
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
File: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft (raw, json)
Hash identifier: kBv5udmJnbnNy3kJavVJdgo/1qxwhTAasMydsvo8wvI=
Subject key identifier: CF:B1:58:81:55:3C:E9:06:AB:4F:87:9C:D4:07:9D:AB:87:8B:BC:C9
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 3AD885509605EE13109E49EDD5A9BEF0D432415B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 04:11:16 +0000
Manifest this update: Wed 23 Sep 2026 04:06:16 +0000
Manifest next update: Thu 24 Sep 2026 05:36:16 +0000
Files and hashes: 1: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: r6gC26YZfyRCXBqtBxM90HpZHycKXfj7CtQcMDuzkHs=)
2: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: ayJGb85mEsw6hkCd3R4N6T60EHmEHaE0N2aTdVYDJwU=)
3: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: kxIOYoC0XrMoUIa2RKDIrOUk61PTYC6D0smdwPW+OqE=)
4: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl (hash: 9IiCNPi0FwA88J4MNsXI5+tLRXNIw+iAWcXjqFk+/UE=)
5: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: UQULiH/rzGZ+Qot5L6bTSG/ZqsqiXoMUdx2Z+g8DPd4=)
6: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: NaIbUIEcHg996UwcSPOlGfP3YqUKyIHzjC1cqpknTE4=)
7: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: kNgOuGZXLAFUYxR2TmnqvvHmRiKcIBei3j7WTSaZzZ4=)
8: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: G3d5+PJ4RwaH3+49YAXZuwZHSBMw/JF+ioQ5xyAVwXk=)
9: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: i5cJhoPHd05iRQrt+c8hD0fxUqa82L/0uVmpW5FyRsM=)
10: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: n/ZVRJi6yb8Dz2Mvlmk9fIXtW9fAfV0qot64+DO2GBg=)
11: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: EPaxFk59J+mAhJJZI0UXN15r/MDP8erRFtwyeOK2Jyc=)
12: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: Di5sToIdYtfOw42F6tH8eEgf1Tlo/6HAUCPyhJe7z9s=)
13: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: cq5fJGcOxUi8WO0+4dKMsKLXIWSZjZoNabBBMuQjlGY=)
14: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: cOXnXn1Tgv14XhXe0FNGT6IvDCa8su0BXcORjmSihek=)
15: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: 8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=)
16: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 8DBxlpB4P7TBKUnRSvj1q12ltJkx0DrbCvm4btLrod4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 05:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:d8:85:50:96:05:ee:13:10:9e:49:ed:d5:a9:be:f0:d4:32:41:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: Sep 23 04:06:16 2026 GMT
Not After : Sep 24 05:36:16 2026 GMT
Subject: CN=CFB15881553CE906AB4F879CD4079DAB878BBCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ef:bc:9e:00:e9:3a:b6:da:6d:41:a4:ea:25:
46:8f:1e:2f:ba:f0:ef:0b:22:34:41:2a:6f:e0:3b:
03:4e:23:1b:67:d4:13:e6:bb:c4:3d:d1:36:78:34:
0b:80:03:bb:19:67:ee:56:db:6e:15:f0:e7:0f:40:
ad:17:98:52:3c:86:ca:86:d3:21:e4:b7:08:49:33:
02:06:1d:69:70:17:cc:e7:a4:67:41:52:5d:1e:65:
09:af:a9:6e:8c:81:a6:5d:e3:45:f2:20:bf:58:80:
3d:a2:ab:bc:a4:84:aa:b4:6d:68:bd:e4:34:a6:ff:
2e:b2:86:66:17:19:27:3a:fe:eb:95:3b:c2:36:fa:
