
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
File: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft (raw, json)
Hash identifier: UcwnVj/d4DGCaDhJihcGsRNjb5Z9gYFlEhMQQDGKbUY=
Subject key identifier: F3:D8:A9:3B:71:26:F7:60:6D:00:72:6F:8C:89:6E:58:6E:18:CB:61
Authority key identifier: 66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
Certificate issuer: /CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Certificate serial: 788267B209B2AD8F37A50E8B76ABEDE386C00C45
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 14:50:12 +0000
Manifest this update: Sun 25 Oct 2026 14:45:12 +0000
Manifest next update: Mon 26 Oct 2026 18:46:12 +0000
Files and hashes: 1: 3130332e3234372e32302e302f32322d3234203d3e203538343835.roa (hash: i5cJhoPHd05iRQrt+c8hD0fxUqa82L/0uVmpW5FyRsM=)
2: 3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (hash: NaIbUIEcHg996UwcSPOlGfP3YqUKyIHzjC1cqpknTE4=)
3: 323430323a653130303a32303a3a2f34382d3438203d3e203538343835.roa (hash: EPaxFk59J+mAhJJZI0UXN15r/MDP8erRFtwyeOK2Jyc=)
4: 323430323a653130303a61653a3a2f34382d3438203d3e203538343835.roa (hash: kxIOYoC0XrMoUIa2RKDIrOUk61PTYC6D0smdwPW+OqE=)
5: 3130332e3234372e32312e302f32342d3234203d3e203538343835.roa (hash: 8DBxlpB4P7TBKUnRSvj1q12ltJkx0DrbCvm4btLrod4=)
6: 323430323a653130303a37353a3a2f34382d3438203d3e203538343835.roa (hash: r6gC26YZfyRCXBqtBxM90HpZHycKXfj7CtQcMDuzkHs=)
7: 3130332e3234372e32332e302f32342d3234203d3e203538343835.roa (hash: n/ZVRJi6yb8Dz2Mvlmk9fIXtW9fAfV0qot64+DO2GBg=)
8: 323430323a653130303a38303a3a2f34382d3438203d3e203538343835.roa (hash: cq5fJGcOxUi8WO0+4dKMsKLXIWSZjZoNabBBMuQjlGY=)
9: 3130332e3234372e32302e302f32342d3234203d3e203538343835.roa (hash: G3d5+PJ4RwaH3+49YAXZuwZHSBMw/JF+ioQ5xyAVwXk=)
10: 323430323a653130303a38313a3a2f34382d3438203d3e203538343835.roa (hash: ayJGb85mEsw6hkCd3R4N6T60EHmEHaE0N2aTdVYDJwU=)
11: 323430323a653130303a3330353a3a2f34382d3438203d3e203538343835.roa (hash: UQULiH/rzGZ+Qot5L6bTSG/ZqsqiXoMUdx2Z+g8DPd4=)
12: 323430323a653130303a3a2f33322d3438203d3e203538343835.roa (hash: kNgOuGZXLAFUYxR2TmnqvvHmRiKcIBei3j7WTSaZzZ4=)
13: 323430323a653130303a33383a3a2f34382d3438203d3e203538343835.roa (hash: 8VioNKBine3nnTO3lIrgZ5P0mwfqaztVY9eBTGZLZpY=)
14: 323430323a653130303a323030303a3a2f34382d3438203d3e203538343835.roa (hash: Di5sToIdYtfOw42F6tH8eEgf1Tlo/6HAUCPyhJe7z9s=)
15: 66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl (hash: 7myWs7heEwarWZ84zkwlsHbn6cmWCC+z47fzVxZUdF8=)
