
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
File: 66770FA373CD2744142D0B56F662714EF6D9C8DB.mft (raw, json)
Hash identifier: ttYCBP4TdYdH6Si7pTO5dKRudjG8U3hhB0rQagEhHHY=
Subject key identifier: BD:B4:F3:77:39:AF:DE:EC:A6:9D:7C:D9:52:31:9F:EA:00:00:C1:BA
Authority key identifier: 66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
Certificate issuer: /CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Certificate serial: 73BE9BB880C40A191D13A83601E5CE7D82E4B00B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
Manifest number: BE
Signing time: Mon 21 Sep 2026 13:43:31 +0000
Manifest this update: Mon 21 Sep 2026 13:38:31 +0000
Manifest next update: Tue 22 Sep 2026 16:52:31 +0000
Files and hashes: 1: 66770FA373CD2744142D0B56F662714EF6D9C8DB.crl (hash: p9b4gLtVPyQH7ZNblHtlBXWZ+l7ifjoVE+sRhdP7AYo=)
2: 3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (hash: 0qq48OCHi8iCltrRIsd13nb6wvElWiiJ+LXwYMuIHYw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 16:52:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:be:9b:b8:80:c4:0a:19:1d:13:a8:36:01:e5:ce:7d:82:e4:b0:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66770FA373CD2744142D0B56F662714EF6D9C8DB
Validity
Not Before: Sep 21 13:38:31 2026 GMT
Not After : Sep 22 16:52:31 2026 GMT
Subject: CN=BDB4F37739AFDEECA69D7CD952319FEA0000C1BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e9:40:09:20:3d:4c:29:b4:5e:2f:c4:9d:60:
5f:1b:a8:ff:18:10:9b:d9:db:37:41:48:ee:13:61:
93:50:34:50:0b:e8:eb:24:d8:ae:06:b3:56:50:6a:
41:84:bc:d3:7b:8e:46:7d:e5:f0:4b:e8:09:cb:d4:
de:76:af:03:8d:8b:8f:44:8f:8c:91:9d:c3:90:5b:
31:e9:3f:0d:3f:57:b6:d3:c2:5a:68:b7:53:fa:4e:
9f:41:eb:96:59:57:6a:6d:71:78:b6:95:6b:c2:7e:
43:e7:4f:f4:a3:62:bf:c8:aa:7c:7d:18:f2:22:03:
5d:99:ad:05:d8:a3:9f:18:65:49:03:26:5c:96:70:
0f:75:92:17:05:76:95:c9:26:ab:b0:59:f4:f6:c9:
1a:91:4a:55:bb:23:28:a6:96:1d:2f:15:13:7c:9b:
89:f1:8a:1b:a5:83:f6:a2:d4:58:61:cc:93:4e:e0:
74:1b:3e:d0:db:de:74:0e:40:ef:69:58:db:9d:a3:
ac:41:30:02:75:bd:ed:53:90:b7:18:75:09:e3:9c:
aa:74:72:eb:30:0c:ce:0b:a3:56:a6:aa:ff:dc:dd:
ca:b2:61:87:78:46:f3:f8:0a:a0:b0:e3:4e:60:49:
ad:bc:90:90:40:a9:f9:16:71:c0:e7:b8:09:aa:27:
b5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:B4:F3:77:39:AF:DE:EC:A6:9D:7C:D9:52:31:9F:EA:00:00:C1:BA
X509v3 Authority Key Identifier:
keyid:66:77:0F:A3:73:CD:27:44:14:2D:0B:56:F6:62:71:4E:F6:D9:C8:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/66770FA373CD2744142D0B56F662714EF6D9C8DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/66770FA373CD2744142D0B56F662714EF6D9C8DB.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:8b:1b:91:81:2f:19:b1:dc:7c:3c:c5:02:cc:87:b1:b1:5b:
d9:22:b0:1e:50:25:3f:3a:02:d8:35:55:53:d9:cd:73:33:27:
59:5c:10:82:44:35:3e:e8:c1:f7:16:a4:31:4f:c7:5b:a9:54:
cb:96:8c:37:c0:6a:8e:d3:98:96:8a:a5:6b:5b:0b:f6:f0:5e:
09:c5:6c:2c:53:87:70:77:42:bf:51:b8:9f:b3:1d:bd:70:fc:
94:24:11:29:ec:e5:9c:ee:14:b7:b0:0b:b6:63:d6:d3:0b:e6:
48:1c:75:29:4e:6a:04:57:94:94:9c:3d:b9:e4:46:66:e7:f5:
23:2f:aa:8b:a9:9d:9a:a4:2e:09:df:ba:7d:00:76:f0:d1:7c:
28:45:c8:e2:17:17:c6:ff:26:26:04:32:38:a9:3b:b6:56:6a:
b3:20:d6:c7:80:44:74:1a:89:05:f4:de:40:43:57:48:e8:0e:
9d:c8:dd:5f:9c:5b:fb:05:14:7f:93:3e:8d:9c:30:33:ac:97:
04:01:e0:9a:6a:13:a5:91:97:6d:60:0b:29:63:07:75:a6:e4:
56:b8:d0:b1:4c:73:9b:27:86:df:50:2f:0b:7d:a9:72:94:cf:
05:51:08:6e:21:0c:8d:62:96:29:80:8d:1a:5a:ce:63:6e:74:
e8:ac:c6:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:47:40 2026 by rpki-client