
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
File: 66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json)
Hash identifier: +1hoXyFqS5sgAfxnA2ECSRPlc1z8NPaExAwU84S6k3c=
Subject key identifier: 14:D6:F0:96:1C:69:CE:37:48:78:D7:AD:6D:5C:77:1D:D0:3B:32:58
Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
Certificate issuer: /CN=66D0CBFDEF8E18BB796E18551F069110283A9877
Certificate serial: 5D91B79BAB1E824BDA1D2B5B4E34C4B31C4B292B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 20:47:56 +0000
Manifest this update: Tue 12 May 2026 20:42:56 +0000
Manifest next update: Wed 13 May 2026 20:59:56 +0000
Files and hashes: 1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: b6TKARG4xmXceRTQw9OM24qb8DivgVv9ei3FO1BSY7A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl
rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:91:b7:9b:ab:1e:82:4b:da:1d:2b:5b:4e:34:c4:b3:1c:4b:29:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877
Validity
Not Before: May 12 20:42:56 2026 GMT
Not After : May 13 20:59:56 2026 GMT
Subject: CN=14D6F0961C69CE374878D7AD6D5C771DD03B3258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c9:4b:40:39:e7:73:bc:54:3a:83:93:b3:69:
bd:30:54:57:3c:99:8c:41:0b:8a:c5:5d:52:0b:82:
52:52:79:ad:ca:c9:ad:03:db:84:85:55:f3:23:97:
b9:9e:a2:f3:b6:78:15:4a:89:da:20:43:fb:64:2c:
95:c8:3c:2e:34:07:39:4d:f5:59:fc:31:9e:cc:16:
89:bc:f5:09:f3:fb:87:6f:b0:1e:57:12:fd:59:7c:
6f:d0:dc:26:7b:10:69:b6:12:0e:be:73:a5:4d:4d:
06:2a:1f:2f:2a:4b:ce:7d:7c:51:77:08:51:6b:da:
56:f1:6f:a3:e1:0f:35:9c:5e:0d:ef:51:76:37:6f:
9f:ad:18:f6:cc:ed:13:d8:fa:8c:11:19:b2:a5:dd:
17:12:2d:fc:c8:78:23:db:be:88:4d:19:ab:44:81:
9d:47:9d:bc:b8:2a:38:2e:5e:44:b8:eb:ce:bc:c4:
fb:ba:f7:1b:09:a8:0d:a1:3b:a5:d7:0a:d2:c9:3b:
4d:34:0c:29:85:f9:fb:b6:8f:78:c5:8d:50:38:f8:
08:60:b2:93:c2:59:b4:0f:0d:66:c5:9c:65:49:36:
42:24:59:71:8f:0e:43:10:fb:4e:64:07:e8:30:79:
d6:5b:f3:66:0a:79:23:f9:e8:39:f6:f7:f9:14:8d:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D6:F0:96:1C:69:CE:37:48:78:D7:AD:6D:5C:77:1D:D0:3B:32:58
X509v3 Authority Key Identifier:
keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d7:5e:84:66:a6:32:ae:cf:e6:11:53:b0:2b:05:ff:f2:0a:
e2:e7:14:70:7c:f8:e3:51:22:04:35:43:fa:0b:b8:bf:0d:25:
22:ba:4d:52:19:37:68:09:1c:5f:57:51:d9:1a:fe:86:e9:3b:
4b:93:53:d8:ad:82:a7:73:2e:49:6b:b7:39:19:af:ad:0b:1f:
48:bf:fc:ab:5e:39:87:69:08:bb:3f:31:93:84:c0:40:ed:df:
9e:73:91:62:c7:22:f3:83:e7:cd:fb:03:e8:a3:d3:9f:14:a2:
ef:3e:bf:cd:6a:64:e5:74:63:ab:a4:23:0c:b2:eb:b3:af:44:
5a:58:64:dc:2e:bb:54:7f:44:93:ef:55:4e:f4:b0:22:72:f6:
7a:85:ac:24:8f:0b:91:9e:e2:23:83:c7:32:6e:23:e7:ac:b1:
dc:dd:09:66:91:c5:2f:a5:75:3c:f2:45:70:07:d4:a7:f6:f5:
ab:6b:c7:07:5c:c4:87:f1:5e:f5:72:38:68:59:b9:f5:bc:e8:
0c:5f:4f:5b:78:48:8b:bb:c5:6a:a7:08:49:bf:56:37:ff:0e:
eb:a5:85:9a:bb:a9:d2:76:b6:59:7f:26:fc:ad:de:91:04:33:
a7:2e:89:4e:df:c6:55:92:01:f0:f9:52:8b:c7:87:db:cf:fb:
44:04:c0:cd
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXZG3m6segkvaHStbTjTEsxxLKSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkxMTAy
ODNBOTg3NzAeFw0yNjA1MTIyMDQyNTZaFw0yNjA1MTMyMDU5NTZaMDMxMTAvBgNV
BAMTKDE0RDZGMDk2MUM2OUNFMzc0ODc4RDdBRDZENUM3NzFERDAzQjMyNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPyUtAOedzvFQ6g5Ozab0wVFc8
mYxBC4rFXVILglJSea3Kya0D24SFVfMjl7meovO2eBVKidogQ/tkLJXIPC40BzlN
9Vn8MZ7MFom89Qnz+4dvsB5XEv1ZfG/Q3CZ7EGm2Eg6+c6VNTQYqHy8qS859fFF3
CFFr2lbxb6PhDzWcXg3vUXY3b5+tGPbM7RPY+owRGbKl3RcSLfzIeCPbvohNGatE
gZ1Hnby4KjguXkS46868xPu69xsJqA2hO6XXCtLJO000DCmF+fu2j3jFjVA4+Ahg
spPCWbQPDWbFnGVJNkIkWXGPDkMQ+05kB+gwedZb82YKeSP56Dn29/kUjYGJAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUFNbwlhxpzjdIeNetbVx3HdA7MlgwHwYDVR0j
BBgwFoAUZtDL/e+OGLt5bhhVHwaRECg6mHcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWNkMjUxY2EtYTA1ZS00ZmJlLTkzYmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRF
RjhFMThCQjc5NkUxODU1MUYwNjkxMTAyODNBOTg3Ny5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NkQwQ0JGREVGOEUxOEJCNzk2RTE4NTUxRjA2OTExMDI4M0E5
ODc3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWNkMjUxY2EtYTA1ZS00ZmJlLTkz
YmItYjU0NjlhZWY5NmEyLzAvNjZEMENCRkRFRjhFMThCQjc5NkUxODU1MUYwNjkx
MTAyODNBOTg3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABPXXoRmpjKuz+YRU7ArBf/yCuLnFHB8+ONR
IgQ1Q/oLuL8NJSK6TVIZN2gJHF9XUdka/obpO0uTU9itgqdzLklrtzkZr60LH0i/
/KteOYdpCLs/MZOEwEDt355zkWLHIvOD5837A+ij058Uou8+v81qZOV0Y6ukIwyy
67OvRFpYZNwuu1R/RJPvVU70sCJy9nqFrCSPC5Ge4iODxzJuI+essdzdCWaRxS+l
dTzyRXAH1Kf29atrxwdcxIfxXvVyOGhZufW86AxfT1t4SIu7xWqnCEm/Vjf/Duul
hZq7qdJ2tll/Jvyt3pEEM6cuiU7fxlWSAfD5UovHh9vP+0QEwM0=
-----END CERTIFICATE-----
Generated at Wed May 13 02:40:01 2026 by rpki-client