1e:65:32:f3:7e:c8:ae: 09:2e:04:a5:25:8b:3c:a7:4a:f9:c3:9b:0c:b2:83:3a:3e:67: 80:10:78:c8:82:fa:fe:b8:58:ff:b1:ba:ef:b6:d8:a0:2d:be: 4d:83:d0:9c:f6:53:10:ee:fa:08:19:da:92:8d:c5:6c:ca:28: f1:d5:d6:87:ba:9a:d8:e9:27:66:df:d5:37:be:dc:ed:ce:3d: 67:d9:f5:9e:82:00:40:71:0a:ec:90:2f:05:a0:4d:e2:b4:d1: e9:ec:d1:88:d2:ca:98:80:54:84:c1:2e:43:cf:e7:41:3c:68: ee:f3:f3:45:0e:7f:00:6f:d0:e4:a6:b2:36:c5:a2:28:cb:ec: a7:55:42:0f:0a:ce:26:fd:fe:bb:87:8c:ce:16:93:54:99:b9: 53:4c:c0:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIGQxNSthI5AgqBBg+AGXUizD50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA3MjAxNDI0MzNaFw0yNjA3MjExNjE3MzNaMDMxMTAvBgNV BAMTKEI2REE5OTgxNkIzMDhEM0ZCQzI3MUI4RUZFOUM2OUQyQThCRUIyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKl/vDUbtPVquwBhI/BEHZ4Dnw MykW9oqxz+aFudJj9JayZGi9CGnipKb+If7nC8ZdnYAr+/PaVzNQ4QE46xC7SVF8 VMMEU6yXmHlwohjPL2IQb9YBTaWeK89gZ4eK5f2801rxzDLKMDHO2l97YZ2+y5bR pCcn5huw9v7m24g1q1T1DAr+VhoibDjaeZ47VpARTw6KGe87IT5/woSYctjJlWb9 bV7R26Pb94SiicpfIZRU7R9+LnivYf6HPUkhgcEbinaOjj3vbpwwIeboE1ZoNyDV 56XYaW4pD1CnrNKol6SCn8YGsnb7jn0sS5beOx7WJKHpIxmrENmU3qanv2UlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUttqZgWswjT+8JxuO/pxp0qi+smAwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJt05o2GnwvzOay9fikdLN5e0Qx49bb5G5f /rEGWDGm10ASHq5UQ05OGCSQ34eeVkPCPDq8rPI41Ks3fNSxsBaKZDoB99dxa4Wa ZVY99a2g+JIcRpQx0JXF9EsBm/rylVsVzP30HmUy837IrgkuBKUlizynSvnDmwyy gzo+Z4AQeMiC+v64WP+xuu+22KAtvk2D0Jz2UxDu+ggZ2pKNxWzKKPHV1oe6mtjp J2bf1Te+3O3OPWfZ9Z6CAEBxCuyQLwWgTeK00ens0YjSypiAVITBLkPP50E8aO7z 80UOfwBv0OSmsjbFoijL7KdVQg8Kzib9/ruHjM4Wk1SZuVNMwOc= -----END CERTIFICATE-----Generated at Tue Jul 21 06:30:23 2026 by rpki-client