$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: mamXIgXoDGYEmtz8utpwKip5nj4y7ZymGYSYHhauHUU= Subject key identifier: 0F:99:C2:28:27:5C:EE:B3:AD:3C:11:36:3D:08:10:E6:65:DB:43:37 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 0B3E7F94832AA4B5E41E539BE90A6237F0145EED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: BF Signing time: Tue 22 Sep 2026 21:22:56 +0000 Manifest this update: Tue 22 Sep 2026 21:17:56 +0000 Manifest next update: Thu 24 Sep 2026 00:09:56 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 2: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 4: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: XV7vkNOu+FJ9lREwzFtFVoDglY8NSmQd6LMA2Fj4q3k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 00:09:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:3e:7f:94:83:2a:a4:b5:e4:1e:53:9b:e9:0a:62:37:f0:14:5e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Sep 22 21:17:56 2026 GMT Not After : Sep 24 00:09:56 2026 GMT Subject: CN=0F99C228275CEEB3AD3C11363D0810E665DB4337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:e3:c7:0e:a7:5a:50:f4:4e:c8:89:f6:1d: cd:19:c4:2f:18:2c:bb:0b:2a:68:97:9d:66:96:f3: d5:2d:2e:97:2a:fa:07:f7:b5:80:c3:41:cf:21:ec: 2f:bc:cd:26:26:64:bd:56:59:c6:ca:59:23:44:27: 09:4b:25:5f:51:66:dd:af:90:dc:96:1d:87:1c:5d: b7:a5:63:1e:ae:1b:61:cf:69:39:ce:f3:0f:e2:04: a3:4b:89:1f:10:46:f4:7d:f3:ec:c9:99:9a:74:91: 86:b5:bf:21:13:28:d8:49:34:09:36:11:07:d7:f3: df:57:ff:6f:f4:d0:7a:4a:18:84:5c:d2:b9:30:93: 54:7b:d5:19:3b:cf:ac:a4:be:3b:58:cd:9c:04:ab: 46:fa:6c:3a:f8:d2:c2:48:ca:71:d5:b0:0e:d4:3d: a9:df:e7:e3:e5:58:c3:09:e0:1f:09:3e:33:03:5b: ae:8a:81:d5:df:2d:8b:77:90:16:55:5b:27:62:97: 76:d1:91:99:6c:42:75:93:9b:ea:54:eb:57:d5:aa: e9:87:67:61:97:5d:7b:e6:0e:97:03:57:33:41:0c: 3a:19:48:a7:05:55:c9:35:9e:34:ff:2d:5d:38:b8: 5f:62:ef:e0:88:5d:12:bd:83:3a:0c:57:30:2a:d7: a8:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:99:C2:28:27:5C:EE:B3:AD:3C:11:36:3D:08:10:E6:65:DB:43:37 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:d9:b9:2e:f2:f9:43:a3:62:b0:d4:a6:5f:0b:e2:36:ee:0b: ba:8d:59:66:55:8c:ad:43:5e:10:a0:85:47:8f:5e:a3:b2:4a: 88:19:d6:dd:17:db:06:b9:2f:8d:72:62:7a:32:4d:ae:c7:4b: f2:0b:f8:f0:5e:c1:ca:f3:12:ef:67:c1:b8:9a:47:b2:c9:c5: ba:7a:12:86:0d:bf:95:54:af:51:c4:7b:61:02:24:ea:cb:09: 99:2f:38:6f:f8:9a:dc:77:cc:83:f0:c8:90:55:fd:91:42:86: cd:05:1e:95:24:b1:3b:ae:bf:67:f1:d0:70:6d:89:b6:6f:bd: bf:a1:80:ef:10:55:67:ab:37:75:88:f6:68:76:a9:56:be:2c: f7:0c:d6:e6:50:3c:57:db:71:01:73:1a:2d:91:b1:97:d2:23: 5b:6e:58:a2:20:e0:ca:bd:4a:3a:ae:63:49:5f:1c:1a:0d:c7: e4:e8:14:9e:18:fb:28:1f:62:8e:08:e1:45:c6:fe:68:28:ef: f3:23:ca:35:5e:e5:dc:74:3f:e6:32:d2:54:b4:41:7d:2d:ef: 6a:ba:c1:46:8c:b9:f0:df:78:83:77:a0:22:48:a5:62:ac:3e: a9:47:4e:7d:4f:ea:fa:88:33:5a:43:99:6b:f0:0d:8f:43:dc: 13:12:3b:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCz5/lIMqpLXkHlOb6QpiN/AUXu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA5MjIyMTE3NTZaFw0yNjA5MjQwMDA5NTZaMDMxMTAvBgNV BAMTKDBGOTlDMjI4Mjc1Q0VFQjNBRDNDMTEzNjNEMDgxMEU2NjVEQjQzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLhePHDqdaUPROyIn2Hc0ZxC8Y LLsLKmiXnWaW89UtLpcq+gf3tYDDQc8h7C+8zSYmZL1WWcbKWSNEJwlLJV9RZt2v kNyWHYccXbelYx6uG2HPaTnO8w/iBKNLiR8QRvR98+zJmZp0kYa1vyETKNhJNAk2 EQfX899X/2/00HpKGIRc0rkwk1R71Rk7z6ykvjtYzZwEq0b6bDr40sJIynHVsA7U Panf5+PlWMMJ4B8JPjMDW66KgdXfLYt3kBZVWydil3bRkZlsQnWTm+pU61fVqumH Z2GXXXvmDpcDVzNBDDoZSKcFVck1njT/LV04uF9i7+CIXRK9gzoMVzAq16i/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD5nCKCdc7rOtPBE2PQgQ5mXbQzcwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLZuS7y+UOjYrDUpl8L4jbuC7qNWWZVjK1D XhCghUePXqOySogZ1t0X2wa5L41yYnoyTa7HS/IL+PBewcrzEu9nwbiaR7LJxbp6 EoYNv5VUr1HEe2ECJOrLCZkvOG/4mtx3zIPwyJBV/ZFChs0FHpUksTuuv2fx0HBt ibZvvb+hgO8QVWerN3WI9mh2qVa+LPcM1uZQPFfbcQFzGi2RsZfSI1tuWKIg4Mq9 SjquY0lfHBoNx+ToFJ4Y+ygfYo4I4UXG/mgo7/MjyjVe5dx0P+Yy0lS0QX0t72q6 wUaMufDfeIN3oCJIpWKsPqlHTn1P6vqIM1pDmWvwDY9D3BMSO5c= -----END CERTIFICATE-----Generated at Wed Sep 23 08:32:04 2026 by rpki-client