$ rpki-client -vvvf rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft File: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft (raw, json) Hash identifier: 5ujeMIIJM9bZ1sXwT3c1wD3UUgzoQVCveH6BEXWm5os= Subject key identifier: C0:D1:F8:48:EC:23:B9:BE:F2:89:B7:F1:A8:E3:C1:80:84:F2:48:6A Authority key identifier: 66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13 Certificate issuer: /CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13 Certificate serial: 0BDEFD0F522BC63B4331BE836851667D355A69F0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 22:36:53 +0000 Manifest this update: Wed 16 Sep 2026 22:31:53 +0000 Manifest next update: Fri 18 Sep 2026 00:09:53 +0000 Files and hashes: 1: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl (hash: +DT05Oyy3/LNP9tKwdkO5rM2JKEZsrhe1zFVSXIwd8U=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 00:09:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:de:fd:0f:52:2b:c6:3b:43:31:be:83:68:51:66:7d:35:5a:69:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13 Validity Not Before: Sep 16 22:31:53 2026 GMT Not After : Sep 18 00:09:53 2026 GMT Subject: CN=C0D1F848EC23B9BEF289B7F1A8E3C18084F2486A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:84:cd:59:55:76:63:7e:bd:7c:ef:58:06:66: 1a:0d:ed:9b:0d:83:c7:2e:73:b9:c4:52:31:5e:90: 83:69:ed:03:a7:04:34:74:8f:05:ed:fe:4b:7d:8f: 03:ea:be:7c:40:1a:99:af:8e:14:90:ce:5c:d2:05: 0f:b9:72:df:5e:a6:a2:00:f4:43:81:79:af:53:3e: 40:08:22:3f:89:4b:28:58:88:54:06:57:a8:5f:74: e4:f7:82:10:87:ba:87:04:a4:ea:e7:f8:67:cd:fc: b0:42:06:bd:82:ba:5a:85:d2:10:46:06:f5:8f:3b: 2e:ad:3d:50:56:f6:7d:86:9b:3b:a6:c7:19:99:b1: 3e:0d:ce:a2:89:33:48:75:51:b6:e4:97:b5:a4:b2: 08:dd:81:fa:e3:2b:7b:f4:44:01:5f:16:98:a3:40: 30:26:45:a6:99:1a:78:21:11:26:5e:95:42:85:7d: 21:d4:c1:e8:62:87:34:be:70:9e:44:f0:69:01:9c: 5e:26:98:6a:e7:d7:11:72:38:2b:52:3d:35:1c:19: 32:67:72:37:83:13:a3:f2:c7:7c:e7:f5:fc:5e:85: a1:a4:3b:57:d3:ae:21:7f:7c:0d:dd:26:51:af:4a: df:e1:aa:a6:18:4a:1b:3f:38:b3:e5:6a:c4:b8:70: 62:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:D1:F8:48:EC:23:B9:BE:F2:89:B7:F1:A8:E3:C1:80:84:F2:48:6A X509v3 Authority Key Identifier: keyid:66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:d0:65:55:48:d2:8c:67:27:11:19:be:24:2b:33:fd:9e:99: 45:47:2e:c5:85:d4:37:43:77:76:c9:03:de:7f:5d:89:c0:8c: 66:4d:8f:01:62:a7:cd:08:ee:12:cd:c0:60:41:e5:6f:a9:51: