$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: 8QgILCl3WKSGJqV8rgf0IWJAg06oA+IbJuv0J6PLYuU= Subject key identifier: 62:95:9F:B8:04:A7:93:7A:70:A2:DC:67:F3:80:C2:62:0B:03:4A:6E Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 56EC5DBA452E547D4A961F1140D78443C2E83763 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 0E Signing time: Tue 12 May 2026 08:35:04 +0000 Manifest this update: Tue 12 May 2026 08:30:04 +0000 Manifest next update: Wed 13 May 2026 10:31:04 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 2: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: mIUQJVhkbai9PPiCTA6uBby+eYkJJwdSfjAkTiUVezk=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ec:5d:ba:45:2e:54:7d:4a:96:1f:11:40:d7:84:43:c2:e8:37:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: May 12 08:30:04 2026 GMT Not After : May 13 10:31:04 2026 GMT Subject: CN=62959FB804A7937A70A2DC67F380C2620B034A6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:2e:21:38:ea:ac:6c:16:88:0f:18:7e:7f:1c: e3:48:0f:77:cc:84:0b:23:fa:91:ef:4f:fb:1d:47: 21:0e:eb:c0:e9:e5:14:a5:b1:4e:12:77:31:80:a9: e7:f1:ce:f2:a6:e0:be:ab:b4:da:aa:b7:be:c0:1e: 8d:96:99:ba:64:2c:a8:09:c6:d6:1e:8c:96:ce:a3: 96:76:e4:ef:41:10:be:1b:42:1c:12:46:31:01:34: 70:0a:25:2c:68:47:a9:89:ef:86:69:06:a2:38:61: 09:19:27:65:36:81:01:f0:69:07:85:50:c6:4f:ae: 22:65:93:c6:fe:8f:ae:a0:92:86:0f:b6:f3:85:a0: 21:4f:41:8c:fa:52:59:b8:9d:5d:42:d2:90:de:da: 9e:43:d0:72:5a:eb:06:89:f1:19:e4:f0:df:8b:14: d4:96:76:d8:eb:48:e7:6f:bc:89:dd:7b:85:56:65: f4:ae:49:a3:64:5f:a7:d4:3e:7a:ab:64:ae:23:fd: d1:0c:cd:23:3d:2d:4d:2f:88:dc:59:c3:0a:cb:e8: 34:43:7c:c6:a9:27:c4:d8:f7:ed:ad:76:98:e2:e6: 8b:71:8c:1b:ba:93:8e:f0:61:56:6c:cd:b8:93:89: f1:86:8c:8c:19:72:1b:a1:74:52:c5:d3:99:c6:b0: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:9F:B8:04:A7:93:7A:70:A2:DC:67:F3:80:C2:62:0B:03:4A:6E X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:cf:6e:0c:ff:ed:ab:2b:c2:bb:a5:c1:e3:9b:49:dc:49:00: cf:9d:72:19:df:0a:c4:d5:b7:0b:2a:92:fe:ba:9f:37:1e:83: 61:9d:95:b5:1e:02:ab:73:c5:68:b2:fb:8b:22:cf:2b:3b:aa: 0d:91:cc:29:40:8c:bc:45:65:21:de:fc:41:29:17:56:29:29: d8:a3:e9:58:8f:e4:aa:8f:9b:6b:8b:62:6a:a1:84:01:fc:e0: 11:71:27:79:6e:e2:15:73:56:56:e2:a6:f7:bd:64:f9:dd:bf: ad:53:3f:83:2a:ab:04:e7:74:5e:c3:8b:4e:18:86:03:6c:02: 33:ff:24:bb:e1:b5:e9:9b:22:79:75:cc:c5:f5:67:f7:cd:0e: 3a:f5:21:bb:98:43:56:d6:80:11:3c:ba:84:d9:f7:7d:9f:11: dc:9d:f8:a4:1c:d6:e2:8c:d2:7d:53:d7:d7:8d:5e:c8:19:73: 72:e5:b7:c5:85:61:72:d2:24:1c:35:20:ca:74:9a:5d:e6:49: 6f:b6:3f:77:54:de:55:2b:8d:cd:e3:bb:c7:4f:e2:3c:30:cd: 01:31:2d:be:99:c2:41:8e:07:93:12:97:79:39:61:96:9d:a1: 1b:ff:00:ed:c2:c0:97:5e:11:ec:74:f5:4d:e2:05:6e:3b:35: 9f:a3:f0:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVuxdukUuVH1Klh8RQNeEQ8LoN2MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA1MTIwODMwMDRaFw0yNjA1MTMxMDMxMDRaMDMxMTAvBgNV BAMTKDYyOTU5RkI4MDRBNzkzN0E3MEEyREM2N0YzODBDMjYyMEIwMzRBNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvLiE46qxsFogPGH5/HONID3fM hAsj+pHvT/sdRyEO68Dp5RSlsU4SdzGAqefxzvKm4L6rtNqqt77AHo2WmbpkLKgJ xtYejJbOo5Z25O9BEL4bQhwSRjEBNHAKJSxoR6mJ74ZpBqI4YQkZJ2U2gQHwaQeF UMZPriJlk8b+j66gkoYPtvOFoCFPQYz6Ulm4nV1C0pDe2p5D0HJa6waJ8Rnk8N+L FNSWdtjrSOdvvInde4VWZfSuSaNkX6fUPnqrZK4j/dEMzSM9LU0viNxZwwrL6DRD fMapJ8TY9+2tdpji5otxjBu6k47wYVZszbiTifGGjIwZchuhdFLF05nGsL4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYpWfuASnk3pwotxn84DCYgsDSm4wHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzPbgz/7asrwrulweObSdxJAM+dchnfCsTV twsqkv66nzceg2GdlbUeAqtzxWiy+4sizys7qg2RzClAjLxFZSHe/EEpF1YpKdij 6ViP5KqPm2uLYmqhhAH84BFxJ3lu4hVzVlbipve9ZPndv61TP4MqqwTndF7Di04Y hgNsAjP/JLvhtembInl1zMX1Z/fNDjr1IbuYQ1bWgBE8uoTZ932fEdyd+KQc1uKM 0n1T19eNXsgZc3Llt8WFYXLSJBw1IMp0ml3mSW+2P3dU3lUrjc3ju8dP4jwwzQEx Lb6ZwkGOB5MSl3k5YZadoRv/AO3CwJdeEex09U3iBW47NZ+j8Mc= -----END CERTIFICATE-----Generated at Wed May 13 00:21:06 2026 by rpki-client