$ rpki-client -vvf repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft File: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft (raw, json) Hash identifier: JUyzLklv4KtxecpWm25VH+M3EZ8rVQ8GiblEXV6HrbE= Subject key identifier: 92:1F:30:A9:C9:16:44:DD:31:38:2C:6E:FE:F1:86:16:37:45:E8:FA Authority key identifier: 66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 Certificate issuer: /CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Certificate serial: 3B494FA2D2102837F79EBD490AD91F92199C87F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft Manifest number: 02B6 Signing time: Tue 24 Mar 2026 10:22:30 +0000 Manifest this update: Tue 24 Mar 2026 10:17:30 +0000 Manifest next update: Fri 27 Mar 2026 18:14:30 +0000 Files and hashes: 1: 3130332e3230392e3235302e302f32332d3233203d3e203137343430.roa (hash: x8Z7hSmFA0UmwFhQsexxF7M1z59ksll1UR5BKgdWN7E=) 2: 3130332e3230392e3234382e302f32322d3232203d3e203137343430.roa (hash: FBKftcy5u8WLMlpAhKDN3+/qY75MgpkD76kkG1AgdUE=) 3: 3130332e3230392e3234382e302f32332d3233203d3e203137343430.roa (hash: egRehn4LjgjKySUKQkpl6SKgh3Imbo4d57t3tIaiJf4=) 4: 66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl (hash: AEPsjtKW7T/aQWrH5R5xEXbQzkotvGEKTVLBt7XqGcQ=) 5: 3130332e3230392e3234382e302f32342d3234203d3e203137343430.roa (hash: V0Wtlqwgd3N2wadygfl0BT/vHIEsa1IABsrNseLIv4A=) 6: 3130332e3230392e3235302e302f32342d3234203d3e203137343430.roa (hash: RQhESrqk9sDgcqCVUy8oW9NMjzE0L0awTCgQpHQVDjo=) 7: 3130332e3230392e3234392e302f32342d3234203d3e203137343430.roa (hash: 7Dr6u9PA6uyt0AqS+Q9EmLTfz/wKmQK5b4NV05Q8hho=) 8: 3130332e3230392e3235312e302f32342d3234203d3e203137343430.roa (hash: Gie+V/qqRH9iPBwHDwRPMdTeAqtNMn5puCXKH9q6nKw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:14:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:49:4f:a2:d2:10:28:37:f7:9e:bd:49:0a:d9:1f:92:19:9c:87:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A6B60CE00F39D3D3C228024C87D2799BE570E7 Validity Not Before: Mar 24 10:17:30 2026 GMT Not After : Mar 27 18:14:30 2026 GMT Subject: CN=921F30A9C91644DD31382C6EFEF186163745E8FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b4:99:cb:7e:be:3f:8f:d6:fb:f4:96:dd:71: 77:3e:b4:dc:1c:c5:14:24:51:7b:02:be:41:27:ec: 17:e1:2f:fc:07:ff:27:0c:e9:5f:86:d9:26:12:06: 4f:9d:00:43:dc:df:6f:cd:66:4c:be:c0:ef:be:66: 30:a0:c1:f3:f2:ca:5a:3c:f9:de:5d:73:8a:97:52: 28:f4:44:0a:7d:e5:d6:07:58:77:29:5d:ed:b8:ca: 0e:51:9d:cc:aa:e3:5d:24:ed:1f:2f:81:c9:54:c9: 88:79:25:b2:a5:c1:2c:da:b5:3b:58:f3:8d:57:46: 24:e4:d5:37:ed:ee:bf:39:1e:44:94:ac:0f:05:c9: 37:15:af:fb:33:ef:e3:15:5f:f6:ba:d6:8c:ca:96: b8:63:85:59:36:c2:2d:2b:5a:c8:60:0e:df:64:c7: 76:cb:ea:8d:52:8a:a7:a9:5a:d3:de:55:d5:6a:cd: 3f:5d:7a:69:58:06:90:99:fb:bf:c4:0a:74:ca:10: 5c:33:b5:45:d4:d9:d5:6e:f6:a7:2c:95:84:55:84: e4:31:46:ef:b7:1e:01:89:59:19:79:44:05:b7:99: 38:5d:5f:33:dd:42:67:a7:3f:a6:e0:9a:4c:58:b2: