$ rpki-client -vvf rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft File: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft (raw, json) Hash identifier: ynsyh3FCZTlWOiIAOknR/G3dlS30oEsvlJRLEoBwUsU= Subject key identifier: 51:58:83:E0:05:5A:D7:CD:AD:44:56:4F:57:F4:00:55:D2:98:B5:D8 Authority key identifier: 86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 Certificate issuer: /CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Certificate serial: 26F0856AF01134E83FD3FFCC99F32EDDE9F55080 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 15:44:46 +0000 Manifest this update: Fri 19 Jun 2026 15:39:46 +0000 Manifest next update: Sat 20 Jun 2026 18:53:46 +0000 Files and hashes: 1: 866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl (hash: zNgJpyEO06fnyGX0qswORRo8r31dQtBw9ABPNzOBrD0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:53:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:f0:85:6a:f0:11:34:e8:3f:d3:ff:cc:99:f3:2e:dd:e9:f5:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866D7D1256D6F935A346BCB51C3E74AD084F39E1 Validity Not Before: Jun 19 15:39:46 2026 GMT Not After : Jun 20 18:53:46 2026 GMT Subject: CN=515883E0055AD7CDAD44564F57F40055D298B5D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4e:7a:ca:ed:f4:a2:0f:4b:3b:eb:01:19:10: 38:ff:b7:74:e0:e3:f1:2d:fb:91:b8:98:8d:79:c8: 61:25:a0:9d:c1:23:1e:bd:9f:a4:fa:5b:e5:bc:f0: 0e:9d:55:35:39:47:7d:ff:93:8e:92:8b:c8:95:9b: 66:b0:f7:52:4b:4e:7e:a7:30:20:6b:58:c6:b4:84: 00:79:50:7b:8d:3d:6f:4c:02:bc:ec:6f:f0:16:5f: 6a:53:27:f2:57:64:be:fe:88:34:e8:ea:15:bb:b7: 3a:c3:c1:c6:f8:94:5b:73:98:e1:4b:72:64:2c:4e: f6:a3:72:6a:2f:29:dd:f5:89:c3:f9:06:34:44:19: 9e:f5:7c:a3:77:cc:54:df:4d:25:0d:c2:c1:07:74: ff:dc:48:9f:03:44:f8:c3:2e:9a:15:2d:8d:e3:4e: 5d:46:69:04:09:43:49:6a:2e:b5:2a:c0:bf:fc:8f: 71:6f:9b:1b:9a:c3:be:62:27:31:f6:2c:28:92:b8: 57:d9:fc:61:8a:8f:b2:d6:aa:8e:87:e1:de:71:e3: c0:cb:7a:23:da:0f:32:61:ab:3b:1a:03:dd:35:e6: 53:44:0e:40:cd:00:31:7f:43:27:51:0d:ad:0e:f4: af:68:0c:02:8a:c5:ed:8c:9e:76:93:09:36:81:cf: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:58:83:E0:05:5A:D7:CD:AD:44:56:4F:57:F4:00:55:D2:98:B5:D8 X509v3 Authority Key Identifier: keyid:86:6D:7D:12:56:D6:F9:35:A3:46:BC:B5:1C:3E:74:AD:08:4F:39:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/866D7D1256D6F935A346BCB51C3E74AD084F39E1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/37b33412-be5b-463e-8233-9eab848a5976/0/866D7D1256D6F935A346BCB51C3E74AD084F39E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0b:f7:04:91:b8:2a:ef:65:e1:09:07:22:a7:c4:c3:8d:2d: 