$ rpki-client -vvvf rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft File: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft (raw, json) Hash identifier: fiSc9Ft4ua0SM4m1bAuu4/S7nFzrDRkyC7obeLuB6Ro= Subject key identifier: 21:C0:97:64:E5:56:C9:BC:30:57:E0:D5:73:0B:E6:54:97:A9:A4:E4 Authority key identifier: 86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 Certificate issuer: /CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Certificate serial: 322120BD1C7D8177871CA56B1C638549EFACB937 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 01:25:21 +0000 Manifest this update: Thu 17 Sep 2026 01:20:21 +0000 Manifest next update: Fri 18 Sep 2026 03:53:21 +0000 Files and hashes: 1: 3136302e32322e37322e302f32342d3234203d3e20313532383033.roa (hash: mw+kJTa3z1YCgtqDlv4vZF49RM+szfoPadKH4QNVzN8=) 2: 866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl (hash: NhcLuuz+fnytY6PaukzSUeWRrTvDrt9R5eRTqAn3NLI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:53:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:21:20:bd:1c:7d:81:77:87:1c:a5:6b:1c:63:85:49:ef:ac:b9:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=866437E32B464B1B5AC613B7B05DF39BA8B220F2 Validity Not Before: Sep 17 01:20:21 2026 GMT Not After : Sep 18 03:53:21 2026 GMT Subject: CN=21C09764E556C9BC3057E0D5730BE65497A9A4E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:98:2c:52:35:21:ac:eb:83:17:17:87:4c: 44:03:95:28:7c:e3:24:14:1d:ed:6f:20:7a:87:c7: 37:e8:ed:6e:d9:79:01:2e:c3:66:39:ef:73:ac:8a: f6:8f:f7:e4:3a:df:5d:70:21:6a:f0:cf:d6:14:ae: d9:06:0f:6e:96:42:91:b8:f9:f6:db:98:1f:8d:69: 1e:7e:92:88:48:5a:15:52:e4:ef:65:67:82:7a:47: fb:01:c2:ee:7c:c8:30:36:a3:fe:91:ee:7d:9c:c5: 01:1c:dd:c9:6e:b3:46:6d:8f:e7:04:5f:8f:78:19: a9:4c:f4:10:8b:d5:42:25:70:d3:01:f3:54:83:2a: e3:73:bd:aa:d9:18:46:cf:fb:aa:4f:75:9d:fd:db: 3f:46:60:bc:65:e2:8a:46:af:67:5e:77:10:95:a2: 3c:0b:e3:75:13:cb:b8:60:26:12:3b:ad:97:47:b5: 0e:97:12:66:d8:a1:f6:fd:49:b2:c1:d1:df:d6:b3: ef:d2:09:79:4a:aa:80:8f:a0:d3:28:a2:b5:84:1a: d6:b6:93:3c:ee:b3:a9:d8:3c:69:11:2b:71:e0:be: 55:0e:c8:7e:1a:6a:41:92:e1:96:8c:a2:31:56:e5: 6f:36:6f:3d:9f:ca:93:39:0f:d6:e0:31:9a:40:d8: 7d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:C0:97:64:E5:56:C9:BC:30:57:E0:D5:73:0B:E6:54:97:A9:A4:E4 X509v3 Authority Key Identifier: keyid:86:64:37:E3:2B:46:4B:1B:5A:C6:13:B7:B0:5D:F3:9B:A8:B2:20:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/72f260ce-23f5-4095-82db-ef7114e471b2/0/866437E32B464B1B5AC613B7B05DF39BA8B220F2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:f3:a3:61:7a:52:0f:28:1f:3a:f1:59:35:c0:66:78:04: 