$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft File: 66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json) Hash identifier: CRGeOg7bIdCMNbQNki2X4Yvr+i/dczqGIh/SsQ0phyY= Subject key identifier: 96:63:03:93:25:4A:51:DC:BA:16:B5:ED:87:9E:F4:8A:A3:FA:57:5A Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 Certificate issuer: /CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Certificate serial: 34CA0DEE1041A834AF389C3332241898FF79A026 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 14:19:03 +0000 Manifest this update: Tue 28 Jul 2026 14:14:03 +0000 Manifest next update: Wed 29 Jul 2026 16:46:03 +0000 Files and hashes: 1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: eijI9I/AEDxKjkFIeRrP0Z2261laeJX8grD7w5y0noI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 12:26:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:ca:0d:ee:10:41:a8:34:af:38:9c:33:32:24:18:98:ff:79:a0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Validity Not Before: Jul 28 14:14:03 2026 GMT Not After : Jul 29 16:46:03 2026 GMT Subject: CN=96630393254A51DCBA16B5ED879EF48AA3FA575A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:b2:12:1f:09:a4:74:32:65:36:61:29:c7: 15:78:76:a4:8a:7f:82:06:84:f6:c5:f4:33:0f:78: b9:cb:fd:10:5c:a9:ce:3a:19:e3:f9:b3:ad:87:93: b4:05:2b:93:e8:da:e4:40:d3:c1:80:f5:c6:56:50: f6:bb:ea:34:1d:ef:e5:65:7e:8b:7f:3c:3d:43:79: ea:69:86:d6:4e:c4:cf:f8:85:22:91:9a:ec:0d:80: 44:7d:c6:97:c0:dc:bc:ed:08:63:a5:8c:d8:90:7c: a2:b9:68:84:a4:23:88:30:da:c3:4d:14:1d:91:ae: d7:fd:c3:9a:16:ce:3e:0b:71:6d:31:69:6a:a1:05: 37:d8:74:0a:2d:cb:c9:0d:f6:c7:a5:f4:71:91:a2: 0b:12:7d:30:9b:1e:26:07:9e:49:a3:9c:87:ff:48: 6d:81:43:0e:1a:32:4a:a9:17:3b:4e:c7:c3:5f:d8: c2:da:47:3f:bf:cc:43:4c:13:48:09:d0:27:cb:87: 36:ee:13:83:f7:ec:1b:a9:53:2b:fb:b0:7c:00:a4: 80:ea:41:bd:98:8d:0c:5a:d2:fa:f9:1f:54:c8:5c: 6b:96:3d:cb:1e:b5:d0:0d:d6:72:7e:1e:94:87:61: d7:a7:73:f4:a4:d4:83:e7:e2:d7:e6:f1:92:11:b5: 29:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:63:03:93:25:4A:51:DC:BA:16:B5:ED:87:9E:F4:8A:A3:FA:57:5A X509v3 Authority Key Identifier: keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:1c:8a:05:72:0d:07:12:1f:ad:37:48:b9:ab:d3:43:6a:cc: d4:c9:33:0c:21:9b:d7:b7:25:5f:38:80:3a:f7:1b:95:d9:86: 7b:d6:27:70:de:1f:d4:16:9f:c3:4e:29:1b:b2:29:da:0e:a3: dc:4b:3a:5d:5a:84:c7:b0:59:08:e3:9d:c1:af:85:0a:c9:30: 19:f8:4c:0b:3f:56:8f:d7:3d:c4:fc:b4:f2:22:02:6c:5a:e0: 80:94:59:5c:92:63:0d:dc:38:9d:a5:ed:7f:14:92:ec:42:b8: 99:e7:90:66:bf:3b:42:49:60:fc:83:74:01:76:88:5d:9e:e0: e7:27:4d:55:2d:d5:b4:2f:94:7e:f5:1a:5f:cb:d5:d5:c2:fb: ed:f8:2b:04:71:81:4a:c9:02:a2:a6:73:ba:36:84:06:2e:31: 06:81:85:f2:6c:f1:07:4d:5a:57:35:04:00:31:b2:b8:d1:8e: c9:d3:b1:6d:ce:ac:9b:87:0f:ae:fd:17:25:5c:95:ec:b3:4b: d8:a4:dc:4f:61:d3:c5:f4:b4:f3:10:19:16:bb:f8:d5:90:e4: b2:21:9c:40:1f:52:df:5c:95:5f:b1:63:e4:00:8b:fe:5e:97: 13:b3:6b:53:44:90:5e:31:1c:8c:ae:3a:e7:19:75:d1:ec:e9: f4:00:f6:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMoN7hBBqDSvOJwzMiQYmP95oCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkxMTAy ODNBOTg3NzAeFw0yNjA3MjgxNDE0MDNaFw0yNjA3MjkxNjQ2MDNaMDMxMTAvBgNV BAMTKDk2NjMwMzkzMjU0QTUxRENCQTE2QjVFRDg3OUVGNDhBQTNGQTU3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMbISHwmkdDJlNmEpxxV4dqSK f4IGhPbF9DMPeLnL/RBcqc46GeP5s62Hk7QFK5Po2uRA08GA9cZWUPa76jQd7+Vl fot/PD1DeepphtZOxM/4hSKRmuwNgER9xpfA3LztCGOljNiQfKK5aISkI4gw2sNN FB2Rrtf9w5oWzj4LcW0xaWqhBTfYdAoty8kN9sel9HGRogsSfTCbHiYHnkmjnIf/ SG2BQw4aMkqpFztOx8Nf2MLaRz+/zENME0gJ0CfLhzbuE4P37BupUyv7sHwApIDq Qb2YjQxa0vr5H1TIXGuWPcsetdAN1nJ+HpSHYdenc/Sk1IPn4tfm8ZIRtSkFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlmMDkyVKUdy6FrXth570iqP6V1owHwYDVR0j BBgwFoAUZtDL/e+OGLt5bhhVHwaRECg6mHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkMjUxY2EtYTA1ZS00ZmJlLTkzYmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRF RjhFMThCQjc5NkUxODU1MUYwNjkxMTAyODNBOTg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkQwQ0JGREVGOEUxOEJCNzk2RTE4NTUxRjA2OTExMDI4M0E5 ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkx MTAyODNBOTg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIccigVyDQcSH603SLmr00NqzNTJMwwhm9e3 JV84gDr3G5XZhnvWJ3DeH9QWn8NOKRuyKdoOo9xLOl1ahMewWQjjncGvhQrJMBn4 TAs/Vo/XPcT8tPIiAmxa4ICUWVySYw3cOJ2l7X8UkuxCuJnnkGa/O0JJYPyDdAF2 iF2e4OcnTVUt1bQvlH71Gl/L1dXC++34KwRxgUrJAqKmc7o2hAYuMQaBhfJs8QdN Wlc1BAAxsrjRjsnTsW3OrJuHD679FyVcleyzS9ik3E9h08X0tPMQGRa7+NWQ5LIh nEAfUt9clV+xY+QAi/5elxOza1NEkF4xHIyuOucZddHs6fQA9sU= -----END CERTIFICATE-----Generated at Tue Jul 28 20:54:10 2026 by rpki-client