$ rpki-client -vvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: aRSqjNwzivlU/QodEqm+lVRJiyird4bXXW0dpDfJdSo= Subject key identifier: 31:A0:9F:CE:37:76:C7:FE:CD:9E:7E:36:48:10:B7:E4:0C:14:D0:15 Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 045F86D9D0DDDAF0335D21F60EC540E3F7157EB3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: 7B Signing time: Sun 02 Aug 2026 08:58:33 +0000 Manifest this update: Sun 02 Aug 2026 08:53:33 +0000 Manifest next update: Mon 03 Aug 2026 08:58:33 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 2: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) 3: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: 0kvmuLLfYKXyRixnzsrsofxgzv2CbVdAZw7bTavV8w8=) 4: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 08:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5f:86:d9:d0:dd:da:f0:33:5d:21:f6:0e:c5:40:e3:f7:15:7e:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Aug 2 08:53:33 2026 GMT Not After : Aug 3 08:58:33 2026 GMT Subject: CN=31A09FCE3776C7FECD9E7E364810B7E40C14D015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1b:41:24:27:db:f9:96:59:7a:01:ea:2c:1a: ae:36:46:ac:9a:01:1a:e4:47:1e:09:f5:1b:43:e7: d3:01:b4:bd:25:7f:84:bc:60:2e:83:13:5a:22:44: 3b:4f:29:6c:1f:3d:6e:83:b4:f1:18:0c:e0:00:52: 44:1d:8b:58:76:95:b4:d2:41:36:82:cd:50:f9:90: ef:c3:1c:99:77:86:cd:a7:51:eb:b5:58:0f:60:1f: 0f:13:fd:54:a7:d0:04:ea:4e:bf:d5:88:2c:9b:93: 30:e4:68:27:8f:1b:27:68:73:df:62:59:0b:39:e6: 6a:af:d2:6e:c4:6a:3a:e8:f9:4b:2c:71:b8:7a:d3: 10:a5:a8:56:af:7f:a1:40:d6:fe:45:41:58:fd:fa: 38:76:f6:d3:60:e7:56:c0:ab:cc:e8:76:0e:61:85: a8:e3:d3:f3:b1:c4:02:db:2d:4d:19:73:60:cc:c1: 36:14:7c:b2:59:5b:58:2f:e2:65:c0:5b:00:da:6a: 8d:ee:56:1c:29:22:32:5c:a5:22:25:54:c8:ea:10: 2a:e9:31:67:a9:df:d5:a5:08:15:da:40:ba:f0:87: 30:5d:06:fa:77:d4:8e:a2:c2:0b:fd:36:ac:64:23: f3:5c:b1:59:bd:d0:00:ce:1b:6f:5e:c5:8a:30:07: 58:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A0:9F:CE:37:76:C7:FE:CD:9E:7E:36:48:10:B7:E4:0C:14:D0:15 X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ae:73:6a:7a:3c:da:39:88:28:ca:48:37:31:04:5d:79:a9: 93:33:88:1d:29:7e:24:0d:70:3d:26:8b:69:09:47:2f:8c:41: 68:71:b4:c6:71:1f:94:15:bb:ff:41:34:c5:e9:60:cf:16:3c: bc:6c:35:c4:80:00:ff:d8:5e:99:39:38:1d:bd:69:b9:d2:e4: 35:88:ff:ff:0b:23:2e:9c:3b:d3:90:56:12:ee:5b:76:ec:79: c2:42:80:58:e8:83:fe:83:b8:61:3a:c4:e7:17:36:08:af:bb: 40:4a:9f:3f:bf:de:30:6c:4a:b4:e2:61:e5:a6:91:c8:9c:89: 90:7c:5f:81:bb:92:de:19:3c:58:d0:4f:f3:aa:83:05:b2:e7: 81:f8:fc:57:8a:d4:fc:c5:a6:78:5a:57:1b:f8:3d:f3:7e:8f: 4b:34:58:b3:71:4b:bf:45:1b:9c:bd:3b:f7:a8:0d:82:67:68: 05:ae:69:be:70:bb:e2:4e:87:8f:27:de:7d:f0:94:b4:de:f7: 75:6b:af:84:fd:72:0b:ec:86:02:eb:d9:4c:7c:74:88:3d:29: 90:17:ed:cf:71:96:2d:31:1f:dc:71:0f:be:8a:37:7b:3f:12: 2f:ed:f5:39:ce:a7:ab:5e:cb:3e:6b:74:b3:aa:4f:9a:6d:7f: e3:a6:71:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBF+G2dDd2vAzXSH2DsVA4/cVfrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA4MDIwODUzMzNaFw0yNjA4MDMwODU4MzNaMDMxMTAvBgNV BAMTKDMxQTA5RkNFMzc3NkM3RkVDRDlFN0UzNjQ4MTBCN0U0MEMxNEQwMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3G0EkJ9v5lll6AeosGq42Rqya ARrkRx4J9RtD59MBtL0lf4S8YC6DE1oiRDtPKWwfPW6DtPEYDOAAUkQdi1h2lbTS QTaCzVD5kO/DHJl3hs2nUeu1WA9gHw8T/VSn0ATqTr/ViCybkzDkaCePGydoc99i WQs55mqv0m7Eajro+Usscbh60xClqFavf6FA1v5FQVj9+jh29tNg51bAq8zodg5h hajj0/OxxALbLU0Zc2DMwTYUfLJZW1gv4mXAWwDaao3uVhwpIjJcpSIlVMjqECrp MWep39WlCBXaQLrwhzBdBvp31I6iwgv9NqxkI/NcsVm90ADOG29exYowB1jfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMaCfzjd2x/7Nnn42SBC35AwU0BUwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiuc2p6PNo5iCjKSDcxBF15qZMziB0pfiQN cD0mi2kJRy+MQWhxtMZxH5QVu/9BNMXpYM8WPLxsNcSAAP/YXpk5OB29abnS5DWI //8LIy6cO9OQVhLuW3bsecJCgFjog/6DuGE6xOcXNgivu0BKnz+/3jBsSrTiYeWm kciciZB8X4G7kt4ZPFjQT/OqgwWy54H4/FeK1PzFpnhaVxv4PfN+j0s0WLNxS79F G5y9O/eoDYJnaAWuab5wu+JOh48n3n3wlLTe93Vrr4T9cgvshgLr2Ux8dIg9KZAX 7c9xli0xH9xxD76KN3s/Ei/t9TnOp6teyz5rdLOqT5ptf+OmcQI= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:37 2026 by rpki-client