
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json)
Hash identifier: 7HT3zbft2tqFy6mMeAAQqnjJKaWJxg+8iOpSrLxvkZE=
Subject key identifier: 03:8F:C5:5C:41:4B:B7:56:84:BF:FF:6B:1D:EF:84:C2:F9:9A:23:C1
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 50DCDB5963DA7B580374619646105D239E806B7F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 15:18:39 +0000
Manifest this update: Thu 23 Jul 2026 15:13:39 +0000
Manifest next update: Fri 24 Jul 2026 15:43:39 +0000
Files and hashes: 1: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: KmTGRLWDhf1ZEpz01/7bWEipepH0IxfFWlFZEuIM6FM=)
2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 15:43:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:dc:db:59:63:da:7b:58:03:74:61:96:46:10:5d:23:9e:80:6b:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: Jul 23 15:13:39 2026 GMT
Not After : Jul 24 15:43:39 2026 GMT
Subject: CN=038FC55C414BB75684BFFF6B1DEF84C2F99A23C1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:6f:80:06:0e:05:8b:aa:7a:69:e0:9c:c4:18:
87:fb:6d:95:17:a2:e4:ae:d2:a5:97:0a:5d:f7:64:
b5:ae:be:d9:a2:7a:db:bf:52:14:83:07:cb:78:74:
8b:65:60:fd:63:f2:7d:01:d0:8a:6f:88:bf:97:9c:
a0:92:b3:e1:10:2e:4f:c3:00:74:d7:ee:5c:a3:bd:
d8:24:f6:ae:d3:c7:86:74:d6:a0:22:e2:df:5b:59:
32:be:53:e1:ed:d5:cd:4c:1f:3b:2b:93:49:01:57:
e3:4a:32:8b:cf:c6:7d:f5:a2:69:70:76:10:97:12:
0e:4c:d3:85:b6:0c:1e:51:d2:2d:c3:af:6a:d0:91:
4b:17:41:d4:1d:3a:ff:98:ac:36:fb:03:52:12:d0:
01:40:33:17:c2:b4:55:29:9b:69:1f:68:f4:4f:fa:
1a:48:97:45:2e:40:7b:81:f0:42:4d:6d:9b:44:ae:
67:70:c6:1c:b9:93:09:89:7b:98:95:cf:2e:cf:e5:
58:be:fd:f2:d7:ee:85:f2:9b:35:b9:dd:9c:73:26:
d6:a3:3b:f8:df:52:63:ea:9b:af:e3:5d:d9:69:58:
0c:42:b8:9d:91:49:86:fb:05:19:75:f4:52:c0:53:
71:c9:b6:4f:e5:43:24:59:85:4d:7f:f4:1f:18:b9:
24:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8F:C5:5C:41:4B:B7:56:84:BF:FF:6B:1D:EF:84:C2:F9:9A:23:C1
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:0a:97:5e:b9:0e:14:85:15:0e:db:3f:d0:e8:4a:5e:37:b2:
bd:fa:f4:78:02:c5:35:ee:5a:6f:51:e4:01:be:65:da:b2:8a:
23:ed:30:c3:a8:61:c5:92:2d:31:a9:af:70:60:26:0a:cc:be:
bd:40:bc:74:7d:63:a6:08:95:6b:2a:3a:a4:31:16:25:db:f3:
3a:ee:7f:dd:03:03:99:3b:5a:44:f4:dc:62:b4:eb:08:da:0e:
b5:8b:a3:b6:c5:31:13:cd:aa:11:18:ad:0d:f4:5b:eb:f6:4b:
45:0e:99:49:09:b6:e3:86:60:ca:b3:93:d3:df:00:3a:03:05:
93:04:5a:5e:d6:1f:4a:ae:ba:2c:ad:e6:ee:91:08:50:61:ec:
5a:e9:7a:72:3e:d6:07:58:d3:5d:b3:b3:9d:9e:49:5f:1d:25:
5d:03:d8:65:b3:f1:9c:6d:c9:a7:b9:c3:27:e2:08:cd:8c:75:
be:e3:2d:41:d5:2a:b7:5f:5b:7d:5b:9f:c6:81:40:0a:f7:6a:
59:0f:84:24:dd:84:cf:af:44:e6:8c:fa:2f:9c:ed:b3:f0:10:
ab:23:1e:b9:93:44:6b:3e:71:f9:79:6e:9d:43:35:6b:8a:95:
ee:ad:60:fe:29:cc:1a:05:a3:44:a9:39:36:2f:c5:91:18:21:
b3:fc:89:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:23:00 2026 by rpki-client