
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
File: 66B373A1A8E4839699E23D35A5592185C65D4217.mft (raw, json)
Hash identifier: irgAiNkMZLr9y2nQTvKDPA7+ryI+ijNmTyTQRZ/euoI=
Subject key identifier: F4:47:3D:FD:6E:19:C4:D6:33:22:82:04:29:14:1F:5E:BC:65:03:29
Authority key identifier: 66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17
Certificate issuer: /CN=66B373A1A8E4839699E23D35A5592185C65D4217
Certificate serial: 379FF4A86F874A1B13F36FBF300561A1B9E3A46C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
Manifest number: D5
Signing time: Thu 08 Oct 2026 02:34:54 +0000
Manifest this update: Thu 08 Oct 2026 02:29:54 +0000
Manifest next update: Fri 09 Oct 2026 04:39:54 +0000
Files and hashes: 1: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: WyiqkRr/WwMALxqKWgtBGW8I5DUVuOnXnmofYyW+gKQ=)
2: 66B373A1A8E4839699E23D35A5592185C65D4217.crl (hash: +/AYbEm9js/cUonBHDEcXtFyHuDQ42JLBNJ/x/SGOog=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl
rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 09 Oct 2026 04:39:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:9f:f4:a8:6f:87:4a:1b:13:f3:6f:bf:30:05:61:a1:b9:e3:a4:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66B373A1A8E4839699E23D35A5592185C65D4217
Validity
Not Before: Oct 8 02:29:54 2026 GMT
Not After : Oct 9 04:39:54 2026 GMT
Subject: CN=F4473DFD6E19C4D63322820429141F5EBC650329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:05:4f:da:64:78:f3:17:26:19:59:c0:49:cd:
02:20:56:f9:54:f4:6f:0c:fd:b8:9b:58:71:92:67:
7f:2a:09:b6:a0:78:bb:fc:4f:05:e4:32:7d:70:e7:
73:89:00:17:ea:06:2c:38:e9:97:18:03:7a:07:a5:
76:25:0b:88:a9:23:3b:da:25:36:8f:c6:4a:09:f8:
ca:96:9c:79:ae:1b:2e:a7:58:16:9d:f4:fb:83:ec:
57:06:8d:29:cd:d1:57:50:90:3c:ca:ed:9a:74:d7:
b9:89:bc:94:5e:9f:72:3b:7d:7c:b2:31:80:5c:0a:
33:d6:30:24:75:de:a4:31:68:c8:5d:f1:be:6f:40:
53:36:7b:f2:5f:db:36:21:94:62:cb:1c:85:d8:ff:
95:cd:88:89:7d:8f:6c:01:18:d6:0d:0d:cc:80:98:
cd:7a:2c:88:ec:da:0d:30:ce:91:91:1d:6c:9e:1a:
70:27:9d:f8:1b:dd:52:42:1f:cb:12:a6:64:f7:c4:
7e:b0:c4:e8:52:3a:d5:e6:93:08:12:be:b9:b1:c9:
77:29:81:ce:cf:de:80:f3:4e:dd:56:16:c1:a7:64:
6d:43:7c:af:c5:45:90:f8:fd:f6:67:ee:13:68:94:
2c:10:fb:ba:b2:83:4a:77:e6:c2:c1:2b:ad:35:9b:
eb:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:47:3D:FD:6E:19:C4:D6:33:22:82:04:29:14:1F:5E:BC:65:03:29
X509v3 Authority Key Identifier:
keyid:66:B3:73:A1:A8:E4:83:96:99:E2:3D:35:A5:59:21:85:C6:5D:42:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66B373A1A8E4839699E23D35A5592185C65D4217.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/66B373A1A8E4839699E23D35A5592185C65D4217.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4d:de:a9:40:40:94:9b:60:e9:76:c7:4a:a0:f1:12:67:d8:
0e:23:d3:db:52:a5:14:df:9c:89:10:c9:dd:20:ed:94:28:76:
72:19:b7:97:6e:dc:1b:5c:54:19:53:4f:67:c7:d1:57:69:e4:
db:9e:8e:6f:fb:30:85:db:1c:e8:d5:f8:70:58:ef:9e:17:53:
56:65:d1:8f:f2:3f:08:86:b5:6a:24:5a:f4:48:d3:5e:17:fa:
60:e3:e9:5e:55:bf:07:1f:53:62:d2:71:b1:53:86:fd:91:a6:
83:67:a5:dc:70:f0:a5:82:29:5b:76:19:2c:3e:8a:e5:69:e0:
76:07:e7:92:ef:4f:75:50:be:f7:5a:da:28:db:3c:f8:f5:98:
86:2a:e6:11:17:eb:45:85:c1:bc:4f:de:7b:56:0a:0f:1b:c4:
21:aa:cc:f5:b9:a2:f3:39:bd:a0:aa:75:25:56:ed:7d:f0:30:
7a:38:a0:92:c7:fb:2d:ba:8c:da:c4:c2:3b:15:6c:83:1d:9c:
11:a1:83:5d:44:0d:95:4c:6a:c2:9b:11:61:84:ea:d3:f1:8a:
ab:1e:99:fe:38:06:d5:dd:d3:98:7c:fb:07:9f:2f:c8:4b:7a:
f8:36:3b:3b:b9:12:3c:db:b2:7c:81:53:e0:5a:94:ad:92:ea:
cf:ec:f9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:22:06 2026 by rpki-client