
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json)
Hash identifier: wks5qmfs8J9xWgoznawwfPF+LGLdflQMOmeMElu0aR4=
Subject key identifier: 36:92:9F:AF:E2:2F:7D:7E:7E:D5:21:39:65:58:4F:D6:A9:20:8B:B0
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 348ABDF886556E6C99B8456B53E6F05AB324D764
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 23:57:59 +0000
Manifest this update: Tue 16 Jun 2026 23:52:59 +0000
Manifest next update: Thu 18 Jun 2026 00:11:59 +0000
Files and hashes: 1: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: rbPnirP947EozCtaMpCZ2WhFqsqfiaRIEzw/k75loiA=)
2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 00:11:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:8a:bd:f8:86:55:6e:6c:99:b8:45:6b:53:e6:f0:5a:b3:24:d7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: Jun 16 23:52:59 2026 GMT
Not After : Jun 18 00:11:59 2026 GMT
Subject: CN=36929FAFE22F7D7E7ED5213965584FD6A9208BB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:10:5e:83:a9:34:f7:6b:14:e4:a4:a0:a2:2e:
3c:4c:c6:40:6f:62:bd:d2:15:2b:ec:79:fc:80:bd:
7d:6e:8e:5c:77:78:e5:80:e0:31:d7:84:7e:e5:f1:
ef:30:d3:d3:7c:c4:99:b3:1f:6f:ef:89:9e:9f:aa:
a2:33:0c:a1:97:62:ac:6f:1e:ea:4d:f8:97:92:41:
0b:2e:2f:10:ab:bd:74:12:cd:df:35:d3:6b:6c:d6:
40:c6:c9:a2:bc:8e:dd:de:20:e8:aa:d2:bd:3f:ff:
d1:01:bf:10:3b:c2:ce:76:37:a4:4c:85:0f:18:fa:
b5:7e:fc:84:00:ec:f8:14:ce:e6:c8:68:8c:04:91:
53:c1:31:75:a1:2e:f8:31:e5:25:76:f5:7a:f0:0e:
8f:11:b3:02:40:a8:e4:eb:20:4a:fe:4c:30:b0:af:
5c:12:5e:78:80:02:78:a0:fd:60:eb:14:1e:da:fc:
85:e9:6e:58:ae:3d:a6:92:3d:93:68:ea:89:d1:e0:
e1:a2:61:0a:6a:3c:66:82:3c:e0:e9:c3:35:33:71:
5f:8d:1e:a3:97:76:97:7d:0d:ef:af:04:31:92:b5:
3e:97:50:4f:18:d0:8d:7f:b9:27:0a:6e:fd:a5:bf:
4d:69:59:26:83:95:47:4d:e2:48:12:03:74:a7:ae:
61:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:92:9F:AF:E2:2F:7D:7E:7E:D5:21:39:65:58:4F:D6:A9:20:8B:B0
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9b:b8:43:21:31:ed:7d:61:88:f7:00:22:70:ab:ef:27:ff:
26:d0:cd:81:f3:3a:11:70:28:1b:1a:01:67:f6:b1:2f:2c:11:
db:eb:95:33:c3:9f:84:1d:50:4e:86:af:a3:4b:28:a7:99:c1:
e7:f1:77:03:11:64:cd:b3:71:fc:5d:ad:bf:d2:f6:82:07:9e:
17:f4:55:36:29:5c:ce:ce:b1:95:92:7c:a9:a5:06:2d:dd:e9:
2c:40:5e:de:4d:f2:25:c9:8c:f7:a3:2e:cb:69:73:fb:32:76:
43:6b:a7:b6:6c:8a:6e:09:29:f3:a5:35:ba:53:c2:68:27:f4:
69:89:56:e3:c7:70:27:cf:64:60:2d:ca:08:77:c7:bc:63:41:
5c:db:cd:37:30:27:a6:b3:da:3c:19:ad:ca:54:2e:be:7a:dc:
e1:4b:47:8e:a0:a2:73:94:9e:3c:fa:01:92:e6:aa:dd:53:74:
07:a7:c2:fc:c7:a4:9e:4a:6d:6c:a1:8c:7e:03:8c:8b:d1:80:
12:51:9c:f4:64:e2:90:5a:82:db:8f:83:d9:ae:86:da:e9:d1:
53:c5:fb:49:03:fd:76:e0:a5:86:cd:81:38:0d:e0:72:ec:d4:
43:66:2b:53:a0:e3:0c:8c:a4:bf:22:c7:20:d8:b1:d1:e8:3a:
b0:a3:59:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:12:23 2026 by rpki-client