$ rpki-client -vvf rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft File: 66B373A1A8E4839699E23D35A5592185C65D4217.mft (raw, json) Hash identifier: YpPpkbzp9ChVVtN2i9E/ngkAQ3aa5Zn+MRJ47+d0SKM= Subject key identifier: 3F:74:1E:15:76:1B:08:E1:8E:59:92:77:A0:CB:9E:52:8A:04:6C:0A Authority key identifier: 66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17 Certificate issuer: /CN=66B373A1A8E4839699E23D35A5592185C65D4217 Certificate serial: 65180D154FFD8D311AA0F8199EE9A0EAC19C7CA6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:22:10 +0000 Manifest this update: Tue 12 May 2026 17:17:10 +0000 Manifest next update: Wed 13 May 2026 19:24:10 +0000 Files and hashes: 1: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: WyiqkRr/WwMALxqKWgtBGW8I5DUVuOnXnmofYyW+gKQ=) 2: 66B373A1A8E4839699E23D35A5592185C65D4217.crl (hash: vjivkp2qxW5GUx0UyjMRCShLXpK3ZI8sno7ChRHy0ZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 19:24:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:18:0d:15:4f:fd:8d:31:1a:a0:f8:19:9e:e9:a0:ea:c1:9c:7c:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66B373A1A8E4839699E23D35A5592185C65D4217 Validity Not Before: May 12 17:17:10 2026 GMT Not After : May 13 19:24:10 2026 GMT Subject: CN=3F741E15761B08E18E599277A0CB9E528A046C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:c8:9b:8a:fc:9a:aa:8c:36:76:76:5d:b5:d3: cd:7b:ca:16:6e:b4:da:e8:4a:cf:ac:39:72:8f:0d: 26:23:9f:6e:84:99:f2:e7:4c:27:e2:5f:56:4b:f6: 2a:02:8f:08:12:06:55:77:95:b0:1e:a1:44:8a:37: f4:4c:2e:e1:b6:4b:f3:04:85:3f:3f:5d:fa:34:f1: e2:9d:53:f1:1e:27:ec:76:1c:ee:c5:b9:4d:11:d0: 88:89:80:54:c0:22:91:d1:7f:f3:d4:de:98:2a:35: 64:78:3d:37:b8:e7:69:e4:95:ea:21:12:27:3b:f1: 84:cb:7c:45:ea:ae:f3:ea:f1:dc:b3:46:fe:59:d2: a9:91:3f:e9:5f:39:57:59:55:ec:0c:6d:09:06:0a: 36:83:2a:8a:a2:af:55:a0:d4:ab:9d:f1:11:8d:0e: e6:5d:37:b4:19:bf:1c:6e:26:29:6d:eb:7a:2f:37: 2d:ba:88:ac:c0:26:bf:3b:7e:14:a5:f7:48:6f:18: bd:d8:c2:e4:1d:fc:82:98:23:c4:09:fb:aa:f6:a9: a9:1a:89:6a:2e:4d:68:44:8e:42:85:66:12:f9:4c: 10:4c:03:d6:96:37:70:09:3f:96:6b:5a:95:9f:a1: 64:e6:a8:25:b1:a4:45:1b:d5:e6:b7:f5:c9:f0:47: 20:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:74:1E:15:76:1B:08:E1:8E:59:92:77:A0:CB:9E:52:8A:04:6C:0A X509v3 Authority Key Identifier: keyid:66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:b0:db:d2:7f:37:ee:f2:80:c6:46:00:8d:64:66:55:26:59: 