58:c4:94:41:06:82:3e:ae:fc:0d:ee:77:e3:53:05:
9f:6b:ff:8a:d1:38:77:40:0b:d3:4c:fd:8d:c5:8c:
89:19:8a:2d:74:bf:c8:1f:21:3b:8f:4c:07:09:93:
d7:04:30:53:ae:ed:d4:56:3f:4d:b1:1a:1b:4a:fa:
8d:10:d0:04:8d:ec:a0:16:67:47:f5:28:a9:d7:af:
9e:00:36:5c:02:e7:96:8f:c3:1e:ff:e1:85:7e:5b:
d3:70:a8:a7:0c:d1:13:c2:98:0f:f4:2f:31:bc:6c:
c8:4c:a0:14:24:1b:a6:07:c8:4e:82:52:e7:b1:fc:
95:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B1:58:81:55:3C:E9:06:AB:4F:87:9C:D4:07:9D:AB:87:8B:BC:C9
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:6f:2b:4a:22:6a:43:31:49:de:fa:c3:3d:41:da:b4:09:5b:
ae:40:92:99:9f:c2:3d:ad:33:b9:44:4e:84:eb:f4:1e:6e:f1:
c1:06:3b:b3:22:30:82:f5:3f:b4:11:74:8f:99:c2:81:48:2d:
24:00:b7:1f:53:46:8f:52:07:f1:c6:25:df:5c:8e:dc:6b:10:
d2:8c:87:10:23:1b:c7:cf:64:cf:f1:af:be:e8:c6:1f:5d:ab:
0f:d2:d9:d4:f0:e3:f5:a0:ae:f8:7e:73:a7:87:a3:54:08:a6:
f0:82:ef:9f:44:16:4a:b7:1b:47:94:f5:c8:bf:27:58:a2:0a:
99:b4:ed:75:07:69:e4:d3:ed:63:ee:94:05:78:8e:38:02:b4:
f4:29:36:fa:e1:31:a8:df:20:2f:1c:db:cf:9a:98:8c:35:24:
7c:32:4b:9c:d7:01:5a:92:5f:eb:ac:31:b1:19:2b:c4:15:8c:
9f:ad:8e:64:80:5c:bf:48:17:3e:fb:d3:11:33:ed:75:49:db:
5b:79:38:a7:cd:d2:bf:31:95:49:de:be:ab:17:ea:eb:9a:ff:
27:05:1f:7a:0b:5a:9a:31:a8:be:e9:04:1d:da:d9:40:c8:6d:
be:13:b2:0f:fe:99:61:e8:2d:d4:0b:93:b1:67:08:e3:e7:16:
49:f8:61:fa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOtiFUJYF7hMQnknt1am+8NQyQVswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMx
MkZGOUEwNDAeFw0yNjA5MjMwNDA2MTZaFw0yNjA5MjQwNTM2MTZaMDMxMTAvBgNV
BAMTKENGQjE1ODgxNTUzQ0U5MDZBQjRGODc5Q0Q0MDc5REFCODc4QkJDQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh77yeAOk6ttptQaTqJUaPHi+6
8O8LIjRBKm/gOwNOIxtn1BPmu8Q90TZ4NAuAA7sZZ+5W224V8OcPQK0XmFI8hsqG
0yHktwhJMwIGHWlwF8znpGdBUl0eZQmvqW6MgaZd40XyIL9YgD2iq7ykhKq0bWi9
5DSm/y6yhmYXGSc6/uuVO8I2+ljElEEGgj6u/A3ud+NTBZ9r/4rROHdAC9NM/Y3F
jIkZii10v8gfITuPTAcJk9cEMFOu7dRWP02xGhtK+o0Q0ASN7KAWZ0f1KKnXr54A
NlwC55aPwx7/4YV+W9NwqKcM0RPCmA/0LzG8bMhMoBQkG6YHyE6CUuex/JVJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUz7FYgVU86QarT4ec1Aedq4eLvMkwHwYDVR0j
BBgwFoAUZvlq6/nIohM3y0p4FTab7BL/mgQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MmVlNDdiYmYtYmE4NC00NDhmLTk2MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJG
OUM4QTIxMzM3Q0I0QTc4MTUzNjlCRUMxMkZGOUEwNC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NkY5NkFFQkY5QzhBMjEzMzdDQjRBNzgxNTM2OUJFQzEyRkY5
QTA0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmVlNDdiYmYtYmE4NC00NDhmLTk2
MmItMmFhZjVjN2RkNjhkLzAvNjZGOTZBRUJGOUM4QTIxMzM3Q0I0QTc4MTUzNjlC
RUMxMkZGOUEwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALxvK0oiakMxSd76wz1B2rQJW65Akpmfwj2t
M7lEToTr9B5u8cEGO7MiMIL1P7QRdI+ZwoFILSQAtx9TRo9SB/HGJd9cjtxrENKM
hxAjG8fPZM/xr77oxh9dqw/S2dTw4/Wgrvh+c6eHo1QIpvCC759EFkq3G0eU9ci/
J1iiCpm07XUHaeTT7WPulAV4jjgCtPQpNvrhMajfIC8c28+amIw1JHwyS5zXAVqS
X+usMbEZK8QVjJ+tjmSAXL9IFz770xEz7XVJ21t5OKfN0r8xlUnevqsX6uua/ycF
H3oLWpoxqL7pBB3a2UDIbb4Tsg/+mWHoLdQLk7FnCOPnFkn4Yfo=
-----END CERTIFICATE-----
Generated at Wed Sep 23 23:43:03 2026 by rpki-client