
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
File: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft (raw, json)
Hash identifier: KccarnQcrTO6kgZy76AJPq4W9bCt7WTJ8K9gohHaBYY=
Subject key identifier: C8:26:5D:BC:76:AE:8A:F2:3B:1D:69:C3:2B:3A:51:C1:56:9E:93:F3
Authority key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02
Certificate issuer: /CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302
Certificate serial: 1B740B9B0C2AB151CD5DC17ED7E0358416930B80
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 18:15:05 +0000
Manifest this update: Wed 02 Sep 2026 18:10:05 +0000
Manifest next update: Thu 03 Sep 2026 21:28:05 +0000
Files and hashes: 1: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl (hash: hO+qP/YcaKYKtSoJwUhjs1TLJDMEMCAHk/4TfZbXFok=)
2: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: Cpjg4SMt12A8DW7uKCND6UkuKdprXSLBV2afftUulJU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl
rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:28:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:74:0b:9b:0c:2a:b1:51:cd:5d:c1:7e:d7:e0:35:84:16:93:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302
Validity
Not Before: Sep 2 18:10:05 2026 GMT
Not After : Sep 3 21:28:05 2026 GMT
Subject: CN=C8265DBC76AE8AF23B1D69C32B3A51C1569E93F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b2:bc:9f:9b:7f:ee:8d:30:53:e9:9a:5c:b8:
21:65:39:33:0a:b0:ee:92:72:c4:34:40:9c:c4:fc:
2f:e3:9a:de:d4:5b:9e:37:f2:34:19:62:33:14:ca:
0c:50:5f:86:3b:01:23:3d:49:09:fc:79:27:29:59:
df:c7:af:a4:5f:a1:bf:bf:82:83:15:af:29:a6:30:
bb:98:f8:51:00:d1:37:f2:9e:15:d7:19:41:f3:7c:
e7:63:17:08:1e:f9:cb:5f:1a:6f:87:1d:00:b5:24:
28:e7:c0:d6:d2:a5:4c:8a:d2:e6:a4:3d:5b:86:f4:
d1:a5:71:49:7d:c7:f4:c6:8b:e7:e5:14:c9:8c:b3:
74:01:52:a2:43:f8:d1:d4:0b:ab:33:46:c3:34:aa:
9b:b1:55:59:96:9c:ee:86:44:a3:1a:f0:21:25:a2:
37:91:25:17:95:f2:45:d8:8a:e8:da:ef:39:e8:90:
f4:31:b1:2a:31:db:21:f1:29:36:dd:08:35:d7:60:
a6:a5:bd:77:58:5e:99:02:d2:35:55:da:1c:7f:d9:
c5:a1:92:3b:48:20:06:f6:bb:41:50:6c:32:15:1f:
8d:ee:8d:a4:b8:04:78:26:73:9f:9e:03:8d:f7:e6:
87:34:a5:68:50:0d:6e:4a:c1:c5:72:b1:eb:3b:cb:
c9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:26:5D:BC:76:AE:8A:F2:3B:1D:69:C3:2B:3A:51:C1:56:9E:93:F3
X509v3 Authority Key Identifier:
keyid:C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:29:09:65:14:db:ee:d8:9b:fb:33:d3:e5:17:37:f4:b7:0c:
27:b7:9d:57:4f:23:af:51:c8:cf:f0:cd:c1:e1:61:55:a6:2b:
29:6e:21:76:ed:a1:7a:f4:0c:c7:51:bf:c9:bb:89:a9:3d:1f:
a0:96:b4:11:fb:fd:f0:d0:57:7b:03:04:50:d5:54:4a:24:ae:
91:71:38:1f:62:ab:4b:94:cd:36:08:54:a0:9f:09:c3:ef:8c:
3c:c0:28:df:a6:dd:5d:f4:c7:2b:4f:66:fd:e9:90:71:b6:47:
b8:0f:fd:24:8d:68:7c:d7:03:a6:72:c8:c7:53:ae:39:4d:2a:
7a:4b:cb:c0:e2:61:c4:5e:0d:02:e6:b4:a6:ae:6f:46:88:ae:
7e:0f:f2:49:cf:c8:3a:cb:bd:de:08:6f:90:d8:a5:1e:cd:69:
dc:8d:94:56:f3:68:04:33:46:21:96:10:0d:12:aa:87:42:41:
ef:6a:4d:5c:07:72:29:64:c0:de:45:2c:d4:1f:dd:87:37:4d:
63:73:03:4b:1b:83:36:2b:33:9e:30:a7:42:5e:aa:a9:5f:f9:
59:98:7b:2a:f8:f7:09:94:2f:3a:4d:8b:d7:ad:c2:09:6d:9b:
eb:75:01:29:a7:35:0a:01:84:aa:59:f2:90:bc:5d:36:ef:5d:
d6:dc:f9:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 13:00:58 2026 by rpki-client