$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft File: 866AFE6346388B98BA78E4A5133074656D9B7AD1.mft (raw, json) Hash identifier: SDYrRhSlgOd07Sm7+H5afR2KgHg85gOmh3+4H1QGYIM= Subject key identifier: 86:7F:A5:7F:A1:25:B2:D4:25:C4:B8:45:1C:D2:D5:10:F6:AC:2C:02 Authority key identifier: 86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 Certificate issuer: /CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Certificate serial: 1B81EE65AD857C3E5768C7F52C03389A3F628832 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 12:49:32 +0000 Manifest this update: Thu 17 Sep 2026 12:44:32 +0000 Manifest next update: Fri 18 Sep 2026 16:20:32 +0000 Files and hashes: 1: 3230332e37372e3231302e302f32342d3234203d3e203138333933.roa (hash: ilV+WY12SKz0lQev/ZcVaLluTyqKyfs0Kc38O/kZGWg=) 2: 3230332e37372e3230392e302f32342d3234203d3e203138333933.roa (hash: 0/hiR3RRB0VJmpMIX0u1I0BwYUEM8IIx2XnVHmGVo/U=) 3: 3230332e37372e3230382e302f32332d3234203d3e203138333933.roa (hash: EFisJ7Fg2p6Ka941t7PoCUcuhx2UAiRlgJ7oNwPg91I=) 4: 3230332e37372e3231342e302f32342d3234203d3e203138333933.roa (hash: 0AX527EylIA9pLoipxIcKBiir8OzbZCVFIMEG9usE3g=) 5: 3230332e37372e3232302e302f32342d3234203d3e203138333933.roa (hash: eDuHVOk0ZN2tmLRGciq0qLszuIQb0mjYE3X/0lI4uMo=) 6: 323430363a326330303a3a2f33322d3332203d3e203138333933.roa (hash: +6LMxNljjmSqQzlNsxe2a6hd3poirAp065yPauK7pog=) 7: 3230332e37372e3231392e302f32342d3234203d3e203138333933.roa (hash: 8v5Ct0DErzKD6NgYTUhBqTaxRgWfuLucte4L+1/AOk8=) 8: 3230332e37372e3231382e302f32342d3234203d3e203138333933.roa (hash: BfDMbmYy6OKrRS78OddhzHHoQYOsMTD/MJCW8e1zgiM=) 9: 3230332e37372e3232312e302f32342d3234203d3e203138333933.roa (hash: 1KO+qSvQ013vUkobQt4XoP4tbFABzXl/9JdtZ3wEtVY=) 10: 3230332e37372e3231362e302f32342d3234203d3e203138333933.roa (hash: aWd7eNM5tpe4peVDd7v6Fc0xBwxTA5lOu/yo2gjkPZo=) 11: 3230332e37372e3232332e302f32342d3234203d3e203138333933.roa (hash: bEEw3EAMGgC2CNtjbKyb6J9dhTebgMNYJAuKgMGnqps=) 12: 3230332e37372e3231332e302f32342d3234203d3e203138333933.roa (hash: HBL2yU6KePysUnvL50EuE5Ie0yRuh3KT1uhomCzmTYs=) 13: 866AFE6346388B98BA78E4A5133074656D9B7AD1.crl (hash: CE+f1n8PkNz80Dp844/uKJu+1DhyjDkGc7td+2lybcM=) 14: 3230332e37372e3231312e302f32342d3234203d3e203138333933.roa (hash: f8t2Nae54s3U7nW3j3F6RZh4pxVytwEO60A257IZyBQ=) 15: 3230332e37372e3231322e302f32342d3234203d3e203138333933.roa (hash: 9r+7mqh5oIPsf6Yf64uJ3vghrikO0Fa/UKlGnmoFxDY=) 16: 3230332e37372e3231372e302f32342d3234203d3e203138333933.roa (hash: jEpyf8NeuPvmCmEui9e0QeIKRJUHTPoSJhCJskv38pU=) 17: 3230332e37372e3232322e302f32342d3234203d3e203138333933.roa (hash: FgbhQ9quLtK5WDhl6F3eOW/vhYl7EdpMt9lquGY03K4=) 18: 3230332e37372e3230382e302f32342d3234203d3e203138333933.roa (hash: 5cRTNPkU4hdbka61Y58UlAM7IRT7lFSZBCcc4Lcguzg=) 19: 3230332e37372e3231352e302f32342d3234203d3e203138333933.roa (hash: 4spULqWJkacJa3U2IaLLj23793e74fhzj6JlRgiRDP0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:81:ee:65:ad:85:7c:3e:57:68:c7:f5:2c:03:38:9a:3f:62:88:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866AFE6346388B98BA78E4A5133074656D9B7AD1 Validity Not Before: Sep 17 12:44:32 2026 GMT Not After : Sep 18 16:20:32 2026 GMT Subject: CN=867FA57FA125B2D425C4B8451CD2D510F6AC2C02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:14:0c:1f:7e:07:bf:f5:55:6d:ac:ef:c0:cf: 93:90:97:18:8e:e5:f7:39:30:e6:eb:2f:4f:be:14: 60:52:42:7f:ec:47:96:82:d2:f7:d7:fb:ae:11:73: cb:87:1f:55:cc:7a:d5:ae:f6:3a:59:7a:4e:57:fc: e6:e3:81:af:b2:6a:74:53:ef:8f:d2:34:aa:d1:3d: 44:c0:72:2f:f3:1d:c4:c0:ea:7f:30:cc:41:a4:5a: a2:04:70:0d:15:d5:14:2c:a8:9f:49:c2:cf:6d:46: 48:a0:f2:6d:18:2c:1d:95:ec:bb:83:91:9d:3e:0b: ff:3a:83:4e:e7:09:59:05:f5:b3:a1:11:2d:9f:4c: c7:99:94:11:65:82:fe:9a:10:37:68:b3:5e:6b:e1: 1a:a5:ee:b5:fe:51:26:ce:f7:6a:22:78:f3:e5:4f: f7:75:81:6a:4e:4f:9d:c0:46:7b:60:7c:15:ef:fb: 5a:59:25:50:40:59:dc:03:ae:dc:5e:5e:bb:b1:13: 02:59:46:cd:8e:4c:c9:61:bb:ca:15:fe:c7:e0:b3: 7b:38:c9:93:76:72:73:c1:48:7a:ba:6c:d0:f5:50: 71:9a:f9:4d:44:b8:85:bc:fc:20:5d:87:42:2e:50: a5:4b:8b:07:f3:a9:de:c2:d2:a7:dc:fc:55:cb:3b: 2d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:7F:A5:7F:A1:25:B2:D4:25:C4:B8:45:1C:D2:D5:10:F6:AC:2C:02 X509v3 Authority Key Identifier: keyid:86:6A:FE:63:46:38:8B:98:BA:78:E4:A5:13:30:74:65:6D:9B:7A:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866AFE6346388B98BA78E4A5133074656D9B7AD1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1e3159f2-0cf0-43c6-b282-c69fba13a14a/0/866AFE6346388B98BA78E4A5133074656D9B7AD1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:cb:6f:5f:4c:5e:09:15:e9:38:46:d5:e8:59:a4:47:2c: 46:af:08:a8:7c:8c:98:19:ab:a3:77:59:c3:04:5e:9e:41:4e: f0:11:b9:f0:89:04:24:e8:fe:cc:6c:91:3e:d6:ab:c0:74:41: 