
$ rpki-client -vvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
File: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft (raw, json)
Hash identifier: NzrXx2Nhs6s1YklcxT0cLS0VxoweFEm+pCS/1G8uqu0=
Subject key identifier: 8C:71:AA:B5:C8:AD:CD:44:F0:F3:AC:76:A3:E0:DC:27:EE:78:BA:23
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 33CFB915AF869B8795D37AF119560162BDEE4F11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 04:03:42 +0000
Manifest this update: Tue 12 May 2026 03:58:42 +0000
Manifest next update: Wed 13 May 2026 06:25:42 +0000
Files and hashes: 1: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: 8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=)
2: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: G3d5+PJ4RwaH3+49YAXZuwZHSBMw/JF+ioQ5xyAVwXk=)
3: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: kxIOYoC0XrMoUIa2RKDIrOUk61PTYC6D0smdwPW+OqE=)
4: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: Di5sToIdYtfOw42F6tH8eEgf1Tlo/6HAUCPyhJe7z9s=)
5: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl (hash: ZXNcQbbvOEUPT7Q0vpuhc+3nHp7hZNu4Vk5DtzXQb9I=)
6: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: n/ZVRJi6yb8Dz2Mvlmk9fIXtW9fAfV0qot64+DO2GBg=)
7: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: i5cJhoPHd05iRQrt+c8hD0fxUqa82L/0uVmpW5FyRsM=)
8: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: ayJGb85mEsw6hkCd3R4N6T60EHmEHaE0N2aTdVYDJwU=)
9: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: NaIbUIEcHg996UwcSPOlGfP3YqUKyIHzjC1cqpknTE4=)
10: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: kNgOuGZXLAFUYxR2TmnqvvHmRiKcIBei3j7WTSaZzZ4=)
11: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: EPaxFk59J+mAhJJZI0UXN15r/MDP8erRFtwyeOK2Jyc=)
12: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 8DBxlpB4P7TBKUnRSvj1q12ltJkx0DrbCvm4btLrod4=)
13: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: cq5fJGcOxUi8WO0+4dKMsKLXIWSZjZoNabBBMuQjlGY=)
14: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: UQULiH/rzGZ+Qot5L6bTSG/ZqsqiXoMUdx2Z+g8DPd4=)
15: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: r6gC26YZfyRCXBqtBxM90HpZHycKXfj7CtQcMDuzkHs=)
16: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: cOXnXn1Tgv14XhXe0FNGT6IvDCa8su0BXcORjmSihek=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 06:25:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:cf:b9:15:af:86:9b:87:95:d3:7a:f1:19:56:01:62:bd:ee:4f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: May 12 03:58:42 2026 GMT
Not After : May 13 06:25:42 2026 GMT
Subject: CN=8C71AAB5C8ADCD44F0F3AC76A3E0DC27EE78BA23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:15:eb:e6:37:24:fc:6a:33:5f:35:51:75:a3:
5e:e4:2a:be:3b:ed:5f:de:ac:a9:b3:80:83:fa:d1:
b7:53:4b:57:c8:b5:72:a5:8a:5d:2c:3e:6a:e7:82:
6d:84:c6:6e:27:5d:96:95:05:66:39:38:58:ed:7e:
fa:ea:f7:b3:fd:97:35:89:5b:cf:21:3c:36:20:26:
86:03:16:5d:73:bb:52:90:a0:ec:6e:f8:ee:de:91:
20:4d:1f:f6:d7:b7:34:91:43:9a:55:59:db:6b:e0:
94:ca:dc:d0:7d:ae:bf:82:1d:19:10:72:32:aa:40:
ed:85:df:b7:e6:90:20:71:8c:be:97:f7:c2:c3:71:
6e:e1:1f:af:c3:31:8a:c2:c6:0e:6d:25:15:aa:80:
0d:35:c4:97:72:65:ea:1b:86:b9:91:4b:6e:06:97:
4f:91:19:e2:6e:b2:cf:fa:23:cc:b2:1e:39:56:fb:
f6:3b:03:c9:1e:c2:be:ab:bf:06:e1:3d:c1:e6:b5:
3d:1d:82:df:97:52:be:81:1a:4c:37:8f:66:34:10:
e5:fd:fe:c4:9c:e5:a9:e5:54:80:bf:83:1e:4c:58:
29:09:ec:a1:23:e4:40:e9:02:f0:b0:93:29:c2:c4:
f3:24:00:fd:b7:75:2d:ff:df:d4:92:76:89:05:66:
60:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:71:AA:B5:C8:AD:CD:44:F0:F3:AC:76:A3:E0:DC:27:EE:78:BA:23
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b2:0e:8b:50:b7:8d:92:67:91:c7:53:f1:aa:be:00:97:9d:
fd:ad:b9:de:77:3d:11:ce:b3:ed:c9:67:63:25:e1:5b:e1:74:
0a:b3:fd:65:7b:05:8f:fa:c9:6e:e9:5e:97:1c:3d:ea:50:aa:
98:c9:b1:2f:02:17:2f:94:43:a9:33:02:7e:8d:6c:e6:da:86:
e3:c1:a7:b7:67:08:a5:7f:55:ca:9c:79:15:a6:75:7f:62:b5:
24:14:25:0b:3f:57:1e:9e:9d:ef:08:f9:86:b8:fd:02:ad:8c:
56:2d:b3:95:8d:84:29:ac:1c:9d:24:be:f5:53:5d:7b:74:cf:
d5:3a:dd:48:07:6c:e1:e8:2e:78:c8:f7:b1:64:71:70:58:fa:
df:67:69:4b:6e:df:85:67:f8:36:e9:bd:35:9b:20:ad:00:85:
99:ef:f7:38:08:97:64:2f:1d:39:de:3b:59:00:68:5c:26:86:
e5:98:d1:04:49:de:be:c7:f2:cd:1f:a3:88:eb:a4:b8:67:45:
d4:bd:c1:5b:46:80:12:e5:53:28:2f:31:6c:23:6e:ad:2b:fb:
e6:5c:3f:d7:2c:13:66:6b:7c:5f:fa:5d:55:db:cd:2e:41:36:
81:cb:78:98:68:6f:08:33:02:8a:91:af:dd:65:de:6b:e2:be:
e9:e7:d1:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:49:59 2026 by rpki-client