$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: 5ZIXLiwzHPJgUJbnLp1Fi3RhlSxTAS+1/KI3k6HTcUc= Subject key identifier: 13:F2:21:83:E6:AE:96:08:CE:6A:AB:03:7C:95:E0:61:6B:00:7B:D9 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 40B5E59710360675022537A35A72B2D46F7B2426 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 76 Signing time: Wed 29 Jul 2026 01:33:02 +0000 Manifest this update: Wed 29 Jul 2026 01:28:02 +0000 Manifest next update: Thu 30 Jul 2026 03:37:02 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 2: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: /AxAA8E2M+Hj0+4BVjUQhtEdq9km+YxEEqLirD3IrwM=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 03:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:b5:e5:97:10:36:06:75:02:25:37:a3:5a:72:b2:d4:6f:7b:24:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Jul 29 01:28:02 2026 GMT Not After : Jul 30 03:37:02 2026 GMT Subject: CN=13F22183E6AE9608CE6AAB037C95E0616B007BD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:53:ce:6a:5f:ad:fe:6d:07:0b:0f:24:8e:43: 90:cc:54:1b:b5:7e:34:79:07:27:82:27:69:32:d4: 91:34:72:af:8f:1c:cc:e6:03:03:7e:7a:d5:87:82: e8:e5:00:ec:4b:13:5b:2c:34:c2:f4:28:17:d6:26: f1:87:63:f9:04:81:82:5e:f0:1d:ed:f4:aa:2a:e5: f4:f9:3e:5c:cc:25:3b:54:e3:e9:24:3e:fe:36:d7: 6a:da:1f:97:90:36:b5:fa:32:ff:94:d5:cc:5c:8f: 99:c1:35:72:3e:e4:b4:36:aa:ac:95:ce:a6:22:40: 30:fc:9d:48:a1:dd:04:12:a7:08:58:37:a1:d9:de: ba:73:3a:80:f3:6d:b3:b7:9c:5e:16:5a:a4:b7:40: 7d:94:7a:e0:aa:19:0a:e9:05:7d:0d:c8:ec:ce:8d: 43:2f:03:88:71:31:ee:f6:92:80:af:5c:aa:39:aa: 4a:75:37:3e:f7:37:11:28:19:3a:78:3c:a2:5b:9b: 25:9f:90:50:41:a7:97:ff:9b:aa:ba:25:dd:24:14: e6:ae:e8:55:39:8a:36:69:88:5a:06:20:d1:1e:fd: e4:ff:d5:45:93:65:50:f7:ce:f8:28:09:0c:f1:3a: c0:2d:7e:b5:33:5c:bd:a5:d1:66:66:37:ea:10:cb: 54:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:F2:21:83:E6:AE:96:08:CE:6A:AB:03:7C:95:E0:61:6B:00:7B:D9 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:cf:32:e7:55:d4:b9:82:98:a8:85:4a:a9:be:58:dd:fc:15: 11:0f:24:ad:6e:48:df:e9:6d:e9:67:38:f0:87:f9:d3:f7:ed: f0:07:e5:fe:0f:58:ad:35:8d:dc:ec:be:5e:74:d8:da:36:b1: 8a:24:7f:91:17:6b:03:01:a8:77:20:8d:ea:a0:9f:a3:4f:ff: f9:37:39:48:80:cc:4f:77:4f:1b:00:25:f7:64:49:66:0d:a9: 07:06:e4:54:50:ab:95:93:fe:a2:d0:45:dc:76:3f:23:f1:ed: ae:8c:3f:45:c2:b5:0b:f3:23:f1:6a:e2:e3:b5:a1:e1:6e:8e: 85:d6:c8:c0:a0:ed:19:09:37:e9:ff:2e:20:87:48:a7:61:6f: 96:7d:69:0a:d8:09:0f:ee:18:b3:89:4c:2d:e6:a5:31:94:6f: 91:e0:d7:b7:02:68:2f:ad:e7:8b:0b:7d:f6:57:c4:2f:dc:53: f2:b1:46:98:d9:73:c6:23:8b:59:17:f1:12:b3:85:e5:2d:07: 15:92:cb:ee:1e:cf:95:91:5e:1f:8a:42:13:df:e4:f4:97:b5: 6a:75:45:51:3a:8c:ca:93:1a:aa:6a:ee:d2:a7:d6:5e:ac:02: 83:1a:4e:79:ac:3d:30:10:c8:9e:05:6e:0f:8b:f6:f0:59:bc: fa:14:bb:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQLXllxA2BnUCJTejWnKy1G97JCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA3MjkwMTI4MDJaFw0yNjA3MzAwMzM3MDJaMDMxMTAvBgNV BAMTKDEzRjIyMTgzRTZBRTk2MDhDRTZBQUIwMzdDOTVFMDYxNkIwMDdCRDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhU85qX63+bQcLDySOQ5DMVBu1 fjR5ByeCJ2ky1JE0cq+PHMzmAwN+etWHgujlAOxLE1ssNML0KBfWJvGHY/kEgYJe 8B3t9Koq5fT5PlzMJTtU4+kkPv4212raH5eQNrX6Mv+U1cxcj5nBNXI+5LQ2qqyV zqYiQDD8nUih3QQSpwhYN6HZ3rpzOoDzbbO3nF4WWqS3QH2UeuCqGQrpBX0NyOzO jUMvA4hxMe72koCvXKo5qkp1Nz73NxEoGTp4PKJbmyWfkFBBp5f/m6q6Jd0kFOau 6FU5ijZpiFoGINEe/eT/1UWTZVD3zvgoCQzxOsAtfrUzXL2l0WZmN+oQy1Q1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE/Ihg+aulgjOaqsDfJXgYWsAe9kwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7PMudV1LmCmKiFSqm+WN38FREPJK1uSN/p belnOPCH+dP37fAH5f4PWK01jdzsvl502No2sYokf5EXawMBqHcgjeqgn6NP//k3 OUiAzE93TxsAJfdkSWYNqQcG5FRQq5WT/qLQRdx2PyPx7a6MP0XCtQvzI/Fq4uO1 oeFujoXWyMCg7RkJN+n/LiCHSKdhb5Z9aQrYCQ/uGLOJTC3mpTGUb5Hg17cCaC+t 54sLffZXxC/cU/KxRpjZc8Yji1kX8RKzheUtBxWSy+4ez5WRXh+KQhPf5PSXtWp1 RVE6jMqTGqpq7tKn1l6sAoMaTnmsPTAQyJ4Fbg+L9vBZvPoUu4Y= -----END CERTIFICATE-----Generated at Wed Jul 29 09:06:02 2026 by rpki-client