
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
File: 16FC1DF2D807E338985DE30932EA34E250228796.mft (raw, json)
Hash identifier: UCuzMQLq3QRslTYjV/wzEFg+87FckbsysxnO/9BeNkM=
Subject key identifier: 49:04:EE:55:6A:B7:92:88:51:42:68:34:E9:E0:5A:E7:CF:49:CE:C9
Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796
Certificate serial: 49802D1A4AA30B1228C925D9C702EF9D6FA2F1D8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 18:37:54 +0000
Manifest this update: Thu 23 Jul 2026 18:32:54 +0000
Manifest next update: Fri 24 Jul 2026 22:10:54 +0000
Files and hashes: 1: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=)
2: 16FC1DF2D807E338985DE30932EA34E250228796.crl (hash: br4IqCuT3vNW0rYVIxJ15gp5E9V8JAt5q+qcDBnV6eA=)
3: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=)
4: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=)
5: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=)
6: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 1dE/zpXNqMfI1ilfUn5DrrCSaXBhuo+1IUrzkuKY22o=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 22:10:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:80:2d:1a:4a:a3:0b:12:28:c9:25:d9:c7:02:ef:9d:6f:a2:f1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796
Validity
Not Before: Jul 23 18:32:54 2026 GMT
Not After : Jul 24 22:10:54 2026 GMT
Subject: CN=4904EE556AB7928851426834E9E05AE7CF49CEC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ed:2f:bf:cb:f7:ea:91:1d:96:5a:4c:1b:ed:
1b:6f:ef:a3:45:9a:82:fd:ee:51:d3:3b:34:07:50:
42:00:25:84:b8:d9:cb:bd:f7:12:e0:9b:e7:8c:32:
a7:65:25:1e:ef:57:c5:0e:13:ce:4d:50:50:56:4b:
c9:55:2d:e1:a2:60:93:7b:98:a9:b6:3b:f8:43:a8:
f3:f7:33:93:88:b9:86:5b:74:e3:2f:fb:c9:80:18:
78:68:ac:6b:f3:63:52:59:a6:5d:2f:39:b0:fd:83:
6c:0f:5a:8e:e6:12:77:17:c3:f2:7a:6e:92:34:1f:
5a:a6:c1:96:ee:61:63:c0:b6:15:1b:41:5b:53:a3:
64:7b:70:6f:45:73:4d:31:d4:fb:d4:57:a4:68:ae:
dc:d6:09:c8:de:ad:2e:a1:06:08:9d:b6:99:58:12:
06:0a:62:20:06:27:56:26:9c:f6:8d:d0:af:64:7e:
fa:e4:08:ee:8a:32:cd:d4:2b:97:ff:db:0a:2c:f5:
66:06:f0:06:ef:76:fe:8d:e7:37:99:14:56:43:c7:
86:ec:9b:f6:af:93:20:d2:b9:98:b5:e4:6e:8d:f8:
8f:f1:94:9c:f1:d4:58:7f:46:9a:12:2f:89:60:bc:
d7:fb:f5:2b:6a:4b:68:f6:34:e5:a0:bf:ca:26:52:
1e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:04:EE:55:6A:B7:92:88:51:42:68:34:E9:E0:5A:E7:CF:49:CE:C9
X509v3 Authority Key Identifier:
keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:5e:a9:20:6e:f2:92:64:be:64:fe:dd:eb:cd:24:98:34:2e:
e8:e8:f4:08:e5:ce:aa:eb:21:fa:ea:ca:8e:12:70:92:9c:e9:
36:4f:65:0a:d3:5b:6d:75:3f:c1:01:d2:ca:7b:12:95:99:82:
47:c5:ad:d9:f7:ad:2f:b2:01:5b:93:a5:a3:93:89:38:ed:12:
17:e5:c6:43:e7:7c:5e:85:b4:5e:ce:a8:7f:30:d7:4c:33:8a:
59:5a:66:cf:1c:ab:8c:54:19:5d:f4:7b:3a:86:c2:c4:09:1f:
1f:3f:fd:60:b4:dd:4a:d9:c5:21:0e:b7:6f:90:f7:b9:b5:b9:
4b:82:67:ef:85:2f:4e:11:75:a5:3b:19:85:d2:61:44:d9:98:
e3:43:98:a7:30:d5:6d:0d:d9:65:8f:b9:d5:fd:f6:a2:0b:bd:
7f:eb:d2:c0:f6:11:5c:99:d5:4d:04:64:22:ae:c7:8f:66:29:
de:34:3c:7e:fe:2a:13:bb:19:37:80:92:61:b5:5d:7c:61:17:
b5:0f:b6:77:05:36:3b:ff:77:33:ac:e1:7c:94:78:23:65:30:
c7:86:94:b0:76:5f:9c:a3:51:37:41:b5:a5:9f:b9:b2:f1:69:
2a:fd:44:34:e2:4f:12:05:2d:f8:6d:c8:28:e4:cf:ff:80:ca:
3e:5e:47:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:59:02 2026 by rpki-client