fb:0d:8d:09:a9:0a:57:47:06:ed:8b:a8:8a:8c:98:01:5c:2e: 7b:b9:ee:6c:dd:fc:e1:ad:bb:77:bf:b0:a6:9a:d2:a7:d6:47: aa:97:16:e1:c0:af:30:5a:3b:63:00:e9:dd:de:f4:1b:6a:f8: 2a:f5:03:b0:e2:d8:a7:06:d7:9d:fd:4c:6d:ae:48:37:48:ec: 39:25:6a:28:de:f7:a4:63:16:7f:b2:11:27:d3:ee:6b:24:38: fd:68:b3:8f:08:5c:f7:1d:03:97:8f:af:d1:74:82:fb:f7:4f: 0c:f6:7b:48:7b:bf:3c:38:3f:0b:10:45:0f:08:e1:c9:a8:7f: 07:f8:71:71:1a:f8:c8:d1:42:c5:06:a1:79:18:5b:3c:a6:3c: f2:88:48:aa:d3:fc:cf:a1:14:15:d0:0c:1c:38:68:b2:ad:89: 82:e7:cc:a1:ad:ab:f8:6a:ba:d0:f5:e1:aa:83:a0:c2:cb:e0: 07:67:e2:fc:4c:6c:0e:f0:34:ff:54:f0:3e:bd:01:9d:08:33: b7:10:31:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC979D1IrxjtDMb6DaFFmfTVaafAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjYxQjJDRjQyOUZCNEI4RUI0QzRDRTEzMEJBMzczRjk1 RjU4NEUxMzAeFw0yNjA5MTYyMjMxNTNaFw0yNjA5MTgwMDA5NTNaMDMxMTAvBgNV BAMTKEMwRDFGODQ4RUMyM0I5QkVGMjg5QjdGMUE4RTNDMTgwODRGMjQ4NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZhM1ZVXZjfr1871gGZhoN7ZsN g8cuc7nEUjFekINp7QOnBDR0jwXt/kt9jwPqvnxAGpmvjhSQzlzSBQ+5ct9epqIA 9EOBea9TPkAIIj+JSyhYiFQGV6hfdOT3ghCHuocEpOrn+GfN/LBCBr2CulqF0hBG BvWPOy6tPVBW9n2GmzumxxmZsT4NzqKJM0h1Ubbkl7WksgjdgfrjK3v0RAFfFpij QDAmRaaZGnghESZelUKFfSHUwehihzS+cJ5E8GkBnF4mmGrn1xFyOCtSPTUcGTJn cjeDE6Pyx3zn9fxehaGkO1fTriF/fA3dJlGvSt/hqqYYShs/OLPlasS4cGKBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwNH4SOwjub7yibfxqOPBgITySGowHwYDVR0j BBgwFoAUZhss9Cn7S460xM4TC6Nz+V9YThMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODBhZDQwMjMtY2MyYi00MTIzLTk5MzktYTU1ODUxZmNhNjE5LzAvNjYxQjJDRjQy OUZCNEI4RUI0QzRDRTEzMEJBMzczRjk1RjU4NEUxMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NjFCMkNGNDI5RkI0QjhFQjRDNENFMTMwQkEzNzNGOTVGNTg0 RTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBhZDQwMjMtY2MyYi00MTIzLTk5 MzktYTU1ODUxZmNhNjE5LzAvNjYxQjJDRjQyOUZCNEI4RUI0QzRDRTEzMEJBMzcz Rjk1RjU4NEUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzQZVVI0oxnJxEZviQrM/2emUVHLsWF1DdD d3bJA95/XYnAjGZNjwFip80I7hLNwGBB5W+pUfsNjQmpCldHBu2LqIqMmAFcLnu5 7mzd/OGtu3e/sKaa0qfWR6qXFuHArzBaO2MA6d3e9Btq+Cr1A7Di2KcG1539TG2u SDdI7Dklaije96RjFn+yESfT7mskOP1os48IXPcdA5ePr9F0gvv3Twz2e0h7vzw4 PwsQRQ8I4cmofwf4cXEa+MjRQsUGoXkYWzymPPKISKrT/M+hFBXQDBw4aLKtiYLn zKGtq/hqutD14aqDoMLL4Adn4vxMbA7wNP9U8D69AZ0IM7cQMaA= -----END CERTIFICATE-----Generated at Thu Sep 17 10:50:40 2026 by rpki-client