$ rpki-client -vvf rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft File: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft (raw, json) Hash identifier: 7YNs8SobPLWU4UyynEVFZDxim9m1aTYaBupTTi6/hkQ= Subject key identifier: D6:A5:EB:39:C9:73:E8:17:E6:3B:4D:9A:D6:2A:D1:1F:73:DA:AB:B6 Authority key identifier: 66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF Certificate issuer: /CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Certificate serial: 238E2FD7A498BBBCAA878BA038D9681276C15D2A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft Manifest number: 05 Signing time: Tue 05 May 2026 11:12:08 +0000 Manifest this update: Tue 05 May 2026 11:07:08 +0000 Manifest next update: Wed 06 May 2026 13:09:08 +0000 Files and hashes: 1: 66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl (hash: Z56CGzGtbZ4+KA3jBUsQjsIXziDwZL/p1mY1UijgMKc=) 2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: SL/yrP/Fhy/G1QeVkJV1tJKwwMgNUneA0fZ0SOOfhaA=) 3: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: jrejPqhgeXJ7fzveyIcmJanL87An5SyUE6TR1in1WPk=) 4: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: x0nA/CnVCiI7oTORvAZnbTpOQ4yqrWrhO7V1T/ZNV4M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 06 May 2026 10:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:8e:2f:d7:a4:98:bb:bc:aa:87:8b:a0:38:d9:68:12:76:c1:5d:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF Validity Not Before: May 5 11:07:08 2026 GMT Not After : May 6 13:09:08 2026 GMT Subject: CN=D6A5EB39C973E817E63B4D9AD62AD11F73DAABB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:29:83:6e:3b:64:a0:9a:bf:88:68:ac:e1:18: 4a:fe:59:fe:a1:78:6d:80:8f:7b:8c:64:94:8f:65: 39:1b:7e:b8:63:6a:19:22:95:32:cf:4c:fb:98:45: a1:e2:e5:ea:0d:c3:d4:23:ea:63:56:c4:5a:bb:49: cd:fa:4c:17:7d:71:fa:50:cc:ae:4a:ff:20:38:c7: ef:8c:fe:b0:e3:ad:80:20:ea:78:7c:0d:f3:8a:e0: 7e:c9:31:a3:64:b0:65:67:0f:cc:fd:17:a8:bf:75: d6:39:f7:ba:40:3f:3d:33:ae:47:fd:14:7d:6a:a6: 34:8e:bd:f9:84:d9:9f:92:4b:06:5e:7e:12:89:2d: a9:11:ba:f3:01:b0:04:e1:7b:57:77:62:7e:e3:9a: 8b:1c:68:c6:7d:2c:fd:fe:7b:b6:61:d5:66:55:4e: a6:7e:d8:9c:23:37:97:6a:69:6d:17:03:1a:b9:f6: b6:0a:df:4b:2f:ee:b8:d6:ca:77:82:62:cb:85:ab: 80:2a:10:81:e0:a2:59:ef:04:43:5a:24:6a:99:a0: d9:02:51:06:cd:a7:a4:ad:47:3a:0a:fb:cc:5a:d0: fb:44:5d:2e:70:b7:01:ff:80:8b:6b:69:1f:3e:1a: 25:e5:84:23:c3:6c:e7:d5:10:4f:c4:6c:19:ce:71: 6a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A5:EB:39:C9:73:E8:17:E6:3B:4D:9A:D6:2A:D1:1F:73:DA:AB:B6 X509v3 Authority Key Identifier: