
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json)
Hash identifier: qTLe6rjEdSMCHSqq4C/Xw9V26RshHHRFUCeWEr1Q8z4=
Subject key identifier: B8:95:C5:9A:23:DB:F6:B2:07:94:DC:0E:FF:F8:07:69:F6:9A:2F:5C
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 4295D2FF24B2EAF520591C72871B93CE68667AC0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
Manifest number: 6B
Signing time: Tue 21 Jul 2026 06:23:45 +0000
Manifest this update: Tue 21 Jul 2026 06:18:45 +0000
Manifest next update: Wed 22 Jul 2026 08:40:45 +0000
Files and hashes: 1: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: +slISqdZTfjkhcsjmqdklPhTPWh+/u0iFxTRN5gSgAA=)
2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 22 Jul 2026 02:08:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:95:d2:ff:24:b2:ea:f5:20:59:1c:72:87:1b:93:ce:68:66:7a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: Jul 21 06:18:45 2026 GMT
Not After : Jul 22 08:40:45 2026 GMT
Subject: CN=B895C59A23DBF6B20794DC0EFFF80769F69A2F5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1f:53:00:2f:51:88:ab:e2:55:4b:4e:f3:57:
4b:72:76:d5:55:af:f6:95:0a:e4:70:dd:17:be:61:
46:1c:ad:4a:e6:c9:f5:e8:02:45:ff:61:5e:3b:ea:
14:6f:25:44:dd:b4:55:fc:15:87:01:b1:92:da:33:
bd:7b:35:67:2c:0a:ca:29:a0:f2:d4:14:16:11:37:
09:89:3c:95:d7:7b:c6:97:84:c5:cd:e2:3b:80:68:
f6:96:23:40:6f:4c:8e:3d:bd:52:fc:18:cd:4f:ec:
2c:d2:6b:1f:e6:98:d4:49:cf:e9:5e:1a:8b:06:43:
b4:72:4f:70:7e:14:1e:52:59:97:d3:e8:2d:d6:1a:
dc:b9:eb:6b:fd:f6:52:18:e7:fe:1b:0f:dc:92:ea:
0e:27:e8:54:41:8f:38:da:ef:88:7b:ff:13:d5:d6:
7c:d4:2d:df:b9:87:cb:13:4a:95:3d:90:ef:60:72:
b2:7c:4e:0b:15:a3:88:39:4c:92:a4:3b:bf:5e:76:
05:6c:e4:f0:24:35:23:be:4f:00:71:90:09:a0:43:
35:f8:21:ec:8b:2b:84:c2:d1:5d:36:93:7a:b8:f1:
48:72:c0:aa:5a:cf:15:91:82:92:af:a2:b8:2a:c9:
81:cb:24:dc:b0:c8:d4:2d:ff:5c:5e:b3:99:4b:0c:
67:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:95:C5:9A:23:DB:F6:B2:07:94:DC:0E:FF:F8:07:69:F6:9A:2F:5C
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:9d:2b:99:ee:1e:21:8a:f9:c3:71:0e:c1:6d:de:ac:5a:81:
81:55:85:66:53:c5:cc:ab:c3:e9:cb:b2:d9:f3:23:fa:73:65:
28:29:f5:2c:c4:43:8c:e4:33:ed:38:60:91:d2:5a:8a:88:e1:
f0:bf:29:92:8c:88:c7:50:c6:40:7e:1b:d9:4b:e2:91:6b:26:
2f:a1:8c:4f:66:58:fc:5d:c8:c3:7b:c7:53:e2:5f:b1:f5:03:
6f:0b:7f:c1:d2:90:1b:57:6a:95:c4:df:39:60:46:49:cd:49:
8c:8f:8a:62:80:d1:92:c2:87:08:3a:dc:23:a0:4c:1a:14:34:
da:50:e2:e5:cf:e0:09:b5:5d:ca:6a:00:1b:f5:19:dd:e5:53:
10:59:c1:f7:22:d6:cf:18:dd:40:fa:ca:06:01:87:ee:38:1e:
a3:4a:60:43:ac:d2:6e:4e:3a:06:e9:32:20:93:8f:d1:cb:78:
98:b8:bd:5b:f8:3d:64:95:ee:8f:05:97:08:d5:fc:ac:0e:7c:
ba:c4:93:a3:c0:cd:25:4c:42:17:c4:fd:d6:5d:6a:8a:fb:49:
b7:60:ed:31:cd:a0:69:32:e6:1e:bb:6d:11:13:d0:1a:af:65:
95:67:27:89:6f:a1:c5:ec:9f:b2:6e:60:0d:22:1d:db:91:3c:
71:1c:24:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 08:20:35 2026 by rpki-client