
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
File: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft (raw, json)
Hash identifier: +i7F8d8G60ge7grq/IY8AGUdu+xLNzDOruoy4vCvZe8=
Subject key identifier: BB:40:21:92:A3:94:B1:B6:B4:96:30:C2:1B:84:07:2C:53:A1:4A:59
Authority key identifier: 66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13
Certificate issuer: /CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13
Certificate serial: 6064CE91DBE90B87430BD78A47778D1F95B4FF5E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
Manifest number: 40
Signing time: Fri 19 Jun 2026 14:33:22 +0000
Manifest this update: Fri 19 Jun 2026 14:28:22 +0000
Manifest next update: Sat 20 Jun 2026 15:24:22 +0000
Files and hashes: 1: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl (hash: G9x80rrY0MtEpu7IGYdsNbUKASYx0ORHgq5DlPIwm8M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl
rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 15:24:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:64:ce:91:db:e9:0b:87:43:0b:d7:8a:47:77:8d:1f:95:b4:ff:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13
Validity
Not Before: Jun 19 14:28:22 2026 GMT
Not After : Jun 20 15:24:22 2026 GMT
Subject: CN=BB402192A394B1B6B49630C21B84072C53A14A59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c1:14:e6:7a:00:23:77:2a:28:b6:99:1e:0b:
d5:d6:b0:0f:1b:b2:9e:f0:15:62:4c:23:65:94:aa:
91:0b:9d:4a:88:bc:76:b6:48:63:de:27:c9:84:6c:
0b:17:f7:e8:d5:58:65:d4:c0:fa:60:61:25:92:53:
55:3e:ed:97:af:23:81:ad:ee:64:92:9b:41:06:01:
04:54:a9:8c:ba:6f:1d:da:34:92:40:bd:3b:cf:be:
8c:09:42:c8:4a:8a:66:a1:0b:ce:93:d9:33:63:0d:
d7:e3:38:38:98:3b:33:c5:61:6e:d3:68:e7:48:f0:
d7:ea:b6:e5:7b:ce:3b:de:a3:7a:00:c2:27:7b:84:
60:7d:f5:71:92:59:d8:cc:cf:1a:7a:0d:7c:bd:2a:
82:ec:aa:75:f4:f6:e9:53:d7:ec:26:e6:2e:90:1c:
f5:9a:2f:a4:f1:0c:98:e3:48:c8:65:10:cc:a9:58:
ba:eb:3a:16:46:fb:eb:9a:a3:45:ab:3f:63:6f:8e:
06:b6:8f:31:ac:9c:c6:1a:04:ff:80:81:bf:65:01:
a0:b2:7c:c7:93:42:cf:f7:e3:5e:56:96:64:7a:d5:
d9:c4:03:88:02:1d:0d:7e:eb:11:6f:f8:c1:16:42:
fa:dc:0e:23:d3:f1:74:92:47:01:a8:c0:e6:13:a8:
cc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:40:21:92:A3:94:B1:B6:B4:96:30:C2:1B:84:07:2C:53:A1:4A:59
X509v3 Authority Key Identifier:
keyid:66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:35:c8:e8:15:4e:5c:ec:98:3f:ff:54:80:07:94:d3:34:fa:
2b:26:4c:05:0c:cf:81:c9:d9:9b:9a:2c:c9:c2:49:6c:f8:a8:
37:42:92:f9:91:b0:4f:54:f9:7d:e0:97:a6:12:d0:5a:95:86:
ab:10:90:49:5d:97:3a:ec:0d:d5:88:e6:12:c0:b5:a6:42:bd:
af:ee:5c:31:a5:b2:a0:27:0e:58:90:90:24:75:86:59:77:3a:
78:f8:c3:2f:2a:99:9f:94:d6:ef:50:c3:fe:3f:1b:5e:a0:f5:
8d:cf:5c:03:3e:8a:20:d5:58:5a:d2:c9:65:11:e8:c9:79:16:
16:3e:de:5e:52:53:89:90:f8:96:a8:cf:8a:5e:bc:4c:a6:d9:
1f:39:93:8a:2b:28:75:d5:86:35:38:b6:0f:3d:ae:56:ce:d7:
8b:b7:c6:42:f1:7c:14:77:70:6c:1f:63:12:d7:f0:a1:9d:64:
16:86:bf:cc:77:78:84:d1:85:7a:76:62:c2:dc:4f:40:c6:5c:
bd:8a:80:e2:a9:2e:9c:8b:60:2d:7f:dc:24:7c:30:b4:b3:50:
66:81:a0:60:c9:d0:49:85:d1:53:ad:27:0e:70:ff:dc:8c:f5:
93:b1:92:33:0c:f4:8c:27:5d:e9:35:6f:8c:e1:ad:1f:af:da:
fa:7c:6e:2d
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYGTOkdvpC4dDC9eKR3eNH5W0/14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjYxQjJDRjQyOUZCNEI4RUI0QzRDRTEzMEJBMzczRjk1
RjU4NEUxMzAeFw0yNjA2MTkxNDI4MjJaFw0yNjA2MjAxNTI0MjJaMDMxMTAvBgNV
BAMTKEJCNDAyMTkyQTM5NEIxQjZCNDk2MzBDMjFCODQwNzJDNTNBMTRBNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZwRTmegAjdyootpkeC9XWsA8b
sp7wFWJMI2WUqpELnUqIvHa2SGPeJ8mEbAsX9+jVWGXUwPpgYSWSU1U+7ZevI4Gt
7mSSm0EGAQRUqYy6bx3aNJJAvTvPvowJQshKimahC86T2TNjDdfjODiYOzPFYW7T
aOdI8NfqtuV7zjveo3oAwid7hGB99XGSWdjMzxp6DXy9KoLsqnX09ulT1+wm5i6Q
HPWaL6TxDJjjSMhlEMypWLrrOhZG++uao0WrP2Nvjga2jzGsnMYaBP+Agb9lAaCy
fMeTQs/3415WlmR61dnEA4gCHQ1+6xFv+MEWQvrcDiPT8XSSRwGowOYTqMy1AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUu0AhkqOUsba0ljDCG4QHLFOhSlkwHwYDVR0j
BBgwFoAUZhss9Cn7S460xM4TC6Nz+V9YThMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ODBhZDQwMjMtY2MyYi00MTIzLTk5MzktYTU1ODUxZmNhNjE5LzAvNjYxQjJDRjQy
OUZCNEI4RUI0QzRDRTEzMEJBMzczRjk1RjU4NEUxMy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS82NjFCMkNGNDI5RkI0QjhFQjRDNENFMTMwQkEzNzNGOTVGNTg0
RTEzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODBhZDQwMjMtY2MyYi00MTIzLTk5
MzktYTU1ODUxZmNhNjE5LzAvNjYxQjJDRjQyOUZCNEI4RUI0QzRDRTEzMEJBMzcz
Rjk1RjU4NEUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD41yOgVTlzsmD//VIAHlNM0+ismTAUMz4HJ
2ZuaLMnCSWz4qDdCkvmRsE9U+X3gl6YS0FqVhqsQkEldlzrsDdWI5hLAtaZCva/u
XDGlsqAnDliQkCR1hll3Onj4wy8qmZ+U1u9Qw/4/G16g9Y3PXAM+iiDVWFrSyWUR
6Ml5FhY+3l5SU4mQ+Jaoz4pevEym2R85k4orKHXVhjU4tg89rlbO14u3xkLxfBR3
cGwfYxLX8KGdZBaGv8x3eITRhXp2YsLcT0DGXL2KgOKpLpyLYC1/3CR8MLSzUGaB
oGDJ0EmF0VOtJw5w/9yM9ZOxkjMM9IwnXek1b4zhrR+v2vp8bi0=
-----END CERTIFICATE-----
Generated at Sat Jun 20 09:19:59 2026 by rpki-client