$ rpki-client -vvvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: uqPi+Fh+n0ueD4nSJu1GZ6FS9bqK4Bmj5s8JjqXLDe8= Subject key identifier: 53:AA:CF:E6:84:0A:27:F1:F6:9B:ED:EC:0C:EF:44:DB:8E:73:9D:62 Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 1660727681BCCDD434CDF9C67BDAA9D41DED91C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 23:37:26 +0000 Manifest this update: Tue 03 Nov 2026 23:32:25 +0000 Manifest next update: Thu 05 Nov 2026 00:56:25 +0000 Files and hashes: 1: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 2: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 3: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) 4: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: +dJGJMkFAopkvgnHRrr7BRf746xxe7mO+0YejRz0nBI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:60:72:76:81:bc:cd:d4:34:cd:f9:c6:7b:da:a9:d4:1d:ed:91:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Nov 3 23:32:25 2026 GMT Not After : Nov 5 00:56:25 2026 GMT Subject: CN=53AACFE6840A27F1F69BEDEC0CEF44DB8E739D62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:69:a9:d5:e3:a1:f9:1d:0f:9a:6f:ed:65:a5: 2c:1c:c4:f4:fa:e5:c3:60:26:ce:5f:ce:05:bf:a5: 39:4a:b1:18:7a:81:5c:49:f8:37:a1:62:ef:27:c8: 82:dd:6b:9d:03:fb:f2:82:ee:69:8e:4c:7b:2c:40: 92:23:b7:fb:1b:f1:a9:68:ed:59:aa:4e:cd:00:cc: 3f:4e:07:28:a6:c0:14:9b:8f:15:4d:ab:eb:8d:44: b3:38:c8:a2:05:20:4f:14:1b:e6:d7:bc:81:7f:fe: f6:3b:ab:de:bd:24:9f:d1:12:37:d0:a8:49:60:b6: 63:37:ea:df:4e:f7:03:67:43:6c:93:2e:82:5f:16: 45:95:99:97:52:54:21:f1:73:44:15:47:09:3b:3b: 9d:17:e0:5a:3d:ee:16:1f:82:88:b3:da:2f:27:71: d7:b2:ea:e9:d3:e7:f5:f9:9e:8a:0f:72:4d:f3:55: 3b:56:9a:0f:28:61:4b:c1:cb:29:9b:bf:79:b5:34: 04:ed:59:d9:81:55:21:cd:fc:87:65:ef:c7:26:97: 87:f1:e8:4c:fb:73:2f:c1:ec:e9:64:79:5e:07:7e: 3a:2c:d0:5c:16:55:25:53:a5:a0:d8:21:3d:36:fb: 9b:9b:32:2c:96:27:98:a5:17:45:73:2f:a8:86:04: 91:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:AA:CF:E6:84:0A:27:F1:F6:9B:ED:EC:0C:EF:44:DB:8E:73:9D:62 X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:61:b4:c9:de:b4:a5:10:c3:f6:8c:b9:39:8a:75:53:ae:22: 6e:53:c8:2d:b3:89:31:87:41:91:f3:60:ce:f7:55:65:4a:90: 2f:39:87:a3:b8:58:eb:ed:20:1a:d7:6c:89:8b:92:8b:69:9c: 5d:3a:b7:68:de:49:ae:85:9d:07:fb:5c:2c:c6:d3:01:0b:fc: 9a:55:19:bf:ae:9c:3f:7f:31:7d:b7:54:f9:d0:c6:d5:70:a4: 98:7b:dd:af:54:37:08:7e:3f:74:ef:24:ea:42:87:d5:52:9b: ee:14:e8:2c:50:2d:fa:a8:cf:37:6e:4a:cb:73:35:47:1d:64: aa:79:a0:19:f0:d3:c3:d1:04:6b:d9:06:3a:1a:ff:4c:1f:9b: 58:82:db:b2:61:51:2b:41:22:c2:9e:02:14:6e:67:89:fa:d2: c7:5c:59:47:c2:59:99:63:f0:73:b7:09:3c:e3:52:d6:72:bf: f1:33:d8:cf:b5:c8:b3:aa:88:be:73:7a:c3:a6:25:bf:68:58: a4:0c:e9:20:b7:ab:be:ae:f4:94:67:8b:9b:b2:c6:9b:c0:8e: 25:87:6f:31:f7:a3:13:7c:94:f4:94:f3:01:3b:67:40:a9:62: 5b:fd:8d:a7:5f:0e:37:85:a3:17:74:4f:60:65:75:8d:6b:06: 3f:18:4a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFmBydoG8zdQ0zfnGe9qp1B3tkcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjExMDMyMzMyMjVaFw0yNjExMDUwMDU2MjVaMDMxMTAvBgNV BAMTKDUzQUFDRkU2ODQwQTI3RjFGNjlCRURFQzBDRUY0NERCOEU3MzlENjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnaanV46H5HQ+ab+1lpSwcxPT6 5cNgJs5fzgW/pTlKsRh6gVxJ+DehYu8nyILda50D+/KC7mmOTHssQJIjt/sb8alo 7VmqTs0AzD9OByimwBSbjxVNq+uNRLM4yKIFIE8UG+bXvIF//vY7q969JJ/REjfQ qElgtmM36t9O9wNnQ2yTLoJfFkWVmZdSVCHxc0QVRwk7O50X4Fo97hYfgoiz2i8n cdey6unT5/X5nooPck3zVTtWmg8oYUvByymbv3m1NATtWdmBVSHN/Idl78cml4fx 6Ez7cy/B7OlkeV4Hfjos0FwWVSVTpaDYIT02+5ubMiyWJ5ilF0VzL6iGBJEbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU6rP5oQKJ/H2m+3sDO9E245znWIwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5htMnetKUQw/aMuTmKdVOuIm5TyC2ziTGH QZHzYM73VWVKkC85h6O4WOvtIBrXbImLkotpnF06t2jeSa6FnQf7XCzG0wEL/JpV Gb+unD9/MX23VPnQxtVwpJh73a9UNwh+P3TvJOpCh9VSm+4U6CxQLfqozzduSstz NUcdZKp5oBnw08PRBGvZBjoa/0wfm1iC27JhUStBIsKeAhRuZ4n60sdcWUfCWZlj 8HO3CTzjUtZyv/Ez2M+1yLOqiL5zesOmJb9oWKQM6SC3q76u9JRni5uyxpvAjiWH bzH3oxN8lPSU8wE7Z0CpYlv9jadfDjeFoxd0T2BldY1rBj8YSu8= -----END CERTIFICATE-----Generated at Wed Nov 4 05:30:43 2026 by rpki-client