
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
File: 4916565C52234EF87B2101E4B733E4674131F669.mft (raw, json)
Hash identifier: b6VGWjGf5dG2dcFeYRSuL0VrTZZDwY78RHyVwTqyvGM=
Subject key identifier: 13:95:72:D2:E2:03:A4:DD:26:58:ED:D6:A8:96:EC:66:F6:FF:B0:A1
Authority key identifier: 49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
Certificate issuer: /CN=4916565C52234EF87B2101E4B733E4674131F669
Certificate serial: 2F9430D12F2CB36C5DA64134564A24B1168F2630
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
Manifest number: B9
Signing time: Wed 16 Sep 2026 16:49:54 +0000
Manifest this update: Wed 16 Sep 2026 16:44:54 +0000
Manifest next update: Thu 17 Sep 2026 16:50:54 +0000
Files and hashes: 1: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: QHAKE8hSKoHe92BjspMHMu28iG9+nn05M8V9Gd/0zIA=)
2: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: ul2O2y/d0f5tNVWkMLvre71muhXGfgnlzO8D5D2e4HI=)
3: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: mP6KDhXtXACfDnyPSe3QyvooBjz+fxsWyqqYwJxWxso=)
4: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: uPdBAyxTrORogOkXX0w6k19zP0zWzl0tjXf4OfuepRY=)
5: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: UPHtghvELZ/agPcg9sdcuWcqyn+wKiYGN/LJgGlSr7U=)
6: 4916565C52234EF87B2101E4B733E4674131F669.crl (hash: BZAmr+0cikRdputnowFGNGADmb8bUP99yCYZz4zKV44=)
7: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: fKsBX0OWuQw6kFhHb1Pfy7hACtoTRk+vAz87zGxbi4A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 16:50:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:94:30:d1:2f:2c:b3:6c:5d:a6:41:34:56:4a:24:b1:16:8f:26:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4916565C52234EF87B2101E4B733E4674131F669
Validity
Not Before: Sep 16 16:44:54 2026 GMT
Not After : Sep 17 16:50:54 2026 GMT
Subject: CN=139572D2E203A4DD2658EDD6A896EC66F6FFB0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:39:1e:5d:0b:d3:3e:22:97:d2:34:9f:ac:
b0:fa:2c:dd:95:48:9a:fe:19:04:06:08:9c:1b:3f:
0e:9a:6b:37:72:d4:e3:bc:a2:20:c8:5d:f8:ce:e0:
79:4d:8e:76:74:9b:dc:13:c0:1e:21:11:07:51:fd:
26:ae:88:35:b8:d1:09:34:26:93:b0:e8:63:6a:46:
b6:e0:ae:96:68:c9:d4:18:49:fb:1c:fd:77:3a:ee:
b1:ca:a8:09:e7:27:fc:59:23:ac:7a:af:77:ce:4e:
7a:6c:1e:b3:9f:a0:56:26:fe:e1:d5:2b:5f:88:42:
66:7f:e0:d7:05:c5:0d:b0:f6:d3:34:e9:92:36:74:
21:22:0e:c4:d0:4e:43:ce:b1:15:22:93:5a:ae:60:
49:f1:c1:bc:c0:34:9b:b2:74:01:5b:06:a0:b6:3f:
bd:cd:5d:d9:e7:96:46:e6:7b:e6:61:88:e3:b6:ba:
96:64:68:9a:ce:12:13:07:ca:3c:16:27:83:d3:34:
f0:5a:d8:2d:05:a8:87:fe:5d:71:82:7a:a1:8e:9d:
28:01:8e:f0:ad:16:c9:de:97:ee:4b:2e:60:9e:d3:
85:2a:73:55:be:6d:60:a3:db:62:11:0e:f6:b9:61:
b1:04:95:f5:7c:68:ee:30:75:f9:9c:4d:f8:9e:40:
04:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:95:72:D2:E2:03:A4:DD:26:58:ED:D6:A8:96:EC:66:F6:FF:B0:A1
X509v3 Authority Key Identifier:
keyid:49:16:56:5C:52:23:4E:F8:7B:21:01:E4:B7:33:E4:67:41:31:F6:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4916565C52234EF87B2101E4B733E4674131F669.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/4916565C52234EF87B2101E4B733E4674131F669.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b3:c9:85:aa:a7:df:39:25:57:2e:cf:51:d5:5a:52:bc:0d:
b0:4c:22:51:b1:1b:ae:c1:d4:af:ed:e8:f1:e5:e2:cc:60:21:
aa:56:bd:cf:de:f0:1b:b8:09:57:09:84:5d:ab:b5:ad:c5:e6:
8b:53:ec:cc:e0:6a:92:11:ae:3d:f0:8e:46:f6:72:a6:e7:27:
54:5d:80:56:d2:c5:43:30:11:01:0b:bc:73:bb:b0:05:4d:af:
4a:72:53:a3:c1:23:ba:1c:41:06:a0:1b:cd:34:36:0b:1a:36:
1e:ed:8a:12:8d:a4:e0:b1:38:8e:9f:dc:87:0c:53:66:8a:f1:
43:4c:97:33:53:89:db:68:00:bc:fc:56:78:00:b7:f0:b2:4e:
81:88:5a:6d:ce:c5:71:58:4e:34:c2:bd:e0:2f:43:65:b3:88:
cf:f5:91:bf:ff:cc:0b:3c:cd:3c:b2:dd:97:26:b7:23:45:06:
1f:32:31:0b:51:0d:ab:04:43:99:0b:af:83:c9:e2:94:f1:85:
2f:d5:0b:77:be:28:26:07:20:e7:54:93:ea:30:a5:1f:be:b2:
ec:7b:d5:72:19:df:60:cf:ae:30:43:91:70:58:7f:7b:b6:1d:
7c:b7:d7:45:0c:f4:e1:9e:c0:58:51:60:f7:d8:3d:fc:80:03:
4a:10:dd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 09:28:04 2026 by rpki-client