
$ rpki-client -vvf repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft
File: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft (raw, json)
Hash identifier: IL5nKzeKnYXFN7e+WE2YeXI2yQ1SlgG61q9T3pSACFA=
Subject key identifier: F4:9E:DD:56:5B:72:57:52:17:3F:C7:15:5D:FC:82:85:B4:CD:BB:B5
Authority key identifier: 66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72
Certificate issuer: /CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072
Certificate serial: 6C07190F729BD56DDE3B1527ED407F489714D8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft
Manifest number: 04FA
Signing time: Thu 16 Apr 2026 05:41:29 +0000
Manifest this update: Thu 16 Apr 2026 05:36:29 +0000
Manifest next update: Sun 19 Apr 2026 11:06:29 +0000
Files and hashes: 1: 3130332e3135362e37312e302f32342d3234203d3e20313431303831.roa (hash: j9xUg13KQEtQqrg9g3ERUl0kaedTdjzl5FAcPmtGqCE=)
2: 3130332e3135362e37302e302f32342d3234203d3e20313431303831.roa (hash: e3tuv4bUE+5sOOhpfdGmGuOFPlroiW0z6wkdn0Eg6vM=)
3: 66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl (hash: CTjAQoLVveteKNMjdSzK1En9KZcAuFeeM92vc0ySqV4=)
4: 3130332e3135362e37302e302f32332d3233203d3e20313431303831.roa (hash: q5CuF5e5qYX8bk7E7KseYjajuExzeTaBW1PNtQOhgkQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl
rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 11:06:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:07:19:0f:72:9b:d5:6d:de:3b:15:27:ed:40:7f:48:97:14:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66DB47E8CDAAD5D95729871FDBE0F33DA55F2072
Validity
Not Before: Apr 16 05:36:29 2026 GMT
Not After : Apr 19 11:06:29 2026 GMT
Subject: CN=F49EDD565B725752173FC7155DFC8285B4CDBBB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3d:1d:83:f7:e7:76:51:e8:be:08:89:6f:3e:
e4:9d:5d:df:78:a4:12:23:05:af:cd:11:cf:76:f3:
4c:1c:68:e5:bf:56:79:c5:b8:fe:36:18:bc:81:23:
1e:15:f0:f9:99:5c:0c:12:73:e6:f3:59:9a:35:92:
f3:a0:ef:f9:67:e8:30:76:fa:bf:39:4f:c8:dd:07:
3e:4e:0e:d9:65:e9:e5:59:21:b2:70:be:65:38:ef:
06:18:04:63:4b:6e:b2:be:d0:44:a5:b5:14:9a:e4:
ed:2b:5d:64:58:73:69:bc:9d:bb:e6:03:35:f2:fe:
0c:7d:ad:74:62:fd:e4:c3:54:48:e6:91:1f:db:d6:
7d:9a:32:21:1c:b5:9d:8c:40:14:f5:43:da:07:24:
0e:73:4d:79:a3:05:3e:1c:16:c1:c1:4b:19:84:9d:
72:40:1a:c0:20:8c:75:0a:bb:05:29:dc:94:6a:13:
6f:38:c0:ce:9e:a9:4a:ca:74:fe:53:89:3a:44:a2:
8b:df:6d:64:a8:74:2f:79:af:00:6a:bf:a0:34:01:
74:42:97:82:0c:23:a9:18:db:a4:55:6a:c7:5b:70:
09:83:51:ec:12:44:62:c4:02:1c:0e:68:45:b2:94:
63:84:31:0e:5f:fa:68:a5:f2:75:c0:2b:3c:4a:85:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9E:DD:56:5B:72:57:52:17:3F:C7:15:5D:FC:82:85:B4:CD:BB:B5
X509v3 Authority Key Identifier:
keyid:66:DB:47:E8:CD:AA:D5:D9:57:29:87:1F:DB:E0:F3:3D:A5:5F:20:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3babf0b-1101-4aa9-a4df-52714934db7c/0/66DB47E8CDAAD5D95729871FDBE0F33DA55F2072.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:53:bb:4d:64:13:bc:9e:a2:3c:d0:55:f8:10:d9:c2:fc:98:
86:d4:5d:9e:f3:0e:5c:83:e1:22:0e:0b:86:14:52:72:c8:a5:
49:11:ad:21:ba:ee:84:6f:1d:39:c0:3d:22:99:15:cd:ce:08:
53:14:bd:23:e2:76:cd:86:38:22:78:19:aa:cf:d5:19:39:14:
fd:04:90:35:61:fd:9b:eb:da:2b:f1:34:ab:13:93:1e:0b:b3:
db:9c:c9:00:ff:6e:2a:28:61:88:5d:86:35:c8:28:5d:4f:de:
00:42:21:ff:25:9f:35:7c:c5:af:e3:cf:b7:6d:25:a4:ba:59:
0b:05:52:4e:ab:cb:25:27:95:38:b4:06:59:89:e3:25:5b:10:
f7:e5:c4:76:f5:2b:ee:b3:40:a0:8b:b9:48:5f:b6:4e:ed:fb:
e2:06:fc:ce:7e:83:d4:ec:e6:9e:21:8d:83:83:f1:e4:69:ca:
77:54:83:2e:32:c3:3c:ff:2e:c8:24:29:6b:1a:75:f2:ae:15:
29:af:a1:71:5f:ec:87:c7:1b:f3:82:62:79:ee:2d:10:5f:43:
be:66:a4:ec:f5:94:48:21:cd:af:1a:10:31:03:23:13:22:2d:
6a:cd:d4:bb:db:5d:59:91:fe:5f:85:59:3a:a3:c0:a6:4d:f5:
f5:81:c9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:01:51 2026 by rpki-client