16: 323430323a653130303a61633a3a2f34382d3438203d3e203538343835.roa (hash: cOXnXn1Tgv14XhXe0FNGT6IvDCa8su0BXcORjmSihek=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 18:46:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:82:67:b2:09:b2:ad:8f:37:a5:0e:8b:76:ab:ed:e3:86:c0:0c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66F96AEBF9C8A21337CB4A7815369BEC12FF9A04
Validity
Not Before: Oct 25 14:45:12 2026 GMT
Not After : Oct 26 18:46:12 2026 GMT
Subject: CN=F3D8A93B7126F7606D00726F8C896E586E18CB61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f2:f2:be:fe:3e:89:b9:9a:ec:31:65:66:e2:
18:fc:29:80:1c:97:fa:ed:1c:73:b8:5f:5c:81:c2:
5f:eb:a2:8f:03:b6:9d:d7:7c:d8:60:83:0a:e6:bc:
47:2a:df:c0:80:99:c7:c0:92:7c:01:73:b9:e1:88:
d8:a8:22:08:ba:60:86:a5:cf:99:19:17:55:e7:4f:
07:73:b3:01:e8:e9:8b:00:a6:2f:e1:fb:69:c5:6e:
62:5c:13:33:0c:47:f6:af:ef:e0:9b:cc:b6:90:dd:
d7:a7:89:fc:15:11:05:b0:23:69:3d:00:8d:d1:bf:
e8:9c:b8:12:13:4e:50:0b:80:f2:3a:31:45:86:1c:
d6:9d:89:2d:e5:5d:63:59:2f:cb:2e:87:c1:3c:59:
93:03:b6:cc:38:f8:f9:ed:04:9c:b3:fb:15:95:98:
40:40:ac:0c:24:74:cd:0b:24:7e:ab:f3:d6:74:22:
e1:4c:d0:f0:89:d4:dc:be:72:3a:67:d9:a8:2d:35:
51:ae:2d:f7:16:76:74:f7:d8:d7:df:c0:6b:f3:39:
8d:ad:45:27:d1:86:1c:a0:d5:de:b0:dd:99:a9:41:
4c:1d:8d:20:08:f4:6d:d9:22:1f:ac:e2:38:8a:93:
42:47:b8:06:47:b4:09:47:69:71:4b:89:57:cb:d2:
28:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:A9:3B:71:26:F7:60:6D:00:72:6F:8C:89:6E:58:6E:18:CB:61
X509v3 Authority Key Identifier:
keyid:66:F9:6A:EB:F9:C8:A2:13:37:CB:4A:78:15:36:9B:EC:12:FF:9A:04
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2ee47bbf-ba84-448f-962b-2aaf5c7dd68d/0/66F96AEBF9C8A21337CB4A7815369BEC12FF9A04.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:66:6b:a1:18:54:40:3a:75:5c:97:ee:c8:9e:e6:ad:9e:61:
ca:48:d3:ef:f5:c3:60:c3:d3:d1:50:b6:60:a6:c7:90:2c:0a:
54:ed:d2:72:85:26:35:38:8b:2a:be:92:de:38:de:03:6d:2c:
9a:ab:e2:9e:bd:d3:9e:21:21:08:5c:a6:8b:06:db:72:de:5c:
68:09:f6:b4:96:12:cd:41:1d:bc:db:7a:fd:e4:3d:21:f0:42:
0b:69:d2:cb:ba:88:36:48:d9:09:46:8e:05:38:9a:27:43:c4:
25:a8:96:54:5a:ed:5e:d2:54:03:54:88:9f:19:12:af:9f:91:
98:d3:40:15:0f:9c:37:5f:2b:f2:a2:6e:94:23:47:50:89:ee:
70:10:63:bb:94:b5:f3:d3:36:3a:ba:96:79:a1:9c:8a:11:58:
65:e3:d3:62:a2:5c:3a:94:f5:f3:c3:cc:d2:fc:93:be:28:52:
29:4c:83:4d:02:74:ad:74:82:56:8b:f2:a5:50:b4:dd:b4:83:
95:c5:f1:00:ef:7c:c3:2f:44:19:61:6b:e9:27:d5:7b:74:f8:
7f:55:6e:59:48:fc:d7:2f:3d:95:ce:14:16:61:5e:2c:ea:c2:
72:66:1a:d4:f8:ea:e0:cd:35:ba:9c:68:9e:15:38:e2:99:49:
f2:09:d8:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 11:10:47 2026 by rpki-client