$ rpki-client -vvvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: L1nbzdRayWA0RKduSurZjYjYYcmni0/5X+AvUkPokOc= Subject key identifier: 2F:C6:57:4C:35:EC:03:67:A3:F4:30:24:D1:03:BB:B2:42:5C:F0:5A Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 63B135B2DD7A3119F0001DF9DB4C22697D86DE41 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 00:44:30 +0000 Manifest this update: Thu 17 Sep 2026 00:39:30 +0000 Manifest next update: Fri 18 Sep 2026 01:17:30 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: 5jj6OFKibNLfT8/TYAC9/yjnASZIIWVjPdC2dLIf3Mg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 01:17:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b1:35:b2:dd:7a:31:19:f0:00:1d:f9:db:4c:22:69:7d:86:de:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: Sep 17 00:39:30 2026 GMT Not After : Sep 18 01:17:30 2026 GMT Subject: CN=2FC6574C35EC0367A3F43024D103BBB2425CF05A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:82:db:a3:d5:46:96:ab:4c:10:f0:d7:56:d9: 43:cd:7a:05:f6:6e:20:b1:b1:65:05:82:4b:45:69: f1:d9:72:d2:cc:f8:4d:66:98:48:6b:e3:d1:a8:e4: dc:f3:a6:56:1f:9e:88:ea:14:eb:be:b8:cc:ea:9f: 54:37:03:bd:59:b9:25:f0:ce:93:55:6b:65:65:ed: a4:07:5f:25:3f:8a:5a:78:c2:e1:ab:89:a2:fd:31: 0e:ae:85:a0:9a:25:ef:62:d6:b1:24:da:3a:c9:1c: 3d:66:cf:43:d4:ad:d3:3e:f0:6e:d4:e5:f4:8b:14: 7e:0a:8d:a1:75:40:f6:a7:92:cc:67:a9:c8:87:8f: 0c:59:aa:62:a2:9d:7c:3d:eb:2b:e4:a3:32:b0:8b: 91:7e:5e:9c:f0:4b:3e:69:66:c8:5c:2f:ec:0f:2e: 02:b8:17:fc:e6:ab:2c:cf:47:ff:e0:f8:fe:56:dc: ac:8e:7a:d4:3e:d3:48:65:f5:46:e1:2e:84:af:8d: cc:05:fb:16:14:eb:b4:e0:0d:a5:b9:46:89:7e:c8: 1e:e2:83:32:56:f8:1e:5f:9a:cf:64:5a:6d:e7:e3: 10:70:0a:a4:11:5a:a4:3c:72:5f:fd:43:9b:0e:56: 64:c6:00:ef:a8:84:67:7c:0c:d4:d1:f0:80:10:dc: cc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C6:57:4C:35:EC:03:67:A3:F4:30:24:D1:03:BB:B2:42:5C:F0:5A X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:6e:e1:fb:90:f5:c6:02:f6:fa:85:1f:3c:d6:f1:d7:d5:b4: 43:cb:5c:30:63:a4:17:f5:91:65:7d:14:29:f0:f7:1b:9b:bb: 22:f4:1e:da:9e:8f:40:48:fe:f0:51:6a:c1:fb:5e:37:af:58: 98:40:ad:99:68:b3:e7:0f:d0:f7:b8:e3:18:29:fb:b4:51:c9: 99:42:68:bf:55:7d:18:6d:2a:72:41:a5:61:ec:6e:d1:a7:42: e2:ce:bd:0e:05:82:92:41:ab:03:fe:77:57:e4:b0:5c:6a:fd: 96:67:77:5c:d8:39:d3:73:0f:ac:0f:10:51:f6:0f:ed:0a:97: c1:5f:57:86:58:3d:e8:a7:e5:7c:72:ac:11:2d:31:6b:63:a0: 83:a4:ce:48:45:f2:a0:56:f4:76:50:3d:01:5b:e6:cc:88:db: e6:a5:b6:a9:d3:e4:8a:cb:4b:b1:15:87:d9:6b:93:77:85:73: a3:28:e0:81:95:49:e1:ce:0b:f4:e4:6d:1b:ec:24:2c:ae:0e: 99:c3:a3:e6:79:23:27:85:62:6b:b8:23:5a:1b:6a:e1:3b:e0: 25:4a:51:27:ed:a5:46:28:51:48:75:c1:6e:88:bd:ff:78:ad: 93:c4:85:72:46:56:b9:97:17:cc:d7:f9:83:d3:7c:b8:66:c9: 8a:13:40:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7E1st16MRnwAB3520wiaX2G3kEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQw ODRGMzlFMTAeFw0yNjA5MTcwMDM5MzBaFw0yNjA5MTgwMTE3MzBaMDMxMTAvBgNV BAMTKDJGQzY1NzRDMzVFQzAzNjdBM0Y0MzAyNEQxMDNCQkIyNDI1Q0YwNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUgtuj1UaWq0wQ8NdW2UPNegX2 biCxsWUFgktFafHZctLM+E1mmEhr49Go5NzzplYfnojqFOu+uMzqn1Q3A71ZuSXw zpNVa2Vl7aQHXyU/ilp4wuGriaL9MQ6uhaCaJe9i1rEk2jrJHD1mz0PUrdM+8G7U 5fSLFH4KjaF1QPanksxnqciHjwxZqmKinXw96yvkozKwi5F+XpzwSz5pZshcL+wP LgK4F/zmqyzPR//g+P5W3KyOetQ+00hl9UbhLoSvjcwF+xYU67TgDaW5Rol+yB7i gzJW+B5fms9kWm3n4xBwCqQRWqQ8cl/9Q5sOVmTGAO+ohGd8DNTR8IAQ3MzVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL8ZXTDXsA2ej9DAk0QO7skJc8FowHwYDVR0j BBgwFoAUhm19ElbW+TWjRry1HD50rQhPOeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzdiMzM0MTItYmU1Yi00NjNlLTgyMzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1 NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQwODRGMzlFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYz OUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0 QUQwODRGMzlFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNu4fuQ9cYC9vqFHzzW8dfVtEPLXDBjpBf1 kWV9FCnw9xubuyL0Htqej0BI/vBRasH7XjevWJhArZlos+cP0Pe44xgp+7RRyZlC aL9VfRhtKnJBpWHsbtGnQuLOvQ4FgpJBqwP+d1fksFxq/ZZnd1zYOdNzD6wPEFH2 D+0Kl8FfV4ZYPein5XxyrBEtMWtjoIOkzkhF8qBW9HZQPQFb5syI2+altqnT5IrL S7EVh9lrk3eFc6Mo4IGVSeHOC/TkbRvsJCyuDpnDo+Z5IyeFYmu4I1obauE74CVK USftpUYoUUh1wW6Ivf94rZPEhXJGVrmXF8zX+YPTfLhmyYoTQLs= -----END CERTIFICATE-----Generated at Thu Sep 17 13:59:28 2026 by rpki-client