$ rpki-client -vvf repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft File: 66A8E197E4C920094E2675B2E732B2984C78192F.mft (raw, json) Hash identifier: FUZUc6Kc03s7nRktc7YUaFm0tc1wigQu6EPnXP/DGNY= Subject key identifier: 84:46:4A:2A:FA:28:1F:A5:82:85:1E:C8:AB:67:E7:DC:0D:04:B6:FB Authority key identifier: 66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F Certificate issuer: /CN=66A8E197E4C920094E2675B2E732B2984C78192F Certificate serial: 73DB4BB1F7F93AE4C846EB33B2BA3F3A3CCBD380 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft Manifest number: 012B Signing time: Wed 25 Mar 2026 13:11:36 +0000 Manifest this update: Wed 25 Mar 2026 13:06:36 +0000 Manifest next update: Sat 28 Mar 2026 23:57:36 +0000 Files and hashes: 1: 66A8E197E4C920094E2675B2E732B2984C78192F.crl (hash: Knba5eX+DPlAF8YVmxk1VcmZ9WQRpJk+AYTX5jHQ0C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:db:4b:b1:f7:f9:3a:e4:c8:46:eb:33:b2:ba:3f:3a:3c:cb:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66A8E197E4C920094E2675B2E732B2984C78192F Validity Not Before: Mar 25 13:06:36 2026 GMT Not After : Mar 28 23:57:36 2026 GMT Subject: CN=84464A2AFA281FA582851EC8AB67E7DC0D04B6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:34:b5:ff:92:c3:a2:a1:e4:67:d2:25:fe:05: 74:a9:3c:bf:79:a5:02:78:f5:37:80:91:0e:0c:8e: 0e:4e:92:8d:4b:ea:bb:26:0a:a4:82:54:ff:b7:bc: 6e:29:0f:dd:f5:ad:a4:6a:c0:2d:47:fd:9f:24:20: d7:9b:1b:0e:3d:de:68:7d:a8:d8:23:7f:40:ec:f6: cf:f6:29:c7:79:28:20:88:81:b5:d9:74:a7:3e:0d: 66:9d:3a:f6:db:aa:4a:b6:3d:8c:ed:bc:21:44:86: a1:f7:73:97:97:21:be:73:91:f2:6a:be:ea:1e:1f: fa:c4:05:4e:82:db:27:e8:ac:f4:d9:32:08:fd:dc: 86:0a:0d:1d:8c:b2:6b:b7:bf:d8:7d:dc:a5:d3:0f: 03:1b:b2:e6:64:7d:21:64:8c:1f:dc:b6:de:bf:79: bb:ad:1b:1e:73:bd:47:a6:fd:fd:87:e4:e8:5c:bc: 16:3f:1f:a3:22:d9:d7:38:4d:a8:9b:fa:8d:ce:97: d8:31:6c:e1:73:2c:13:3b:03:ed:c1:c0:88:b0:b0: 51:26:cc:7f:08:a3:6b:bb:3e:01:c3:0f:ed:da:33: a0:78:8f:c9:13:18:23:9a:31:20:57:73:e9:bc:17: fa:99:b0:60:12:57:4a:a1:ff:be:6e:4a:4b:d7:df: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:46:4A:2A:FA:28:1F:A5:82:85:1E:C8:AB:67:E7:DC:0D:04:B6:FB X509v3 Authority Key Identifier: keyid:66:A8:E1:97:E4:C9:20:09:4E:26:75:B2:E7:32:B2:98:4C:78:19:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66A8E197E4C920094E2675B2E732B2984C78192F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c82b8f56-8e82-4644-b049-2c5c2ffb4d99/1/66A8E197E4C920094E2675B2E732B2984C78192F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:6f:60:0a:08:2d:47:e4:90:3b:08:d1:44:d0:6a:54:86:fa: