
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json)
Hash identifier: HWcFxZar2VQPck9orGXppXoB7DlNnpaZzV7D2gt6+DA=
Subject key identifier: 1A:5B:F9:D0:69:9A:76:18:5D:16:C2:D7:DA:B3:2A:D1:FB:76:A3:29
Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Certificate serial: 5C57C88C6BBDD529ED9DB14D1ECD9E7DCCF6D9F8
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
Manifest number: 6F
Signing time: Thu 23 Jul 2026 22:52:44 +0000
Manifest this update: Thu 23 Jul 2026 22:47:44 +0000
Manifest next update: Sat 25 Jul 2026 02:04:44 +0000
Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=)
2: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: Kfd3kfwnaclHDsmZ0qULCaHm3NxLqipfWTbGHKYdNaE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:04:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:57:c8:8c:6b:bd:d5:29:ed:9d:b1:4d:1e:cd:9e:7d:cc:f6:d9:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Validity
Not Before: Jul 23 22:47:44 2026 GMT
Not After : Jul 25 02:04:44 2026 GMT
Subject: CN=1A5BF9D0699A76185D16C2D7DAB32AD1FB76A329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:8c:24:42:50:3e:51:fb:93:92:82:46:73:
93:db:b4:01:c8:69:06:8b:e5:a2:88:ad:bf:49:8c:
de:a9:0c:cf:6b:96:69:f2:81:f7:fb:ab:66:62:f2:
8d:9b:2a:b8:1f:56:8a:08:03:a6:f0:f9:fd:15:7a:
2c:26:68:71:3e:b6:3b:99:73:6d:c5:c7:f9:05:58:
f1:ef:42:94:1e:8c:f2:2f:d5:94:74:65:0c:80:4a:
e3:92:b7:78:01:7b:0b:06:35:d9:7e:62:f5:9b:dd:
73:56:0d:e4:b4:53:af:44:bd:87:80:94:88:7f:99:
f9:b5:5e:42:b0:57:d6:f1:15:b1:b3:01:48:61:b3:
0e:84:7f:26:35:8e:44:f7:c6:41:0b:af:62:60:cc:
cb:57:07:20:6c:61:78:cc:37:28:59:66:42:9b:92:
b7:5f:55:ac:ff:eb:64:4c:47:3f:f8:1c:fe:db:6c:
0f:d8:cc:43:0c:72:12:c5:ae:f7:0f:c3:bd:37:27:
ad:c1:ac:43:4b:57:7b:74:ed:8b:df:9a:f3:3d:92:
c4:8e:40:bb:06:92:3a:8d:ed:90:1d:f1:4b:ed:60:
0c:08:74:99:36:6b:bf:8f:6a:51:05:44:7d:3c:4e:
10:78:63:a5:4e:45:90:90:11:9e:8b:d9:1c:61:e4:
e6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5B:F9:D0:69:9A:76:18:5D:16:C2:D7:DA:B3:2A:D1:FB:76:A3:29
X509v3 Authority Key Identifier:
keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:81:13:1c:7a:53:93:10:51:83:23:0f:67:d6:fc:91:0c:2a:
91:06:e4:d7:58:8c:b7:fc:91:59:a5:2c:09:4e:38:da:c6:50:
60:eb:2b:0c:64:90:4f:e5:31:99:5c:0e:1b:38:d8:65:b6:96:
e0:56:ef:5e:68:f1:97:58:d6:ad:29:de:60:85:07:43:03:18:
ef:3e:eb:70:f6:01:5e:fb:38:14:90:2b:75:54:ad:9a:10:0a:
a5:d3:b3:e2:ff:6e:f5:34:75:65:0b:25:11:c2:b8:94:77:fd:
ec:a9:c9:42:3f:e2:20:db:0d:74:0a:e9:51:a4:f9:fe:e5:8f:
11:db:aa:29:e0:e5:05:80:00:c8:8e:fd:3d:9e:fc:91:6b:9e:
fe:d2:09:9a:82:47:80:eb:32:5e:40:d7:c5:ae:55:08:96:f9:
a1:11:05:7a:27:43:64:de:8e:a4:b3:7d:47:0e:dd:4a:f0:70:
d8:f8:af:ca:07:cb:1b:e7:27:6b:94:c4:43:5c:73:aa:0b:a4:
ee:c0:7e:7b:59:a3:3f:27:7d:a6:13:da:36:86:7d:23:d4:9a:
5a:d7:c9:cf:86:95:ac:67:8f:3a:63:46:96:7d:61:15:4e:8c:
64:84:bd:c0:53:4b:eb:c7:29:57:d1:97:38:73:b1:6a:56:a3:
db:ec:2c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:18:59 2026 by rpki-client