
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
File: 66D0CBFDEF8E18BB796E18551F069110283A9877.mft (raw, json)
Hash identifier: aOdeaySKPEFd1+y1xU12na+z2sycnO0A9dveLPKETT4=
Subject key identifier: 49:9E:99:7C:C4:E8:B8:33:EF:67:0A:01:CA:8B:94:94:8F:0D:FD:83
Authority key identifier: 66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
Certificate issuer: /CN=66D0CBFDEF8E18BB796E18551F069110283A9877
Certificate serial: 376298564464067EA1675300593C6365A86742CF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 04:49:23 +0000
Manifest this update: Thu 17 Sep 2026 04:44:23 +0000
Manifest next update: Fri 18 Sep 2026 08:03:23 +0000
Files and hashes: 1: 66D0CBFDEF8E18BB796E18551F069110283A9877.crl (hash: urPSmOr29EmM/zPim5B3ix65aWpBf8miu7LO2CxTxKQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl
rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 08:03:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:62:98:56:44:64:06:7e:a1:67:53:00:59:3c:63:65:a8:67:42:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66D0CBFDEF8E18BB796E18551F069110283A9877
Validity
Not Before: Sep 17 04:44:23 2026 GMT
Not After : Sep 18 08:03:23 2026 GMT
Subject: CN=499E997CC4E8B833EF670A01CA8B94948F0DFD83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fa:83:22:df:79:0c:e1:b9:42:5f:83:85:59:
3a:22:d1:a9:ef:ae:30:9f:f2:e8:8d:5f:8a:5e:f9:
77:5c:f3:5e:71:d7:3b:04:69:67:a3:4f:8d:de:82:
dd:6a:46:06:ec:6d:60:10:48:23:d2:3d:a3:8c:4b:
b2:f4:e3:51:cb:ce:c3:85:fa:82:da:0b:e0:37:76:
db:ff:60:fd:4f:f4:af:ea:1f:d1:f6:8f:00:4b:80:
c5:d2:63:25:5c:a7:2d:ab:4d:83:fb:12:ca:da:03:
45:05:04:91:fe:1b:b1:79:8a:83:15:40:f0:c6:97:
4d:d6:51:37:9d:bd:3f:ed:1d:90:c9:f7:c6:4b:57:
97:8d:8b:42:b3:6c:88:49:3b:13:d2:60:4d:bc:32:
a3:7d:25:8e:7b:30:e5:d4:5e:7b:b3:97:2c:d0:15:
bb:2e:83:af:12:10:61:4f:6b:82:7e:1d:78:76:ce:
e7:78:51:e1:be:b8:df:26:7f:c5:87:47:6c:e6:21:
f9:91:68:48:72:26:50:6e:e3:55:2a:c7:60:92:cd:
31:51:d3:28:0a:8f:e9:49:7d:cc:ca:e7:a5:2b:70:
5a:66:2e:72:89:1e:d0:25:78:0c:b7:15:e3:72:d2:
15:3a:a1:55:0b:e1:4f:d8:f9:7c:2f:07:ec:3c:25:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9E:99:7C:C4:E8:B8:33:EF:67:0A:01:CA:8B:94:94:8F:0D:FD:83
X509v3 Authority Key Identifier:
keyid:66:D0:CB:FD:EF:8E:18:BB:79:6E:18:55:1F:06:91:10:28:3A:98:77
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66D0CBFDEF8E18BB796E18551F069110283A9877.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ecd251ca-a05e-4fbe-93bb-b5469aef96a2/0/66D0CBFDEF8E18BB796E18551F069110283A9877.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a1:e4:32:26:e2:d3:59:24:83:b9:05:f6:ac:aa:8b:eb:44:
51:65:fd:2f:e7:71:90:28:ac:ce:46:3b:87:9d:28:60:08:ba:
f2:45:39:1c:89:87:bf:3e:6d:dd:72:07:fa:37:d9:f2:4b:7b:
8e:a9:53:b4:9b:8b:2c:7a:68:1f:ef:cc:c2:f8:68:1b:7b:52:
6a:00:28:35:2b:15:a4:27:d3:2d:3a:7c:56:93:cb:7b:52:9a:
28:93:aa:60:68:b0:a4:9b:14:ae:e9:60:56:50:91:e3:2f:cc:
02:84:13:19:29:77:13:e3:f2:4b:f1:c6:8b:cd:0c:6c:d9:89:
54:c7:f8:1b:0f:d3:e5:c4:b0:72:a5:ff:06:e0:ee:be:ff:73:
b5:31:f8:ae:51:09:cd:05:8f:e2:91:7e:10:cf:88:28:59:df:
ae:5c:da:57:d9:e4:26:00:54:ef:63:b5:e1:2f:f0:9d:b5:c6:
c8:6b:51:11:b5:bc:f0:7e:46:09:a9:aa:2b:b1:06:d6:32:6b:
4a:5e:0f:ab:ff:71:c0:c2:d7:e6:cf:78:eb:31:3a:f9:15:78:
d1:ca:10:03:2b:a1:b5:71:27:1f:50:64:08:4c:ae:33:75:21:
27:20:ca:a3:78:9f:be:83:5b:32:0e:2f:03:81:48:65:62:ef:
f5:d1:d0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 14:41:50 2026 by rpki-client