
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
File: 16E36A76C68AD7EF73B872D0A244597711CEC92B.mft (raw, json)
Hash identifier: TS8SqVsjd0cevGT/vMLWYpdxEVDTkKKJ+l6d0MERkf8=
Subject key identifier: F9:67:24:7E:C1:60:D4:B4:F8:C1:B2:16:5A:E6:00:EB:6E:34:10:6F
Authority key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B
Certificate issuer: /CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
Certificate serial: 607FEF02D3BE8CFE3FDA20ACADA466BA17EF1A4B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 11:03:31 +0000
Manifest this update: Thu 23 Jul 2026 10:58:31 +0000
Manifest next update: Fri 24 Jul 2026 13:18:31 +0000
Files and hashes: 1: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: EANVJlxEg4YVe0voA5UkBVDWr1/ZEx1MsPgsXOFauYo=)
2: 16E36A76C68AD7EF73B872D0A244597711CEC92B.crl (hash: 7HlhgA2R4RyU3+4+iOysrngxh8ee0M1gDR+nrCL459k=)
3: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: AGIMZGexipjyvpy+LmJUJY6hAht+8SMw5E+al1hg6Ds=)
4: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: d1VIPUB5246bc9b42k+QQyjwKQyjJBedF26BcXOCp3E=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl
rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 13:18:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:7f:ef:02:d3:be:8c:fe:3f:da:20:ac:ad:a4:66:ba:17:ef:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
Validity
Not Before: Jul 23 10:58:31 2026 GMT
Not After : Jul 24 13:18:31 2026 GMT
Subject: CN=F967247EC160D4B4F8C1B2165AE600EB6E34106F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:df:6c:f2:e7:af:d5:2f:d9:86:f8:3f:e8:b0:
bb:62:0f:06:ba:9b:f1:73:93:af:a8:29:68:62:04:
7b:e1:bd:70:e6:d3:f9:17:47:94:cb:b0:e4:c6:7c:
69:a3:16:5d:3a:2d:97:53:a5:9d:21:20:31:06:51:
33:62:07:17:de:67:28:32:fc:af:8a:7a:17:0d:48:
e0:00:e8:6d:fc:54:20:d9:3c:d2:bc:ce:30:a8:77:
34:73:9a:e7:08:9a:fb:c9:d4:07:57:e3:df:f3:60:
26:af:dd:b6:7f:d4:29:f6:17:c6:22:58:38:cc:34:
79:66:4c:f4:1c:49:ca:b2:83:79:7c:d1:20:b4:b7:
37:1e:7c:00:2d:3f:a7:61:3e:52:8c:c3:d6:01:1f:
25:81:e1:28:1f:09:a1:a8:8e:95:13:e8:36:10:ce:
1f:d3:84:b9:6f:23:a7:98:d0:f4:51:54:ae:c8:21:
06:ea:60:cf:29:59:aa:de:44:33:4b:aa:22:d5:32:
d8:58:14:82:29:f3:27:cf:63:88:f1:0c:fc:91:6f:
91:3b:ca:3a:41:9f:27:b8:cb:e3:96:f8:96:50:40:
2f:b3:36:f8:7e:bd:8f:eb:e1:de:1b:c9:50:45:a3:
8f:df:5d:de:70:7e:68:3f:d1:06:96:25:92:32:8e:
4b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:67:24:7E:C1:60:D4:B4:F8:C1:B2:16:5A:E6:00:EB:6E:34:10:6F
X509v3 Authority Key Identifier:
keyid:16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:80:e9:a2:98:a2:54:e4:db:30:2a:2d:98:bb:b0:5e:8e:
