$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json) Hash identifier: ToKLGKqdZMmlZuSRcpYza3w8nF0fvgDjffe70uQZCbQ= Subject key identifier: 60:D0:35:0D:48:A5:CB:79:AD:DA:08:95:56:D9:3B:56:98:80:9B:FB Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB Certificate serial: 3916952DBDBAB3FFC6C56D640F8A0288F367A1E5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 11:50:13 +0000 Manifest this update: Thu 24 Sep 2026 11:45:13 +0000 Manifest next update: Fri 25 Sep 2026 13:57:13 +0000 Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=) 2: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: nafgtnY9/3ha2PrFe/UxLGxueyWzLwKIlcUkMWpf/fk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:16:95:2d:bd:ba:b3:ff:c6:c5:6d:64:0f:8a:02:88:f3:67:a1:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB Validity Not Before: Sep 24 11:45:13 2026 GMT Not After : Sep 25 13:57:13 2026 GMT Subject: CN=60D0350D48A5CB79ADDA089556D93B5698809BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d4:fb:0d:09:40:d4:c7:fb:03:ce:af:3b:9f: dc:57:64:5f:8e:e9:ad:c8:12:11:65:ae:4d:7d:96: 15:d9:8c:42:16:f7:7d:ad:a2:fa:40:3c:42:dc:b8: 84:b1:07:fb:70:28:2b:ff:e4:7c:3d:74:36:0e:2a: 5d:fd:57:ac:e9:21:f3:0a:78:7d:c5:12:b9:83:90: e8:96:d9:b3:e8:b8:b8:f2:52:66:77:bf:a0:90:1c: d8:5d:19:37:77:7b:4d:e0:7f:02:9e:90:39:ab:73: a5:ad:30:04:8b:f0:9a:65:20:95:a1:b3:3a:de:d7: 0f:89:ff:fd:80:ff:40:1f:c2:e5:2f:08:f6:9f:99: f8:76:3c:ff:ab:03:fc:2f:b5:11:59:0a:cf:af:ff: 68:47:aa:eb:a6:7c:05:cc:f9:9c:04:4a:07:5a:cf: 76:e3:3a:e8:2a:f7:14:31:8e:93:8e:2c:d1:b6:0d: fa:e7:24:49:fb:d7:f0:e0:ef:b6:f6:dc:30:85:2d: 25:6a:2c:03:48:af:24:1c:c6:23:d2:91:1f:e3:59: 2a:25:f8:ea:33:b6:a3:2c:b2:95:a2:9e:d0:2c:05: 27:1d:de:4f:41:b0:65:b6:ef:5f:b0:c8:45:58:97: c5:33:9c:5a:9b:ce:ee:e0:8d:e1:74:d0:7d:5a:99: f5:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:D0:35:0D:48:A5:CB:79:AD:DA:08:95:56:D9:3B:56:98:80:9B:FB X509v3 Authority Key Identifier: keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:60:16:c6:fc:8c:b7:9e:b3:4e:9e:b8:20:a2:9f:09:08:f0: 3c:e4:99:be:44:bb:ed:bc:29:ac:ca:fa:d5:33:f8:5c:be:d9: 9b:4d:ec:5c:f3:fc:a2:9a:a7:e1:27:10:91:14:7c:db:9c:35: 66:a3:1e:7e:c5:65:76:53:87:74:f3:39:4e:7c:b6:85:33:e4: 68:c8:39:16:d5:38:11:87:1a:7a:6d:9a:1e:c9:79:ff:a6:e2: c5:53:e2:1e:0a:be:67:82:2b:2e:45:1e:ee:86:3f:bb:e9:ee: 53:ce:25:cf:7b:d7:f1:d4:28:e8:be:d5:91:40:93:52:47:90: 31:cc:14:3c:6b:63:0d:07:de:28:b7:3c:e1:4d:91:f7:1f:76: f0:62:25:14:0f:cf:8a:a4:eb:c8:68:f3:e0:d5:e7:68:5c:f6: 14:aa:5f:83:9f:56:f2:4b:60:e4:c7:c5:86:29:15:65:68:ab: 14:b1:57:64:76:b3:24:bb:14:b7:44:1f:e9:7f:32:9c:d6:1e: 45:b2:62:bc:fa:9a:f9:6b:3f:07:17:23:d1:f0:65:f8:c5:10: 7e:31:24:9c:3e:2f:e8:39:ad:57:a7:2b:d3:a3:b2:be:b1:95: eb:6e:da:a4:dd:c7:27:e5:4e:e2:32:15:40:56:d3:36:66:ac: 99:e0:1c:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUORaVLb26s//GxW1kD4oCiPNnoeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjY3NzBGQTM3M0NEMjc0NDE0MkQwQjU2RjY2MjcxNEVG NkQ5QzhEQjAeFw0yNjA5MjQxMTQ1MTNaFw0yNjA5MjUxMzU3MTNaMDMxMTAvBgNV BAMTKDYwRDAzNTBENDhBNUNCNzlBRERBMDg5NTU2RDkzQjU2OTg4MDlCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI1PsNCUDUx/sDzq87n9xXZF+O 6a3IEhFlrk19lhXZjEIW932tovpAPELcuISxB/twKCv/5Hw9dDYOKl39V6zpIfMK eH3FErmDkOiW2bPouLjyUmZ3v6CQHNhdGTd3e03gfwKekDmrc6WtMASL8JplIJWh szre1w+J//2A/0AfwuUvCPafmfh2PP+rA/wvtRFZCs+v/2hHquumfAXM+ZwESgda z3bjOugq9xQxjpOOLNG2DfrnJEn71/Dg77b23DCFLSVqLANIryQcxiPSkR/jWSol +OoztqMsspWintAsBScd3k9BsGW271+wyEVYl8UznFqbzu7gjeF00H1amfX5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYNA1DUily3mt2giVVtk7VpiAm/swHwYDVR0j BBgwFoAUZncPo3PNJ0QULQtW9mJxTvbZyNswDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZjMyNmU0Y2EtNTRlNC00OGJjLTllNzktYTYyZWZhZWFkMDMyLzAvNjY3NzBGQTM3 M0NEMjc0NDE0MkQwQjU2RjY2MjcxNEVGNkQ5QzhEQi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82Njc3MEZBMzczQ0QyNzQ0MTQyRDBCNTZGNjYyNzE0RUY2RDlD OERCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZjMyNmU0Y2EtNTRlNC00OGJjLTll NzktYTYyZWZhZWFkMDMyLzAvNjY3NzBGQTM3M0NEMjc0NDE0MkQwQjU2RjY2Mjcx NEVGNkQ5QzhEQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKhgFsb8jLees06euCCinwkI8Dzkmb5Eu+28 KazK+tUz+Fy+2ZtN7Fzz/KKap+EnEJEUfNucNWajHn7FZXZTh3TzOU58toUz5GjI ORbVOBGHGnptmh7Jef+m4sVT4h4KvmeCKy5FHu6GP7vp7lPOJc971/HUKOi+1ZFA k1JHkDHMFDxrYw0H3ii3POFNkfcfdvBiJRQPz4qk68ho8+DV52hc9hSqX4OfVvJL YOTHxYYpFWVoqxSxV2R2syS7FLdEH+l/MpzWHkWyYrz6mvlrPwcXI9HwZfjFEH4x JJw+L+g5rVenK9Ojsr6xletu2qTdxyflTuIyFUBW0zZmrJngHLY= -----END CERTIFICATE-----Generated at Fri Sep 25 02:43:55 2026 by rpki-client