2b:3b:bd:e4:46:51:4e:3c:e8:65:87:c2:7f:40:88:00:0a:08: 2d:2a:e1:1b:73:f7:6b:8f:f7:b8:e9:ba:79:c9:0c:1f:ff:92: 8b:1e:84:7e:0e:36:ff:48:42:1c:4d:ab:08:2c:2c:9b:2d:27: 88:0c:90:a3:1d:bb:16:5d:6a:37:bc:93:82:a7:ec:54:cb:f3: 02:23:25:ca:b7:8e:c8:5d:74:ab:82:04:b8:2d:05:a8:f9:2b: ac:90:4a:e3:8d:2d:26:07:65:b6:b3:1c:21:ad:ad:f4:e1:51: f6:03:c2:12:aa:39:bf:22:f1:68:01:91:01:a0:14:ca:4d:f6: 8e:04:6a:54:15:e7:8b:70:ed:a2:12:af:df:d5:24:1d:f9:7e: f0:9a:49:d8:03:52:d6:cb:70:0e:4b:09:78:2b:60:4a:b6:3e: 57:aa:24:89:cb:15:68:89:b5:01:86:03:82:fc:da:d0:de:f1: d3:ec:23:f9:a6:a9:fd:ee:99:6f:03:b0:4f:99:a8:9c:51:db: 54:a9:01:5d:a4:d9:76:d1:ae:16:1c:2e:fc:c1:ff:e2:58:dd: 33:94:bb:3a:f1:a9:be:1d:88:5c:76:9e:f3:95:fc:31:ae:1c: 37:c6:1c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMiEgvRx9gXeHHKVrHGOFSe+suTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJB OEIyMjBGMjAeFw0yNjA5MTcwMTIwMjFaFw0yNjA5MTgwMzUzMjFaMDMxMTAvBgNV BAMTKDIxQzA5NzY0RTU1NkM5QkMzMDU3RTBENTczMEJFNjU0OTdBOUE0RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC975gsUjUhrOuDFxeHTEQDlSh8 4yQUHe1vIHqHxzfo7W7ZeQEuw2Y573OsivaP9+Q6311wIWrwz9YUrtkGD26WQpG4 +fbbmB+NaR5+kohIWhVS5O9lZ4J6R/sBwu58yDA2o/6R7n2cxQEc3clus0Ztj+cE X494GalM9BCL1UIlcNMB81SDKuNzvarZGEbP+6pPdZ392z9GYLxl4opGr2dedxCV ojwL43UTy7hgJhI7rZdHtQ6XEmbYofb9SbLB0d/Ws+/SCXlKqoCPoNMoorWEGta2 kzzus6nYPGkRK3HgvlUOyH4aakGS4ZaMojFW5W82bz2fypM5D9bgMZpA2H3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIcCXZOVWybwwV+DVcwvmVJeppOQwHwYDVR0j BBgwFoAUhmQ34ytGSxtaxhO3sF3zm6iyIPIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzJmMjYwY2UtMjNmNS00MDk1LTgyZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMy QjQ2NEIxQjVBQzYxM0I3QjA1REYzOUJBOEIyMjBGMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC84NjY0MzdFMzJCNDY0QjFCNUFDNjEzQjdCMDVERjM5QkE4QjIy MEYyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzJmMjYwY2UtMjNmNS00MDk1LTgy ZGItZWY3MTE0ZTQ3MWIyLzAvODY2NDM3RTMyQjQ2NEIxQjVBQzYxM0I3QjA1REYz OUJBOEIyMjBGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGX686NhelIPKB868Vk1wGZ4BCs7veRGUU48 6GWHwn9AiAAKCC0q4Rtz92uP97jpunnJDB//kosehH4ONv9IQhxNqwgsLJstJ4gM kKMduxZdaje8k4Kn7FTL8wIjJcq3jshddKuCBLgtBaj5K6yQSuONLSYHZbazHCGt rfThUfYDwhKqOb8i8WgBkQGgFMpN9o4EalQV54tw7aISr9/VJB35fvCaSdgDUtbL cA5LCXgrYEq2PleqJInLFWiJtQGGA4L82tDe8dPsI/mmqf3umW8DsE+ZqJxR21Sp AV2k2XbRrhYcLvzB/+JY3TOUuzrxqb4diFx2nvOV/DGuHDfGHJk= -----END CERTIFICATE-----Generated at Thu Sep 17 15:53:00 2026 by rpki-client