$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft File: 66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json) Hash identifier: nr6lXBFcEJvHxJvCqHNbmSa+3Pre05ew3WJy1KK6lmA= Subject key identifier: 1F:39:92:6F:5D:1C:2D:3A:7F:AE:73:7F:F5:3C:58:AE:C6:A7:58:20 Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 Certificate issuer: /CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Certificate serial: 7B58877A62B72ACAA873CD22DA8DB6A20043D1D1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft Manifest number: BD Signing time: Mon 21 Sep 2026 19:56:04 +0000 Manifest this update: Mon 21 Sep 2026 19:51:04 +0000 Manifest next update: Tue 22 Sep 2026 22:13:04 +0000 Files and hashes: 1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: 1TJUnnWhFzgdKPvPVKrtSUvYfPJEnGv1WiPTPzXaHmA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 22:13:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:58:87:7a:62:b7:2a:ca:a8:73:cd:22:da:8d:b6:a2:00:43:d1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Validity Not Before: Sep 21 19:51:04 2026 GMT Not After : Sep 22 22:13:04 2026 GMT Subject: CN=1F39926F5D1C2D3A7FAE737FF53C58AEC6A75820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4e:90:86:81:2c:32:94:73:6d:7a:4e:44:8b: 07:a5:cf:36:a7:4c:d6:97:f2:91:dc:29:c5:68:bb: b5:3a:8d:88:20:e2:8d:67:7a:cc:7d:ba:39:86:38: c2:c9:60:99:19:09:5d:ac:68:41:16:ec:60:e2:e2: 8a:b9:68:9c:94:b4:9f:5c:e2:05:7b:0e:9e:75:42: d0:33:18:a1:14:c5:39:05:d9:f0:71:10:2a:cf:28: b5:83:fb:62:3f:c5:ed:7d:be:69:18:fa:b5:c8:b0: 4c:11:da:8f:68:d4:dc:30:a9:a8:14:e5:5c:62:9c: 26:cb:d8:16:23:38:63:6d:f6:17:4d:f2:05:ab:04: 39:1b:95:4a:41:06:b2:f0:f0:a8:47:14:7a:08:3f: 18:3c:64:8f:08:50:c9:68:6a:46:7f:85:f3:15:0f: b1:f7:14:dc:b7:25:a0:12:86:ed:c3:56:b2:8d:5c: 18:e7:8d:6e:0c:89:4f:c4:a5:52:ba:94:3c:a4:d2: a2:7e:f7:73:f4:b3:81:bc:b7:a4:1c:d8:57:2d:66: e1:98:7a:90:a5:b9:ae:2a:22:00:83:c1:8b:3f:c8: 37:b6:0f:e7:3b:f3:61:85:22:58:c2:df:ab:13:61: dd:a3:4c:f4:ab:23:cd:5a:74:7c:ce:47:36:88:42: be:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:39:92:6F:5D:1C:2D:3A:7F:AE:73:7F:F5:3C:58:AE:C6:A7:58:20 X509v3 Authority Key Identifier: keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:bd:f0:00:99:2f:d0:eb:bf:17:cd:3a:2e:f3:32:29:80:db: b5:91:29:e4:d1:23:88:70:ce:9c:9d:00:b7:b1:77:21:7d:89: 79:93:ef:77:74:59:94:49:84:8f:f6:6f:54:05:ec:c1:71:7c: 21:d8:f0:1f:ac:b9:ca:8c:ab:57:e9:63:cd:05:d4:4b:49:66: e8:24:92:53:f8:c9:d7:98:ca:ce:97:25:23:22:0e:81:ab:a5: 4e:59:1b:d0:97:d9:15:2a:27:2e:ea:57:8f:6a:53:fa:f2:0d: e0:da:19:bc:1f:d8:9b:47:9c:04:eb:90:5b:c0:9e:68:c2:4e: c6:61:27:53:ea:38:03:bc:cb:ca:1a:81:64:ca:58:e0:5c:36: c8:84:00:26:0e:ec:85:27:b7:bb:fd:21:d1:ea:bb:ce:5d:67: 16:ff:dd:bf:4a:8a:40:8a:d8:eb:3e:a1:e3:ca:bf:8e:d1:25: 60:6e:0b:9b:84:a7:7c:c8:81:0f:54:a2:e5:bf:15:81:cd:d8: d8:01:77:f2:18:8b:21:23:b8:35:ef:79:c7:c1:81:22:78:85: a5:04:f7:1b:2c:df:77:85:94:72:0e:9c:dd:d0:dd:7c:e2:01: 10:cb:aa:cb:f2:85:f1:90:53:6d:80:5a:ea:01:50:66:12:79: 92:f8:1f:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe1iHemK3Ksqoc80i2o22ogBD0dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkxMTAy ODNBOTg3NzAeFw0yNjA5MjExOTUxMDRaFw0yNjA5MjIyMjEzMDRaMDMxMTAvBgNV BAMTKDFGMzk5MjZGNUQxQzJEM0E3RkFFNzM3RkY1M0M1OEFFQzZBNzU4MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeTpCGgSwylHNtek5Eiwelzzan TNaX8pHcKcVou7U6jYgg4o1nesx9ujmGOMLJYJkZCV2saEEW7GDi4oq5aJyUtJ9c 4gV7Dp51QtAzGKEUxTkF2fBxECrPKLWD+2I/xe19vmkY+rXIsEwR2o9o1NwwqagU 5VxinCbL2BYjOGNt9hdN8gWrBDkblUpBBrLw8KhHFHoIPxg8ZI8IUMloakZ/hfMV D7H3FNy3JaAShu3DVrKNXBjnjW4MiU/EpVK6lDyk0qJ+93P0s4G8t6Qc2FctZuGY epClua4qIgCDwYs/yDe2D+c782GFIljC36sTYd2jTPSrI81adHzORzaIQr63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzmSb10cLTp/rnN/9TxYrsanWCAwHwYDVR0j BBgwFoAUZtDL/e+OGLt5bhhVHwaRECg6mHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkMjUxY2EtYTA1ZS00ZmJlLTkzYmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRF RjhFMThCQjc5NkUxODU1MUYwNjkxMTAyODNBOTg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkQwQ0JGREVGOEUxOEJCNzk2RTE4NTUxRjA2OTExMDI4M0E5 ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkx MTAyODNBOTg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADW98ACZL9DrvxfNOi7zMimA27WRKeTRI4hw zpydALexdyF9iXmT73d0WZRJhI/2b1QF7MFxfCHY8B+sucqMq1fpY80F1EtJZugk klP4ydeYys6XJSMiDoGrpU5ZG9CX2RUqJy7qV49qU/ryDeDaGbwf2JtHnATrkFvA nmjCTsZhJ1PqOAO8y8oagWTKWOBcNsiEACYO7IUnt7v9IdHqu85dZxb/3b9KikCK 2Os+oePKv47RJWBuC5uEp3zIgQ9UouW/FYHN2NgBd/IYiyEjuDXvecfBgSJ4haUE 9xss33eFlHIOnN3Q3XziARDLqsvyhfGQU22AWuoBUGYSeZL4H80= -----END CERTIFICATE-----Generated at Tue Sep 22 04:12:20 2026 by rpki-client