
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
File: 163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json)
Hash identifier: bxre7kygC+4qVESHRzMmPrGeUdS/XpqIno3V7Iv8tnY=
Subject key identifier: 82:17:46:6D:80:FB:09:C1:52:50:A2:8D:2C:DC:6B:82:A9:7C:E2:18
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Certificate issuer: /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial: 40680BCA2E734B03DD62194C4C0CA576010BC993
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 17:27:17 +0000
Manifest this update: Tue 12 May 2026 17:22:17 +0000
Manifest next update: Wed 13 May 2026 20:28:17 +0000
Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=)
2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=)
3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: I++QCCFqMWVgrx5Bb2uCnWxUmCVqw0V3+dA+diAb1HM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 20:28:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:68:0b:ca:2e:73:4b:03:dd:62:19:4c:4c:0c:a5:76:01:0b:c9:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Validity
Not Before: May 12 17:22:17 2026 GMT
Not After : May 13 20:28:17 2026 GMT
Subject: CN=8217466D80FB09C15250A28D2CDC6B82A97CE218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:49:30:12:4a:3b:20:00:90:b5:9a:d3:01:46:
18:6b:3f:e8:b2:2f:01:a7:cf:2a:7a:3a:db:63:97:
6a:87:13:15:5a:86:f5:7a:b8:cf:36:a0:23:2a:af:
7b:62:5a:ea:8b:20:25:77:17:84:cd:d8:f5:6f:24:
e1:49:a4:92:39:27:33:d9:58:06:3b:0e:21:16:49:
ec:76:cd:43:dd:a2:26:b4:d4:79:1c:c9:91:c4:b8:
da:16:25:12:53:fe:12:a7:98:6c:98:0b:a6:27:7f:
66:a8:56:53:ef:4f:f1:04:37:2a:83:3f:31:38:50:
e2:09:70:83:0e:ae:7c:04:ee:7f:76:ca:47:a1:21:
75:95:70:d8:76:ac:b8:50:4c:e2:4f:f5:56:99:b2:
f5:be:a5:a3:ae:55:d6:97:12:69:de:cd:9c:04:64:
9b:6e:96:24:ab:0c:b4:be:15:f1:6f:ce:6b:9c:1c:
ef:45:36:cc:9d:cd:15:fc:37:c2:bd:5f:49:1a:3c:
b4:9f:56:bc:ae:e8:dc:82:78:a9:02:63:ab:55:61:
71:10:e0:d9:ee:69:d8:43:65:32:ff:41:03:b6:33:
a4:8e:59:65:a4:ac:b7:98:52:6f:40:33:f1:20:e7:
d0:7a:a7:3b:39:38:91:e6:0d:47:49:31:d3:1d:62:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:17:46:6D:80:FB:09:C1:52:50:A2:8D:2C:DC:6B:82:A9:7C:E2:18
X509v3 Authority Key Identifier:
keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:3b:24:8e:68:1a:30:04:da:ff:c2:2a:b0:d6:24:1e:7d:e1:
64:2f:7b:85:13:40:44:7d:4b:6e:0c:17:1e:3e:3c:85:bf:b7:
c2:bb:69:b7:f1:48:a8:1d:54:27:c9:e0:b4:1c:ef:e1:9f:fe:
be:59:f4:57:d1:2c:43:b8:c1:7a:11:49:f0:91:c0:50:4e:f8:
cf:a9:04:82:fc:4a:ec:4d:cb:c7:b9:c3:8c:0a:c2:b7:9c:74:
05:5d:e8:d9:64:f7:39:00:ab:f3:63:08:84:45:10:c3:52:d5:
bc:c4:44:d1:fe:5e:1c:8d:19:66:03:51:7a:8f:e2:6d:2f:d1:
fa:d7:be:ae:11:d6:81:50:ac:2d:5c:e9:53:40:05:47:7f:78:
ae:95:b1:35:98:c4:97:cb:e6:80:ff:34:53:1f:76:77:54:5e:
f1:a2:1c:4e:8d:3c:9f:99:1c:cb:69:e6:10:53:a0:b7:31:b1:
1e:63:e0:dc:25:6a:cb:0c:52:c4:d6:66:bc:aa:77:e4:c0:aa:
81:06:7e:33:ef:bc:ba:16:51:9b:df:92:1a:66:dd:bf:bb:e6:
56:06:47:5a:49:c7:fd:d0:28:b2:15:b4:33:4a:fd:82:72:38:
1e:f2:c3:41:59:52:36:77:31:8f:65:16:4f:13:b1:17:d5:48:
ac:48:55:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:19:45 2026 by rpki-client