$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft File: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft (raw, json) Hash identifier: euq+ISeYSIo2Q7z++RzHsNFUj7iVq20a4vxlSwH755c= Subject key identifier: 7B:4D:07:CA:E2:16:19:F5:1C:15:EB:FB:B8:4E:3E:3F:C9:29:3C:24 Authority key identifier: 66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13 Certificate issuer: /CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13 Certificate serial: 1F82FED2EAD3AA99C112C60AAAD3298082A69E0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft Manifest number: BE Signing time: Tue 22 Sep 2026 06:39:42 +0000 Manifest this update: Tue 22 Sep 2026 06:34:42 +0000 Manifest next update: Wed 23 Sep 2026 07:51:42 +0000 Files and hashes: 1: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl (hash: sWEBuF+HSvVIYFCAMeVPk873abwR6vHQKB8ecVK6slo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 03:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:82:fe:d2:ea:d3:aa:99:c1:12:c6:0a:aa:d3:29:80:82:a6:9e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13 Validity Not Before: Sep 22 06:34:42 2026 GMT Not After : Sep 23 07:51:42 2026 GMT Subject: CN=7B4D07CAE21619F51C15EBFBB84E3E3FC9293C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b0:ee:0f:20:ac:ef:6c:22:54:2f:d6:18:21: 0a:08:8a:4b:d1:72:f9:59:ad:0b:53:a4:f5:dc:0b: 03:ff:fc:a7:95:dd:f7:7d:fb:74:d7:fd:09:6f:90: f8:f4:88:05:50:b0:ea:b5:df:95:0d:af:89:da:f1: 48:51:a4:9b:49:c9:c1:fb:0b:59:06:da:e2:5d:96: fd:a0:f3:15:a0:f8:f5:7e:d6:b8:8f:38:b1:a5:34: fa:1e:53:14:93:22:c3:6f:0b:ab:15:6a:94:f1:ff: 7e:f6:17:82:e4:73:95:53:a2:56:48:0d:02:d3:0f: b2:6a:ab:57:c3:aa:66:75:d2:9d:c2:c0:68:29:dc: 4b:c5:8d:db:62:28:2a:5b:70:1c:d0:57:99:9a:3f: 2f:f0:9c:e7:11:fa:f5:03:cd:63:f4:7f:43:3a:86: 21:62:77:49:a3:a8:e8:4a:d2:85:9d:00:be:fd:50: 87:0e:23:8a:ff:23:84:fe:2a:82:64:dc:1d:a4:b7: 73:56:fc:00:fc:ae:d7:0a:b2:5f:92:d4:19:84:d8: 5f:96:03:4e:1e:f0:81:5b:45:22:cf:df:1e:24:f9: 03:90:44:b9:5c:3c:71:1d:79:f5:c0:6d:dd:9b:00: fe:30:b0:30:8d:6a:42:38:97:32:2f:3e:fb:f7:ef: 37:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:4D:07:CA:E2:16:19:F5:1C:15:EB:FB:B8:4E:3E:3F:C9:29:3C:24 X509v3 Authority Key Identifier: keyid:66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:36:c8:53:a3:f8:68:2f:1f:5d:ae:26:66:dd:24:1d:c6: 98:16:1a:9f:c6:69:93:58:f7:74:f7:b5:56:1a:75:c2:b3:8a: 