
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json)
Hash identifier: 7K/mVBp9e1xNXsRQMT9l6s/MrmU/nc7do0QeKFHZJUU=
Subject key identifier: 7E:6D:92:0F:94:38:DE:9E:F6:3B:19:EC:33:CA:CF:47:E2:24:D3:D8
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial: 2034FE93A3B06FB9CE0DAC67326D798D33D8F8A0
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 22:15:28 +0000
Manifest this update: Tue 12 May 2026 22:10:28 +0000
Manifest next update: Wed 13 May 2026 23:41:28 +0000
Files and hashes: 1: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=)
2: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=)
3: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: b7jG5Xwe9eYsJrRXEoNC14aU76a7PkhQlmaeybBcX9s=)
4: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=)
5: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=)
6: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=)
7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:41:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:34:fe:93:a3:b0:6f:b9:ce:0d:ac:67:32:6d:79:8d:33:d8:f8:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
Validity
Not Before: May 12 22:10:28 2026 GMT
Not After : May 13 23:41:28 2026 GMT
Subject: CN=7E6D920F9438DE9EF63B19EC33CACF47E224D3D8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:59:4b:be:42:f3:c9:af:cf:28:cc:df:9f:fd:
e8:5f:02:81:19:e8:24:97:39:cf:f0:90:82:27:4d:
68:35:fe:75:81:73:d4:91:93:7f:b1:91:fd:21:3b:
85:9a:c3:23:0b:3e:b7:2a:d4:4f:52:64:2f:53:40:
4e:1e:30:d8:d2:79:21:5b:b1:46:d6:76:12:38:a6:
cd:56:48:e1:aa:00:a6:0c:7d:9b:42:de:29:75:9f:
29:9e:b6:e8:89:cd:b0:a6:5b:d0:ab:07:7c:b2:42:
e6:f6:39:13:fe:85:f5:27:a8:2a:6e:1f:46:b5:d1:
c8:a8:39:d0:bc:97:ce:28:cc:45:6c:c8:48:f8:08:
b4:94:13:f1:53:cf:ad:10:80:83:82:a2:10:8f:e0:
3d:a0:1e:bc:f2:ee:d7:3e:1b:0e:c0:ac:86:5e:5a:
81:61:28:83:8b:e7:05:e6:75:6a:e2:d2:53:82:c9:
55:87:21:16:f4:eb:91:df:0d:ba:9f:e8:1f:80:9b:
d7:19:b8:9c:92:4b:9a:82:ac:64:4a:b1:09:ba:e5:
17:4e:de:17:61:b6:55:7e:45:d3:28:ab:72:45:a0:
16:b2:81:7f:45:03:a8:91:91:b6:74:99:f2:50:4b:
88:10:35:aa:af:d5:05:86:de:1f:54:50:c6:79:7a:
be:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:6D:92:0F:94:38:DE:9E:F6:3B:19:EC:33:CA:CF:47:E2:24:D3:D8
X509v3 Authority Key Identifier:
keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7d:d5:1d:53:ba:c1:30:89:9b:db:af:a9:7b:e1:bb:83:f1:
4d:bd:1d:74:f9:e7:18:7f:18:e7:66:cf:5e:29:bd:30:92:c9:
6e:bc:9f:9d:ab:d2:0d:bf:8a:71:84:63:0d:f2:2d:f9:cf:57:
5a:51:a0:78:16:c6:bf:ee:68:25:3d:12:68:1a:e5:fa:44:bd:
08:e6:83:8d:ae:8a:50:2f:53:1d:e2:47:e3:86:e5:a3:a1:2f:
78:96:f6:5e:ad:e6:00:0f:07:d9:99:f4:29:fc:17:92:ad:ef:
5f:8d:62:76:73:c2:73:31:8c:e6:c7:e9:30:26:72:ca:58:ea:
cd:1d:31:f0:83:01:2c:e0:fc:70:51:4a:01:bf:4f:cb:47:fc:
29:86:dd:3a:16:b4:39:bf:25:db:9c:e6:38:f8:3c:d5:65:0e:
1a:0e:bb:88:30:41:c9:72:75:16:8c:ce:57:78:ae:9b:c5:ed:
1f:54:2a:d3:40:f7:38:16:69:76:af:03:af:13:b4:ac:cb:89:
b9:77:fa:62:3f:60:71:4a:ed:a2:ea:b6:00:cd:fc:e3:85:74:
e2:dd:52:31:10:ac:e8:ba:f3:86:34:6a:04:33:68:e8:fb:56:
87:f3:2c:0d:31:63:9f:65:48:b6:b9:55:36:93:8a:07:15:b6:
67:ac:f9:aa
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIDT+k6Owb7nODaxnMm15jTPY+KAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0
MTMxRjY2OTAeFw0yNjA1MTIyMjEwMjhaFw0yNjA1MTMyMzQxMjhaMDMxMTAvBgNV
BAMTKDdFNkQ5MjBGOTQzOERFOUVGNjNCMTlFQzMzQ0FDRjQ3RTIyNEQzRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7WUu+QvPJr88ozN+f/ehfAoEZ
6CSXOc/wkIInTWg1/nWBc9SRk3+xkf0hO4WawyMLPrcq1E9SZC9TQE4eMNjSeSFb
sUbWdhI4ps1WSOGqAKYMfZtC3il1nymetuiJzbCmW9CrB3yyQub2ORP+hfUnqCpu
H0a10cioOdC8l84ozEVsyEj4CLSUE/FTz60QgIOCohCP4D2gHrzy7tc+Gw7ArIZe
WoFhKIOL5wXmdWri0lOCyVWHIRb065HfDbqf6B+Am9cZuJySS5qCrGRKsQm65RdO
3hdhtlV+RdMoq3JFoBaygX9FA6iRkbZ0mfJQS4gQNaqv1QWG3h9UUMZ5er5DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUfm2SD5Q43p72OxnsM8rPR+Ik09gwHwYDVR0j
BBgwFoAUSRZWXFIjTvh7IQHktzPkZ0Ex9mkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZGFkNjdkNWYtNTcxMy00MTUzLTg3MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1
MjIzNEVGODdCMjEwMUU0QjczM0U0Njc0MTMxRjY2OS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS80OTE2NTY1QzUyMjM0RUY4N0IyMTAxRTRCNzMzRTQ2NzQxMzFG
NjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3
MWItMWIwMDhmN2ZmZGQyLzAvNDkxNjU2NUM1MjIzNEVGODdCMjEwMUU0QjczM0U0
Njc0MTMxRjY2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHd91R1TusEwiZvbr6l74buD8U29HXT55xh/
GOdmz14pvTCSyW68n52r0g2/inGEYw3yLfnPV1pRoHgWxr/uaCU9Emga5fpEvQjm
g42uilAvUx3iR+OG5aOhL3iW9l6t5gAPB9mZ9Cn8F5Kt71+NYnZzwnMxjObH6TAm
cspY6s0dMfCDASzg/HBRSgG/T8tH/CmG3ToWtDm/Jduc5jj4PNVlDhoOu4gwQcly
dRaMzld4rpvF7R9UKtNA9zgWaXavA68TtKzLibl3+mI/YHFK7aLqtgDN/OOFdOLd
UjEQrOi684Y0agQzaOj7VofzLA0xY59lSLa5VTaTigcVtmes+ao=
-----END CERTIFICATE-----
Generated at Wed May 13 04:16:54 2026 by rpki-client