e0:49:84:15:2c:9d:6b:2a:17:81:35:35:02:7a:49:af:e6:1d: 3e:97:9e:af:37:ad:ac:81:cb:83:2c:62:3f:bf:19:1e:aa:d5: f1:a9:49:4b:b8:1f:57:72:9c:04:7b:6f:a3:4b:4c:c5:ef:61: 27:31:34:bf:fc:43:c8:c7:71:68:2e:d7:5b:9a:a3:3e:6a:ef: 3b:be:0f:d7:28:75:e4:3d:49:91:e4:f6:d1:e7:c3:d5:11:5c: bc:e2:c3:5f:2f:05:74:ad:f8:68:a5:58:e6:02:9d:06:9c:5c: a2:14:97:8e:f9:95:7c:6f:44:88:7a:24:71:34:98:99:9d:6f: d8:12:20:8c:b7:9e:07:63:fb:83:45:6a:7e:ef:5f:20:80:c2: 60:90:9e:16:42:79:42:01:1d:ae:ab:06:3b:46:89:f3:1c:de: ad:4b:15:e8:14:47:e2:78:e5:49:bc:05:a4:c5:66:b9:bc:ef: 3d:44:bf:39:7a:22:3e:5a:c6:0e:be:a2:5e:ed:7d:a8:a5:9b: 84:6b:33:1f:4d:20:14:bc:9f:3d:07:76:17:32:8e:e7:a5:ee: 8f:6c:d4:32:f6:82:49:b9:98:3f:42:18:b8:ef:9e:6c:a7:48: 94:4a:d6:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9tLsff5OuTIRuszsro/OjzL04AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0 Qzc4MTkyRjAeFw0yNjAzMjUxMzA2MzZaFw0yNjAzMjgyMzU3MzZaMDMxMTAvBgNV BAMTKDg0NDY0QTJBRkEyODFGQTU4Mjg1MUVDOEFCNjdFN0RDMEQwNEI2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDINLX/ksOioeRn0iX+BXSpPL95 pQJ49TeAkQ4Mjg5Oko1L6rsmCqSCVP+3vG4pD931raRqwC1H/Z8kINebGw493mh9 qNgjf0Ds9s/2Kcd5KCCIgbXZdKc+DWadOvbbqkq2PYztvCFEhqH3c5eXIb5zkfJq vuoeH/rEBU6C2yforPTZMgj93IYKDR2Msmu3v9h93KXTDwMbsuZkfSFkjB/ctt6/ ebutGx5zvUem/f2H5OhcvBY/H6Mi2dc4Taib+o3Ol9gxbOFzLBM7A+3BwIiwsFEm zH8Io2u7PgHDD+3aM6B4j8kTGCOaMSBXc+m8F/qZsGASV0qh/75uSkvX3x1JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhEZKKvooH6WChR7Iq2fn3A0EtvswHwYDVR0j BBgwFoAUZqjhl+TJIAlOJnWy5zKymEx4GS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ODJiOGY1Ni04ZTgyLTQ2NDQtYjA0OS0yYzVjMmZmYjRkOTkvMS82NkE4RTE5N0U0 QzkyMDA5NEUyNjc1QjJFNzMyQjI5ODRDNzgxOTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIyOTg0Qzc4 MTkyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzgyYjhmNTYtOGU4Mi00NjQ0LWIw NDktMmM1YzJmZmI0ZDk5LzEvNjZBOEUxOTdFNEM5MjAwOTRFMjY3NUIyRTczMkIy OTg0Qzc4MTkyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC1vYAoILUfkkDsI0UTQalSG+uBJhBUsnWsq F4E1NQJ6Sa/mHT6Xnq83rayBy4MsYj+/GR6q1fGpSUu4H1dynAR7b6NLTMXvYScx NL/8Q8jHcWgu11uaoz5q7zu+D9codeQ9SZHk9tHnw9URXLziw18vBXSt+GilWOYC nQacXKIUl475lXxvRIh6JHE0mJmdb9gSIIy3ngdj+4NFan7vXyCAwmCQnhZCeUIB Ha6rBjtGifMc3q1LFegUR+J45Um8BaTFZrm87z1Evzl6Ij5axg6+ol7tfailm4Rr Mx9NIBS8nz0Hdhcyjuel7o9s1DL2gkm5mD9CGLjvnmynSJRK1ls= -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:13 2026 by rpki-client