$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: 6GHU6C21IBzKOTLppBfahyHMnlhrJDtrg2jmAneBdko= Subject key identifier: ED:A7:A9:7F:B7:E6:D4:8A:56:45:12:CC:42:16:9B:AB:42:3D:DC:DD Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 3B4BF8E260B0E4A4019CDF83A1E04045501EE927 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: 0120 Signing time: Sat 28 Feb 2026 19:01:35 +0000 Manifest this update: Sat 28 Feb 2026 18:56:35 +0000 Manifest next update: Wed 04 Mar 2026 03:55:35 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: pvAHTzptQD/ZBnMne78O54eQjIetnJ6ADfRNBr0XlSc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:4b:f8:e2:60:b0:e4:a4:01:9c:df:83:a1:e0:40:45:50:1e:e9:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Feb 28 18:56:35 2026 GMT Not After : Mar 4 03:55:35 2026 GMT Subject: CN=EDA7A97FB7E6D48A564512CC42169BAB423DDCDD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0b:89:23:ed:b1:df:3a:70:ee:e9:cf:5b:f7: ab:e7:0a:42:1f:0c:fa:4d:54:e4:af:2d:c3:bf:23: 61:c0:df:ab:f6:9e:f5:4f:d9:70:72:c5:b4:87:c6: b9:d2:93:9f:c6:03:2a:b1:96:d8:96:88:19:aa:14: d5:45:61:d3:ae:2c:7a:1c:e5:b5:cd:3d:bc:92:6c: a8:06:3d:b9:dd:25:9f:c8:3d:e2:53:c7:51:41:6e: a0:24:81:cd:69:e8:01:c0:04:32:82:3c:b5:ac:75: b5:90:38:a4:4f:6c:f3:8c:66:92:b6:3a:62:0e:be: d9:80:88:d0:31:33:47:19:72:0f:36:d7:00:45:c1: 3c:33:5c:63:18:a2:88:e1:3a:86:e1:9a:0b:09:cf: b8:63:61:22:91:73:75:cc:bb:e7:e8:0b:b3:be:8b: 38:bd:0e:e2:da:29:f2:19:53:93:46:b8:f2:8c:d2: 05:c7:f7:dc:19:69:4a:a9:17:69:0e:72:7c:ec:aa: 13:e7:2a:7d:64:86:41:83:30:e6:48:9a:57:eb:ab: b1:fc:ea:7e:97:29:69:20:31:05:53:a9:11:12:62: 40:ee:f1:0b:07:23:30:f8:7a:88:a2:3c:c8:30:d9: 84:d6:77:b0:75:24:77:75:ac:5e:16:33:71:54:a7: cd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:A7:A9:7F:B7:E6:D4:8A:56:45:12:CC:42:16:9B:AB:42:3D:DC:DD X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:a9:99:83:01:f2:c6:1a:1c:94:6e:99:28:b7:71:46:46:61: 47:78:a4:f5:27:17:ad:dc:4a:1b:d7:c8:37:07:fc:ec:2b:42: 9f:f1:e3:0c:24:a7:18:96:63:eb:02:f3:5f:bb:7a:0b:0b:c9: 91:98:2e:85:57:66:21:f2:96:20:ab:e0:63:67:59:ef:12:5e: 59:c5:85:78:0d:95:d5:f1:8e:d1:18:53:83:94:50:80:3a:c8: fc:69:f3:e3:8d:24:d2:1b:61:66:62:4b:f0:30:4b:8d:c3:3b: ac:57:b1:3a:35:8a:2f:df:11:b0:f5:3b:8d:7d:57:81:19:b8: e9:f8:6b:4d:39:87:82:b2:b2:a9:04:6d:66:9b:4d:0e:d4:a8: ec:11:75:2d:37:3d:d3:83:74:0b:38:c0:ce:d6:57:a1:0a:dd: 50:1a:c9:f3:d1:07:0d:32:32:7c:ab:f2:a7:44:ea:8f:f5:61: a6:c7:66:95:f9:c9:4e:44:f2:32:da:86:a7:56:0b:c5:57:6c: 5a:0b:9b:a3:dc:24:1a:1f:e4:bc:c1:34:c7:55:c3:a2:90:57: 2f:d6:4e:1f:42:d1:9a:1f:96:2e:6b:d1:c5:4d:49:ca:c4:d5: 4b:7a:7d:bb:ab:8b:0c:ff:7e:52:f9:24:b8:00:e9:b3:ef:81: 3f:53:8f:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0v44mCw5KQBnN+DoeBARVAe6ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNjAyMjgxODU2MzVaFw0yNjAzMDQwMzU1MzVaMDMxMTAvBgNV BAMTKEVEQTdBOTdGQjdFNkQ0OEE1NjQ1MTJDQzQyMTY5QkFCNDIzRERDREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDC4kj7bHfOnDu6c9b96vnCkIf DPpNVOSvLcO/I2HA36v2nvVP2XByxbSHxrnSk5/GAyqxltiWiBmqFNVFYdOuLHoc 5bXNPbySbKgGPbndJZ/IPeJTx1FBbqAkgc1p6AHABDKCPLWsdbWQOKRPbPOMZpK2 OmIOvtmAiNAxM0cZcg821wBFwTwzXGMYoojhOobhmgsJz7hjYSKRc3XMu+foC7O+ izi9DuLaKfIZU5NGuPKM0gXH99wZaUqpF2kOcnzsqhPnKn1khkGDMOZImlfrq7H8 6n6XKWkgMQVTqRESYkDu8QsHIzD4eoiiPMgw2YTWd7B1JHd1rF4WM3FUp83JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7aepf7fm1IpWRRLMQhabq0I93N0wHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGpmYMB8sYaHJRumSi3cUZGYUd4pPUnF63c ShvXyDcH/OwrQp/x4wwkpxiWY+sC81+7egsLyZGYLoVXZiHyliCr4GNnWe8SXlnF hXgNldXxjtEYU4OUUIA6yPxp8+ONJNIbYWZiS/AwS43DO6xXsTo1ii/fEbD1O419 V4EZuOn4a005h4KysqkEbWabTQ7UqOwRdS03PdODdAs4wM7WV6EK3VAayfPRBw0y Mnyr8qdE6o/1YabHZpX5yU5E8jLahqdWC8VXbFoLm6PcJBof5LzBNMdVw6KQVy/W Th9C0Zofli5r0cVNScrE1Ut6fburiwz/flL5JLgA6bPvgT9Tj6k= -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:28 2026 by rpki-client