$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: dLrn5Wmk2jKQL+y4SkP+9rZWR/i9sedNYY7JY5bOrxo= Subject key identifier: 54:DD:98:26:36:BD:B1:88:7A:D4:07:5B:6D:87:F3:76:EB:11:8C:5C Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 68012969778BF8602E340CC6C0E6CD393005C026 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: BD Signing time: Mon 21 Sep 2026 11:35:45 +0000 Manifest this update: Mon 21 Sep 2026 11:30:45 +0000 Manifest next update: Tue 22 Sep 2026 12:25:45 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 2: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: AsoPeUoR3v2vcTyXXB+J0i7EBh/TcmzPKxJeoi8JHSk=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:01:29:69:77:8b:f8:60:2e:34:0c:c6:c0:e6:cd:39:30:05:c0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Sep 21 11:30:45 2026 GMT Not After : Sep 22 12:25:45 2026 GMT Subject: CN=54DD982636BDB1887AD4075B6D87F376EB118C5C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ea:ed:c0:a1:7e:a9:f7:0e:9e:eb:0f:b8:34: 49:0d:64:33:82:86:67:a9:4b:89:ff:5d:42:c5:6b: 06:8c:23:0b:77:e5:95:1d:c9:49:40:1e:f8:ce:7a: 95:d4:69:5d:47:31:f4:a8:26:90:ac:b4:19:61:3f: a4:f5:6b:9d:8c:7a:b6:85:d3:88:99:a5:c5:2d:55: 4e:a0:31:a4:3a:dc:30:fe:b0:03:40:f9:a0:46:96: 9e:be:4f:e8:fb:86:6d:38:4c:4a:2d:0f:66:5d:24: b1:d9:62:1a:c6:7b:b5:ba:34:bc:25:70:63:b0:fd: e7:7b:34:b3:26:b1:08:1e:e6:09:f4:ed:37:f4:3e: ca:ac:33:e2:44:26:71:6e:c9:fe:4e:5c:39:ab:27: 56:f4:92:98:c4:97:18:f8:e8:48:a1:85:f6:db:25: 2b:af:e0:e4:61:7f:66:0a:bc:b4:eb:26:1a:65:fa: da:a7:a2:39:0c:19:71:2a:3b:46:3e:84:73:5d:b4: 60:79:11:56:f7:c3:e2:cc:35:a2:c1:88:31:74:f8: 5b:2b:26:7e:36:bd:88:5e:29:f3:63:81:66:ea:9e: 47:05:06:f7:a8:00:21:0c:06:ce:ce:d9:e8:64:00: 3f:3c:11:6e:56:83:84:e0:f6:bf:cc:a7:7d:3a:c2: 00:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:DD:98:26:36:BD:B1:88:7A:D4:07:5B:6D:87:F3:76:EB:11:8C:5C X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:15:3a:86:29:89:ff:54:b0:26:52:7a:aa:ca:59:82:d5:43: a9:b4:da:ca:38:4a:e3:32:7c:92:dc:6e:0a:c5:64:52:12:b5: fe:07:cf:6e:61:b5:2e:5b:10:c1:e0:e3:4e:a2:e5:d6:2c:30: 5c:ae:34:7e:20:f6:77:1b:36:99:81:22:d5:58:e0:47:0a:45: 89:6b:6f:e2:f5:46:87:49:ac:24:40:7b:ad:da:0d:03:00:07: c9:06:ca:ec:f5:8c:34:9e:5b:fc:65:e5:f5:51:22:81:e0:2c: d4:c8:43:c0:e0:d1:b9:14:03:95:5a:c4:62:86:e2:cb:04:6e: 48:88:8d:19:0b:ec:8d:f4:3d:db:09:82:32:ad:14:0a:29:bf: 58:69:8b:c4:67:b4:6f:ba:4c:c2:3b:e6:42:51:2f:ff:4e:fe: a2:87:04:f8:ed:3e:89:6c:cb:ab:55:bc:01:fd:77:69:b8:cc: 3d:44:49:90:c1:7d:89:bd:2d:83:07:71:9b:64:a0:5f:6f:7b: 84:73:8a:06:d9:76:59:bf:0d:28:93:96:e4:16:88:77:19:bb: e0:89:48:b7:d9:28:0c:3f:ce:9e:53:98:4e:29:4c:b7:8e:c0: a2:6b:ec:73:22:d9:3c:10:b6:92:94:88:1e:60:58:23:4a:ff: 6b:70:5d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAEpaXeL+GAuNAzGwObNOTAFwCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA5MjExMTMwNDVaFw0yNjA5MjIxMjI1NDVaMDMxMTAvBgNV BAMTKDU0REQ5ODI2MzZCREIxODg3QUQ0MDc1QjZEODdGMzc2RUIxMThDNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO6u3AoX6p9w6e6w+4NEkNZDOC hmepS4n/XULFawaMIwt35ZUdyUlAHvjOepXUaV1HMfSoJpCstBlhP6T1a52MeraF 04iZpcUtVU6gMaQ63DD+sANA+aBGlp6+T+j7hm04TEotD2ZdJLHZYhrGe7W6NLwl cGOw/ed7NLMmsQge5gn07Tf0PsqsM+JEJnFuyf5OXDmrJ1b0kpjElxj46Eihhfbb JSuv4ORhf2YKvLTrJhpl+tqnojkMGXEqO0Y+hHNdtGB5EVb3w+LMNaLBiDF0+Fsr Jn42vYheKfNjgWbqnkcFBveoACEMBs7O2ehkAD88EW5Wg4Tg9r/Mp306wgA1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVN2YJja9sYh61AdbbYfzdusRjFwwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFgVOoYpif9UsCZSeqrKWYLVQ6m02so4SuMy fJLcbgrFZFIStf4Hz25htS5bEMHg406i5dYsMFyuNH4g9ncbNpmBItVY4EcKRYlr b+L1RodJrCRAe63aDQMAB8kGyuz1jDSeW/xl5fVRIoHgLNTIQ8Dg0bkUA5VaxGKG 4ssEbkiIjRkL7I30PdsJgjKtFAopv1hpi8RntG+6TMI75kJRL/9O/qKHBPjtPols y6tVvAH9d2m4zD1ESZDBfYm9LYMHcZtkoF9ve4RzigbZdlm/DSiTluQWiHcZu+CJ SLfZKAw/zp5TmE4pTLeOwKJr7HMi2TwQtpKUiB5gWCNK/2twXSs= -----END CERTIFICATE-----Generated at Mon Sep 21 20:37:31 2026 by rpki-client