56:d7:37:83:75:76:6c:60:e3:ba:61:2c:4a:4d:a2:bd:f8:42: f1:38:a1:96:35:48:d3:70:b1:40:46:ae:8c:98:5f:d6:20:3b: c2:f1:d1:5b:fb:0a:98:af:01:7e:cb:4d:4c:82:3a:60:0f:d0: 98:ee:68:fc:09:6f:0a:75:b6:04:35:25:fb:f2:e4:51:43:3b: a3:8f:3d:fd:5d:8d:4a:20:83:10:5b:16:1c:48:c9:a0:06:de: e6:02:ce:3c:87:9d:d4:63:3b:27:c1:19:3a:cd:4b:51:79:e5: 19:61:ce:d3:77:4d:32:87:8d:43:68:af:08:c8:21:78:48:42: 44:be:dd:b2:da:d5:9a:7b:4e:bf:b7:d7:d6:77:a8:8c:5a:04: 5e:a0:49:b6:a9:98:9d:a7:c4:db:75:4e:2e:9f:61:78:bc:d0: 3c:56:65:00:0c:e1:81:d4:79:af:eb:92:b0:b8:42:4d:d2:a1: 17:46:13:64:69:72:ab:7b:74:35:3f:d7:2f:ef:e6:03:1d:04: a0:e8:a1:5e:fc:0c:bc:72:30:5d:0e:61:08:1f:e6:66:5d:f4: 81:00:52:cd:29:cf:39:53:22:28:25:9a:b1:a2:47:87:12:68: 24:b2:3f:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJvCFavARNOg/0//MmfMu3en1UIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQw ODRGMzlFMTAeFw0yNjA2MTkxNTM5NDZaFw0yNjA2MjAxODUzNDZaMDMxMTAvBgNV BAMTKDUxNTg4M0UwMDU1QUQ3Q0RBRDQ0NTY0RjU3RjQwMDU1RDI5OEI1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoTnrK7fSiD0s76wEZEDj/t3Tg 4/Et+5G4mI15yGEloJ3BIx69n6T6W+W88A6dVTU5R33/k46Si8iVm2aw91JLTn6n MCBrWMa0hAB5UHuNPW9MArzsb/AWX2pTJ/JXZL7+iDTo6hW7tzrDwcb4lFtzmOFL cmQsTvajcmovKd31icP5BjREGZ71fKN3zFTfTSUNwsEHdP/cSJ8DRPjDLpoVLY3j Tl1GaQQJQ0lqLrUqwL/8j3Fvmxuaw75iJzH2LCiSuFfZ/GGKj7LWqo6H4d5x48DL eiPaDzJhqzsaA9015lNEDkDNADF/QydRDa0O9K9oDAKKxe2MnnaTCTaBz4FHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUViD4AVa182tRFZPV/QAVdKYtdgwHwYDVR0j BBgwFoAUhm19ElbW+TWjRry1HD50rQhPOeEwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzdiMzM0MTItYmU1Yi00NjNlLTgyMzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1 NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0QUQwODRGMzlFMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NjZEN0QxMjU2RDZGOTM1QTM0NkJDQjUxQzNFNzRBRDA4NEYz OUUxLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzdiMzM0MTItYmU1Yi00NjNlLTgy MzMtOWVhYjg0OGE1OTc2LzAvODY2RDdEMTI1NkQ2RjkzNUEzNDZCQ0I1MUMzRTc0 QUQwODRGMzlFMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADML9wSRuCrvZeEJByKnxMONLVbXN4N1dmxg 47phLEpNor34QvE4oZY1SNNwsUBGroyYX9YgO8Lx0Vv7CpivAX7LTUyCOmAP0Jju aPwJbwp1tgQ1Jfvy5FFDO6OPPf1djUoggxBbFhxIyaAG3uYCzjyHndRjOyfBGTrN S1F55RlhztN3TTKHjUNorwjIIXhIQkS+3bLa1Zp7Tr+319Z3qIxaBF6gSbapmJ2n xNt1Ti6fYXi80DxWZQAM4YHUea/rkrC4Qk3SoRdGE2Rpcqt7dDU/1y/v5gMdBKDo oV78DLxyMF0OYQgf5mZd9IEAUs0pzzlTIiglmrGiR4cSaCSyP9g= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:24 2026 by rpki-client