15:69:2a:29:0e:06:c5:e7:0c:c9:7d:3c:96:3d:43:07:c0:26: a4:46:61:f3:4b:00:f2:a5:87:72:79:68:78:11:7a:7a:97:04: 19:f8:d0:1b:3e:af:dd:66:53:2e:ed:fb:9d:36:4d:98:f3:78: 33:9d:54:19:19:5c:88:aa:a7:e7:cd:9f:c3:94:87:70:ad:a4: 8e:a0:f5:0d:41:00:80:08:4c:ee:c4:ef:b5:ff:e5:df:1c:41: 2c:bc:60:2e:5b:c4:27:84:c8:e6:5b:50:fc:11:d7:d6:76:79: 85:b7:8d:55:09:5b:aa:7e:c1:f2:d8:2f:08:e2:2d:a3:41:a6: 42:cc:30:2e:4c:1a:d4:6e:1e:a4:aa:03:0c:c7:46:77:e8:ef: c5:e3:fb:c8:6f:36:22:36:4e:aa:1b:f6:34:f4:95:7b:0e:b9: 04:8c:61:4b:db:9a:68:b3:e6:a7:bb:f1:11:57:68:9d:6a:98: 38:41:30:e0:dd:91:db:a5:96:f7:96:ef:4e:a7:5c:b6:12:2e: 91:ab:79:f3:b2:3f:2d:1f:4d:e3:b7:b3:1e:9f:49:e4:d5:2c: a8:61:71:8b:e1:76:d5:29:28:a0:ca:ac:71:a0:5f:99:81:99: 9e:f9:1a:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRgNFU/9jTEaoPgZnumg6sGcfKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCMzczQTFBOEU0ODM5Njk5RTIzRDM1QTU1OTIxODVD NjVENDIxNzAeFw0yNjA1MTIxNzE3MTBaFw0yNjA1MTMxOTI0MTBaMDMxMTAvBgNV BAMTKDNGNzQxRTE1NzYxQjA4RTE4RTU5OTI3N0EwQ0I5RTUyOEEwNDZDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxyJuK/JqqjDZ2dl210817yhZu tNroSs+sOXKPDSYjn26EmfLnTCfiX1ZL9ioCjwgSBlV3lbAeoUSKN/RMLuG2S/ME hT8/Xfo08eKdU/EeJ+x2HO7FuU0R0IiJgFTAIpHRf/PU3pgqNWR4PTe452nkleoh Eic78YTLfEXqrvPq8dyzRv5Z0qmRP+lfOVdZVewMbQkGCjaDKoqir1Wg1Kud8RGN DuZdN7QZvxxuJilt63ovNy26iKzAJr87fhSl90hvGL3YwuQd/IKYI8QJ+6r2qaka iWouTWhEjkKFZhL5TBBMA9aWN3AJP5ZrWpWfoWTmqCWxpEUb1ea39cnwRyAVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP3QeFXYbCOGOWZJ3oMueUooEbAowHwYDVR0j BBgwFoAUZrNzoajkg5aZ4j01pVkhhcZdQhcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE3Nzk1YjYtMGRmNS00NzFiLWI3ODgtNzI1ZjllZjdjMDhkLzAvNjZCMzczQTFB OEU0ODM5Njk5RTIzRDM1QTU1OTIxODVDNjVENDIxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkIzNzNBMUE4RTQ4Mzk2OTlFMjNEMzVBNTU5MjE4NUM2NUQ0 MjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNjZCMzczQTFBOEU0ODM5Njk5RTIzRDM1QTU1OTIx ODVDNjVENDIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2w29J/N+7ygMZGAI1kZlUmWRVpKikOBsXn DMl9PJY9QwfAJqRGYfNLAPKlh3J5aHgRenqXBBn40Bs+r91mUy7t+502TZjzeDOd VBkZXIiqp+fNn8OUh3CtpI6g9Q1BAIAITO7E77X/5d8cQSy8YC5bxCeEyOZbUPwR 19Z2eYW3jVUJW6p+wfLYLwjiLaNBpkLMMC5MGtRuHqSqAwzHRnfo78Xj+8hvNiI2 Tqob9jT0lXsOuQSMYUvbmmiz5qe78RFXaJ1qmDhBMODdkdullveW706nXLYSLpGr efOyPy0fTeO3sx6fSeTVLKhhcYvhdtUpKKDKrHGgX5mBmZ75Gjw= -----END CERTIFICATE-----Generated at Wed May 13 11:55:33 2026 by rpki-client