$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: ZsvjIqvEoykW7AD2v85sKSzZ0OErFygAgISq9Jj7+X8= Subject key identifier: C1:57:02:AB:B2:5C:7A:33:32:1F:63:3D:DA:A7:31:8B:0C:4F:25:F9 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 41950D6CC3ED151BCF4B6AF64174FA4B0C578CA2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 42 Signing time: Fri 19 Jun 2026 23:03:52 +0000 Manifest this update: Fri 19 Jun 2026 22:58:52 +0000 Manifest next update: Sun 21 Jun 2026 01:00:52 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 3: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: FD8ulqt7/khiTGTUd3Vn0angbGkja2N3vQH1t44Rdpo=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:95:0d:6c:c3:ed:15:1b:cf:4b:6a:f6:41:74:fa:4b:0c:57:8c:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Jun 19 22:58:52 2026 GMT Not After : Jun 21 01:00:52 2026 GMT Subject: CN=C15702ABB25C7A33321F633DDAA7318B0C4F25F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:b5:8e:d0:ae:93:7c:02:e5:d5:d4:0b:40:3e: dd:d9:97:0e:ab:bf:be:17:ca:c5:18:5a:d7:81:4d: a9:94:f0:62:30:2b:96:47:aa:fe:f3:ec:96:54:6b: eb:db:e1:a6:af:7e:9c:de:92:cf:6d:3c:9c:cb:25: 31:e2:d9:8f:64:01:72:54:58:76:4a:09:cd:d0:65: f4:50:85:81:8f:a7:35:32:9a:b3:d0:e2:22:15:28: 26:08:ca:e1:6b:11:25:c3:6f:26:98:d2:a4:3c:d9: 87:57:2a:14:cb:80:aa:76:9c:fb:e7:34:d7:8a:7a: e8:5e:36:09:3b:42:d4:e1:62:e4:87:1a:c8:33:39: 87:0f:36:f2:b9:ed:f0:6b:5e:cc:06:4f:2f:c9:20: 54:c7:3b:8d:84:f5:2e:59:09:66:df:9e:6b:a2:23: fe:dc:1d:7a:10:6e:57:50:35:1a:c2:f3:4c:e4:0c: 30:f5:ea:73:9d:99:4c:79:a3:e2:80:ab:90:05:71: f2:ff:4d:20:a0:d1:c9:e9:7e:22:2a:b0:ca:a9:96: b3:66:ae:0a:af:c7:04:27:e5:3f:f8:9a:e9:fb:14: 7a:17:e6:15:68:9c:2a:f8:19:7d:7e:84:ae:cf:da: d5:98:c5:c9:a4:2e:6c:e6:7e:54:64:2f:e2:8f:a1: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:57:02:AB:B2:5C:7A:33:32:1F:63:3D:DA:A7:31:8B:0C:4F:25:F9 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:a3:02:3f:8f:96:f9:ed:95:c3:db:99:c7:4e:7b:5b:a0:22: 38:05:87:6b:08:47:5e:f2:d6:5b:4e:4c:1c:b2:d2:4d:f9:44: d1:ad:c7:16:08:f4:85:eb:bf:29:22:e4:30:d2:e6:2d:b3:7f: 53:07:81:5a:c1:02:0a:d1:9f:dd:b2:fc:e7:c4:85:a7:a6:5f: 95:05:ad:75:88:ea:7c:46:3a:86:29:95:23:61:ea:71:6f:b5: f9:ec:ca:1a:fa:17:d3:ec:9d:eb:1a:32:18:22:75:dd:c7:7d: 67:fe:4e:9e:4e:97:4c:04:10:7a:6f:05:fa:ae:3b:00:54:b8: 73:de:a0:39:2b:c2:f2:d6:72:be:0f:80:37:57:32:d2:df:42: 1e:a1:f4:36:b1:98:03:37:3c:e2:4e:ae:57:76:a8:e4:5b:75: 15:e8:d1:b3:58:e4:17:fd:01:54:91:11:ec:7e:41:ad:49:a3: 2f:af:02:a2:4f:0d:e7:e0:e7:43:f5:7a:eb:d9:54:63:74:fe: 45:ca:89:43:83:66:90:90:19:e1:1a:2f:88:68:01:6d:c7:7e: 0a:ea:50:fc:b7:31:37:6c:50:1a:51:6a:c8:fe:6e:48:68:1f: c5:76:b4:1d:0f:85:56:f8:b6:b3:51:0e:5d:ce:66:cc:09:8d: 7e:a0:6d:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZUNbMPtFRvPS2r2QXT6SwxXjKIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA2MTkyMjU4NTJaFw0yNjA2MjEwMTAwNTJaMDMxMTAvBgNV BAMTKEMxNTcwMkFCQjI1QzdBMzMzMjFGNjMzRERBQTczMThCMEM0RjI1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMtY7QrpN8AuXV1AtAPt3Zlw6r v74XysUYWteBTamU8GIwK5ZHqv7z7JZUa+vb4aavfpzeks9tPJzLJTHi2Y9kAXJU WHZKCc3QZfRQhYGPpzUymrPQ4iIVKCYIyuFrESXDbyaY0qQ82YdXKhTLgKp2nPvn NNeKeuheNgk7QtThYuSHGsgzOYcPNvK57fBrXswGTy/JIFTHO42E9S5ZCWbfnmui I/7cHXoQbldQNRrC80zkDDD16nOdmUx5o+KAq5AFcfL/TSCg0cnpfiIqsMqplrNm rgqvxwQn5T/4mun7FHoX5hVonCr4GX1+hK7P2tWYxcmkLmzmflRkL+KPob+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwVcCq7JcejMyH2M92qcxiwxPJfkwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+jAj+PlvntlcPbmcdOe1ugIjgFh2sIR17y 1ltOTByy0k35RNGtxxYI9IXrvyki5DDS5i2zf1MHgVrBAgrRn92y/OfEhaemX5UF rXWI6nxGOoYplSNh6nFvtfnsyhr6F9PsnesaMhgidd3HfWf+Tp5Ol0wEEHpvBfqu OwBUuHPeoDkrwvLWcr4PgDdXMtLfQh6h9DaxmAM3POJOrld2qORbdRXo0bNY5Bf9 AVSREex+Qa1Joy+vAqJPDefg50P1euvZVGN0/kXKiUODZpCQGeEaL4hoAW3Hfgrq UPy3MTdsUBpRasj+bkhoH8V2tB0PhVb4trNRDl3OZswJjX6gbeQ= -----END CERTIFICATE-----Generated at Sat Jun 20 11:24:28 2026 by rpki-client