48:62:44:81:a4:f8:d1:8b:48:c2:52:b9:d9:6b:7b:2a:ae:b6: 7b:ab:14:c9:69:8e:61:5c:31:ee:73:f9:03:a7:fe:f9:8c:91: d9:ef:04:71:d3:ce:f6:91:e8:67:56:ba:cc:fa:ff:d8:49:ba: 0c:d2:c8:9c:25:7c:96:e4:cc:45:15:15:a4:10:5d:ee:f9:ac: 44:97:ac:17:c2:15:6f:60:5c:7d:78:ec:dc:80:85:1f:41:a5: 19:28:36:91:9c:52:7c:26:c6:78:a0:be:72:e0:be:4a:f2:b9: 25:14:87:74:64:cd:69:a6:1d:9b:61:b9:be:db:62:37:a0:8f: 16:55:b6:34:23:68:08:5d:2c:66:4d:e1:a2:4e:6c:85:3e:66: 6c:40:60:75:2a:f6:78:cb:57:fa:c2:a9:7e:61:c8:b2:df:74: 5d:30:f3:0f:e6:01:d5:fc:b7:58:a7:43:f1:f7:d6:0c:df:4d: 9b:f3:f4:e8:26:42:ac:df:e4:e3:8a:4d:f8:ec:86:42:86:76: d0:bb:f5:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG4HuZa2FfD5XaMf1LAM4mj9iiDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2 RDlCN0FEMTAeFw0yNjA5MTcxMjQ0MzJaFw0yNjA5MTgxNjIwMzJaMDMxMTAvBgNV BAMTKDg2N0ZBNTdGQTEyNUIyRDQyNUM0Qjg0NTFDRDJENTEwRjZBQzJDMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcFAwffge/9VVtrO/Az5OQlxiO 5fc5MObrL0++FGBSQn/sR5aC0vfX+64Rc8uHH1XMetWu9jpZek5X/Objga+yanRT 74/SNKrRPUTAci/zHcTA6n8wzEGkWqIEcA0V1RQsqJ9Jws9tRkig8m0YLB2V7LuD kZ0+C/86g07nCVkF9bOhES2fTMeZlBFlgv6aEDdos15r4Rql7rX+USbO92oiePPl T/d1gWpOT53ARntgfBXv+1pZJVBAWdwDrtxeXruxEwJZRs2OTMlhu8oV/sfgs3s4 yZN2cnPBSHq6bND1UHGa+U1EuIW8/CBdh0IuUKVLiwfzqd7C0qfc/FXLOy2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhn+lf6ElstQlxLhFHNLVEPasLAIwHwYDVR0j BBgwFoAUhmr+Y0Y4i5i6eOSlEzB0ZW2betEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MWUzMTU5ZjItMGNmMC00M2M2LWIyODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0 NjM4OEI5OEJBNzhFNEE1MTMzMDc0NjU2RDlCN0FEMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZBRkU2MzQ2Mzg4Qjk4QkE3OEU0QTUxMzMwNzQ2NTZEOUI3 QUQxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWUzMTU5ZjItMGNmMC00M2M2LWIy ODItYzY5ZmJhMTNhMTRhLzAvODY2QUZFNjM0NjM4OEI5OEJBNzhFNEE1MTMzMDc0 NjU2RDlCN0FEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4By29fTF4JFek4RtXoWaRHLEavCKh8jJgZ q6N3WcMEXp5BTvARufCJBCTo/sxskT7Wq8B0QUhiRIGk+NGLSMJSudlreyqutnur FMlpjmFcMe5z+QOn/vmMkdnvBHHTzvaR6GdWusz6/9hJugzSyJwlfJbkzEUVFaQQ Xe75rESXrBfCFW9gXH147NyAhR9BpRkoNpGcUnwmxnigvnLgvkryuSUUh3RkzWmm HZthub7bYjegjxZVtjQjaAhdLGZN4aJObIU+ZmxAYHUq9njLV/rCqX5hyLLfdF0w 8w/mAdX8t1inQ/H31gzfTZvz9OgmQqzf5OOKTfjshkKGdtC79UM= -----END CERTIFICATE-----Generated at Thu Sep 17 15:23:23 2026 by rpki-client