
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
File: 163FCF7902CF93C079C25A5BB950177736E3A53E.mft (raw, json)
Hash identifier: XIjrCC6FQz4TfrAxpNIqql/sgoh1bIuF5/S034flDOA=
Subject key identifier: AF:CB:4D:C5:E0:64:AE:67:D4:DB:E4:25:DB:4F:20:58:B7:1B:D2:6F
Authority key identifier: 16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
Certificate issuer: /CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Certificate serial: 61A8B16AEDA29DD373028BC0A18934D9666A0BBB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
Manifest number: 3E
Signing time: Tue 16 Jun 2026 17:20:07 +0000
Manifest this update: Tue 16 Jun 2026 17:15:07 +0000
Manifest next update: Wed 17 Jun 2026 19:53:07 +0000
Files and hashes: 1: 3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (hash: 6RKcmzfjeDH4g7wyr++N6VgeRBt/pDFie/Fnes4qIjU=)
2: 3130332e38352e35372e302f32342d3234203d3e20313530353530.roa (hash: W7gmKmZboqX2QA7q8U+p4B9nIs2a1qUtxZ1nMh6XFbg=)
3: 163FCF7902CF93C079C25A5BB950177736E3A53E.crl (hash: tbgwXNBJQXhqWeW+DSnmHDqdDKB9r73ZcyMGVI0wiXI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 19:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:a8:b1:6a:ed:a2:9d:d3:73:02:8b:c0:a1:89:34:d9:66:6a:0b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=163FCF7902CF93C079C25A5BB950177736E3A53E
Validity
Not Before: Jun 16 17:15:07 2026 GMT
Not After : Jun 17 19:53:07 2026 GMT
Subject: CN=AFCB4DC5E064AE67D4DBE425DB4F2058B71BD26F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:01:38:0c:87:87:91:27:6d:da:e1:c9:db:da:
79:e9:c3:0c:db:e4:c7:97:1f:2c:ac:b5:27:1a:aa:
26:8f:27:45:85:52:d2:04:c9:49:d3:e7:8a:4f:03:
1e:b9:05:39:9c:cb:a0:82:0d:2b:f1:e9:07:28:01:
cd:a7:37:7d:68:e2:05:24:6e:a8:74:d5:b2:4a:d0:
4f:6c:2c:72:34:89:68:6f:8c:ae:c6:f2:86:2b:9d:
b3:ec:ec:2a:4a:6e:b8:4c:b0:9f:3e:3e:78:bf:cf:
3e:21:35:d6:b3:07:fb:69:b4:de:2a:78:b0:e0:b7:
a3:24:6d:65:22:72:93:be:c6:e2:8c:c8:90:de:a5:
2c:34:a4:c9:31:dc:53:80:7b:6b:17:d0:c0:82:5b:
a2:18:46:99:07:c9:63:77:3b:4b:d3:7a:e5:81:c8:
4f:b9:9a:37:a7:1f:d9:8d:04:49:3f:5e:82:bf:d1:
47:0e:d2:80:dc:0d:ae:89:c1:72:36:b5:10:fb:66:
c4:f5:16:0c:18:3b:11:00:8a:89:d7:1b:62:f9:a8:
18:ed:86:b8:0d:5c:95:c4:33:1f:ac:9c:99:0d:f9:
3d:2f:f8:67:79:ba:01:7e:9d:b6:da:a0:40:d5:f8:
07:a4:c0:4d:cb:79:4c:3f:76:18:53:23:15:b6:84:
55:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:CB:4D:C5:E0:64:AE:67:D4:DB:E4:25:DB:4F:20:58:B7:1B:D2:6F
X509v3 Authority Key Identifier:
keyid:16:3F:CF:79:02:CF:93:C0:79:C2:5A:5B:B9:50:17:77:36:E3:A5:3E
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/163FCF7902CF93C079C25A5BB950177736E3A53E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/163FCF7902CF93C079C25A5BB950177736E3A53E.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:16:45:9b:01:e4:48:1b:f2:28:52:8e:34:e2:1b:d7:d1:73:
5b:e5:18:c1:ff:30:44:69:08:48:5b:22:2b:a9:74:ab:c0:3e:
12:8b:57:47:fb:94:6f:ca:a4:83:ab:74:58:cd:1a:0a:0e:18:
85:b7:cc:06:44:8f:ee:26:c1:9f:ec:43:a8:9d:72:f2:f1:0d:
bb:dc:d8:39:42:aa:8c:e9:bd:06:b9:8d:90:62:5b:61:0a:2a:
79:c7:e4:dd:58:0e:b9:19:c9:c8:74:f5:1d:fe:7f:6e:94:e0:
e1:f7:85:b4:2d:e6:00:ae:dc:fe:4d:c1:8e:66:c5:d8:c1:44:
ad:aa:aa:f9:1f:1f:f8:bd:ef:de:5c:52:64:47:76:c3:cc:59:
87:79:58:84:46:58:3e:f1:d5:76:73:85:ac:7e:0a:71:43:16:
07:20:66:18:2d:68:f7:c7:c8:2d:b6:06:64:4c:f2:09:65:47:
d6:2a:8e:12:3a:b8:df:9e:02:f2:c5:3b:67:0d:9c:00:87:a0:
5c:5a:a3:de:69:c6:1c:82:56:09:7a:83:db:48:ac:19:21:f7:
1f:89:f1:e4:59:2e:6f:a9:12:f8:7d:2d:ef:db:f3:2a:22:26:
ad:b7:fd:af:74:03:1d:3d:21:c2:a4:9d:8e:3a:76:6c:dd:46:
6c:e0:1b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:31:18 2026 by rpki-client