
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
File: E161BF656F0149CB290354E631915A62950E0DF7.mft (raw, json)
Hash identifier: /K9e8J/LNe1sCLRiOILRKp5LMzGXtvYrufBmYxB7q3s=
Subject key identifier: 47:3A:9C:6C:41:39:77:FE:93:A4:C5:90:AD:FB:0F:42:6C:14:CA:0E
Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7
Certificate serial: 70CD1A5CC51ACF710EB5D85C4DB26DA306AE9E0A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:58:15 +0000
Manifest this update: Tue 12 May 2026 20:53:15 +0000
Manifest next update: Wed 13 May 2026 21:51:15 +0000
Files and hashes: 1: E161BF656F0149CB290354E631915A62950E0DF7.crl (hash: dYTc6IRjtlMJJu+ampFhCW1Em89xbOz9jHUR/8QkQgQ=)
2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=)
3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 21:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:cd:1a:5c:c5:1a:cf:71:0e:b5:d8:5c:4d:b2:6d:a3:06:ae:9e:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7
Validity
Not Before: May 12 20:53:15 2026 GMT
Not After : May 13 21:51:15 2026 GMT
Subject: CN=473A9C6C413977FE93A4C590ADFB0F426C14CA0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:45:79:46:11:42:8a:a8:f8:ab:f2:4e:5f:d0:
8c:3f:92:c7:e3:23:4d:53:b5:fb:f3:66:17:8e:d1:
8d:4d:65:5e:af:c4:96:90:0f:b4:cc:4f:0d:d5:9f:
3b:e6:28:c7:2a:9e:20:88:5a:a1:90:9e:e1:a0:bf:
9f:0d:3f:09:21:b8:9b:c2:99:b1:27:cc:ac:8b:c8:
62:15:40:70:33:45:8b:4f:7b:9d:f2:88:76:e5:38:
45:66:75:13:c5:22:c3:f4:a1:17:74:2b:54:5a:b0:
9a:ac:29:8d:da:1f:17:47:5f:75:71:b6:4f:5c:9c:
ca:02:ae:4b:1c:96:33:ef:fb:fe:14:6d:ff:33:18:
86:49:75:03:e7:07:fd:e8:3e:56:ff:e8:9e:38:22:
9c:df:52:05:78:69:66:54:aa:e6:97:f5:5a:c1:e7:
b4:ad:82:87:86:75:8d:52:db:8a:c8:09:42:bf:0c:
10:dc:ca:42:60:7d:97:52:11:5d:28:f4:8e:8a:b0:
de:9b:c2:10:27:29:68:79:55:ab:9d:56:57:78:4d:
c0:04:24:2e:36:42:7e:5e:5d:f8:fb:73:a8:1a:e6:
d9:81:ad:ee:d7:2d:53:a5:ef:9c:46:3b:fe:bf:e3:
74:6e:07:c8:87:54:e0:62:6b:ff:f8:3a:ff:ed:2f:
fa:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:3A:9C:6C:41:39:77:FE:93:A4:C5:90:AD:FB:0F:42:6C:14:CA:0E
X509v3 Authority Key Identifier:
keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:25:9f:55:9a:40:8c:ce:1e:82:17:c9:4f:56:16:a7:fd:4a:
40:d0:23:72:9f:b9:91:64:81:4e:b8:be:ac:df:65:99:6d:2c:
87:17:d3:ac:f5:04:ed:89:70:1c:81:00:30:e8:8e:2f:e1:19:
cc:5c:77:87:13:5c:60:81:b3:a6:ed:fb:cd:3d:47:40:39:2f:
1c:1b:df:ba:c2:93:34:d5:b8:c1:c9:f5:85:25:22:89:5d:7b:
02:bb:eb:9c:df:cf:40:58:5e:52:fd:e8:80:08:27:9e:7c:64:
91:6f:2f:af:54:ee:8e:8e:26:95:c8:84:5f:a6:2b:d5:f1:f5:
03:bb:f0:a4:15:ea:99:d7:f0:11:48:9f:c1:aa:0e:41:61:9a:
e6:eb:1e:56:51:a0:71:34:57:99:79:1d:dc:c9:82:c2:da:c6:
2b:3b:28:4f:9c:c7:94:ba:ce:af:d4:b5:fc:85:1b:53:e9:0e:
0a:50:7e:11:dc:7d:85:25:51:f2:30:a8:75:cc:91:41:26:a9:
a5:13:9a:4f:98:c1:48:2d:73:41:14:fa:73:24:ae:9b:0f:e6:
e2:bd:0d:9d:33:16:5c:72:b6:37:c3:57:68:8f:93:4c:ad:7b:
44:da:f7:a2:89:fc:06:2f:65:13:6e:75:74:da:38:c5:1a:e7:
21:6a:fe:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:58:45 2026 by rpki-client