$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft File: 66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json) Hash identifier: ev3++XpTw+fogUpQyOTj7pWLiHkaEG9gJUgYzTYrBjY= Subject key identifier: 4A:E0:AD:17:AD:01:08:BF:64:15:52:B1:DD:23:69:FE:01:48:0A:56 Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 Certificate issuer: /CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Certificate serial: 2CBC9DAFA6F536C0C39487B1A1FE58D83E3B03C8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 20:56:09 +0000 Manifest this update: Fri 19 Jun 2026 20:51:09 +0000 Manifest next update: Sat 20 Jun 2026 23:11:09 +0000 Files and hashes: 1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: rl5U3Nngh1W4IRSctZxSV4DF3LbCWmW7jWy/l3WxhhQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 23:11:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:bc:9d:af:a6:f5:36:c0:c3:94:87:b1:a1:fe:58:d8:3e:3b:03:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877 Validity Not Before: Jun 19 20:51:09 2026 GMT Not After : Jun 20 23:11:09 2026 GMT Subject: CN=4AE0AD17AD0108BF641552B1DD2369FE01480A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:55:8d:62:7b:14:23:a7:4b:20:d5:18:50: 7f:f5:e4:85:2d:73:4f:37:d1:11:28:0e:30:3b:02: 35:e1:3f:7e:57:98:5b:20:ae:5f:ff:ec:ec:6e:4b: 44:53:d1:55:7c:13:2c:f4:3d:af:3d:6f:44:8b:5e: da:fa:6e:34:7b:b4:f3:2d:dd:2e:7c:2f:10:ea:e8: 83:61:f6:0a:83:74:ac:a5:ce:2c:1f:92:f2:ef:53: 87:4e:b7:c5:ae:cf:57:97:d1:a7:5c:d8:65:89:25: 3d:86:fa:31:f6:c6:f3:45:83:02:96:a9:ec:a6:36: 59:83:aa:e9:c6:fd:a2:77:2b:dc:4a:f9:c8:1a:e1: 14:87:d8:6c:c6:4d:10:88:e9:50:9f:a7:bb:cf:77: 30:26:bc:95:d9:23:9f:5f:23:5d:9d:22:4c:2b:73: fb:1e:8e:a5:0a:d3:3b:21:13:d8:73:22:31:6c:5e: f1:4e:ce:e3:b2:cf:69:24:02:0e:cc:45:a2:8d:11: 58:26:07:12:9d:82:46:fc:9c:72:0c:7c:8c:21:60: 10:18:8d:f1:d0:30:b2:c2:49:d8:95:9f:44:1e:39: a8:8e:3f:ad:76:7f:43:8b:a2:76:5c:77:20:c9:28: b7:b6:63:e2:75:7b:da:c0:c5:5e:25:71:27:00:8b: 47:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:E0:AD:17:AD:01:08:BF:64:15:52:B1:DD:23:69:FE:01:48:0A:56 X509v3 Authority Key Identifier: keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:97:9d:21:5f:8e:14:ca:a1:38:f3:fb:34:59:60:98:ea:d9: 4c:61:38:0f:62:5c:d1:e8:87:cf:d2:4e:8f:f6:f6:1f:40:72: 23:19:91:23:9f:1a:88:2d:6e:20:2a:e6:30:c3:9d:1c:72:20: 3a:04:a6:42:73:d8:21:fb:1e:75:29:04:e4:a9:ba:ca:77:4a: 24:e5:25:d8:57:fd:47:4f:9f:ae:ab:30:ca:70:88:71:80:2b: 5b:5a:fd:91:13:bc:cf:f4:f5:22:ec:6e:ab:b5:d3:ad:e8:22: d7:b3:62:87:6a:03:2b:d3:f2:aa:45:8d:c0:58:84:47:90:63: a6:2f:72:db:86:e0:3d:95:d2:53:73:93:d2:c3:48:ad:d4:ff: 6d:d3:3a:a5:eb:49:f6:62:56:8e:ec:76:c7:1d:92:42:c2:54: c8:c7:12:9d:5c:ae:5f:70:f8:98:e3:81:4e:14:76:17:e0:b8: 94:35:1b:2b:2e:58:1a:4b:1b:8e:ef:df:87:c2:bc:bb:f0:29: 31:f8:ee:18:fd:78:c6:8c:b9:05:2a:5b:b3:7c:93:94:a8:f3: a7:61:43:55:66:7c:5a:f5:36:2b:37:52:79:1b:12:0b:12:43: f6:f6:05:47:4c:39:c9:c9:3b:a6:9b:2d:bf:17:a3:7e:fb:90: 35:3b:0f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULLydr6b1NsDDlIexof5Y2D47A8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkxMTAy ODNBOTg3NzAeFw0yNjA2MTkyMDUxMDlaFw0yNjA2MjAyMzExMDlaMDMxMTAvBgNV BAMTKDRBRTBBRDE3QUQwMTA4QkY2NDE1NTJCMUREMjM2OUZFMDE0ODBBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRtVWNYnsUI6dLINUYUH/15IUt c0830REoDjA7AjXhP35XmFsgrl//7OxuS0RT0VV8Eyz0Pa89b0SLXtr6bjR7tPMt 3S58LxDq6INh9gqDdKylziwfkvLvU4dOt8Wuz1eX0adc2GWJJT2G+jH2xvNFgwKW qeymNlmDqunG/aJ3K9xK+cga4RSH2GzGTRCI6VCfp7vPdzAmvJXZI59fI12dIkwr c/sejqUK0zshE9hzIjFsXvFOzuOyz2kkAg7MRaKNEVgmBxKdgkb8nHIMfIwhYBAY jfHQMLLCSdiVn0QeOaiOP612f0OLonZcdyDJKLe2Y+J1e9rAxV4lcScAi0dLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSuCtF60BCL9kFVKx3SNp/gFIClYwHwYDVR0j BBgwFoAUZtDL/e+OGLt5bhhVHwaRECg6mHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZWNkMjUxY2EtYTA1ZS00ZmJlLTkzYmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRF RjhFMThCQjc5NkUxODU1MUYwNjkxMTAyODNBOTg3Ny5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS82NkQwQ0JGREVGOEUxOEJCNzk2RTE4NTUxRjA2OTExMDI4M0E5 ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz YmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkx MTAyODNBOTg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaXnSFfjhTKoTjz+zRZYJjq2UxhOA9iXNHo h8/STo/29h9AciMZkSOfGogtbiAq5jDDnRxyIDoEpkJz2CH7HnUpBOSpusp3SiTl JdhX/UdPn66rMMpwiHGAK1ta/ZETvM/09SLsbqu1063oItezYodqAyvT8qpFjcBY hEeQY6YvctuG4D2V0lNzk9LDSK3U/23TOqXrSfZiVo7sdscdkkLCVMjHEp1crl9w +JjjgU4UdhfguJQ1GysuWBpLG47v34fCvLvwKTH47hj9eMaMuQUqW7N8k5So86dh Q1VmfFr1Nis3UnkbEgsSQ/b2BUdMOcnJO6abLb8Xo377kDU7D7k= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:31 2026 by rpki-client