
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
File: 16E36A76C68AD7EF73B872D0A244597711CEC92B.mft (raw, json)
Hash identifier: E+yUVT5eT/ELuF93dgVu5oLVQ/aqagtCXGx2/0rFA4I=
Subject key identifier: 8C:2F:62:51:08:EE:A3:A1:24:BF:69:A0:AD:E4:9C:DD:07:76:2F:B3
Authority key identifier: 16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B
Certificate issuer: /CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
Certificate serial: 36AE377FBC5213FE901A47C426993B33752D77
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 08:26:57 +0000
Manifest this update: Sun 25 Oct 2026 08:21:57 +0000
Manifest next update: Mon 26 Oct 2026 10:05:57 +0000
Files and hashes: 1: 3130332e34392e35312e302f32342d3234203d3e20313530343830.roa (hash: AGIMZGexipjyvpy+LmJUJY6hAht+8SMw5E+al1hg6Ds=)
2: 16E36A76C68AD7EF73B872D0A244597711CEC92B.crl (hash: KNVkfTxhKzWfZF80H1eRsoP49zXWrIrf6LH3ha7UrQY=)
3: 3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (hash: d1VIPUB5246bc9b42k+QQyjwKQyjJBedF26BcXOCp3E=)
4: 3130332e34392e35302e302f32332d3234203d3e20313530343830.roa (hash: EANVJlxEg4YVe0voA5UkBVDWr1/ZEx1MsPgsXOFauYo=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl
rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 10:05:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:ae:37:7f:bc:52:13:fe:90:1a:47:c4:26:99:3b:33:75:2d:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16E36A76C68AD7EF73B872D0A244597711CEC92B
Validity
Not Before: Oct 25 08:21:57 2026 GMT
Not After : Oct 26 10:05:57 2026 GMT
Subject: CN=8C2F625108EEA3A124BF69A0ADE49CDD07762FB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:20:4a:b7:d1:a1:8f:f1:24:a5:9e:09:32:7b:
9b:eb:89:df:da:06:6d:f5:f0:d7:09:68:89:12:d7:
30:76:7e:d0:49:07:fe:3e:eb:dc:63:cf:c0:cd:59:
52:80:91:48:0d:01:00:d4:1c:ae:52:54:05:46:e1:
42:10:46:28:c8:60:31:2b:7c:33:ed:8e:a1:58:9d:
51:97:07:4c:38:e8:c2:5c:61:9d:57:4c:9f:ff:60:
97:b4:c2:a7:37:f5:13:34:01:93:10:23:32:a5:07:
72:ab:45:aa:1f:3b:d4:28:7b:28:95:02:8a:79:14:
ef:a3:16:26:2c:61:72:31:41:1f:b6:c0:0e:0c:4a:
95:cc:27:d8:1d:c9:a0:c0:3a:5b:f2:bf:eb:91:74:
c6:4f:82:6d:22:44:af:97:1b:ee:8c:6d:d4:5f:11:
b4:81:03:bc:de:70:82:52:b2:2f:d1:5c:4d:64:63:
6c:fe:c2:91:43:64:72:be:9d:f0:8c:e3:68:5c:be:
e6:22:f8:82:e1:f9:03:d5:bf:da:c2:65:06:42:5c:
05:66:9c:91:b2:e0:af:21:89:93:49:f7:99:af:96:
23:a8:78:01:59:67:be:68:b1:7d:80:2a:b5:1e:ce:
56:0a:10:e3:31:03:97:b5:a5:98:12:69:c9:60:68:
33:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:62:51:08:EE:A3:A1:24:BF:69:A0:AD:E4:9C:DD:07:76:2F:B3
X509v3 Authority Key Identifier:
keyid:16:E3:6A:76:C6:8A:D7:EF:73:B8:72:D0:A2:44:59:77:11:CE:C9:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/16E36A76C68AD7EF73B872D0A244597711CEC92B.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/16E36A76C68AD7EF73B872D0A244597711CEC92B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:91:10:5c:7c:d1:a9:47:28:cc:4c:81:50:91:24:0b:a9:ac:
88:2a:3f:20:7f:75:75:8f:f9:c9:36:cb:75:93:a6:91:d3:f0:
75:da:05:2e:7a:f0:a0:64:6a:fa:bf:99:b1:72:8d:41:ea:c8:
d1:72:1f:bd:5e:be:46:27:86:5f:47:6d:36:3b:5f:53:a0:e7:
ef:f1:45:eb:c8:07:65:03:b6:28:66:8d:d3:c3:eb:97:f0:a5:
78:25:a2:9a:6b:09:24:ea:9d:cb:de:72:a2:c1:4d:dd:18:5f:
bd:66:47:9d:e5:d7:7d:e0:96:cd:51:09:c5:aa:a0:0c:53:29:
2d:f4:b2:0a:a9:f8:93:63:1f:da:17:61:c0:c3:f2:ff:29:15:
e7:f3:ca:f1:e3:6a:40:c6:67:6c:4e:d2:b6:19:55:2a:86:75:
03:b0:96:9b:80:2c:df:d2:46:f2:47:d3:a4:47:13:96:a4:71:
17:b8:bf:ca:0f:4f:93:fc:37:1f:2c:a5:82:1c:1d:43:6c:5e:
d2:6a:3c:98:6b:25:0a:9e:52:1f:01:7b:45:63:02:9d:48:84:
2f:78:be:e2:c5:ce:ea:75:09:a6:f1:29:73:7f:6c:92:04:90:
ed:cd:c4:30:f7:7d:b1:26:83:ff:94:ec:c5:a8:4c:2a:e3:f6:
67:ab:d6:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:02:14 2026 by rpki-client