
$ rpki-client -vvf rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft
File: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft (raw, json)
Hash identifier: MOK0NVdO8T49CmMrlIde39HSfXi9g3sOMbOcC8flVfc=
Subject key identifier: 4E:06:44:0F:FC:C7:F0:56:18:DF:E5:6D:8D:81:01:5F:7D:B5:32:39
Authority key identifier: 5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57
Certificate issuer: /CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57
Certificate serial: 015B58C9BB45A0105167B642CA7EE55DDC431377
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:59:07 +0000
Manifest this update: Wed 17 Jun 2026 00:54:07 +0000
Manifest next update: Thu 18 Jun 2026 03:50:07 +0000
Files and hashes: 1: 5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl (hash: 7pbi7sJ2Oryw5nBFARKw29A8I7XuT8mjMd4MfeEjnVs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl
rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:5b:58:c9:bb:45:a0:10:51:67:b6:42:ca:7e:e5:5d:dc:43:13:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5F66F5BF9348D5B5A631CEB100F20265EBD8BE57
Validity
Not Before: Jun 17 00:54:07 2026 GMT
Not After : Jun 18 03:50:07 2026 GMT
Subject: CN=4E06440FFCC7F05618DFE56D8D81015F7DB53239
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c9:8e:1a:5c:a4:e0:ca:03:57:72:ca:00:f8:
f9:13:26:4b:b7:6d:fd:70:2f:b7:81:c7:43:a2:81:
f3:1d:2f:d5:d2:93:3a:7a:cd:d7:e2:59:5b:d4:a4:
c8:a6:d5:bf:3b:6b:5a:90:f3:a3:0f:11:92:f3:76:
3d:03:45:86:cb:ea:63:ba:22:84:6b:c9:17:9c:d0:
87:3b:92:7d:b8:3a:e1:85:33:0f:36:8c:b0:f0:0f:
4c:55:ee:1f:44:d4:a5:52:12:92:ac:3b:dd:88:7d:
da:67:ad:48:c6:b2:ab:04:9e:cc:41:81:ae:ba:f7:
19:6a:cb:85:52:8e:1e:be:6a:4b:8d:ba:f8:10:2d:
c6:4e:08:8c:5d:80:eb:ad:6b:5e:06:09:eb:db:c8:
b2:e5:75:b6:5a:08:52:7e:05:f3:73:40:d6:69:ad:
55:da:62:57:38:94:e3:94:b7:82:15:07:50:31:12:
f5:3b:0b:0d:b4:51:1b:13:00:4d:0f:aa:5b:63:40:
a4:fd:2d:69:38:ca:fd:f8:03:7e:93:69:b5:43:92:
1a:92:a7:a0:67:32:9a:92:e1:86:a1:ba:ac:4d:02:
a0:f5:55:e6:cf:7b:fa:55:dc:cc:67:01:24:11:d4:
1c:8b:53:e7:7f:b6:5c:67:cc:e3:cd:30:7b:ef:b7:
68:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:06:44:0F:FC:C7:F0:56:18:DF:E5:6D:8D:81:01:5F:7D:B5:32:39
X509v3 Authority Key Identifier:
keyid:5F:66:F5:BF:93:48:D5:B5:A6:31:CE:B1:00:F2:02:65:EB:D8:BE:57
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/82fa3a39-e0ec-4fc1-9b54-353e07f005dd/0/5F66F5BF9348D5B5A631CEB100F20265EBD8BE57.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:72:79:c7:af:7e:1e:33:bc:63:5c:a2:e9:e7:f7:b6:c7:9b:
59:44:d8:ee:08:df:b8:14:23:3f:7f:01:c5:d2:78:3e:ba:b6:
3b:a3:a6:5a:b9:94:8c:82:cf:3f:10:17:59:e3:82:b5:99:17:
29:7a:d3:fa:d1:f6:92:0a:9e:23:bd:d5:cf:86:49:fa:89:79:
04:e5:99:9a:a7:55:6a:c9:d7:05:6c:11:ae:e5:1b:80:ed:c0:
e0:fe:29:46:fb:1e:31:64:12:94:61:fd:bc:78:ce:22:d8:4f:
3d:58:c6:db:c5:54:fb:61:a4:75:f7:a1:ad:16:1a:a7:19:9d:
27:ba:04:98:f4:c8:0e:0b:26:31:5d:79:ee:51:64:9c:d3:e6:
dc:4d:19:4e:b1:0b:19:97:99:e0:bb:9c:ef:bb:6b:d4:f9:84:
32:1e:73:23:aa:05:66:f7:b1:d4:ba:f2:b8:56:ce:e5:5e:77:
29:a2:28:82:8c:dc:95:bd:d1:85:6c:11:a2:c9:3d:92:2d:9b:
3e:dd:16:aa:dd:f4:37:80:f0:40:84:23:77:2b:56:c5:82:c2:
4e:e9:f3:78:c6:f5:8c:c6:7f:f7:04:86:18:84:0b:dd:4e:2a:
7a:f0:f0:72:7a:0d:f3:0d:bf:bf:17:82:7b:a7:ef:28:ac:d1:
53:ac:ee:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:30:20 2026 by rpki-client