
$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
File: 16FC1DF2D807E338985DE30932EA34E250228796.mft (raw, json)
Hash identifier: V6v4xu7T4KGxkaIYrgja1M2ZVd1V8Ww9+mhQvpbE254=
Subject key identifier: 67:E9:68:FC:04:DB:E3:3B:FE:16:74:E4:5C:B7:02:A1:33:FA:E3:A4
Authority key identifier: 16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
Certificate issuer: /CN=16FC1DF2D807E338985DE30932EA34E250228796
Certificate serial: 3E3DC139237E0E460B09EC54DA961839797EEA5C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 18:19:16 +0000
Manifest this update: Mon 20 Jul 2026 18:14:16 +0000
Manifest next update: Tue 21 Jul 2026 20:19:16 +0000
Files and hashes: 1: 16FC1DF2D807E338985DE30932EA34E250228796.crl (hash: cWiUVcJqiZhWi/7lrn0Z05Yur4lN27hc86mbyh6+YU4=)
2: 323430333a343334303a3a2f33322d3332203d3e20313337333738.roa (hash: 1dE/zpXNqMfI1ilfUn5DrrCSaXBhuo+1IUrzkuKY22o=)
3: 3130332e3131392e3131362e302f32342d3234203d3e20313337333738.roa (hash: A7xyFA4qpVRKeavzBnm+Cjv8gBWwy1p/6K95VuLQBjM=)
4: 3130332e3131392e3131382e302f32342d3234203d3e20313337333738.roa (hash: 0FBu/rjRCHpSQhidXvQmco2Gd+NRZ/I75lgQ9c+yrhs=)
5: 3130332e3131392e3131372e302f32342d3234203d3e20313337333738.roa (hash: roqA5lD4sFTDR1g7UxqG9+ZjfyukoDRdAX9XNlxiMJE=)
6: 3130332e3131392e3131392e302f32342d3234203d3e20313337333738.roa (hash: iWp9zL2tSRzcXXiV+WVgdnT86pBdN5E8UOgytY/+pL4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 20:19:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3d:c1:39:23:7e:0e:46:0b:09:ec:54:da:96:18:39:79:7e:ea:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16FC1DF2D807E338985DE30932EA34E250228796
Validity
Not Before: Jul 20 18:14:16 2026 GMT
Not After : Jul 21 20:19:16 2026 GMT
Subject: CN=67E968FC04DBE33BFE1674E45CB702A133FAE3A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:b3:38:f3:8d:9f:3e:92:91:7d:46:64:c7:
11:ff:93:d3:ba:d1:4d:4d:0f:32:27:5a:2a:fc:ee:
47:e3:3f:f4:5e:d3:21:49:b3:98:55:3a:dc:bb:23:
a4:f3:0f:55:bc:60:9c:9a:68:c9:28:b6:3d:70:f0:
80:59:ad:a0:0d:0d:cf:89:48:22:0f:d5:8e:a0:63:
04:ed:68:ba:82:6c:04:b8:5f:90:67:06:d7:1b:6b:
3b:37:dc:47:8a:e6:d3:a1:54:9e:8d:e2:67:11:14:
e5:17:90:fe:0a:e2:32:f5:3c:e5:dd:47:27:3d:47:
2f:b4:59:12:41:15:1d:36:74:89:b4:85:69:16:fc:
15:84:ce:7e:78:de:5e:37:88:5f:73:31:c1:d2:e6:
e5:73:af:9f:95:6a:da:38:b1:fd:29:4d:a3:ec:75:
07:5c:eb:1d:3f:ba:71:cb:bb:54:49:7b:a6:5b:bb:
e0:ac:7a:bf:dc:f3:ec:bb:09:70:44:df:12:b3:89:
46:0f:ce:c9:d8:1a:30:0a:b4:96:30:e0:6b:40:c6:
5f:e9:93:8b:0c:f3:49:7a:b5:4b:d6:95:10:a1:43:
cd:51:d4:ef:84:56:e0:62:b3:89:96:3b:4e:38:a7:
0d:03:c0:b0:b5:16:23:e7:a7:79:e6:a6:b4:cb:9f:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E9:68:FC:04:DB:E3:3B:FE:16:74:E4:5C:B7:02:A1:33:FA:E3:A4
X509v3 Authority Key Identifier:
keyid:16:FC:1D:F2:D8:07:E3:38:98:5D:E3:09:32:EA:34:E2:50:22:87:96
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16FC1DF2D807E338985DE30932EA34E250228796.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e8950f0-3b14-4a6d-b30f-75379cb2ebce/0/16FC1DF2D807E338985DE30932EA34E250228796.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:f8:5a:9a:83:2c:09:06:4b:31:fe:fc:92:e8:73:d1:75:a6:
a3:79:04:e2:1d:0a:d8:48:aa:cc:54:b2:aa:c6:1f:5e:bb:5b:
64:6a:15:79:eb:b1:1b:5c:80:b4:79:35:5d:ba:9d:9a:38:c0:
9b:22:5f:d5:f8:4d:18:82:dd:06:56:b4:13:b0:ee:a7:c5:a5:
f4:12:f7:ec:85:6c:cd:ac:b0:5a:d9:19:ae:2b:2d:e3:54:e7:
86:8b:6c:ce:05:40:c8:c4:b2:d0:5b:2a:1d:c5:76:5f:c0:16:
41:78:b8:1e:4a:08:7d:c2:be:6a:b4:c9:3f:3b:22:5c:87:af:
48:6b:85:55:f0:66:17:08:43:ed:08:28:2f:fc:ad:80:e5:48:
63:2e:4a:2d:65:50:d3:35:d7:f5:66:ac:8a:8d:ca:e7:a6:fd:
83:4d:24:19:49:8d:a7:a7:24:9d:a5:70:52:bf:5e:1f:ba:8e:
e1:ac:b6:20:c6:a8:73:94:f7:5d:11:d7:c7:bb:f5:13:c7:e5:
c4:97:d2:94:f2:6e:06:81:61:e2:2c:cc:12:70:ad:85:ce:d1:
2d:3f:06:2d:fe:cb:11:fc:d8:26:d4:9f:d9:59:b8:36:21:1c:
9b:76:8a:32:98:9e:7a:30:2d:29:f9:ef:a3:b8:08:da:7b:d2:
c4:07:c1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:37:24 2026 by rpki-client