keyid:66:FB:E9:41:5C:F5:BC:2D:3D:9A:B3:A8:76:C9:0F:86:B6:36:C9:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/66FBE9415CF5BC2D3D9AB3A876C90F86B636C9AF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9e:f2:0b:c1:ff:9f:92:84:47:33:49:ae:54:25:c5:8b:cb: 2f:8a:1b:76:fe:8c:75:c4:08:5d:b6:7f:d9:27:ac:12:f8:b1: 9e:d6:84:50:e0:08:69:5a:ba:7f:b1:c6:61:dc:98:38:0b:be: 89:b0:89:e8:99:f7:47:91:5e:11:69:43:3c:bd:1c:05:0c:b2: 3a:92:67:8b:3f:50:c5:bf:21:28:37:1b:b6:4d:36:90:ed:08: c3:86:f1:1c:3a:72:5c:aa:99:f1:b4:bb:99:57:ba:0b:25:f6: 89:da:03:47:a1:fe:2f:42:25:51:14:f0:b8:ae:9f:fc:d6:f4: f7:d5:5b:64:b2:f9:11:16:42:b7:7b:9f:9c:87:3d:8e:a8:b9: c5:c8:0b:7f:53:f5:61:21:40:48:5f:75:c9:ba:1e:88:40:f3: 7f:a7:56:46:73:f1:10:cf:5a:aa:8c:59:6f:61:8c:ca:a2:52: d5:5c:07:1d:32:2e:01:ea:f5:d8:98:24:33:be:55:ad:31:a2: 8a:2c:bf:df:25:a5:5a:f9:c8:46:ec:a0:79:b9:78:3e:50:9b: aa:4e:36:e3:9b:dd:59:e8:47:ae:25:9d:25:5b:a1:cc:c9:5e: 18:f5:89:2c:57:50:02:66:0e:a2:65:20:dc:7e:d7:8c:e1:8a: df:3d:f8:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI44v16SYu7yqh4ugONloEnbBXSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZC NjM2QzlBRjAeFw0yNjA1MDUxMTA3MDhaFw0yNjA1MDYxMzA5MDhaMDMxMTAvBgNV BAMTKEQ2QTVFQjM5Qzk3M0U4MTdFNjNCNEQ5QUQ2MkFEMTFGNzNEQUFCQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkKYNuO2Sgmr+IaKzhGEr+Wf6h eG2Aj3uMZJSPZTkbfrhjahkilTLPTPuYRaHi5eoNw9Qj6mNWxFq7Sc36TBd9cfpQ zK5K/yA4x++M/rDjrYAg6nh8DfOK4H7JMaNksGVnD8z9F6i/ddY597pAPz0zrkf9 FH1qpjSOvfmE2Z+SSwZefhKJLakRuvMBsAThe1d3Yn7jmoscaMZ9LP3+e7Zh1WZV TqZ+2JwjN5dqaW0XAxq59rYK30sv7rjWyneCYsuFq4AqEIHgolnvBENaJGqZoNkC UQbNp6StRzoK+8xa0PtEXS5wtwH/gItraR8+GiXlhCPDbOfVEE/EbBnOcWqTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1qXrOclz6BfmO02a1irRH3Paq7YwHwYDVR0j BBgwFoAUZvvpQVz1vC09mrOodskPhrY2ya8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGZhNTg5ZWYtOWYzZC00M2JjLWJhMzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1 Q0Y1QkMyRDNEOUFCM0E4NzZDOTBGODZCNjM2QzlBRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkZCRTk0MTVDRjVCQzJEM0Q5QUIzQTg3NkM5MEY4NkI2MzZD OUFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvNjZGQkU5NDE1Q0Y1QkMyRDNEOUFCM0E4NzZDOTBG ODZCNjM2QzlBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGe8gvB/5+ShEczSa5UJcWLyy+KG3b+jHXE CF22f9knrBL4sZ7WhFDgCGlaun+xxmHcmDgLvomwieiZ90eRXhFpQzy9HAUMsjqS Z4s/UMW/ISg3G7ZNNpDtCMOG8Rw6clyqmfG0u5lXugsl9onaA0eh/i9CJVEU8Liu n/zW9PfVW2Sy+REWQrd7n5yHPY6oucXIC39T9WEhQEhfdcm6HohA83+nVkZz8RDP WqqMWW9hjMqiUtVcBx0yLgHq9diYJDO+Va0xooosv98lpVr5yEbsoHm5eD5Qm6pO NuOb3VnoR64lnSVboczJXhj1iSxXUAJmDqJlINx+14zhit89+JQ= -----END CERTIFICATE-----Generated at Tue May 5 14:17:11 2026 by rpki-client