$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: OVM/94Pcn3sHD/UyC+B7UB6qr86NpJUk2SLBo65t5k8= Subject key identifier: 59:5B:79:A9:AC:8B:A9:AB:4A:28:63:C0:2C:50:38:E7:F3:78:D1:E6 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 78C19D0344FDD267BF29DA4FB16558E380099218 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 16:11:07 +0000 Manifest this update: Wed 23 Sep 2026 16:06:07 +0000 Manifest next update: Thu 24 Sep 2026 20:07:07 +0000 Files and hashes: 1: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: nZnQOfXeR9KBnZNKnG5qxocBUiiq/AS18D4ENVgNHno=) 2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 3: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:07:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:c1:9d:03:44:fd:d2:67:bf:29:da:4f:b1:65:58:e3:80:09:92:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Sep 23 16:06:07 2026 GMT Not After : Sep 24 20:07:07 2026 GMT Subject: CN=595B79A9AC8BA9AB4A2863C02C5038E7F378D1E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:94:e3:f9:5f:ad:c8:d4:2a:c5:bb:c5:26:43: bc:04:e8:e8:35:3d:49:c4:61:a1:8c:6f:50:dc:d8: 0e:44:37:45:6f:c5:09:ba:fe:91:01:d1:4b:68:11: e7:56:c5:c2:03:c6:6b:6f:fb:4a:8e:de:6a:04:aa: 98:c0:ec:9b:22:6d:b7:c8:8e:ec:18:1d:7c:24:c2: 31:9a:37:2a:cd:04:cb:1f:8e:bc:e6:6d:5f:98:8c: 33:8e:e2:94:7e:8a:20:1d:ed:27:7f:3c:b8:d2:61: 09:e4:94:e6:ea:0c:d1:a4:c4:15:36:83:6c:45:b8: fb:42:34:b5:b9:af:88:34:d6:3b:4b:10:3f:d1:6c: bc:2c:6d:c1:c5:46:b9:f2:e0:06:68:c1:be:31:14: d7:1b:20:88:79:9d:fa:a2:75:76:6f:82:2c:46:2c: 0c:7a:98:cf:de:bc:26:e7:4a:f4:bc:0b:c2:8a:0e: 05:c2:1d:d1:e6:d3:5c:0f:5a:8d:37:e3:9a:a4:e1: 86:a3:c5:d0:d5:75:5d:22:a3:6a:2e:d3:c4:76:0d: 58:0f:e3:6f:10:fd:81:f1:b1:0e:0a:3c:94:68:b9: 22:ba:d3:b7:68:97:57:04:88:78:53:a6:1a:77:16: b1:46:35:12:8b:65:2e:50:16:bf:ff:3b:b9:f8:8f: 10:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:5B:79:A9:AC:8B:A9:AB:4A:28:63:C0:2C:50:38:E7:F3:78:D1:E6 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:73:df:4a:3b:fb:c3:60:23:3a:ed:f7:1a:57:ec:fe:dc:03: 56:ed:bc:fb:df:a3:35:0d:47:1c:a0:9e:ad:bb:74:0d:a7:19: 17:92:ff:ad:80:77:6d:60:8b:29:10:c8:1c:c8:4e:af:a8:5c: 73:2e:9b:52:f0:e2:d7:56:cc:7e:3d:e0:68:08:c7:0a:68:1c: 0d:fa:66:0d:35:ba:f2:1e:4a:fa:a1:85:fd:a3:d9:c4:ae:ea: 17:7b:20:e6:21:65:bc:2f:64:ab:2c:ab:2a:d8:0e:a2:fd:1b: 66:a6:44:c7:a6:3b:d2:ff:6d:68:e9:60:da:e8:7f:ed:d0:ba: 68:06:1a:f1:85:ec:d7:ba:6c:3a:c7:2c:74:08:4b:6e:c9:c5: a8:4d:ac:f2:2a:44:d5:c4:f9:82:38:2e:6e:ec:45:79:f7:87: 35:92:d4:69:cb:1b:f7:5d:c7:9c:ac:9c:ff:71:ac:7e:4f:8d: 00:dd:de:be:8b:9e:e3:5d:37:a8:29:b9:0b:34:4b:c2:82:0a: dc:a9:7d:0f:99:ec:c5:51:f5:5b:cc:8e:49:c4:2b:64:ab:1e: 47:cb:d8:89:d1:0c:2b:8c:19:71:33:1f:7b:e9:e0:61:5b:2f: b6:97:5f:09:df:27:6b:f2:17:72:10:66:55:9c:8c:df:e4:27: 3f:ee:f8:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeMGdA0T90me/KdpPsWVY44AJkhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA5MjMxNjA2MDdaFw0yNjA5MjQyMDA3MDdaMDMxMTAvBgNV BAMTKDU5NUI3OUE5QUM4QkE5QUI0QTI4NjNDMDJDNTAzOEU3RjM3OEQxRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKlOP5X63I1CrFu8UmQ7wE6Og1 PUnEYaGMb1Dc2A5EN0VvxQm6/pEB0UtoEedWxcIDxmtv+0qO3moEqpjA7JsibbfI juwYHXwkwjGaNyrNBMsfjrzmbV+YjDOO4pR+iiAd7Sd/PLjSYQnklObqDNGkxBU2 g2xFuPtCNLW5r4g01jtLED/RbLwsbcHFRrny4AZowb4xFNcbIIh5nfqidXZvgixG LAx6mM/evCbnSvS8C8KKDgXCHdHm01wPWo0345qk4YajxdDVdV0io2ou08R2DVgP 428Q/YHxsQ4KPJRouSK607dol1cEiHhTphp3FrFGNRKLZS5QFr//O7n4jxCpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWVt5qayLqatKKGPALFA45/N40eYwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZz30o7+8NgIzrt9xpX7P7cA1btvPvfozUN Rxygnq27dA2nGReS/62Ad21giykQyBzITq+oXHMum1Lw4tdWzH494GgIxwpoHA36 Zg01uvIeSvqhhf2j2cSu6hd7IOYhZbwvZKssqyrYDqL9G2amRMemO9L/bWjpYNro f+3QumgGGvGF7Ne6bDrHLHQIS27JxahNrPIqRNXE+YI4Lm7sRXn3hzWS1GnLG/dd x5ysnP9xrH5PjQDd3r6LnuNdN6gpuQs0S8KCCtypfQ+Z7MVR9VvMjknEK2SrHkfL 2InRDCuMGXEzH3vp4GFbL7aXXwnfJ2vyF3IQZlWcjN/kJz/u+LU= -----END CERTIFICATE-----Generated at Thu Sep 24 06:54:02 2026 by rpki-client