$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft File: 66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json) Hash identifier: jYBfG4dsInrF878fgrE24DXZbZlxcVgGqYu66mbapOE= Subject key identifier: 97:46:3E:BE:AE:C1:1F:9E:E4:B4:A1:9E:88:4C:60:76:F4:99:D8:EF Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 Certificate issuer: /CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Certificate serial: 1B148072F7CE8923AB38FA7681264A4BAE6146BE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 15:59:59 +0000 Manifest this update: Fri 25 Sep 2026 15:54:59 +0000 Manifest next update: Sat 26 Sep 2026 18:56:59 +0000 Files and hashes: 1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: +dWv8JKz2CDQmBOY4Lkz51yk1AdN37nVsl/MB4Deisc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:14:80:72:f7:ce:89:23:ab:38:fa:76:81:26:4a:4b:ae:61:46:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Validity Not Before: Sep 25 15:54:59 2026 GMT Not After : Sep 26 18:56:59 2026 GMT Subject: CN=97463EBEAEC11F9EE4B4A19E884C6076F499D8EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:bb:7e:e2:31:f3:90:0f:58:c1:2f:1a:32:43: a9:35:03:1e:72:b1:a2:1e:1b:07:9c:28:d6:f4:d7: 12:63:de:ad:c5:86:ee:08:7d:fd:31:72:90:bf:63: 6d:f4:d9:ef:a4:9b:f0:19:8d:49:c0:e2:6a:85:1b: 33:59:8f:bb:9a:1e:e1:32:4f:6b:41:b2:68:bd:91: 8b:10:60:1a:a8:53:78:f7:dd:05:c2:e0:44:8e:10: 35:fe:29:51:4e:2e:6b:6c:d3:a0:35:25:5b:a0:16: f6:ad:c8:33:13:ed:58:8f:b9:47:1e:d7:65:2c:4d: 01:60:0a:64:09:5d:01:01:2b:38:6f:41:f4:ae:b5: e1:fa:66:2f:79:cc:7d:81:09:bb:74:c7:27:eb:f3: 51:43:5e:7b:01:2c:10:aa:61:ce:6c:ff:68:32:8d: 6e:b4:5e:52:70:a8:4f:28:65:96:17:88:ab:f3:41: 3e:a3:79:25:a5:0e:ec:58:45:f8:0e:b2:46:b7:9f: 79:99:c3:47:0b:d9:17:76:45:43:e0:be:5d:25:a0: 68:1a:a2:aa:aa:78:29:d6:7a:26:8d:87:b5:d4:cf: 9f:59:e7:cf:cf:3d:ba:de:3a:21:55:89:c4:02:eb: db:34:7f:84:ee:0d:cb:27:a0:0b:16:aa:ba:db:e2: 38:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:46:3E:BE:AE:C1:1F:9E:E4:B4:A1:9E:88:4C:60:76:F4:99:D8:EF X509v3 Authority Key Identifier: keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:53:ce:fc:27:7c:d1:94:2c:14:c9:be:3e:2b:ea:c0:f7:69: 6d:03:2a:ee:b9:f5:1b:bc:96:b1:82:35:c5:60:e5:31:0c:d1: 0a:c6:92:35:38:a1:b0:ae:17:bc:af:3e:90:74:53:28:08:af: 67:c6:23:b5:a8:ff:e2:37:52:a2:65:0f:21:34:64:90:b3:db: 2e:af:45:5c:9d:93:23:97:f7:be:cf:43:13:10:7c:fa:bb:66: 88:70:2b:c7:d0:7d:fd:5a:73:b6:22:41:7a:13:06:50:95:1c: f9:2a:58:ad:ef:db:aa:b8:1c:48:78:f6:2d:f0:3d:0d:68:84: 3d:7e:ba:a3:c9:1a:0a:cb:18:a3:58:de:fd:a8:28:7a:b6:f3: f3:23:d6:c1:d3:16:5c:55:e2:91:ff:f9:2e:6d:dc:82:df:8c: 27:24:55:05:da:e9:fb:0f:a7:84:39:e7:c9:fd:0f:10:72:27: ab:d7:84:45:da:e3:d9:c1:39:9f:62:d1:67:2b:fc:98:fd:fc: f3:d9:ac:e6:f6:63:99:44:d9:df:a6:85:98:63:65:e1:3e:6b: 9e:4a:fc:29:43:c5:3d:ee:fd:ad:4b:4f:c3:c3:9e:e7:f8:3d: 2b:42:65:86:23:87:52:2f:8e:33:60:25:6b:fa:f8:58:19:ef: a9:d8:63:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGxSAcvfOiSOrOPp2gSZKS65hRr4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkxMTAy ODNBOTg3NzAeFw0yNjA5MjUxNTU0NTlaFw0yNjA5MjYxODU2NTlaMDMxMTAvBgNV BAMTKDk3NDYzRUJFQUVDMTFGOUVFNEI0QTE5RTg4NEM2MDc2RjQ5OUQ4RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3u37iMfOQD1jBLxoyQ6k1Ax5y saIeGwecKNb01xJj3q3Fhu4Iff0xcpC/Y2302e+km/AZjUnA4mqFGzNZj7uaHuEy T2tBsmi9kYsQYBqoU3j33QXC4ESOEDX+KVFOLmts06A1JVugFvatyDMT7ViPuUce 12UsTQFgCmQJXQEBKzhvQfSuteH6Zi95zH2BCbt0xyfr81FDXnsBLBCqYc5s/2gy jW60XlJwqE8oZZYXiKvzQT6jeSWlDuxYRfgOska3n3mZw0cL2Rd2RUPgvl0loGga oqqqeCnWeiaNh7XUz59Z58/PPbreOiFVicQC69s0f4TuDcsnoAsWqrrb4jh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl0Y+vq7BH57ktKGeiExgdvSZ2O8wHwYDVR0j BBgwFoAUZtDL/e+OGLt5bhhVHwaRECg6mHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkMjUxY2EtYTA1ZS00ZmJlLTkzYmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRF RjhFMThCQjc5NkUxODU1MUYwNjkxMTAyODNBOTg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkQwQ0JGREVGOEUxOEJCNzk2RTE4NTUxRjA2OTExMDI4M0E5 ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkx MTAyODNBOTg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVTzvwnfNGULBTJvj4r6sD3aW0DKu659Ru8 lrGCNcVg5TEM0QrGkjU4obCuF7yvPpB0UygIr2fGI7Wo/+I3UqJlDyE0ZJCz2y6v RVydkyOX977PQxMQfPq7ZohwK8fQff1ac7YiQXoTBlCVHPkqWK3v26q4HEh49i3w PQ1ohD1+uqPJGgrLGKNY3v2oKHq28/Mj1sHTFlxV4pH/+S5t3ILfjCckVQXa6fsP p4Q558n9DxByJ6vXhEXa49nBOZ9i0Wcr/Jj9/PPZrOb2Y5lE2d+mhZhjZeE+a55K /ClDxT3u/a1LT8PDnuf4PStCZYYjh1IvjjNgJWv6+FgZ76nYY+8= -----END CERTIFICATE-----Generated at Fri Sep 25 20:27:06 2026 by rpki-client