
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json)
Hash identifier: OEyChpR4Mce9uf2c5oNwVJlTHLwU/IrPp2TZePUB8i4=
Subject key identifier: 19:C5:9B:0F:91:9D:5D:19:7A:46:A5:F1:DF:CC:AC:9C:31:F2:88:41
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 71348A0AB967036902E0EC5C39BEA218ECCB0D04
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
Manifest number: F7
Signing time: Wed 04 Nov 2026 03:32:31 +0000
Manifest this update: Wed 04 Nov 2026 03:27:31 +0000
Manifest next update: Thu 05 Nov 2026 06:47:31 +0000
Files and hashes: 1: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: VR8JGXQncvRZMpgx9/BrLDQEbHpqzQIhMOBOPu3swmY=)
2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 06:47:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
71:34:8a:0a:b9:67:03:69:02:e0:ec:5c:39:be:a2:18:ec:cb:0d:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: Nov 4 03:27:31 2026 GMT
Not After : Nov 5 06:47:31 2026 GMT
Subject: CN=19C59B0F919D5D197A46A5F1DFCCAC9C31F28841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4a:cf:c8:ff:87:cd:3a:7f:87:d3:0e:64:5c:
3b:1e:3f:0b:e6:39:d9:2e:28:bf:da:65:46:7e:77:
1d:23:99:36:65:62:86:cc:5b:32:b7:eb:40:9f:9b:
8e:8f:62:7e:e8:84:40:72:c4:ec:f3:b7:23:05:79:
da:e9:e3:61:3a:5f:a3:29:39:55:77:ee:66:50:33:
b7:95:26:c2:bc:b1:20:2a:76:d2:e1:b5:92:c4:1c:
c5:d7:5d:07:c8:f2:2c:b2:6f:90:c8:81:84:3c:90:
d9:34:6c:b1:07:db:4f:c9:09:cd:58:d8:08:88:7f:
b2:35:e1:c0:45:32:dc:6b:d4:f2:0a:8f:8b:79:a8:
cb:5e:2e:36:5e:9b:81:cc:c5:82:a8:6d:3b:cf:78:
e1:9f:d8:fa:7e:41:d5:4a:67:26:bb:af:e8:9a:e4:
30:e5:52:dd:61:03:00:d4:a5:fc:c3:46:12:dd:fd:
17:44:2a:1e:db:fb:8a:5f:c0:24:aa:01:06:40:b3:
d1:60:56:f7:d0:c0:99:28:cb:9a:5b:80:ec:1a:39:
20:42:6a:cd:43:3a:8c:5a:8b:4a:d4:f2:5f:71:7e:
f0:f5:0c:b6:ab:dc:d4:89:9a:08:b0:ff:9b:20:de:
f1:df:8a:28:01:37:55:89:13:25:03:89:43:c8:a7:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:C5:9B:0F:91:9D:5D:19:7A:46:A5:F1:DF:CC:AC:9C:31:F2:88:41
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:db:57:ac:15:8a:d4:5d:e0:84:40:ee:a4:45:5a:43:44:80:
5e:ab:15:7a:0b:24:31:29:e1:25:6a:d8:a7:ee:ac:b6:25:49:
f7:4a:88:43:7a:ff:69:0d:48:37:c4:07:08:36:24:23:17:0f:
2d:e4:9c:91:0d:5c:b0:6f:81:9d:a6:2b:96:0e:87:18:a7:42:
21:af:8e:e5:3f:be:e4:ec:5a:19:8a:b2:50:ed:97:ed:47:e6:
23:7d:b2:8d:21:5c:0b:88:45:bb:3f:cb:b7:01:b1:48:55:1a:
40:d0:4c:7f:11:9a:94:5b:e6:07:c8:ed:e2:dc:90:fb:82:69:
d1:8a:19:7a:24:ac:c9:13:85:2c:b9:4e:31:c9:6f:4b:c9:0a:
31:7e:f6:ae:7f:04:e4:bd:b6:22:b2:72:92:7b:36:81:f2:5a:
e3:8d:41:bb:39:07:02:7c:c2:2e:28:b0:24:44:dd:21:3e:31:
6b:98:9e:dd:df:84:e1:e7:e9:1e:fc:be:c8:8a:83:c3:a8:28:
d5:5f:2c:88:88:2a:74:43:8b:fe:12:22:58:b6:01:1f:d0:33:
e6:9c:18:21:f7:36:eb:01:ad:80:d1:25:21:6d:f3:69:00:36:
6b:90:6d:4d:45:00:80:90:e7:7a:82:20:98:1b:b0:f5:b7:57:
ba:8b:24:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 17:05:34 2026 by rpki-client