$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: WZH1OKQ7o7oiD9TqDg2wkNpwfmz+TeVpU1Ib6/qlrow= Subject key identifier: 79:6F:48:28:1C:A9:99:76:8E:21:BA:3F:03:CD:29:24:0F:F2:AC:F2 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 04704F695B0CB08D9330F9322799B0877D4C016F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 92 Signing time: Wed 19 Aug 2026 17:04:42 +0000 Manifest this update: Wed 19 Aug 2026 16:59:42 +0000 Manifest next update: Thu 20 Aug 2026 18:15:42 +0000 Files and hashes: 1: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 2: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: h8qvjTcpvv5y8AwSzySnkAJFm8F8yinnqlcEnFri9/E=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 20 Aug 2026 18:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:70:4f:69:5b:0c:b0:8d:93:30:f9:32:27:99:b0:87:7d:4c:01:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: Aug 19 16:59:42 2026 GMT Not After : Aug 20 18:15:42 2026 GMT Subject: CN=796F48281CA999768E21BA3F03CD29240FF2ACF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:50:b6:22:a0:74:44:1b:1d:19:69:03:62:34: f2:cf:26:2f:b1:8e:9a:b1:32:6b:ba:38:35:ba:16: 5a:4c:69:b1:04:89:f2:43:ba:bd:81:3b:89:10:20: f8:d9:86:ca:89:45:60:84:10:17:7d:1f:d5:60:ba: f8:fb:99:40:61:87:e0:3d:e0:3c:46:16:ec:e4:31: a8:ea:6c:23:d4:f4:1b:1d:38:3e:90:4f:ca:41:20: 00:9f:57:92:15:e0:b5:a5:5c:94:1f:d4:ec:74:19: 51:01:f3:e8:a6:80:77:d0:7f:b9:86:46:fd:70:86: ed:d3:cd:50:7d:97:4e:cc:3b:20:1e:c5:86:8b:bb: db:5d:48:f2:79:34:46:5c:e8:8e:4d:ca:4d:9b:d8: c1:a8:9b:d5:b7:c6:51:e5:5d:34:3b:d0:20:6a:6d: 03:df:4d:f0:cd:d9:d9:ac:a6:36:06:6b:b9:62:c0: 5e:5d:d0:2c:43:eb:a1:b7:cf:dd:7f:0d:77:d1:05: ba:5f:47:f8:f0:21:2d:e2:79:6b:64:bd:62:39:ac: d5:ad:9b:a4:e3:c9:52:16:a8:7e:7a:64:47:06:16: bb:36:25:2c:53:a8:f5:d9:c9:27:a3:3b:5c:01:f7: 82:09:46:c4:80:da:c3:0f:76:f4:ec:5a:8a:f3:9d: 94:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6F:48:28:1C:A9:99:76:8E:21:BA:3F:03:CD:29:24:0F:F2:AC:F2 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:8e:97:77:69:b5:2e:bc:95:72:a1:bd:86:1e:c0:cf:75:35: ea:35:75:4a:65:28:4f:01:ae:9e:3e:17:ee:d8:7b:4d:73:49: e9:09:ed:6f:8a:f3:48:d9:5b:c8:74:28:35:4c:a0:66:53:df: 5a:1b:7e:a8:e9:c4:ac:08:33:6b:52:43:b1:c7:19:30:db:77: e2:b8:e7:a4:d0:6c:19:33:66:82:49:5b:e6:d5:cc:98:fe:3e: 02:e4:1e:8d:4b:3f:4f:53:47:f4:9f:81:8b:7e:5e:4c:a5:5a: 2e:8b:2f:d3:b0:92:ac:36:77:71:3b:de:68:ec:b8:b9:eb:04: 75:cf:63:6a:7b:f1:a5:eb:cd:a5:c7:a2:3e:b0:53:d6:9b:3d: 51:9a:c2:d1:69:94:fd:52:25:1f:2a:4c:ff:20:ff:a4:f2:32: 03:7b:07:9d:59:0a:0a:dc:77:35:a3:6e:ae:38:10:b7:6f:d1: 1e:b9:ec:c7:90:77:eb:5a:52:ef:0c:f3:12:be:3a:d6:52:4f: 08:90:a9:ce:f9:d2:b6:ff:74:01:1d:22:c6:88:35:18:2f:e1: d9:ea:49:70:a7:8a:ca:c4:1c:33:ac:41:da:ce:59:da:51:01: e1:49:56:25:10:e4:38:93:8c:c8:76:fb:6a:47:ba:95:ed:bc: 6a:b9:22:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBHBPaVsMsI2TMPkyJ5mwh31MAW8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA4MTkxNjU5NDJaFw0yNjA4MjAxODE1NDJaMDMxMTAvBgNV BAMTKDc5NkY0ODI4MUNBOTk5NzY4RTIxQkEzRjAzQ0QyOTI0MEZGMkFDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpULYioHREGx0ZaQNiNPLPJi+x jpqxMmu6ODW6FlpMabEEifJDur2BO4kQIPjZhsqJRWCEEBd9H9Vguvj7mUBhh+A9 4DxGFuzkMajqbCPU9BsdOD6QT8pBIACfV5IV4LWlXJQf1Ox0GVEB8+imgHfQf7mG Rv1whu3TzVB9l07MOyAexYaLu9tdSPJ5NEZc6I5Nyk2b2MGom9W3xlHlXTQ70CBq bQPfTfDN2dmspjYGa7liwF5d0CxD66G3z91/DXfRBbpfR/jwIS3ieWtkvWI5rNWt m6TjyVIWqH56ZEcGFrs2JSxTqPXZySejO1wB94IJRsSA2sMPdvTsWorznZRvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeW9IKBypmXaOIbo/A80pJA/yrPIwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEuOl3dptS68lXKhvYYewM91Neo1dUplKE8B rp4+F+7Ye01zSekJ7W+K80jZW8h0KDVMoGZT31obfqjpxKwIM2tSQ7HHGTDbd+K4 56TQbBkzZoJJW+bVzJj+PgLkHo1LP09TR/SfgYt+XkylWi6LL9Owkqw2d3E73mjs uLnrBHXPY2p78aXrzaXHoj6wU9abPVGawtFplP1SJR8qTP8g/6TyMgN7B51ZCgrc dzWjbq44ELdv0R657MeQd+taUu8M8xK+OtZSTwiQqc750rb/dAEdIsaINRgv4dnq SXCnisrEHDOsQdrOWdpRAeFJViUQ5DiTjMh2+2pHupXtvGq5IgA= -----END CERTIFICATE-----Generated at Thu Aug 20 07:04:12 2026 by rpki-client