$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: egSbMRnYDYxF+hTRDs6Wrqgz4+Sz1v8eOLRDKdTrsjY= Subject key identifier: 73:7C:60:18:C5:B2:B8:46:A4:F9:58:C8:D7:60:74:FF:AA:D5:22:65 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 13B8D9BD540A60F87CC7B4AD685D2C21EBB10390 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 39 Signing time: Sat 13 Jun 2026 08:54:42 +0000 Manifest this update: Sat 13 Jun 2026 08:49:42 +0000 Manifest next update: Sun 14 Jun 2026 09:42:42 +0000 Files and hashes: 1: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: 2v2JXh4qFPKCYDbFZvwbOttUXIkdbq+UyxhhqigzNGA=) 2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 09:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b8:d9:bd:54:0a:60:f8:7c:c7:b4:ad:68:5d:2c:21:eb:b1:03:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Jun 13 08:49:42 2026 GMT Not After : Jun 14 09:42:42 2026 GMT Subject: CN=737C6018C5B2B846A4F958C8D76074FFAAD52265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ac:93:60:bf:8f:56:e7:7b:65:94:82:6f:96: 13:46:8e:c3:00:e5:96:42:50:47:6e:fa:5c:ca:a9: 00:06:88:f2:14:c7:8f:61:a7:7c:e5:69:7c:3c:84: a2:6b:31:16:62:68:b0:74:e6:66:ff:81:0b:86:ac: 54:e5:b7:fe:f7:cb:f9:73:9a:c6:e9:62:b4:bc:71: 2b:81:d9:82:0b:b3:aa:1c:87:aa:59:b4:b0:b0:cd: f4:97:64:9c:69:aa:6d:26:2d:14:8b:7b:a8:51:c5: eb:09:bc:92:25:16:b5:3d:7d:d4:be:7e:3f:b8:c9: 40:19:4b:df:82:93:6e:17:7b:58:cc:eb:ac:b5:46: 16:d2:22:62:1e:e7:e0:15:a0:80:f6:7a:ca:e8:e7: ed:50:e4:9a:2d:68:50:b6:f0:d3:3c:d6:47:45:cf: 00:b0:7a:f6:e1:84:01:f7:6f:36:73:15:f8:d8:4f: b9:ae:1d:ef:55:93:5c:0f:db:6a:57:f6:8e:e4:a2: a7:74:b0:d2:ef:fb:17:74:e4:ef:0f:db:47:a3:08: f7:03:29:0a:2b:71:d8:87:3d:5d:95:a4:ce:d6:9d: 6f:f9:d8:3c:3d:08:6d:ba:a1:b1:5f:eb:b6:ca:9b: 14:26:3b:8f:76:b8:ba:20:67:8c:5f:ec:b4:f1:4a: e3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:7C:60:18:C5:B2:B8:46:A4:F9:58:C8:D7:60:74:FF:AA:D5:22:65 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:72:f8:b3:45:6b:17:bc:f0:28:48:5d:76:ba:a8:35:ea:a8: 9a:17:71:de:80:ab:a9:85:e4:53:81:b1:34:72:b3:8e:77:53: d6:f3:eb:e9:9b:fd:9c:de:a7:3e:f8:3d:84:9a:89:20:b8:3e: d4:a6:bd:a3:28:ba:00:76:1b:3a:31:84:b3:62:d1:da:8f:25: 52:27:96:45:a1:04:da:18:c7:48:e4:6c:19:a6:8a:2b:a8:da: 5e:fa:25:da:d0:63:d7:ba:91:b8:5c:a3:e4:3f:73:e8:37:1c: ce:68:cd:5b:e9:12:8f:02:b3:ca:ca:fd:26:71:72:8b:59:b0: 62:09:6a:5f:6a:67:f8:3c:68:92:f5:fd:39:a3:b4:a3:1d:a4: ee:07:81:27:2d:8b:94:a9:0f:67:fb:c4:f8:dd:d6:31:40:e6: 98:ea:2b:1a:b1:13:5d:5e:df:4b:01:47:1b:01:10:4e:be:a7: 93:35:f5:17:38:db:8a:ae:01:91:4e:34:07:85:c4:12:b3:96: f3:62:56:aa:cf:0b:1f:e0:94:dc:7f:80:cc:cf:cf:1a:6f:88: 66:8d:26:cb:9c:1a:ee:0e:58:27:37:57:5c:c1:d7:2f:d3:7c: 8c:95:11:6f:cc:5e:c3:b5:c7:f0:b8:6d:58:1d:04:42:34:20: 09:2f:3e:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7jZvVQKYPh8x7StaF0sIeuxA5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA2MTMwODQ5NDJaFw0yNjA2MTQwOTQyNDJaMDMxMTAvBgNV BAMTKDczN0M2MDE4QzVCMkI4NDZBNEY5NThDOEQ3NjA3NEZGQUFENTIyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0rJNgv49W53tllIJvlhNGjsMA 5ZZCUEdu+lzKqQAGiPIUx49hp3zlaXw8hKJrMRZiaLB05mb/gQuGrFTlt/73y/lz msbpYrS8cSuB2YILs6och6pZtLCwzfSXZJxpqm0mLRSLe6hRxesJvJIlFrU9fdS+ fj+4yUAZS9+Ck24Xe1jM66y1RhbSImIe5+AVoID2esro5+1Q5JotaFC28NM81kdF zwCwevbhhAH3bzZzFfjYT7muHe9Vk1wP22pX9o7koqd0sNLv+xd05O8P20ejCPcD KQorcdiHPV2VpM7WnW/52Dw9CG26obFf67bKmxQmO492uLogZ4xf7LTxSuNdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc3xgGMWyuEak+VjI12B0/6rVImUwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKNy+LNFaxe88ChIXXa6qDXqqJoXcd6Aq6mF 5FOBsTRys453U9bz6+mb/Zzepz74PYSaiSC4PtSmvaMougB2GzoxhLNi0dqPJVIn lkWhBNoYx0jkbBmmiiuo2l76JdrQY9e6kbhco+Q/c+g3HM5ozVvpEo8Cs8rK/SZx cotZsGIJal9qZ/g8aJL1/TmjtKMdpO4HgScti5SpD2f7xPjd1jFA5pjqKxqxE11e 30sBRxsBEE6+p5M19Rc424quAZFONAeFxBKzlvNiVqrPCx/glNx/gMzPzxpviGaN JsucGu4OWCc3V1zB1y/TfIyVEW/MXsO1x/C4bVgdBEI0IAkvPo8= -----END CERTIFICATE-----Generated at Sat Jun 13 23:52:34 2026 by rpki-client