$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: NqEek0UEa9kG1OiWv15UNhIX1pkIug1MN1fJGlSWKiw= Subject key identifier: 74:45:1F:B4:C2:A7:EC:5F:3E:FB:5A:4F:46:5B:EE:63:FE:35:AC:3F Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 3E328A4838357D8A37993DE28824D0A5560146FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: F4 Signing time: Mon 02 Nov 2026 10:25:47 +0000 Manifest this update: Mon 02 Nov 2026 10:20:47 +0000 Manifest next update: Tue 03 Nov 2026 10:36:47 +0000 Files and hashes: 1: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) 2: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: AmGoytr/GosqAE9ULVVzxt3yXQlGtdL05hZajmwHSn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 10:36:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:32:8a:48:38:35:7d:8a:37:99:3d:e2:88:24:d0:a5:56:01:46:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: Nov 2 10:20:47 2026 GMT Not After : Nov 3 10:36:47 2026 GMT Subject: CN=74451FB4C2A7EC5F3EFB5A4F465BEE63FE35AC3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:fc:dd:44:94:5d:27:86:54:19:6d:84:73:09: ad:df:c0:9f:f9:6f:ee:d0:c4:d9:10:8e:b5:c8:05: 6b:32:18:50:5b:8a:13:7e:7c:08:4f:c6:54:d2:77: b7:2b:77:73:60:bf:6d:14:fe:aa:cb:57:df:7a:59: b8:3e:1b:23:7d:e7:89:e0:ce:82:83:21:18:21:bb: 0f:4c:92:83:3a:ab:6e:52:c9:5f:15:e1:91:1b:44: 1b:39:7d:b0:38:e5:60:9d:90:5f:27:7f:1d:ad:15: 80:2e:5b:ba:d3:32:a1:d5:0c:0f:51:27:70:01:67: 85:a4:92:ed:d2:09:a0:a1:56:0a:25:80:d5:c9:62: 9a:91:79:59:36:e7:a4:7b:d9:5c:ab:8c:8d:c8:d0: fa:23:83:8e:ec:7e:64:e0:40:a6:79:a5:22:ac:ca: 14:d9:65:77:85:b2:a7:32:cf:c6:bf:19:74:7d:7b: f6:51:28:bf:82:c4:02:0f:3b:e4:33:cb:a6:69:66: 1a:13:ad:fc:ef:d7:8f:4e:dc:d3:b5:a8:e4:ab:b3: 60:72:55:55:ad:01:20:76:02:80:f6:9a:70:d3:66: 4a:6c:57:0b:2e:f2:d7:7b:7e:90:5f:7e:8b:16:16: d0:c0:0d:b8:e0:38:77:00:a3:46:1a:b7:1b:f4:30: c8:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:45:1F:B4:C2:A7:EC:5F:3E:FB:5A:4F:46:5B:EE:63:FE:35:AC:3F X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:54:a5:e6:ae:9d:2a:91:fc:8c:9e:6e:d0:dd:30:de:c3:35: b4:26:ef:54:a4:b2:52:87:b2:c6:98:e3:55:b0:a8:85:5b:49: 2f:b4:5b:c7:44:1c:e4:5f:b1:a8:83:52:ac:45:87:12:b8:a5: 2b:14:c8:fd:d5:19:92:35:fb:ff:d7:10:e0:80:39:c5:9a:76: c1:95:28:f5:1f:96:79:98:b8:b5:19:a0:43:9c:85:6c:c5:f5: 22:54:bf:7c:84:07:9a:63:f8:8d:ef:30:6b:93:fb:b5:7f:65: bb:e9:37:31:4d:cc:aa:ea:a0:70:1c:e9:16:97:43:da:f8:33: 66:93:84:aa:a1:c6:13:5d:77:5e:19:fe:a9:e9:f7:25:87:f3: 0f:11:6f:09:d5:ec:18:f6:6e:3b:16:30:14:2e:19:c6:7c:73: 71:88:a5:e7:ab:50:c0:ca:0f:2d:f9:49:08:98:1b:f3:7b:96: c8:c2:42:1a:d1:9e:ba:68:b1:71:47:f0:00:9e:27:2c:4d:44: 7d:d3:8f:5a:e3:3d:9e:79:aa:cc:c2:2d:0c:1f:52:5c:69:7a: 1f:82:d4:49:bf:1b:09:d9:93:50:08:f6:17:4a:8f:2d:78:2a: 1d:4f:63:b9:68:cb:84:88:dc:7c:d2:60:55:5b:a0:1c:ab:f6: 47:6d:9b:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjKKSDg1fYo3mT3iiCTQpVYBRv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjExMDIxMDIwNDdaFw0yNjExMDMxMDM2NDdaMDMxMTAvBgNV BAMTKDc0NDUxRkI0QzJBN0VDNUYzRUZCNUE0RjQ2NUJFRTYzRkUzNUFDM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn/N1ElF0nhlQZbYRzCa3fwJ/5 b+7QxNkQjrXIBWsyGFBbihN+fAhPxlTSd7crd3Ngv20U/qrLV996Wbg+GyN954ng zoKDIRghuw9MkoM6q25SyV8V4ZEbRBs5fbA45WCdkF8nfx2tFYAuW7rTMqHVDA9R J3ABZ4Wkku3SCaChVgolgNXJYpqReVk256R72VyrjI3I0Pojg47sfmTgQKZ5pSKs yhTZZXeFsqcyz8a/GXR9e/ZRKL+CxAIPO+Qzy6ZpZhoTrfzv149O3NO1qOSrs2By VVWtASB2AoD2mnDTZkpsVwsu8td7fpBffosWFtDADbjgOHcAo0Yatxv0MMhvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEUftMKn7F8++1pPRlvuY/41rD8wHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBUpeaunSqR/IyebtDdMN7DNbQm71SkslKH ssaY41WwqIVbSS+0W8dEHORfsaiDUqxFhxK4pSsUyP3VGZI1+//XEOCAOcWadsGV KPUflnmYuLUZoEOchWzF9SJUv3yEB5pj+I3vMGuT+7V/ZbvpNzFNzKrqoHAc6RaX Q9r4M2aThKqhxhNdd14Z/qnp9yWH8w8RbwnV7Bj2bjsWMBQuGcZ8c3GIpeerUMDK Dy35SQiYG/N7lsjCQhrRnrposXFH8ACeJyxNRH3Tj1rjPZ55qszCLQwfUlxpeh+C 1Em/GwnZk1AI9hdKjy14Kh1PY7loy4SI3HzSYFVboByr9kdtm1E= -----END CERTIFICATE-----Generated at Mon Nov 2 18:36:36 2026 by rpki-client