
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json)
Hash identifier: I14GJO4v9E45DcDFu71DiOLNcn8qf3tRxLmSfpRQ8qY=
Subject key identifier: 04:8C:AE:A1:48:60:39:E0:E5:55:5E:BE:84:35:53:B7:24:1F:A0:0A
Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Certificate serial: 19218054D2D2DC9B4F446D0476A52A2EE28D530F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:17:00 +0000
Manifest this update: Tue 12 May 2026 20:12:00 +0000
Manifest next update: Wed 13 May 2026 21:55:00 +0000
Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=)
2: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: ESgKG9/jWAjNeZOPlAXah2MIYfgJOeSip7dyllFaQCk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:21:80:54:d2:d2:dc:9b:4f:44:6d:04:76:a5:2a:2e:e2:8d:53:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Validity
Not Before: May 12 20:12:00 2026 GMT
Not After : May 13 21:55:00 2026 GMT
Subject: CN=048CAEA1486039E0E5555EBE843553B7241FA00A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:13:cc:7d:2e:10:ba:a5:da:75:39:07:c1:
1f:be:fe:fc:e9:c2:7f:54:c5:8e:62:6c:0f:86:57:
b5:8e:48:c6:31:9d:72:1d:ac:0e:71:03:7b:cf:06:
aa:be:71:f8:e3:82:e8:bc:88:6f:82:07:e5:84:ff:
ad:90:99:f7:1e:65:25:2c:f8:43:15:78:b5:b1:13:
2a:3f:e5:a2:c3:fd:85:a4:f6:48:22:8a:aa:59:36:
90:e8:99:6e:6a:a9:a8:4b:f7:a6:fb:a2:b9:50:06:
97:81:c4:ab:48:ea:c7:1a:54:67:0e:bf:e8:c0:0c:
ad:9d:8d:bf:73:5e:91:1f:4d:6d:88:48:2b:1d:71:
24:ef:1c:f3:77:22:ce:1d:55:62:11:03:a8:01:58:
7b:95:4c:e6:b0:5e:33:c4:12:d2:2c:8e:70:68:f1:
18:61:62:3b:bd:28:a8:9e:30:7e:25:bd:99:9a:57:
ac:13:db:fc:e2:43:ef:80:74:69:cf:9a:2d:62:83:
ed:6d:d2:87:8f:d5:4b:62:fc:08:41:88:e0:5c:d8:
41:53:eb:6a:55:71:20:f5:ff:21:27:31:ed:10:a1:
b8:f2:32:c2:b9:36:a3:e7:a7:9c:8a:b8:af:eb:8f:
65:e4:7f:1c:3b:f9:ba:86:e9:bc:57:ec:d6:e8:8f:
0d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:AE:A1:48:60:39:E0:E5:55:5E:BE:84:35:53:B7:24:1F:A0:0A
X509v3 Authority Key Identifier:
keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:18:67:08:ec:b8:27:ff:35:df:94:1d:5c:2a:d3:bc:fe:ba:
69:46:02:43:da:02:4e:27:d2:95:71:3f:fb:f7:9c:45:d6:9d:
f4:f5:ec:68:98:4a:cc:cb:95:98:ae:a8:6b:81:e9:8b:e2:d3:
35:5d:31:8b:80:4e:66:4a:66:d8:84:fc:85:4f:0f:79:c7:3b:
9d:4f:c6:47:4c:c0:8e:a4:35:60:00:f0:85:fc:15:e0:f4:84:
81:4d:1a:76:d5:fd:d7:e0:ca:4f:cf:ae:59:7d:b7:bb:64:06:
9d:97:1d:a4:b9:e8:34:fa:b0:42:c4:e8:59:67:73:9d:07:33:
7f:f1:bb:41:96:40:0e:ef:5e:74:ce:7d:82:b8:df:ca:67:57:
d6:62:ca:f8:42:aa:86:36:6a:26:2e:44:f6:39:28:0a:ec:31:
99:3a:b1:e8:4b:0f:a1:3e:d8:12:4a:8b:fd:10:78:d9:b9:82:
e1:29:2b:33:50:19:18:44:ed:ed:09:ab:0c:8b:b9:01:e2:07:
36:87:a5:e9:ca:32:dd:0f:f8:62:bd:b7:bc:97:5d:06:4e:74:
4e:ec:85:a7:b6:df:c7:69:eb:9a:2b:06:7c:be:c2:76:0a:77:
f7:f5:43:59:c8:85:e0:5d:bd:0e:0a:27:b9:e0:91:59:6c:d6:
b1:a1:ca:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:00:29 2026 by rpki-client