$ rpki-client -vvvf rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft File: 66B373A1A8E4839699E23D35A5592185C65D4217.mft (raw, json) Hash identifier: 8Bz8qImINWb5VKX/ZAXUmbqRBgnV8n44QaQyZsrZT88= Subject key identifier: E2:38:5B:0C:33:6A:9E:BD:3A:82:54:E3:5C:4C:F8:0C:B4:9C:46:67 Authority key identifier: 66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17 Certificate issuer: /CN=66B373A1A8E4839699E23D35A5592185C65D4217 Certificate serial: 17A8FF27EDD9387EDB24E38FFA9320C88D8CD289 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 08:08:38 +0000 Manifest this update: Thu 17 Sep 2026 08:03:38 +0000 Manifest next update: Fri 18 Sep 2026 10:34:38 +0000 Files and hashes: 1: 66B373A1A8E4839699E23D35A5592185C65D4217.crl (hash: G1ep2NOYBYCR16wFff2VjaJiN0cLzy9jyjEg5jJvXwA=) 2: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: WyiqkRr/WwMALxqKWgtBGW8I5DUVuOnXnmofYyW+gKQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a8:ff:27:ed:d9:38:7e:db:24:e3:8f:fa:93:20:c8:8d:8c:d2:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66B373A1A8E4839699E23D35A5592185C65D4217 Validity Not Before: Sep 17 08:03:38 2026 GMT Not After : Sep 18 10:34:38 2026 GMT Subject: CN=E2385B0C336A9EBD3A8254E35C4CF80CB49C4667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:58:18:9e:28:55:e9:08:f8:4a:d0:a8:4d:b7: 7c:77:82:23:25:fd:55:5b:01:f4:fe:3c:c7:dc:4c: 91:9e:1e:28:1c:1d:3c:64:28:d0:c7:c7:f2:a4:ed: 5d:05:f7:2b:6b:21:6c:8d:67:cd:13:96:b3:0f:3c: 58:c9:34:e9:e4:2d:a4:6f:a0:47:32:f5:6b:de:24: 6f:a4:27:9f:eb:8b:7d:b7:89:f5:94:4b:57:e7:77: 04:3b:04:c7:f8:20:bd:8a:ca:f7:89:39:b5:84:70: c7:93:3f:d9:3a:64:e6:db:3d:38:35:9e:c7:b4:63: bc:e2:13:3c:39:04:59:e8:03:2c:09:01:6e:3d:62: 4d:2a:bb:ae:88:33:3f:18:b8:ad:34:49:ab:41:87: 63:ec:63:93:36:7f:88:2d:aa:a5:09:f5:6d:78:dc: f2:32:85:43:91:75:0d:47:58:fb:70:6b:e8:df:eb: 26:72:9a:58:3b:4c:77:17:92:8c:67:33:c1:93:67: 12:2f:65:86:3c:9a:44:94:ae:52:8a:c4:f0:14:6c: b9:be:0c:cb:0a:cd:71:2e:21:bf:43:5b:dc:c3:eb: f4:91:ac:06:bf:90:8a:15:56:ca:f2:7a:ce:16:38: ea:22:af:2c:62:62:f6:5f:fa:1f:7f:4d:6d:71:62: cd:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:38:5B:0C:33:6A:9E:BD:3A:82:54:E3:5C:4C:F8:0C:B4:9C:46:67 X509v3 Authority Key Identifier: keyid:66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:3e:98:f5:87:91:50:bd:61:79:7e:2d:90:8b:7a:a2:c3:c6: d5:ee:61:de:59:31:23:24:1f:2b:cf:28:f3:fb:0b:f4:e2:83: 