$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: aS2GZFopBMrL58RmMdnUKHKyJx9VPEpOUELW2+gMWKE= Subject key identifier: 50:69:27:DA:19:B2:30:32:7F:43:0A:8A:8A:C2:A6:2E:D0:69:A1:95 Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 4ED10594093FD0FDF8C4C9561B0AA7E4FD82A2D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: 0134 Signing time: Wed 15 Apr 2026 10:41:35 +0000 Manifest this update: Wed 15 Apr 2026 10:36:35 +0000 Manifest next update: Sat 18 Apr 2026 17:29:35 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: bTPT4fMEP0WaXKzG+IjqZ7wInbVrmxIKly/NUwkYUmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 17:29:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:d1:05:94:09:3f:d0:fd:f8:c4:c9:56:1b:0a:a7:e4:fd:82:a2:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Apr 15 10:36:35 2026 GMT Not After : Apr 18 17:29:35 2026 GMT Subject: CN=506927DA19B230327F430A8A8AC2A62ED069A195 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ea:12:2c:e7:01:d6:bc:e7:08:48:51:16:87: 75:4d:eb:81:c4:b0:49:75:aa:cf:70:3e:c8:c4:33: 90:9c:cc:70:e3:c7:30:4e:4b:a3:d1:68:4a:45:1f: 6c:45:23:8f:a4:18:15:6a:28:c5:c0:94:26:e1:f0: 60:20:e4:67:5f:44:5a:7b:9f:53:37:36:d0:89:c6: a4:c1:e1:73:7f:a9:cb:5f:f1:cd:98:28:8f:04:9a: 6b:57:b5:40:a0:23:23:60:58:10:aa:13:51:c3:93: e5:d0:22:e1:f5:ae:db:c6:b4:7d:ac:a5:2b:86:d8: 8e:32:50:b2:37:59:5b:bb:f6:54:c6:0a:14:fa:55: 29:6e:eb:50:bb:71:64:93:80:aa:a8:85:53:a1:e7: 7a:27:26:3e:45:27:a1:46:ca:6e:a1:f9:ab:bf:e7: c0:a8:20:9e:1a:1b:b6:ee:6a:ba:99:65:28:c6:81: 31:8e:76:aa:a4:d9:2b:8c:04:c6:70:2f:0d:08:a0: 3b:dd:9f:ef:bd:3d:2c:c4:e5:d0:d4:ca:b5:70:f2: 98:17:8c:ce:80:80:ee:6a:9c:a1:07:fd:78:9e:fa: 5f:44:bc:e1:16:77:0c:cd:7e:10:e0:09:0e:09:8c: 5f:1f:17:e6:31:6b:ea:ad:6e:bb:34:83:07:a9:0c: 8f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:69:27:DA:19:B2:30:32:7F:43:0A:8A:8A:C2:A6:2E:D0:69:A1:95 X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8d:89:05:1c:d5:1d:e2:d6:c3:2c:e0:fc:6b:44:a4:9d:7d: 9e:d7:0c:6b:6b:b5:74:8b:bb:50:44:c1:36:46:7a:c1:18:c3: e9:15:82:57:bb:31:9f:ba:7d:2c:de:d3:c7:35:47:4c:47:30: ec:6a:84:87:46:80:ce:ab:f9:d7:1e:c3:29:32:51:c3:07:51: 9f:96:ea:8a:ac:be:47:41:a9:98:5e:7c:5f:d0:62:b9:74:94: 42:44:a3:3d:15:b8:89:6c:53:8a:a8:e8:e5:c9:2b:38:79:b2: b1:0d:f1:ec:9a:3f:db:e3:77:ca:92:a4:95:86:a1:3e:2d:29: 83:26:5c:1a:8e:52:cf:2b:24:20:ac:1e:45:70:42:a2:0b:6c: 1d:05:f5:b7:c0:45:b9:93:49:e4:bd:ba:da:8c:c7:5a:0b:90: 9e:bb:37:e5:42:95:1e:e5:5c:27:99:1f:e3:23:56:28:6a:00: 6c:46:31:21:ed:e4:13:9d:02:63:d8:5d:54:18:30:f1:49:ee: 4d:1a:40:bc:d3:b0:a8:08:eb:ed:07:02:82:87:68:67:81:4b: b3:dd:0d:ac:20:ae:c9:95:83:6c:8f:4a:39:d5:3b:20:e4:f5: c7:1d:59:46:6d:9b:37:bb:40:d9:9c:b4:91:b4:26:49:ed:cc: 70:31:cd:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTtEFlAk/0P34xMlWGwqn5P2CotAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNjA0MTUxMDM2MzVaFw0yNjA0MTgxNzI5MzVaMDMxMTAvBgNV BAMTKDUwNjkyN0RBMTlCMjMwMzI3RjQzMEE4QThBQzJBNjJFRDA2OUExOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr6hIs5wHWvOcISFEWh3VN64HE sEl1qs9wPsjEM5CczHDjxzBOS6PRaEpFH2xFI4+kGBVqKMXAlCbh8GAg5GdfRFp7 n1M3NtCJxqTB4XN/qctf8c2YKI8EmmtXtUCgIyNgWBCqE1HDk+XQIuH1rtvGtH2s pSuG2I4yULI3WVu79lTGChT6VSlu61C7cWSTgKqohVOh53onJj5FJ6FGym6h+au/ 58CoIJ4aG7buarqZZSjGgTGOdqqk2SuMBMZwLw0IoDvdn++9PSzE5dDUyrVw8pgX jM6AgO5qnKEH/Xie+l9EvOEWdwzNfhDgCQ4JjF8fF+Yxa+qtbrs0gwepDI8FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUGkn2hmyMDJ/QwqKisKmLtBpoZUwHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeNiQUc1R3i1sMs4PxrRKSdfZ7XDGtrtXSL u1BEwTZGesEYw+kVgle7MZ+6fSze08c1R0xHMOxqhIdGgM6r+dcewykyUcMHUZ+W 6oqsvkdBqZhefF/QYrl0lEJEoz0VuIlsU4qo6OXJKzh5srEN8eyaP9vjd8qSpJWG oT4tKYMmXBqOUs8rJCCsHkVwQqILbB0F9bfARbmTSeS9utqMx1oLkJ67N+VClR7l XCeZH+MjVihqAGxGMSHt5BOdAmPYXVQYMPFJ7k0aQLzTsKgI6+0HAoKHaGeBS7Pd DawgrsmVg2yPSjnVOyDk9ccdWUZtmze7QNmctJG0JkntzHAxzas= -----END CERTIFICATE-----Generated at Fri Apr 17 16:09:26 2026 by rpki-client