
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json)
Hash identifier: gyH8P21vSiCoFt6Md+HP7xL7aNTHedqJVNy6Z4byytE=
Subject key identifier: EC:8F:77:2B:C4:72:F2:21:61:2D:E7:62:2A:C2:10:59:68:9E:78:18
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 2593D98F18A1B58E3751F0F40B4848E4E0B5E18D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 13:41:49 +0000
Manifest this update: Tue 02 Jun 2026 13:36:49 +0000
Manifest next update: Wed 03 Jun 2026 14:26:49 +0000
Files and hashes: 1: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=)
2: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: dVTNVvLP7MDul7uMN62DIffvzWfVk84fUTFoYIj1m+I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 14:26:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:93:d9:8f:18:a1:b5:8e:37:51:f0:f4:0b:48:48:e4:e0:b5:e1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: Jun 2 13:36:49 2026 GMT
Not After : Jun 3 14:26:49 2026 GMT
Subject: CN=EC8F772BC472F221612DE7622AC21059689E7818
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:a4:9c:d3:05:96:60:1c:bf:6b:c2:0e:75:ec:
a5:21:ce:d2:37:70:7a:2b:2e:22:90:e4:c8:6c:4a:
88:9c:5e:ca:61:45:cf:9c:77:54:e4:bb:54:89:c6:
29:60:5e:39:af:15:b8:33:94:5e:cf:de:ca:cd:d4:
3d:7c:52:76:c8:f3:b2:7a:e9:33:2b:66:bb:cd:4a:
ed:f4:19:0e:c3:72:a0:90:30:9a:be:0a:7b:24:d5:
bb:93:54:96:c2:cf:49:f3:aa:bb:72:6b:1e:f0:b0:
fd:9d:1a:03:e3:e6:0f:e6:9a:5d:e8:8a:f3:cf:29:
bb:ff:6e:c6:c6:ac:15:cd:70:c0:26:c9:2b:a0:d5:
be:32:47:c9:c0:41:8e:ac:5c:31:ef:8a:d1:68:fd:
35:42:7d:2e:db:c0:f5:fd:e7:d1:b0:d2:61:a6:03:
6f:b6:e0:2c:37:44:25:91:73:64:60:1f:9d:1e:90:
09:eb:6c:1a:cd:08:7b:bc:0c:87:93:fd:62:86:02:
cf:f4:5a:a7:00:32:0b:31:54:c6:a5:e0:73:e8:56:
91:e7:73:c9:15:70:00:8c:38:2e:d2:c2:ab:4c:1d:
41:84:79:18:23:57:98:60:23:03:d4:0f:ce:e8:7f:
db:68:6b:6e:59:ce:3a:0d:b1:45:d2:40:5e:99:dd:
54:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:8F:77:2B:C4:72:F2:21:61:2D:E7:62:2A:C2:10:59:68:9E:78:18
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:aa:0e:0b:4e:46:34:99:de:d4:82:b0:ac:ce:47:63:c3:2f:
18:f0:e6:f4:3e:a5:60:dd:ee:44:2d:f9:75:45:f5:be:37:37:
d3:ee:b6:73:bf:30:06:6b:37:c4:a3:af:4a:15:36:20:25:4c:
c4:4c:f3:43:af:08:41:ad:f0:7f:47:c6:e8:7f:f4:c7:30:30:
68:76:f0:12:e0:8e:96:fc:d5:14:c4:96:b0:da:3d:43:83:69:
c9:8b:57:fc:93:cf:4e:f1:67:09:27:9c:c1:6e:4a:44:0e:6a:
a3:0b:3b:e1:a0:03:96:18:9e:f2:9f:73:41:07:62:2c:17:1a:
38:9f:50:83:26:eb:8e:ed:23:b3:47:28:fe:39:08:88:ad:2e:
ac:0b:d0:47:4c:d0:a8:8e:1e:29:ec:5f:38:eb:73:5d:c1:e9:
cc:af:e0:ca:07:39:da:ad:83:81:69:39:db:71:48:1e:81:4f:
5a:8d:cc:6f:a0:47:78:2d:13:07:5f:12:86:1b:d1:b8:b9:71:
cb:7b:f1:8f:24:6b:85:ef:05:e5:25:bb:be:1e:d1:29:dd:79:
85:c8:da:bb:0a:c7:19:01:9f:ca:f5:40:0c:ed:5f:95:58:99:
fa:fb:86:be:21:53:91:6d:c9:02:57:b2:e4:d9:01:bc:4c:eb:
64:0d:aa:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:16:00 2026 by rpki-client