33:f1:3c:5c:33:55:d4:a0:f9:47:ea:27:eb:ba:45:55:e1:b6:
c0:ea:69:d0:93:b0:6c:c1:da:9e:42:f2:d3:1d:7b:e7:15:c7:
83:50:fc:10:b9:71:22:53:0b:68:6e:7c:71:59:ce:9c:42:68:
5e:47:a7:6d:0d:23:ed:f6:a5:8c:af:11:34:2c:4b:57:89:de:
04:51:b0:49:60:fa:88:1e:90:4c:69:9e:e4:fd:29:ba:b0:63:
11:00:05:3c:13:cc:b6:68:e7:df:04:2a:a7:97:68:d1:9a:23:
3f:24:6c:c6:25:49:5f:55:61:03:c5:b6:15:73:3a:1c:ad:88:
60:ff:e7:02:ab:f4:01:db:c3:37:45:64:5c:3d:e3:b9:6d:b6:
83:64:13:0d:71:8b:9c:32:66:d0:e6:aa:6c:9d:f8:c9:8c:a0:
42:8a:c9:d9:c7:cf:1a:ee:c7:5a:74:4c:cf:9d:ac:bc:b7:da:
ee:c1:92:02:e2:ec:99:dc:b7:63:7c:68:59:17:9e:9c:ee:20:
18:9f:b2:2a:4a:5c:b6:44:17:6b:51:fa:ee:eb:fe:3f:07:48:
4c:4f:08:ad:23:54:df:73:21:10:36:26:f4:21:be:0a:0d:61:
b6:d6:96:45
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUYH/vAtO+jP4/2iCsraRmuhfvGkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTZFMzZBNzZDNjhBRDdFRjczQjg3MkQwQTI0NDU5Nzcx
MUNFQzkyQjAeFw0yNjA3MjMxMDU4MzFaFw0yNjA3MjQxMzE4MzFaMDMxMTAvBgNV
BAMTKEY5NjcyNDdFQzE2MEQ0QjRGOEMxQjIxNjVBRTYwMEVCNkUzNDEwNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCN32zy56/VL9mG+D/osLtiDwa6
m/Fzk6+oKWhiBHvhvXDm0/kXR5TLsOTGfGmjFl06LZdTpZ0hIDEGUTNiBxfeZygy
/K+KehcNSOAA6G38VCDZPNK8zjCodzRzmucImvvJ1AdX49/zYCav3bZ/1Cn2F8Yi
WDjMNHlmTPQcScqyg3l80SC0tzcefAAtP6dhPlKMw9YBHyWB4SgfCaGojpUT6DYQ
zh/ThLlvI6eY0PRRVK7IIQbqYM8pWareRDNLqiLVMthYFIIp8yfPY4jxDPyRb5E7
yjpBnye4y+OW+JZQQC+zNvh+vY/r4d4byVBFo4/fXd5wfmg/0QaWJZIyjkt5AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU+WckfsFg1LT4wbIWWuYA6240EG8wHwYDVR0j
BBgwFoAUFuNqdsaK1+9zuHLQokRZdxHOySswDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWNlOGRhOWMtYmRiZC00OTA4LWJhOTItZDkwZmVhOWM4ZjA1LzAvMTZFMzZBNzZD
NjhBRDdFRjczQjg3MkQwQTI0NDU5NzcxMUNFQzkyQi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS8xNkUzNkE3NkM2OEFEN0VGNzNCODcyRDBBMjQ0NTk3NzExQ0VD
OTJCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWNlOGRhOWMtYmRiZC00OTA4LWJh
OTItZDkwZmVhOWM4ZjA1LzAvMTZFMzZBNzZDNjhBRDdFRjczQjg3MkQwQTI0NDU5
NzcxMUNFQzkyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBACcXgOmimKJU5NswKi2Yu7BejjPxPFwzVdSg
+UfqJ+u6RVXhtsDqadCTsGzB2p5C8tMde+cVx4NQ/BC5cSJTC2hufHFZzpxCaF5H
p20NI+32pYyvETQsS1eJ3gRRsElg+ogekExpnuT9KbqwYxEABTwTzLZo598EKqeX
aNGaIz8kbMYlSV9VYQPFthVzOhytiGD/5wKr9AHbwzdFZFw947lttoNkEw1xi5wy
ZtDmqmyd+MmMoEKKydnHzxrux1p0TM+drLy32u7BkgLi7Jnct2N8aFkXnpzuIBif
sipKXLZEF2tR+u7r/j8HSExPCK0jVN9zIRA2JvQhvgoNYbbWlkU=
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:17:45 2026 by rpki-client