9a:af:53:82:e5:be:2a:84:42:c2:73:a5:9a:c8:3e:c0:8e:cb: da:65:63:49:96:9c:b6:61:8c:a0:60:db:d9:ac:4a:fe:51:04: e3:cf:ec:cd:c6:b2:e2:d2:84:b9:0e:aa:21:5d:2c:93:2b:c3: 43:cf:9b:82:e1:f0:13:15:42:8d:79:49:f2:e0:22:55:91:7c: 2c:d5:e8:98:6a:ac:e3:d0:76:af:00:09:53:29:96:c1:aa:a4: 40:b0:40:af:b1:5c:8f:58:68:21:f3:ad:89:76:84:eb:aa:a3: 19:79:69:91:d5:03:1d:54:db:90:38:bd:92:f8:7c:c1:d7:35: 84:7a:26:ce:d4:cd:fc:1d:84:e0:5a:3d:f6:2c:fe:5b:2c:06: ef:64:b4:89:5e:9a:45:53:e2:19:cb:cc:7b:b0:e2:4c:f7:f5: b1:a6:15:df:82:10:ae:b0:15:c6:e6:95:5a:a3:d9:8c:3f:9d: 4b:54:60:5c:ac:63:f5:35:77:08:30:79:40:15:27:71:85:ec: 2c:9d:7c:af:a5:f7:ea:23:2f:b6:d1:0e:01:fd:d1:66:7a:f7: 30:85:86:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6j/J+3ZOH7bJOOP+pMgyI2M0okwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZCMzczQTFBOEU0ODM5Njk5RTIzRDM1QTU1OTIxODVD NjVENDIxNzAeFw0yNjA5MTcwODAzMzhaFw0yNjA5MTgxMDM0MzhaMDMxMTAvBgNV BAMTKEUyMzg1QjBDMzM2QTlFQkQzQTgyNTRFMzVDNENGODBDQjQ5QzQ2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAWBieKFXpCPhK0KhNt3x3giMl /VVbAfT+PMfcTJGeHigcHTxkKNDHx/Kk7V0F9ytrIWyNZ80TlrMPPFjJNOnkLaRv oEcy9WveJG+kJ5/ri323ifWUS1fndwQ7BMf4IL2KyveJObWEcMeTP9k6ZObbPTg1 nse0Y7ziEzw5BFnoAywJAW49Yk0qu66IMz8YuK00SatBh2PsY5M2f4gtqqUJ9W14 3PIyhUORdQ1HWPtwa+jf6yZymlg7THcXkoxnM8GTZxIvZYY8mkSUrlKKxPAUbLm+ DMsKzXEuIb9DW9zD6/SRrAa/kIoVVsryes4WOOoiryxiYvZf+h9/TW1xYs3ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4jhbDDNqnr06glTjXEz4DLScRmcwHwYDVR0j BBgwFoAUZrNzoajkg5aZ4j01pVkhhcZdQhcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjE3Nzk1YjYtMGRmNS00NzFiLWI3ODgtNzI1ZjllZjdjMDhkLzAvNjZCMzczQTFB OEU0ODM5Njk5RTIzRDM1QTU1OTIxODVDNjVENDIxNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkIzNzNBMUE4RTQ4Mzk2OTlFMjNEMzVBNTU5MjE4NUM2NUQ0 MjE3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNjZCMzczQTFBOEU0ODM5Njk5RTIzRDM1QTU1OTIx ODVDNjVENDIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIM+mPWHkVC9YXl+LZCLeqLDxtXuYd5ZMSMk HyvPKPP7C/Tig5qvU4LlviqEQsJzpZrIPsCOy9plY0mWnLZhjKBg29msSv5RBOPP 7M3GsuLShLkOqiFdLJMrw0PPm4Lh8BMVQo15SfLgIlWRfCzV6JhqrOPQdq8ACVMp lsGqpECwQK+xXI9YaCHzrYl2hOuqoxl5aZHVAx1U25A4vZL4fMHXNYR6Js7Uzfwd hOBaPfYs/lssBu9ktIlemkVT4hnLzHuw4kz39bGmFd+CEK6wFcbmlVqj2Yw/nUtU YFysY/U1dwgweUAVJ3GF7CydfK+l9+ojL7bRDgH90WZ69zCFhjQ= -----END CERTIFICATE-----Generated at Thu Sep 17 14:25:19 2026 by rpki-client