$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: 6RRsAIBp2t87gDTm+B4ehgmFLxsTkRU57kHaBebd4No= Subject key identifier: 72:AC:93:04:77:1C:04:7F:F3:C0:92:C0:BA:5E:33:C0:62:BE:71:57 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 690C906A5B4AAB9E7DEA04A40F371F1D2AE22D0D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:55:36 +0000 Manifest this update: Thu 23 Jul 2026 20:50:36 +0000 Manifest next update: Fri 24 Jul 2026 23:51:36 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 2: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: 4f39j9dx77nyZnwanNxYGfbmaPwAEOvfjGP74gH2E9E=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:0c:90:6a:5b:4a:ab:9e:7d:ea:04:a4:0f:37:1f:1d:2a:e2:2d:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Jul 23 20:50:36 2026 GMT Not After : Jul 24 23:51:36 2026 GMT Subject: CN=72AC9304771C047FF3C092C0BA5E33C062BE7157 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:7e:0c:b7:3d:6c:ce:04:45:32:32:ee:b6:b6: ae:89:4e:e2:e3:b5:c1:45:54:6e:8b:af:a0:05:a3: 25:b7:6f:66:ec:8b:23:2c:85:e2:90:88:0e:3f:25: da:3c:98:79:50:57:b6:41:c2:2c:bd:b3:c1:ad:3d: d5:5d:71:a4:c9:37:d1:9f:a2:fa:c5:02:b4:0e:d7: 6e:4c:f6:60:f8:11:6a:53:68:ab:a7:84:e8:07:c4: c3:4d:ae:7c:e4:8d:f8:62:ec:74:40:ee:fe:a6:15: 4a:83:f0:2e:a5:09:61:fd:db:f1:fd:11:41:b0:ad: ed:5c:09:25:c4:92:86:71:3a:7e:e9:d4:a1:18:6d: 27:34:d6:b2:2b:c6:de:b3:03:6b:91:4b:71:e6:6e: 79:4d:54:76:37:c6:37:80:7e:02:ad:9f:11:2f:7d: 00:3a:97:1b:6b:4b:77:c2:7a:b4:57:bc:c4:e1:1b: 93:5a:28:de:27:11:80:af:f9:fc:03:ed:49:a9:3a: bf:fb:6b:1f:4c:02:be:e3:42:1e:47:8e:4a:b8:ac: 19:05:0c:74:3c:bc:04:08:e5:af:d0:df:53:e7:38: 52:4a:bb:cb:db:63:8c:b7:53:4e:36:22:ec:63:fb: 8a:5b:5c:cb:b8:05:73:8a:4a:26:59:0c:e7:a0:24: 26:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:AC:93:04:77:1C:04:7F:F3:C0:92:C0:BA:5E:33:C0:62:BE:71:57 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:7e:05:31:9d:e1:c4:c5:1b:82:e0:a2:d3:31:d7:2e:12:f8: df:9f:3e:41:a2:f1:86:a4:c4:07:df:48:94:af:5c:6e:c4:c1: 3a:ab:d8:83:7e:3d:4a:65:fa:31:44:61:57:4c:7a:15:a0:e3: e7:52:92:50:97:db:37:08:cd:75:52:27:64:75:cb:7b:1b:14: 6c:43:7d:d3:13:08:d5:5c:58:55:e4:61:10:f1:5c:bf:60:f8: 6a:47:70:fa:0e:e6:98:18:f3:36:20:5e:05:2e:0c:11:60:f4: b4:96:a6:91:b1:16:94:cb:35:6f:bd:e0:3f:02:9e:8e:06:c4: f4:56:18:2a:22:cf:6f:f0:3f:0b:7b:be:60:28:8a:27:9b:3a: 0f:36:dc:7a:d1:35:2f:cc:03:97:33:fe:cc:38:79:7b:1c:88: 53:59:50:bd:9d:46:aa:f8:c2:24:69:cf:7f:71:c4:f7:a7:04: d7:fb:e4:87:19:70:ef:5f:46:aa:72:e2:22:29:b8:a6:4f:29: 0d:f7:0a:7f:ac:41:2b:12:00:99:6f:f6:0c:01:59:58:c4:8c: 95:68:47:ae:52:5e:45:76:78:eb:fb:d6:bb:2d:18:d6:38:12: 52:9c:f1:01:da:67:6d:f9:6c:d9:bd:d0:ac:78:f2:a2:85:27: 97:9f:3e:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaQyQaltKq5596gSkDzcfHSriLQ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA3MjMyMDUwMzZaFw0yNjA3MjQyMzUxMzZaMDMxMTAvBgNV BAMTKDcyQUM5MzA0NzcxQzA0N0ZGM0MwOTJDMEJBNUUzM0MwNjJCRTcxNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTfgy3PWzOBEUyMu62tq6JTuLj tcFFVG6Lr6AFoyW3b2bsiyMsheKQiA4/Jdo8mHlQV7ZBwiy9s8GtPdVdcaTJN9Gf ovrFArQO125M9mD4EWpTaKunhOgHxMNNrnzkjfhi7HRA7v6mFUqD8C6lCWH92/H9 EUGwre1cCSXEkoZxOn7p1KEYbSc01rIrxt6zA2uRS3HmbnlNVHY3xjeAfgKtnxEv fQA6lxtrS3fCerRXvMThG5NaKN4nEYCv+fwD7UmpOr/7ax9MAr7jQh5Hjkq4rBkF DHQ8vAQI5a/Q31PnOFJKu8vbY4y3U042Iuxj+4pbXMu4BXOKSiZZDOegJCbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcqyTBHccBH/zwJLAul4zwGK+cVcwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1+BTGd4cTFG4LgotMx1y4S+N+fPkGi8Yak xAffSJSvXG7EwTqr2IN+PUpl+jFEYVdMehWg4+dSklCX2zcIzXVSJ2R1y3sbFGxD fdMTCNVcWFXkYRDxXL9g+GpHcPoO5pgY8zYgXgUuDBFg9LSWppGxFpTLNW+94D8C no4GxPRWGCoiz2/wPwt7vmAoiiebOg823HrRNS/MA5cz/sw4eXsciFNZUL2dRqr4 wiRpz39xxPenBNf75IcZcO9fRqpy4iIpuKZPKQ33Cn+sQSsSAJlv9gwBWVjEjJVo R65SXkV2eOv71rstGNY4ElKc8QHaZ235bNm90Kx48qKFJ5efPuI= -----END CERTIFICATE-----Generated at Fri Jul 24 01:24:23 2026 by rpki-client