$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: DO6vHcXVngRWZtNjabg1tulIWk63JZwi2aryIpSU4JU= Subject key identifier: 81:28:BC:72:5E:8C:D6:89:C7:DB:68:F8:EF:34:F0:00:04:75:44:EB Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 0CE0078F458C42CEB976FD5B444E2E21CE857222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 02AC Signing time: Sun 01 Mar 2026 10:52:26 +0000 Manifest this update: Sun 01 Mar 2026 10:47:26 +0000 Manifest next update: Wed 04 Mar 2026 21:37:26 +0000 Files and hashes: 1: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 2: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 3: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: qmOY+ex+eKFd+RN5W2l7cGXIURHHEfw8gCEhgcJx16M=) 4: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) 5: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE=) 6: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 7: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 8: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:e0:07:8f:45:8c:42:ce:b9:76:fd:5b:44:4e:2e:21:ce:85:72:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Mar 1 10:47:26 2026 GMT Not After : Mar 4 21:37:26 2026 GMT Subject: CN=8128BC725E8CD689C7DB68F8EF34F000047544EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:bc:7f:50:ab:22:dc:66:3d:59:c5:99:03: dc:5f:d8:ef:fb:1c:70:fa:65:6b:3f:04:1e:22:3c: 5f:ed:d9:be:a3:08:37:02:77:ad:6a:fb:54:af:aa: 7a:14:aa:d9:4e:34:aa:b2:7e:6a:63:1f:e7:f7:98: 29:e3:89:e1:eb:03:bd:2d:7b:2c:4c:ae:c9:e8:85: 63:d0:2a:63:66:dd:0a:68:91:e7:03:1f:69:d6:a8: 05:64:4b:3d:f3:c1:1a:12:9d:d1:e7:3c:51:d0:37: 2b:f6:92:d1:12:cc:3b:ac:e8:5b:50:0a:a3:74:19: 05:86:8d:d0:62:d6:d8:34:3f:29:b3:0b:e3:a9:69: db:d4:9e:3b:e3:e3:03:bd:09:e9:e7:60:d0:2a:9b: d9:01:50:55:73:54:5f:6c:0b:cb:84:27:bb:d6:46: 69:49:26:47:00:c4:8b:97:db:70:33:39:06:18:56: 6f:6a:1c:43:2f:45:a7:ab:9a:b7:6c:84:e5:5f:1f: ed:0f:b7:98:64:59:51:4a:da:6f:c8:7f:64:e2:bb: b8:e8:e4:fc:67:4e:a8:3f:da:73:42:2e:23:50:31: a9:17:e4:28:24:b2:a9:dc:35:82:92:88:db:30:a4: 30:ee:21:aa:1b:d5:e5:33:ac:0f:c1:b4:30:2d:64: fa:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:BC:72:5E:8C:D6:89:C7:DB:68:F8:EF:34:F0:00:04:75:44:EB X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:ce:22:04:d1:94:af:7d:ff:52:90:b9:2a:e9:c2:63:69:d3: 53:86:83:c0:fc:12:21:8c:40:35:3c:5d:3a:86:3b:2a:13:76: ab:49:5d:ac:bc:b9:48:6a:83:56:51:82:12:d8:19:29:04:29: 72:5b:9f:22:56:4c:42:94:9e:0a:63:2e:80:15:75:6a:75:c1: 95:15:3e:f1:96:be:eb:ea:3e:53:b0:b7:34:b9:b3:91:25:e9: ea:da:b5:d6:f3:7d:f4:f0:75:c1:ae:34:8e:42:f5:7d:53:3f: 5b:4a:87:fd:0a:17:74:a5:e2:93:ef:c4:59:36:66:5b:ad:48: 8d:52:71:9e:ea:bf:76:5d:b8:38:fa:32:2c:e3:2d:31:2b:9e: 7b:d5:a1:74:fa:29:ab:e1:16:8b:61:8f:59:13:60:a5:b0:ae: d9:0c:22:a5:3d:3b:3d:11:0a:c5:d6:ce:e6:3e:66:82:70:8b: 9f:88:29:1a:8f:d3:70:3c:ee:db:f3:b6:a0:b6:45:21:a4:59: f1:06:88:5c:fc:88:fa:fc:a3:57:d0:c8:73:d7:a6:07:56:68: eb:f2:1e:99:4d:9b:a8:1d:8f:eb:9e:91:8a:81:c5:82:7f:aa: 5c:20:9e:1c:94:cd:cd:8e:13:e9:72:0a:49:50:a5:29:12:e2: 06:5a:a1:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDOAHj0WMQs65dv1bRE4uIc6FciIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNjAzMDExMDQ3MjZaFw0yNjAzMDQyMTM3MjZaMDMxMTAvBgNV BAMTKDgxMjhCQzcyNUU4Q0Q2ODlDN0RCNjhGOEVGMzRGMDAwMDQ3NTQ0RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2krx/UKsi3GY9WcWZA9xf2O/7 HHD6ZWs/BB4iPF/t2b6jCDcCd61q+1SvqnoUqtlONKqyfmpjH+f3mCnjieHrA70t eyxMrsnohWPQKmNm3QpokecDH2nWqAVkSz3zwRoSndHnPFHQNyv2ktESzDus6FtQ CqN0GQWGjdBi1tg0PymzC+OpadvUnjvj4wO9CennYNAqm9kBUFVzVF9sC8uEJ7vW RmlJJkcAxIuX23AzOQYYVm9qHEMvRaermrdshOVfH+0Pt5hkWVFK2m/If2Tiu7jo 5PxnTqg/2nNCLiNQMakX5CgksqncNYKSiNswpDDuIaob1eUzrA/BtDAtZPrLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSi8cl6M1onH22j47zTwAAR1ROswHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXOIgTRlK99/1KQuSrpwmNp01OGg8D8EiGM QDU8XTqGOyoTdqtJXay8uUhqg1ZRghLYGSkEKXJbnyJWTEKUngpjLoAVdWp1wZUV PvGWvuvqPlOwtzS5s5El6eratdbzffTwdcGuNI5C9X1TP1tKh/0KF3Sl4pPvxFk2 ZlutSI1ScZ7qv3ZduDj6MizjLTErnnvVoXT6KavhFothj1kTYKWwrtkMIqU9Oz0R CsXWzuY+ZoJwi5+IKRqP03A87tvztqC2RSGkWfEGiFz8iPr8o1fQyHPXpgdWaOvy HplNm6gdj+uekYqBxYJ/qlwgnhyUzc2OE+lyCklQpSkS4gZaof8= -----END CERTIFICATE-----Generated at Mon Mar 2 07:28:40 2026 by rpki-client