$ rpki-client -vvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: zgm+64Hkk8rXFS7oWwlDsyXTh5iynVjqFffwkjaaTZk= Subject key identifier: 66:C2:2D:0D:B3:35:BC:CC:A6:34:A3:B4:47:ED:85:81:3B:3B:ED:BC Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 4407404B8634D915A18C8BD86FFC6EC7C651E1A8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 01:03:08 +0000 Manifest this update: Thu 18 Jun 2026 00:58:08 +0000 Manifest next update: Fri 19 Jun 2026 01:32:08 +0000 Files and hashes: 1: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: 0aCudE5feb5wlX8SGFAncz1BvPOyDwE8uofZAkBkeZA=) 2: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:07:40:4b:86:34:d9:15:a1:8c:8b:d8:6f:fc:6e:c7:c6:51:e1:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: Jun 18 00:58:08 2026 GMT Not After : Jun 19 01:32:08 2026 GMT Subject: CN=66C22D0DB335BCCCA634A3B447ED85813B3BEDBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3f:ab:1c:53:56:0b:14:85:05:6e:cc:3d:b6: d8:4c:b3:3a:f7:7c:dd:cd:5f:2b:e7:95:3b:8f:ba: ec:e1:22:7e:30:cd:9a:43:83:eb:9a:e7:e2:e1:86: 74:d3:56:ae:fc:7f:60:a7:80:3d:87:59:26:70:82: d8:cc:a9:54:2e:1b:8c:1d:f6:f1:6b:58:af:47:1a: 7c:b7:3a:91:fa:8d:b1:e9:f2:cb:e2:3f:4d:66:53: 51:49:5c:f6:a4:21:51:e7:e4:f4:c2:8d:20:3a:00: ec:25:38:13:5f:5f:35:e8:95:b9:c0:b5:8f:06:9c: 37:cc:01:bd:00:2d:b3:b1:d6:fd:9b:fe:5e:41:54: e2:ec:66:71:31:48:08:03:31:96:91:f4:c1:50:ca: ef:f7:c3:c4:fb:bd:09:59:da:43:5e:12:82:a7:5d: 0c:bc:c0:1a:5f:00:f1:df:1b:e4:f2:e1:1b:93:44: ae:8d:8d:ea:be:02:96:cb:43:f7:c0:3e:89:f5:60: f7:ee:94:d4:43:07:ac:13:e8:ca:80:dd:dd:76:63: 9d:b4:f2:48:6f:99:e5:ad:63:11:1c:09:8a:37:c9: 3f:cf:79:82:ef:94:40:b8:88:eb:de:9e:83:7f:97: db:07:3e:23:04:58:3e:ff:95:ac:a1:ba:87:49:90: 51:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:C2:2D:0D:B3:35:BC:CC:A6:34:A3:B4:47:ED:85:81:3B:3B:ED:BC X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6b:97:ea:bb:d4:55:6d:ff:ec:84:c0:52:c4:08:9c:d0:ee: ee:c2:d8:c3:91:8f:47:94:7a:53:94:c3:f2:e7:40:ae:b6:b0: e8:04:d4:84:96:90:97:2b:5c:98:c0:2b:99:50:c7:b4:b2:0c: c5:8f:ca:79:99:bb:0a:a5:a0:c6:54:88:ee:fe:20:79:5a:d1: 68:e9:88:56:0b:d4:83:72:84:d8:a5:24:84:42:52:b7:51:9c: 2f:e8:f8:41:7c:05:2d:ea:40:8a:07:3d:65:0e:f8:10:38:4e: 95:58:2a:8b:5b:20:0b:67:0e:44:73:ea:b6:c4:be:e9:80:12: ec:44:65:a4:75:bc:cb:66:79:66:8b:19:e8:f2:70:7c:d5:f6: 87:37:da:6c:20:47:73:bf:16:90:bf:1f:4f:45:ae:23:75:5d: 35:54:bf:57:95:b1:af:09:be:3f:81:f6:b9:e4:30:3e:d6:77: 3c:48:ca:ba:e2:55:29:21:10:2c:59:d1:c3:09:18:07:bb:06: 6b:ea:f2:9f:d3:6e:a6:c4:6f:7d:ec:ca:dd:0f:1b:27:08:a7: 5b:46:4e:1c:7b:71:82:b5:f3:66:37:ac:83:51:e7:2d:94:a8: d5:b5:65:a2:7a:36:2b:eb:8c:80:3a:7b:8f:2a:87:f1:4a:7c: 00:39:f9:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAdAS4Y02RWhjIvYb/xux8ZR4agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjA2MTgwMDU4MDhaFw0yNjA2MTkwMTMyMDhaMDMxMTAvBgNV BAMTKDY2QzIyRDBEQjMzNUJDQ0NBNjM0QTNCNDQ3RUQ4NTgxM0IzQkVEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaP6scU1YLFIUFbsw9tthMszr3 fN3NXyvnlTuPuuzhIn4wzZpDg+ua5+LhhnTTVq78f2CngD2HWSZwgtjMqVQuG4wd 9vFrWK9HGny3OpH6jbHp8sviP01mU1FJXPakIVHn5PTCjSA6AOwlOBNfXzXolbnA tY8GnDfMAb0ALbOx1v2b/l5BVOLsZnExSAgDMZaR9MFQyu/3w8T7vQlZ2kNeEoKn XQy8wBpfAPHfG+Ty4RuTRK6Njeq+ApbLQ/fAPon1YPfulNRDB6wT6MqA3d12Y520 8khvmeWtYxEcCYo3yT/PeYLvlEC4iOvenoN/l9sHPiMEWD7/layhuodJkFGpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZsItDbM1vMymNKO0R+2FgTs77bwwHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlrl+q71FVt/+yEwFLECJzQ7u7C2MORj0eU elOUw/LnQK62sOgE1ISWkJcrXJjAK5lQx7SyDMWPynmZuwqloMZUiO7+IHla0Wjp iFYL1INyhNilJIRCUrdRnC/o+EF8BS3qQIoHPWUO+BA4TpVYKotbIAtnDkRz6rbE vumAEuxEZaR1vMtmeWaLGejycHzV9oc32mwgR3O/FpC/H09FriN1XTVUv1eVsa8J vj+B9rnkMD7WdzxIyrriVSkhECxZ0cMJGAe7Bmvq8p/TbqbEb33syt0PGycIp1tG Thx7cYK182Y3rINR5y2UqNW1ZaJ6NivrjIA6e48qh/FKfAA5+So= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:14 2026 by rpki-client