
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
File: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft (raw, json)
Hash identifier: h8pZH6PFyRp75xd7Ck+QLL46e9xkoRyqE6FYiUGbiYY=
Subject key identifier: CC:9B:99:8F:55:AA:E8:AE:C7:57:DF:71:A8:86:08:9E:11:31:80:52
Authority key identifier: C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02
Certificate issuer: /CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302
Certificate serial: 11CB266230A9D289E094A5246E52036598517691
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
Manifest number: EB
Signing time: Sun 25 Oct 2026 11:10:24 +0000
Manifest this update: Sun 25 Oct 2026 11:05:24 +0000
Manifest next update: Mon 26 Oct 2026 14:18:24 +0000
Files and hashes: 1: 3130332e3138302e39352e302f32342d3234203d3e20313439333538.roa (hash: Cpjg4SMt12A8DW7uKCND6UkuKdprXSLBV2afftUulJU=)
2: C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl (hash: Iq8ukduAxutPhK2AnWNd0MZY6FuMH/Fim4FA7XcCg4M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl
rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:cb:26:62:30:a9:d2:89:e0:94:a5:24:6e:52:03:65:98:51:76:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C16F24B51E8F9D35194675A5A6B5BBF38DDB3302
Validity
Not Before: Oct 25 11:05:24 2026 GMT
Not After : Oct 26 14:18:24 2026 GMT
Subject: CN=CC9B998F55AAE8AEC757DF71A886089E11318052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:bc:74:78:1f:db:26:72:24:8c:17:60:89:13:
99:b2:c5:a5:96:7c:78:1b:97:08:cb:3f:25:84:bc:
ea:0b:a4:da:a0:30:bc:ec:19:0c:28:55:3b:4c:9b:
2f:2a:45:01:50:32:ca:3f:17:c3:ea:04:4b:26:d1:
fc:80:84:b0:08:f4:07:8e:d5:70:71:0d:96:14:1b:
68:3d:3a:c4:01:87:70:1e:fa:d3:8b:08:ca:0e:9e:
82:4b:67:d1:37:94:b9:14:5d:8b:5f:9a:f0:18:0d:
55:80:a1:7b:82:69:c8:ee:f2:8e:a6:32:47:02:b1:
da:23:da:32:af:bd:8a:a9:f1:85:2e:02:30:65:5c:
1c:a7:1f:34:53:06:dc:79:2b:c3:ea:6b:e8:a6:d1:
20:fd:a9:a2:77:dc:da:a1:18:1f:0e:3d:55:23:b8:
fc:50:96:4a:5e:aa:6b:cd:bd:f2:48:da:19:cb:4c:
e5:77:c8:62:fe:97:23:48:d6:d7:c3:d9:d4:a7:27:
28:8e:46:5e:ed:a0:6e:d6:12:ef:7c:fd:2d:6d:f5:
2d:9e:f3:62:d6:8c:49:ae:64:19:0c:4b:f1:2c:b8:
51:4b:7f:0a:5b:78:0a:82:2b:e8:3c:dc:66:bf:9a:
45:ac:ce:e9:a1:d8:ec:dc:98:b1:96:52:8f:f4:3d:
c5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:9B:99:8F:55:AA:E8:AE:C7:57:DF:71:A8:86:08:9E:11:31:80:52
X509v3 Authority Key Identifier:
keyid:C1:6F:24:B5:1E:8F:9D:35:19:46:75:A5:A6:B5:BB:F3:8D:DB:33:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59cc2e5b-3b91-42af-8203-5e3b91704843/0/C16F24B51E8F9D35194675A5A6B5BBF38DDB3302.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:57:50:42:c6:df:59:01:d9:4e:d0:99:41:13:fa:b2:1c:f5:
13:43:b8:bb:23:e8:41:26:c6:78:ed:cc:20:74:89:8c:28:c3:
65:bf:ef:7d:bf:3f:c2:c5:2b:57:ab:e2:59:77:f9:26:83:95:
d8:73:f4:8f:e8:a6:c9:0f:48:8d:6d:0e:7d:5d:9f:bd:9f:db:
8c:1c:4d:06:86:a2:12:a3:61:39:56:c2:e2:ef:b9:81:7c:21:
3b:20:0d:73:ba:7b:72:e4:ba:3a:c6:ea:03:bc:f9:b4:75:57:
27:ff:b6:a6:6e:61:8e:8d:7c:d4:90:b4:47:5d:4e:ba:de:dd:
1e:67:80:b1:b4:10:08:ce:3e:9b:d5:cb:fe:d8:9d:23:50:3a:
e8:e6:17:bf:78:2b:40:56:1f:a5:e4:54:35:33:f5:8c:f2:4f:
9d:16:be:d0:67:f5:a3:bc:cb:d2:34:fa:27:f2:b4:07:54:2c:
33:d0:c8:97:1b:86:25:02:f0:8d:87:43:9d:79:e0:4f:b5:5b:
ff:47:56:b6:99:a0:22:67:0b:f6:86:14:ad:78:10:e2:dd:9f:
33:9b:10:87:28:22:cb:ff:9c:53:70:25:29:8c:b7:cb:f7:6e:
66:0b:0c:7f:1f:2f:cd:e0:2a:80:8a:20:60:cc:43:83:50:1d:
9e:a1:b0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 19:55:12 2026 by rpki-client