f9:2f:53:1e:39:c6:fc:52:56:a6:91:e0:06:77:85: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1F:30:A9:C9:16:44:DD:31:38:2C:6E:FE:F1:86:16:37:45:E8:FA X509v3 Authority Key Identifier: keyid:66:A6:B6:0C:E0:0F:39:D3:D3:C2:28:02:4C:87:D2:79:9B:E5:70:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A6B60CE00F39D3D3C228024C87D2799BE570E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c074cd8-2830-4eab-bdd4-a807ec5115da/0/66A6B60CE00F39D3D3C228024C87D2799BE570E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:94:ab:57:8d:0a:a2:36:bb:5a:c6:61:d1:08:16:c6:7c:4d: 34:fe:0a:12:69:41:cf:79:ad:8a:ec:fa:de:59:52:90:ab:81: 58:0f:76:10:29:d8:7b:d1:fa:80:cb:61:cf:c4:ae:1b:1e:44: eb:11:34:d4:bc:c6:ce:53:96:03:10:61:a7:40:3c:36:ac:b0: 7b:93:9b:3d:4c:3e:46:6f:64:8f:e0:59:f5:32:2e:49:3b:90: 16:91:e3:02:f6:38:ed:93:9e:3f:8c:89:c4:bb:e3:58:16:7f: 7f:76:8c:61:9d:74:73:c7:bf:6e:38:78:ad:ec:bb:7e:08:bb: 9e:87:1e:f6:3f:30:9b:f4:cf:3d:dc:f0:fa:c7:52:79:28:01: e1:63:92:51:db:32:88:80:55:58:a4:98:01:c5:6b:b4:42:fc: 6d:57:91:9b:c4:64:ba:6c:7a:a6:8d:dc:ea:b7:69:8f:e2:fe: c8:ab:1a:2e:b8:8e:49:01:62:f1:0f:0f:5a:11:3a:59:1d:79: c4:87:53:c0:08:e0:4c:27:99:6d:39:22:31:be:75:8d:98:ba: 09:ef:cc:83:13:f4:94:99:90:d4:d4:2e:12:af:50:f9:ad:fd: a1:cc:3b:8d:03:27:f9:44:5d:e9:ef:7b:2d:c2:50:9f:19:7c: 3b:b7:b6:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO0lPotIQKDf3nr1JCtkfkhmch/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5 QkU1NzBFNzAeFw0yNjAzMjQxMDE3MzBaFw0yNjAzMjcxODE0MzBaMDMxMTAvBgNV BAMTKDkyMUYzMEE5QzkxNjQ0REQzMTM4MkM2RUZFRjE4NjE2Mzc0NUU4RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtJnLfr4/j9b79JbdcXc+tNwc xRQkUXsCvkEn7BfhL/wH/ycM6V+G2SYSBk+dAEPc32/NZky+wO++ZjCgwfPyylo8 +d5dc4qXUij0RAp95dYHWHcpXe24yg5Rncyq410k7R8vgclUyYh5JbKlwSzatTtY 841XRiTk1Tft7r85HkSUrA8FyTcVr/sz7+MVX/a61ozKlrhjhVk2wi0rWshgDt9k x3bL6o1SiqepWtPeVdVqzT9demlYBpCZ+7/ECnTKEFwztUXU2dVu9qcslYRVhOQx Ru+3HgGJWRl5RAW3mThdXzPdQmenP6bgmkxYsvkvUx45xvxSVqaR4AZ3hU2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkh8wqckWRN0xOCxu/vGGFjdF6PowHwYDVR0j BBgwFoAUZqa2DOAPOdPTwigCTIfSeZvlcOcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzA3NGNkOC0yODMwLTRlYWItYmRkNC1hODA3ZWM1MTE1ZGEvMC82NkE2QjYwQ0Uw MEYzOUQzRDNDMjI4MDI0Qzg3RDI3OTlCRTU3MEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0QyNzk5QkU1 NzBFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2MwNzRjZDgtMjgzMC00ZWFiLWJk ZDQtYTgwN2VjNTExNWRhLzAvNjZBNkI2MENFMDBGMzlEM0QzQzIyODAyNEM4N0Qy Nzk5QkU1NzBFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOUq1eNCqI2u1rGYdEIFsZ8TTT+ChJpQc95 rYrs+t5ZUpCrgVgPdhAp2HvR+oDLYc/ErhseROsRNNS8xs5TlgMQYadAPDassHuT mz1MPkZvZI/gWfUyLkk7kBaR4wL2OO2Tnj+MicS741gWf392jGGddHPHv244eK3s u34Iu56HHvY/MJv0zz3c8PrHUnkoAeFjklHbMoiAVVikmAHFa7RC/G1XkZvEZLps eqaN3Oq3aY/i/sirGi64jkkBYvEPD1oROlkdecSHU8AI4EwnmW05IjG+dY2Yugnv zIMT9JSZkNTULhKvUPmt/aHMO40DJ/lEXenvey3CUJ8ZfDu3ths= -----END CERTIFICATE-----Generated at Thu Mar 26 11:27:49 2026 by rpki-client