
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
File: 163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json)
Hash identifier: 6tm6xqNgVpowAqsre+294XWq5Tve8OiuyZqEVfP8ybM=
Subject key identifier: 40:17:83:89:6C:2F:61:DD:42:BD:51:AC:18:31:93:4B:D7:53:48:48
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Certificate issuer: /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial: 0EDA7EDF7DB4EBB355487F004CEF1BDE43B0437E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 14:54:59 +0000
Manifest this update: Mon 20 Jul 2026 14:49:59 +0000
Manifest next update: Tue 21 Jul 2026 16:05:59 +0000
Files and hashes: 1: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=)
2: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=)
3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: USVj7CugKHk1UeOYFAkt9hK2Y5PaEEFtaUdr5iyzjr0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 16:05:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:da:7e:df:7d:b4:eb:b3:55:48:7f:00:4c:ef:1b:de:43:b0:43:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Validity
Not Before: Jul 20 14:49:59 2026 GMT
Not After : Jul 21 16:05:59 2026 GMT
Subject: CN=401783896C2F61DD42BD51AC1831934BD7534848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:df:e0:f8:b6:b9:4a:79:0f:83:ac:4c:40:91:
97:a6:e8:c7:74:1b:09:e0:80:ba:60:00:d8:54:0e:
e1:26:25:54:31:de:82:0f:eb:09:f5:7c:25:3b:4b:
27:36:6e:c7:7b:11:f5:26:28:cc:45:d3:72:51:14:
ec:f0:9c:44:9f:4e:4e:4a:3c:73:81:76:aa:7f:ad:
f0:26:35:4d:03:8e:2e:f5:b8:6a:75:1b:88:15:79:
73:7f:68:b5:7f:46:d3:0e:f1:ca:ad:26:7f:87:f9:
52:bc:57:a5:3c:2e:c2:0e:62:7a:65:c4:53:a3:ce:
a8:72:4f:de:16:95:30:9f:09:08:1b:fc:88:4b:f7:
0f:77:b6:4d:b5:e4:cc:4b:d9:2d:9c:1b:3f:c5:d0:
66:16:2d:70:82:85:f4:08:4b:e5:1a:54:df:7c:9a:
1a:a6:f4:4b:42:54:97:92:46:ff:60:d0:83:29:0b:
e4:91:6a:66:b8:d5:6f:33:71:8e:1d:c7:dc:e2:99:
0e:cf:ac:a9:e1:45:8c:9a:d0:33:97:38:52:f1:e5:
6b:d8:1b:32:f9:3a:e2:ed:78:77:04:02:9b:de:19:
f2:74:6e:2e:be:6a:c3:cb:f3:bb:8a:54:6e:1b:41:
66:e9:0b:16:74:37:8a:71:12:d9:a7:a1:88:ff:69:
47:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:83:89:6C:2F:61:DD:42:BD:51:AC:18:31:93:4B:D7:53:48:48
X509v3 Authority Key Identifier:
keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:ae:3c:b5:5f:35:e6:74:7e:eb:ad:0e:7c:e0:5b:f6:f9:28:
4d:ce:0e:51:96:f0:52:8e:6a:44:28:53:d9:c3:7e:d8:f5:c0:
6d:dd:4a:0b:b7:d0:60:f8:a5:a0:a8:51:ec:9a:ff:88:1c:07:
aa:da:73:ef:50:d2:41:c5:77:87:50:b9:81:d1:e8:28:ea:86:
79:e1:50:d6:a6:49:a9:92:a1:24:ef:77:59:a0:0f:1f:b4:88:
bb:cb:49:50:06:05:6e:0a:3a:1d:4f:c7:0b:07:4f:a1:af:e2:
7a:b2:e2:06:73:9b:57:d3:96:d4:09:dc:42:34:85:b9:d0:3b:
0b:bc:11:bf:99:fd:c9:44:68:af:78:0d:fd:e3:6e:94:31:81:
88:2e:23:40:0d:f3:69:85:41:82:9f:82:5f:df:7c:17:81:72:
03:76:a1:48:28:37:00:1e:74:fe:e4:fa:c1:bc:ff:5b:43:fd:
35:23:70:2c:2b:4f:90:e0:c6:ea:4d:99:32:39:43:de:2c:a7:
46:8f:e5:ca:b9:52:f0:75:8a:dc:14:e9:19:03:ea:bf:40:34:
f3:83:f2:d4:bd:f9:13:9f:eb:80:74:bb:d7:0c:d7:4e:c4:d8:
80:d1:e2:71:3c:6d:a7:c2:41:cf:58:d8:53:34:06:2e:c7:38:
46:4c:98:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 07:00:17 2026 by rpki-client