$ rpki-client -vvf rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft File: 866375A97D591695797C70B6303365FDB8CBF531.mft (raw, json) Hash identifier: Epwan0yeao59ujvj8uoSVLInauWVcdXw21hAQTt8X6Y= Subject key identifier: B8:15:C6:62:43:D7:69:ED:AC:19:83:37:82:5E:F4:DF:6F:AA:F0:C4 Authority key identifier: 86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 Certificate issuer: /CN=866375A97D591695797C70B6303365FDB8CBF531 Certificate serial: 4D6114405F667D374BAB4E9C63D40C9E38473A0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 03:15:47 +0000 Manifest this update: Thu 18 Jun 2026 03:10:47 +0000 Manifest next update: Fri 19 Jun 2026 06:52:47 +0000 Files and hashes: 1: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 0JfcxRs89jWuHwbiQgEITYiO/dmgXLf1qIo/2cgUcn8=) 2: 866375A97D591695797C70B6303365FDB8CBF531.crl (hash: R2D6tXrQVvakpqUHmyNBTSbyoqMqA2P9odefaxstgKM=) 3: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: QRBqu0vgpiu1npB4mfj0IhCHq9+aIAEjSrW/q4tl6vk=) 4: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: pm5lc2pPh20VaJkO7gnMT5lqQn2oTUSeSm20aGO4Zc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 06:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:61:14:40:5f:66:7d:37:4b:ab:4e:9c:63:d4:0c:9e:38:47:3a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866375A97D591695797C70B6303365FDB8CBF531 Validity Not Before: Jun 18 03:10:47 2026 GMT Not After : Jun 19 06:52:47 2026 GMT Subject: CN=B815C66243D769EDAC198337825EF4DF6FAAF0C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b8:fc:a0:8f:70:26:c8:63:8f:e0:b9:75:06: 1c:ab:e7:c5:ac:1b:f6:b4:3d:94:08:c9:0a:06:2b: fc:10:e0:1b:6d:07:84:9a:87:87:c3:29:cb:b2:c7: a8:4f:15:ae:04:29:4c:9e:25:53:70:bf:e9:58:a1: 3f:da:d8:10:c8:d4:c3:f2:bb:c1:52:7b:70:3d:b3: db:da:75:f7:20:af:7e:77:36:50:10:7a:44:4f:08: 03:e0:8e:07:fc:d4:e6:0c:05:19:e5:5c:8a:8d:0d: be:89:62:f3:d7:f6:97:b4:b5:7a:75:4d:8d:3b:82: 5a:98:52:8d:5b:37:ff:6b:86:b4:07:d3:e8:49:65: 9a:dc:69:cf:a0:dd:b0:8b:90:90:2c:73:ba:94:15: d3:a9:72:da:43:3a:7d:8d:ca:3c:2d:5d:dd:4a:ab: e6:f3:41:9c:12:ed:7f:29:74:8b:10:b8:0d:84:b7: ad:4a:c5:ae:7e:e4:d5:0f:2e:9d:5a:7c:8f:76:0a: 93:eb:b1:05:5a:ed:80:48:6c:68:e5:d5:8a:74:34: c9:b2:2f:51:61:ab:0b:3f:9b:6c:04:6c:c0:5e:fc: 83:4d:37:82:97:39:dc:64:a5:6d:c1:d4:cf:72:1d: 3a:59:a4:88:ad:6a:fa:4d:cb:f5:b1:8b:2c:81:d0: 47:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:15:C6:62:43:D7:69:ED:AC:19:83:37:82:5E:F4:DF:6F:AA:F0:C4 X509v3 Authority Key Identifier: keyid:86:63:75:A9:7D:59:16:95:79:7C:70:B6:30:33:65:FD:B8:CB:F5:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866375A97D591695797C70B6303365FDB8CBF531.