59:3c:cf:4c:7c:5d:a7:48:1f:b5:43:3a:54:a6:e3:39:21:16: a2:ef:a8:ac:9c:c6:6f:83:a8:5a:cb:3e:5c:33:a8:a6:4c:43: f3:0b:36:54:80:45:b3:04:00:7d:e2:11:15:a9:81:6d:76:a6: 66:22:3d:2a:62:39:46:43:9f:26:70:b7:ac:01:74:e2:5b:59: 05:e0:d9:ce:f7:44:c2:5d:eb:3d:7a:d1:82:09:f5:dd:fa:2e: 4c:60:09:79:9f:79:fe:44:ad:01:91:41:bc:fb:e2:50:a8:9b: 6b:bd:8e:2f:bf:e2:0a:9a:72:88:e9:b3:98:e4:42:eb:83:54: 8f:4a:61:44:ee:e9:15:1f:da:de:0a:f9:8a:a4:e5:b2:8b:b1: 89:90:4e:28:31:33:19:c2:e3:01:62:de:d2:b0:84:71:4d:df: 45:f5:2a:cc:9e:24:fe:66:64:90:2e:9d:d9:23:c8:da:6c:96: 24:70:a0:e1:9d:17:5b:f2:60:79:ae:94:ba:57:41:4d:0a:c6: bc:ec:3b:c5:0e:43:04:84:99:07:6a:a7:b7:e5:b2:74:f2:94: e9:9b:9d:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH4L+0urTqpnBEsYKqtMpgIKmng4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYxQjJDRjQyOUZCNEI4RUI0QzRDRTEzMEJBMzczRjk1 RjU4NEUxMzAeFw0yNjA5MjIwNjM0NDJaFw0yNjA5MjMwNzUxNDJaMDMxMTAvBgNV BAMTKDdCNEQwN0NBRTIxNjE5RjUxQzE1RUJGQkI4NEUzRTNGQzkyOTNDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbsO4PIKzvbCJUL9YYIQoIikvR cvlZrQtTpPXcCwP//KeV3fd9+3TX/QlvkPj0iAVQsOq135UNr4na8UhRpJtJycH7 C1kG2uJdlv2g8xWg+PV+1riPOLGlNPoeUxSTIsNvC6sVapTx/372F4Lkc5VTolZI DQLTD7Jqq1fDqmZ10p3CwGgp3EvFjdtiKCpbcBzQV5maPy/wnOcR+vUDzWP0f0M6 hiFid0mjqOhK0oWdAL79UIcOI4r/I4T+KoJk3B2kt3NW/AD8rtcKsl+S1BmE2F+W A04e8IFbRSLP3x4k+QOQRLlcPHEdefXAbd2bAP4wsDCNakI4lzIvPvv37zeDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe00HyuIWGfUcFev7uE4+P8kpPCQwHwYDVR0j BBgwFoAUZhss9Cn7S460xM4TC6Nz+V9YThMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBhZDQwMjMtY2MyYi00MTIzLTk5MzktYTU1ODUxZmNhNjE5LzAvNjYxQjJDRjQy OUZCNEI4RUI0QzRDRTEzMEJBMzczRjk1RjU4NEUxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjFCMkNGNDI5RkI0QjhFQjRDNENFMTMwQkEzNzNGOTVGNTg0 RTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBhZDQwMjMtY2MyYi00MTIzLTk5 MzktYTU1ODUxZmNhNjE5LzAvNjYxQjJDRjQyOUZCNEI4RUI0QzRDRTEzMEJBMzcz Rjk1RjU4NEUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlTNshTo/hoLx9driZm3SQdxpgWGp/GaZNY 93T3tVYadcKzilk8z0x8XadIH7VDOlSm4zkhFqLvqKycxm+DqFrLPlwzqKZMQ/ML NlSARbMEAH3iERWpgW12pmYiPSpiOUZDnyZwt6wBdOJbWQXg2c73RMJd6z160YIJ 9d36LkxgCXmfef5ErQGRQbz74lCom2u9ji+/4gqacojps5jkQuuDVI9KYUTu6RUf 2t4K+Yqk5bKLsYmQTigxMxnC4wFi3tKwhHFN30X1KsyeJP5mZJAundkjyNpsliRw oOGdF1vyYHmulLpXQU0KxrzsO8UOQwSEmQdqp7flsnTylOmbnQo= -----END CERTIFICATE-----Generated at Tue Sep 22 12:28:23 2026 by rpki-client