$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: t7veCgDhpK3qsR35KskZcm6PShgRQqvFMVGdmS+hiAM= Subject key identifier: 6D:87:45:F8:25:E6:77:9E:4B:07:DC:99:88:DC:9E:B2:30:C5:F4:96 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 3C2CD96B09E6123165A3E61771C9996C6FBA1C08 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: DB Signing time: Wed 14 Oct 2026 12:36:11 +0000 Manifest this update: Wed 14 Oct 2026 12:31:11 +0000 Manifest next update: Thu 15 Oct 2026 16:02:11 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 2: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: vi+AtLxiiZQgbkdCFAp4ghM7JN7aJav1kuKUNFbKUAo=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) 4: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 Oct 2026 16:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2c:d9:6b:09:e6:12:31:65:a3:e6:17:71:c9:99:6c:6f:ba:1c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Oct 14 12:31:11 2026 GMT Not After : Oct 15 16:02:11 2026 GMT Subject: CN=6D8745F825E6779E4B07DC9988DC9EB230C5F496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:8e:7d:f1:61:46:22:4e:ac:5f:47:e9:3d:24: c4:6a:a4:be:5f:d0:db:75:d2:38:2b:f1:44:38:fd: 2a:a7:c3:99:af:9e:b4:5c:63:88:ac:bd:c2:0b:f8: 00:8d:5f:f9:b2:28:6f:d4:55:26:5f:e6:8c:5b:e3: 1f:44:31:ae:f6:8a:f5:d1:08:a2:b2:7e:f3:51:53: 12:59:ca:3c:a3:e8:af:f0:5a:0e:4d:95:00:d5:e5: 77:ae:a0:4f:8b:d4:2e:c1:fa:58:e8:a7:34:7a:74: 72:28:b4:11:b6:ac:f5:29:b5:ff:8d:c1:ad:ff:c6: 25:ad:4c:23:69:68:49:7b:68:d5:23:c3:82:2b:f0: 67:ae:e0:5b:39:f3:05:f5:01:62:4b:97:3e:d9:64: b8:e8:ff:5a:ea:0e:fe:53:45:b2:e3:b1:d3:00:9b: 73:d6:b8:78:54:90:00:c4:78:00:8d:8a:e5:22:2b: 89:96:f9:0d:35:b5:ab:4d:b9:09:1c:8b:5f:9f:fe: 34:88:d6:5d:69:80:44:f9:0e:af:cc:5a:ed:c2:8e: 56:ae:1a:5d:f7:0d:ef:dd:3b:10:a6:e5:5b:83:dc: 43:9a:5b:04:96:8b:3c:87:90:4a:61:e0:bf:78:f3: 79:e3:9f:16:83:41:78:20:82:7f:9b:0f:b9:25:4f: 53:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:87:45:F8:25:E6:77:9E:4B:07:DC:99:88:DC:9E:B2:30:C5:F4:96 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:69:2d:07:a4:d9:83:4f:90:f0:75:88:e5:f0:96:a0:c2:19: 6f:25:35:74:d2:8f:f3:cd:8d:13:25:7b:35:20:fe:ae:b9:cd: db:a8:1c:f3:66:49:9e:9a:62:17:29:75:7e:12:a0:e2:22:91: 26:bd:ae:fc:cc:15:7b:35:d6:b3:47:d8:3d:85:a7:cf:e6:ba: e5:b3:38:4c:01:a2:2f:7c:f3:a6:2a:63:d9:40:c2:8a:23:6d: 9f:84:db:2f:43:8f:06:ab:d9:54:90:fb:36:7a:cb:ba:d6:79: 91:f6:45:df:a0:72:f0:31:9b:ab:d9:68:c2:16:cf:45:54:1a: 5e:20:e3:aa:7e:4c:0e:72:d4:f8:4f:b3:84:42:a3:a3:7e:75: 02:2a:31:fe:1d:a4:bc:df:9e:4e:09:42:3b:1c:83:95:51:93: ce:5d:ef:26:96:f4:db:6b:1c:8d:9e:a3:59:79:5f:b0:88:3f: a0:14:9b:d7:fd:f8:9f:ae:7f:15:54:8f:5b:76:38:df:56:bf: 28:ed:76:4c:68:29:cc:e2:57:09:39:03:eb:14:72:6d:e9:87: 06:f3:a2:da:95:84:c1:8b:d3:0c:3b:dd:8b:14:39:40:28:3c: 3e:5b:46:f0:45:14:db:97:c8:46:6f:02:b3:32:49:63:65:90: f9:69:a1:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCzZawnmEjFlo+YXccmZbG+6HAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjEwMTQxMjMxMTFaFw0yNjEwMTUxNjAyMTFaMDMxMTAvBgNV BAMTKDZEODc0NUY4MjVFNjc3OUU0QjA3REM5OTg4REM5RUIyMzBDNUY0OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRjn3xYUYiTqxfR+k9JMRqpL5f 0Nt10jgr8UQ4/Sqnw5mvnrRcY4isvcIL+ACNX/myKG/UVSZf5oxb4x9EMa72ivXR CKKyfvNRUxJZyjyj6K/wWg5NlQDV5XeuoE+L1C7B+ljopzR6dHIotBG2rPUptf+N wa3/xiWtTCNpaEl7aNUjw4Ir8Geu4Fs58wX1AWJLlz7ZZLjo/1rqDv5TRbLjsdMA m3PWuHhUkADEeACNiuUiK4mW+Q01tatNuQkci1+f/jSI1l1pgET5Dq/MWu3Cjlau Gl33De/dOxCm5VuD3EOaWwSWizyHkEph4L9483njnxaDQXgggn+bD7klT1O/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbYdF+CXmd55LB9yZiNyesjDF9JYwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxpLQek2YNPkPB1iOXwlqDCGW8lNXTSj/PN jRMlezUg/q65zduoHPNmSZ6aYhcpdX4SoOIikSa9rvzMFXs11rNH2D2Fp8/muuWz OEwBoi9886YqY9lAwoojbZ+E2y9Djwar2VSQ+zZ6y7rWeZH2Rd+gcvAxm6vZaMIW z0VUGl4g46p+TA5y1PhPs4RCo6N+dQIqMf4dpLzfnk4JQjscg5VRk85d7yaW9Ntr HI2eo1l5X7CIP6AUm9f9+J+ufxVUj1t2ON9WvyjtdkxoKcziVwk5A+sUcm3phwbz otqVhMGL0ww73YsUOUAoPD5bRvBFFNuXyEZvArMySWNlkPlpod0= -----END CERTIFICATE-----Generated at Thu Oct 15 05:11:44 2026 by rpki-client