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/866375A97D591695797C70B6303365FDB8CBF531.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:6a:3a:06:09:ca:af:b1:b1:0f:a2:62:a4:8b:2f:b6:d5:ec: ab:80:11:bf:62:5e:f6:f8:f3:62:3c:64:09:09:4c:40:c4:42: c8:35:17:3b:93:2b:50:c8:9a:6b:80:b5:48:24:dc:b2:be:a9: 04:86:d4:f0:7b:20:00:81:85:6d:32:4b:8e:f4:f3:05:59:de: af:8d:5c:8f:79:a8:e3:ab:d2:32:ee:99:9b:25:d0:b8:97:9a: cc:61:a2:af:56:95:fb:25:a4:94:7d:f9:26:b6:b4:16:99:f9: 83:03:ca:36:bf:18:da:89:e8:95:8b:47:d7:0d:ec:73:e7:10: b0:a4:e5:16:2b:e9:ac:1b:0c:4c:b6:30:16:08:dc:7e:c8:d7: 0d:fc:68:30:26:c8:49:80:fb:d7:3b:2e:06:10:05:16:c2:70: f0:16:29:86:21:ac:f4:08:57:4d:71:10:05:64:68:be:84:07: 6a:01:fb:1d:e6:2e:09:a2:78:8d:a6:ef:7c:54:a8:58:49:d0: 45:62:38:be:99:41:1b:45:53:34:bc:65:1e:09:85:f3:8d:79: e0:17:12:19:77:de:7a:6c:d5:81:38:a2:32:e3:a5:28:03:77: 6a:f2:82:0c:68:7b:7b:e7:e4:cf:ee:0e:d2:b8:d1:5b:37:cc: fb:5f:5c:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTWEUQF9mfTdLq06cY9QMnjhHOgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRC OENCRjUzMTAeFw0yNjA2MTgwMzEwNDdaFw0yNjA2MTkwNjUyNDdaMDMxMTAvBgNV BAMTKEI4MTVDNjYyNDNENzY5RURBQzE5ODMzNzgyNUVGNERGNkZBQUYwQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uPygj3AmyGOP4Ll1Bhyr58Ws G/a0PZQIyQoGK/wQ4BttB4Sah4fDKcuyx6hPFa4EKUyeJVNwv+lYoT/a2BDI1MPy u8FSe3A9s9vadfcgr353NlAQekRPCAPgjgf81OYMBRnlXIqNDb6JYvPX9pe0tXp1 TY07glqYUo1bN/9rhrQH0+hJZZrcac+g3bCLkJAsc7qUFdOpctpDOn2NyjwtXd1K q+bzQZwS7X8pdIsQuA2Et61Kxa5+5NUPLp1afI92CpPrsQVa7YBIbGjl1Yp0NMmy L1Fhqws/m2wEbMBe/INNN4KXOdxkpW3B1M9yHTpZpIitavpNy/WxiyyB0EdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuBXGYkPXae2sGYM3gl7032+q8MQwHwYDVR0j BBgwFoAUhmN1qX1ZFpV5fHC2MDNl/bjL9TEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzBmYjc4YTktY2Q2OC00NGZkLTg1YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3 RDU5MTY5NTc5N0M3MEI2MzAzMzY1RkRCOENCRjUzMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjYzNzVBOTdENTkxNjk1Nzk3QzcwQjYzMDMzNjVGREI4Q0JG NTMxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvODY2Mzc1QTk3RDU5MTY5NTc5N0M3MEI2MzAzMzY1 RkRCOENCRjUzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxqOgYJyq+xsQ+iYqSLL7bV7KuAEb9iXvb4 82I8ZAkJTEDEQsg1FzuTK1DImmuAtUgk3LK+qQSG1PB7IACBhW0yS4708wVZ3q+N XI95qOOr0jLumZsl0LiXmsxhoq9WlfslpJR9+Sa2tBaZ+YMDyja/GNqJ6JWLR9cN 7HPnELCk5RYr6awbDEy2MBYI3H7I1w38aDAmyEmA+9c7LgYQBRbCcPAWKYYhrPQI V01xEAVkaL6EB2oB+x3mLgmieI2m73xUqFhJ0EViOL6ZQRtFUzS8ZR4JhfONeeAX Ehl33nps1YE4ojLjpSgDd2ryggxoe3vn5M/uDtK40Vs3zPtfXN8= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:08 2026 by rpki-client