$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json) Hash identifier: m3mKxSwRaFDBF9cGmVkmlQPbq6gRxoTzloQlWJ4fgcI= Subject key identifier: 66:CD:BC:B4:EE:2E:29:EE:61:33:5D:3D:FB:C4:61:E3:48:37:8F:CF Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Certificate serial: 06E1647C7238618EBF1753779B2874294BB1620F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft Manifest number: 04E6 Signing time: Sun 01 Mar 2026 05:02:00 +0000 Manifest this update: Sun 01 Mar 2026 04:57:00 +0000 Manifest next update: Wed 04 Mar 2026 06:30:00 +0000 Files and hashes: 1: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=) 2: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=) 3: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=) 4: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: 9uTvZk5mcHszL2bc5/naXZkDCsTUDnq2qZ7urejZafg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:30:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:e1:64:7c:72:38:61:8e:bf:17:53:77:9b:28:74:29:4b:b1:62:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072 Validity Not Before: Mar 1 04:57:00 2026 GMT Not After : Mar 4 06:30:00 2026 GMT Subject: CN=66CDBCB4EE2E29EE61335D3DFBC461E348378FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:74:f2:27:16:d7:54:01:6a:2c:99:80:7c:31: 22:84:6c:30:0a:5c:cc:83:e7:34:11:0c:77:9b:bf: 59:09:7e:3d:31:97:db:e0:b5:61:4f:8f:7b:7b:84: 8d:9b:6c:c3:f4:b9:5f:25:90:45:ac:a5:78:31:d3: b1:c7:8d:96:eb:06:be:bb:0f:6e:80:87:6c:17:f3: 83:02:c4:17:7c:51:90:3c:e8:92:aa:79:20:69:41: a0:ff:24:fc:fa:1c:82:86:79:be:0b:de:cb:66:0a: ef:82:57:89:20:db:eb:39:c9:74:c6:d3:ac:42:99: 93:e2:33:59:46:aa:77:4e:9f:7d:b4:e8:ce:7d:01: f6:c8:c5:36:be:ce:68:30:25:9c:bd:f1:91:79:4b: a4:ef:8d:71:bb:d0:6b:e2:13:c7:3c:f9:d2:2d:1b: 1e:3e:39:18:d2:40:44:12:72:a2:5b:f1:08:17:73: cf:83:d7:cc:6b:a4:8b:15:0d:f9:e1:e2:e5:34:d5: bc:0f:fc:58:fc:22:a0:15:7a:e3:43:9b:4f:d0:a1: 0c:41:ba:0f:9c:fe:9f:3f:fe:18:89:94:12:b8:51: 95:d6:32:a1:e3:3b:61:ab:e1:de:44:1d:d5:58:90: c6:7a:da:ab:49:f1:7c:7c:a4:8d:b7:79:52:65:df: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CD:BC:B4:EE:2E:29:EE:61:33:5D:3D:FB:C4:61:E3:48:37:8F:CF X509v3 Authority Key Identifier: keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c9:cb:1b:70:2c:22:d7:e7:a6:43:0d:13:eb:0f:2a:f8:25: 65:f7:03:5c:95:75:96:b5:68:24:e6:46:8f:51:64:9c:e9:98: cb:74:75:f4:2a:24:46:e1:8f:f2:cc:f9:41:50:53:7c:b1:74: 0a:87:fd:81:04:55:64:e8:2b:eb:63:f0:e0:51:fc:8a:37:8e: 44:9e:47:46:07:a0:96:2a:50:9c:ca:64:69:cd:1a:ac:26:e4: ec:41:a2:03:58:db:8d:07:f3:84:e4:40:da:f5:69:a4:bb:2c: ce:e5:88:57:ae:70:1c:6c:e1:a1:89:9b:27:82:8a:26:e6:87: 70:96:3c:2d:53:d2:7c:65:13:81:68:2a:b2:08:10:b8:33:ca: 57:cd:f0:a1:44:04:3f:c1:d1:5d:ee:15:1d:e6:6e:03:98:c4: cd:46:a5:e4:9c:0a:b5:90:87:37:54:b0:bd:a0:4c:b3:3d:e6: 70:42:da:95:db:ac:4c:3b:91:df:64:15:26:e5:78:b2:92:58: e5:ee:78:30:8b:63:d9:da:2f:9a:e2:51:32:cb:39:69:60:8b: da:fe:21:73:b9:f5:4b:03:c5:f2:45:b0:12:b1:a6:06:bd:33: 34:ed:c3:33:b9:e8:7a:6c:6c:01:d5:80:5b:b6:47:5a:8c:56: 4d:ad:af:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBuFkfHI4YY6/F1N3myh0KUuxYg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RB NTVGMjA3MjAeFw0yNjAzMDEwNDU3MDBaFw0yNjAzMDQwNjMwMDBaMDMxMTAvBgNV BAMTKDY2Q0RCQ0I0RUUyRTI5RUU2MTMzNUQzREZCQzQ2MUUzNDgzNzhGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjdPInFtdUAWosmYB8MSKEbDAK XMyD5zQRDHebv1kJfj0xl9vgtWFPj3t7hI2bbMP0uV8lkEWspXgx07HHjZbrBr67 D26Ah2wX84MCxBd8UZA86JKqeSBpQaD/JPz6HIKGeb4L3stmCu+CV4kg2+s5yXTG 06xCmZPiM1lGqndOn3206M59AfbIxTa+zmgwJZy98ZF5S6TvjXG70GviE8c8+dIt Gx4+ORjSQEQScqJb8QgXc8+D18xrpIsVDfnh4uU01bwP/Fj8IqAVeuNDm0/QoQxB ug+c/p8//hiJlBK4UZXWMqHjO2Gr4d5EHdVYkMZ62qtJ8Xx8pI23eVJl325bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZs28tO4uKe5hM109+8Rh40g3j88wHwYDVR0j BBgwFoAUZttH6M2q1dlXKYcf2+DzPaVfIHIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2JhYmYwYi0xMTAxLTRhYTktYTRkZi01MjcxNDkzNGRiN2MvMC82NkRCNDdFOENE QUFENUQ5NTcyOTg3MUZEQkUwRjMzREE1NUYyMDcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYzM0RBNTVG MjA3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiYWJmMGItMTEwMS00YWE5LWE0 ZGYtNTI3MTQ5MzRkYjdjLzAvNjZEQjQ3RThDREFBRDVEOTU3Mjk4NzFGREJFMEYz M0RBNTVGMjA3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjJyxtwLCLX56ZDDRPrDyr4JWX3A1yVdZa1 aCTmRo9RZJzpmMt0dfQqJEbhj/LM+UFQU3yxdAqH/YEEVWToK+tj8OBR/Io3jkSe R0YHoJYqUJzKZGnNGqwm5OxBogNY240H84TkQNr1aaS7LM7liFeucBxs4aGJmyeC iibmh3CWPC1T0nxlE4FoKrIIELgzylfN8KFEBD/B0V3uFR3mbgOYxM1GpeScCrWQ hzdUsL2gTLM95nBC2pXbrEw7kd9kFSbleLKSWOXueDCLY9naL5riUTLLOWlgi9r+ IXO59UsDxfJFsBKxpga9MzTtwzO56HpsbAHVgFu2R1qMVk2tr4M= -----END CERTIFICATE-----Generated at Mon Mar 2 02:05:54 2026 by rpki-client