
$ rpki-client -vvf rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
File: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft (raw, json)
Hash identifier: BYT3TfFxCpzRMK+xCgOwqxx4kjYlO8Di5z5ju9wEaiY=
Subject key identifier: 53:EA:53:FE:03:CB:D6:F0:0D:E0:57:F3:B6:B5:13:FF:97:92:C9:65
Authority key identifier: 66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13
Certificate issuer: /CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13
Certificate serial: 3397A2434866988DD19394EA47D3909C2A302CFB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 07:11:34 +0000
Manifest this update: Wed 17 Jun 2026 07:06:34 +0000
Manifest next update: Thu 18 Jun 2026 08:34:34 +0000
Files and hashes: 1: 661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl (hash: BSaoPQpG1QZtiXKl2M3ydR8WFrpx+L0PbX/+qSCKhkk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl
rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:97:a2:43:48:66:98:8d:d1:93:94:ea:47:d3:90:9c:2a:30:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=661B2CF429FB4B8EB4C4CE130BA373F95F584E13
Validity
Not Before: Jun 17 07:06:34 2026 GMT
Not After : Jun 18 08:34:34 2026 GMT
Subject: CN=53EA53FE03CBD6F00DE057F3B6B513FF9792C965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2d:f1:9b:bd:cb:cc:9f:49:ec:72:e2:b5:8f:
66:60:00:0e:bd:32:0f:23:e9:0e:27:00:6a:2d:9b:
cc:75:77:13:7f:ce:7d:8f:0e:50:24:f1:9c:c4:82:
59:61:e6:76:13:00:e8:6b:94:0b:18:52:f7:09:33:
74:0f:7d:20:f3:4a:57:71:98:a8:16:79:33:78:51:
cd:0c:5f:61:df:b8:f8:3c:33:48:79:a0:4e:36:67:
18:9e:68:3f:29:c2:a5:f9:21:ab:2b:78:4b:7a:2e:
ea:15:49:89:a8:21:57:3d:2c:e6:8f:d2:4d:fe:1d:
eb:08:b1:72:b8:3b:0d:68:07:a2:0c:b8:90:dc:78:
8a:34:b9:46:52:99:f1:80:4e:1a:0f:99:59:ec:81:
03:a1:8d:a1:31:68:c4:43:91:51:31:0f:92:a7:69:
d6:38:31:b1:69:de:9c:22:3a:80:19:c4:79:34:75:
73:9b:74:58:1e:93:f1:a3:2e:2a:32:d1:4e:88:45:
9b:22:51:ac:87:6b:02:2a:85:10:94:9a:2e:b4:d0:
8e:d0:37:ef:86:96:1d:20:bb:47:a2:55:40:df:27:
0d:46:14:3c:a5:61:f7:b4:73:cf:59:52:23:73:01:
3b:d3:68:64:5c:f7:3f:e6:f5:53:93:44:00:d5:16:
9d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EA:53:FE:03:CB:D6:F0:0D:E0:57:F3:B6:B5:13:FF:97:92:C9:65
X509v3 Authority Key Identifier:
keyid:66:1B:2C:F4:29:FB:4B:8E:B4:C4:CE:13:0B:A3:73:F9:5F:58:4E:13
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/80ad4023-cc2b-4123-9939-a55851fca619/0/661B2CF429FB4B8EB4C4CE130BA373F95F584E13.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:98:88:e9:c8:28:54:09:11:be:f8:ef:f3:b1:f8:22:9a:aa:
ce:5a:4b:77:8c:7e:e9:37:13:c6:36:93:7e:81:7d:54:87:7e:
26:5e:4a:38:f7:81:13:1d:4e:ab:c9:d2:3e:c2:e4:83:5f:3c:
c8:e4:1d:6b:1b:b6:00:71:06:cd:8a:d8:45:fc:15:8b:36:b7:
d0:19:75:ae:c8:41:1b:5b:1b:c5:fb:33:d5:cb:1e:a5:71:21:
63:72:75:9d:cf:8c:05:09:fb:fa:cb:be:7f:93:ae:e9:c0:4f:
12:81:a2:8f:8e:3a:8a:d2:76:d1:2d:ed:cb:9c:12:c3:73:a5:
f4:93:73:6e:83:7a:77:78:0c:5c:29:2d:d4:ac:ff:63:e2:a0:
df:51:26:bb:e1:68:e1:53:fc:77:72:23:fc:4d:71:34:4c:80:
58:6b:75:18:aa:03:d3:0f:bb:18:ac:54:de:b0:4d:dd:ab:27:
a5:c6:01:9a:e4:f2:d2:25:7e:d7:6c:4d:83:20:97:ba:cb:e9:
17:e8:d9:53:22:14:14:23:74:d7:3f:81:8a:69:11:30:81:e7:
e5:ac:b3:85:49:e0:f0:96:6a:64:f3:49:26:0c:bf:67:86:26:
cc:ab:53:fc:f2:12:f2:b2:7f:4e:5f:fa:f1:cc:38:ac:4f:bc:
c7:b2:9b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:13:06 2026 by rpki-client