
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json)
Hash identifier: Ey28nO3ElTjcYpYLCEckhOfH+m9AW2dhQKh45wqnH9k=
Subject key identifier: D0:9C:D9:7B:DA:1E:22:51:AC:3F:BB:B5:E2:F1:AF:6E:37:84:F3:B4
Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Certificate serial: 6963F0AE892192E02E5A5CC077211E1FAD323884
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 03:32:03 +0000
Manifest this update: Wed 17 Jun 2026 03:27:03 +0000
Manifest next update: Thu 18 Jun 2026 07:01:03 +0000
Files and hashes: 1: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=)
2: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: TnMyiuP8/P6C4tZb9uOeej1nVNJynjqvhowHDxcjqHw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:63:f0:ae:89:21:92:e0:2e:5a:5c:c0:77:21:1e:1f:ad:32:38:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Validity
Not Before: Jun 17 03:27:03 2026 GMT
Not After : Jun 18 07:01:03 2026 GMT
Subject: CN=D09CD97BDA1E2251AC3FBBB5E2F1AF6E3784F3B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:84:49:de:5b:03:d7:0a:9f:83:cf:26:d2:b3:
e5:be:94:28:e5:46:2f:ef:07:ed:a4:eb:9f:d9:cf:
ef:2f:7c:00:d1:e0:ff:83:0b:c6:72:34:5a:06:af:
7d:43:62:59:19:d3:2e:da:65:6e:04:28:ce:65:c2:
e2:73:b3:e2:51:37:fa:d2:bb:30:89:8c:29:88:c3:
f0:60:46:58:66:bd:79:4c:71:9e:a3:e9:e2:4a:98:
b1:46:3e:d1:b8:3a:d5:34:2c:89:40:b6:36:55:bc:
38:0d:4a:5f:37:da:3e:9b:57:79:54:2a:44:bc:32:
09:c7:2a:b7:bd:67:88:7d:e2:97:0d:a8:8c:38:e3:
43:08:8f:0b:ed:ac:82:2c:ec:68:3f:32:22:1e:95:
d2:42:3e:c5:37:c9:cb:89:30:fb:13:47:37:58:4a:
9d:bc:bc:f7:d9:53:6c:85:54:de:dd:44:65:e5:5b:
76:2b:17:a5:bb:92:2f:a1:42:60:ab:11:e4:06:f4:
eb:2a:22:32:91:b8:e0:42:e3:30:ff:1a:57:71:e8:
3d:83:fd:40:2f:ee:95:d8:26:0c:71:c1:e5:88:bb:
3c:f9:6c:a5:3f:83:81:8c:84:a1:fe:b5:ea:64:96:
a1:84:03:4f:8c:82:4f:ab:4d:d9:d7:94:41:26:47:
c9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:9C:D9:7B:DA:1E:22:51:AC:3F:BB:B5:E2:F1:AF:6E:37:84:F3:B4
X509v3 Authority Key Identifier:
keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:de:8c:54:51:0e:91:fd:51:8f:f7:c6:3e:e6:c2:0d:a4:bf:
52:21:1b:c0:37:e1:1b:88:d3:1e:c1:28:f9:b2:63:f4:b8:af:
ea:81:20:e9:87:f7:a4:c9:a4:eb:20:b2:95:a0:c3:4e:60:71:
a5:6d:79:ae:50:45:88:7c:f5:2c:72:43:be:2d:65:e1:6d:a0:
38:68:45:cd:9c:e6:b5:54:39:83:e8:3f:27:73:0f:98:f3:e6:
d1:72:cf:51:6b:6a:f7:19:e9:3f:c2:4e:15:d1:96:61:87:03:
81:fb:9d:d2:f0:f7:9e:fa:6a:24:fe:aa:d7:b9:39:a2:3d:74:
bc:b8:ec:cc:2a:0c:0c:98:69:fe:59:7a:e2:5d:a9:b3:57:61:
e0:14:18:22:a5:a2:6d:03:ad:4f:86:45:5f:7f:48:9d:ab:d9:
27:85:08:be:a1:27:81:7f:a0:17:19:75:26:b2:a3:38:89:7b:
42:33:6f:01:54:48:d8:d0:9e:6e:5f:7e:28:51:63:a9:ac:0f:
a9:8a:e5:08:52:6d:51:07:ad:26:6e:8b:55:46:44:9f:82:eb:
97:cf:56:d6:d6:f4:18:8d:a7:4e:c7:29:bb:06:2c:18:50:75:
50:9b:c8:17:d9:7e:72:12:4e:43:2e:e6:10:18:e7:d5:8b:9e:
65:c1:9d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:36 2026 by rpki-client