
$ rpki-client -vvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json)
Hash identifier: 7zWvV+yeDBCilj9gKLLi8uE2G5285eTwwCSrZF71+jg=
Subject key identifier: D4:D2:9D:19:13:C9:95:C2:15:C9:0B:95:0C:96:75:E7:09:90:BD:58
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial: 6E9EDBB24D92D4CED4C4D9C5E4A4FD66A163F44F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 20:31:37 +0000
Manifest this update: Mon 20 Jul 2026 20:26:37 +0000
Manifest next update: Tue 21 Jul 2026 21:53:37 +0000
Files and hashes: 1: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=)
2: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=)
3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=)
4: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: fV42jynCTUU8uLhUEuNfA6g9evRKTvZj8HvFL6hzkX4=)
5: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=)
6: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=)
7: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 21:53:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:9e:db:b2:4d:92:d4:ce:d4:c4:d9:c5:e4:a4:fd:66:a1:63:f4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
Validity
Not Before: Jul 20 20:26:37 2026 GMT
Not After : Jul 21 21:53:37 2026 GMT
Subject: CN=D4D29D1913C995C215C90B950C9675E70990BD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:94:cd:de:58:1f:aa:b8:29:83:02:11:ec:42:
f7:e8:9d:21:43:c4:96:e5:50:40:91:2a:3d:c7:df:
37:65:17:75:f9:34:95:ef:67:ef:d2:ca:94:35:45:
64:7a:f6:8b:4b:d2:3b:b7:62:fa:07:70:65:52:48:
48:a4:1f:1f:0b:0d:57:2a:cc:6d:e2:46:86:62:b4:
fd:c0:09:c0:0c:16:71:f0:26:46:7a:77:d1:dc:e2:
6a:a4:03:b6:34:c7:e9:b7:e6:b1:a2:e7:d5:0c:46:
23:43:8c:bb:ae:fc:a9:61:cb:8d:0a:15:66:bd:10:
3f:c1:61:fd:c5:3d:f4:2a:8a:ac:74:c2:0f:6a:eb:
86:ef:5e:39:23:5e:5c:70:58:40:b2:05:b8:a3:db:
dc:0d:5d:37:18:35:d8:a2:ac:f3:a4:91:b8:6b:61:
41:2e:f2:60:cf:96:05:8d:42:06:ee:c9:3a:f5:99:
28:12:02:30:69:96:37:6f:73:95:ea:b1:1e:60:a7:
28:4d:71:35:97:06:61:17:ad:70:ba:e2:8b:8c:57:
f2:79:d2:5c:fa:d5:4d:44:c4:7a:70:39:72:09:91:
fb:4c:ec:71:3b:00:6c:61:9f:3d:67:8d:e0:97:f4:
4a:d6:85:27:4b:4f:42:72:97:4c:6d:d1:a7:33:72:
5c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:9D:19:13:C9:95:C2:15:C9:0B:95:0C:96:75:E7:09:90:BD:58
X509v3 Authority Key Identifier:
keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ba:65:64:99:a0:7e:d0:86:04:f3:2e:3b:f8:28:d5:ac:64:
ab:ab:85:2e:f8:50:c1:30:5b:aa:ba:7b:37:59:a6:37:a4:95:
ee:be:16:ad:b2:28:9e:71:bc:ff:04:1e:5d:f4:56:80:5d:8b:
07:6a:bf:8d:6d:19:4a:d6:00:af:a2:63:f8:f3:ec:96:45:0a:
5c:3b:21:b7:a2:b4:1c:1b:d8:9d:c4:95:03:9e:45:df:4c:16:
30:f2:96:a2:8c:44:4c:f6:61:bb:e6:d0:cf:91:8a:81:f2:a3:
1f:c3:b9:2d:a1:31:64:79:a0:0e:05:dd:8b:c5:63:40:3c:be:
2b:70:8f:31:8c:24:48:1c:93:e2:3e:ea:69:3d:21:f1:de:d6:
1d:55:d5:26:c6:f8:8e:7b:8e:4f:99:64:d9:2b:f2:74:05:b2:
a8:47:67:94:98:91:b3:bc:90:0f:f0:7a:40:b4:93:89:7b:8a:
51:05:bd:a0:cb:5e:d5:e8:84:b3:6f:18:6e:17:ff:1f:f3:cd:
c6:69:b6:b4:18:f5:e0:15:1b:c8:5b:db:ac:24:44:32:b5:07:
7c:ac:eb:f1:0a:f0:25:31:f9:b1:47:7a:2e:dd:49:57:e7:1c:
e0:f8:f5:12:dd:f7:bb:96:18:1a:6c:bb:61:86:31:d7:bb:14:
52:c1:83:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:44:10 2026 by rpki-client