
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json)
Hash identifier: dAHG9ikNCzX8I7bQbtRbZQUOZupzL8W/zcSKMZL91WQ=
Subject key identifier: C6:89:90:1B:77:81:AF:4A:73:8C:61:97:B8:E5:06:F9:03:D6:C9:23
Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Certificate serial: 1CD39749047D683F3B7CA2A2CB44F79FDC582BD4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
Manifest number: FF
Signing time: Mon 09 Nov 2026 14:59:35 +0000
Manifest this update: Mon 09 Nov 2026 14:54:35 +0000
Manifest next update: Tue 10 Nov 2026 17:37:35 +0000
Files and hashes: 1: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: CJfEtyJNauTPICrOEyVVlBngwJm3uf+nA3uz0H0bh7g=)
2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 10 Nov 2026 08:27:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:d3:97:49:04:7d:68:3f:3b:7c:a2:a2:cb:44:f7:9f:dc:58:2b:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Validity
Not Before: Nov 9 14:54:35 2026 GMT
Not After : Nov 10 17:37:35 2026 GMT
Subject: CN=C689901B7781AF4A738C6197B8E506F903D6C923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:ad:b7:9c:11:88:ea:aa:00:86:49:73:15:06:
24:87:5c:17:7e:39:90:4b:e3:8a:a2:42:80:59:df:
6a:38:f7:3c:9f:08:60:2a:4b:94:a2:1c:61:7d:6b:
15:e7:29:9a:3f:ab:e1:81:d4:f0:ad:8c:fa:cd:5b:
13:24:70:f1:01:3b:26:e0:0a:c8:6e:e8:8d:20:96:
cb:52:60:2d:37:1e:6e:b7:2c:4a:fd:e5:12:0e:21:
fc:c1:a6:40:7a:06:b8:6a:bb:70:f1:ef:a7:6b:06:
be:4c:22:26:18:f9:f2:28:f9:97:da:43:5b:c6:ff:
6a:a6:dc:c1:e5:7b:2d:bb:cc:60:d2:b3:8f:14:93:
ca:fb:f9:86:c3:44:4d:2e:1e:91:39:b7:c1:a5:78:
bf:3d:98:8a:34:07:6a:92:57:19:bf:71:54:e9:9c:
90:47:a3:e7:ca:3e:51:4d:f4:17:b4:7a:f6:b3:ac:
dd:5f:f8:40:5f:5e:69:aa:63:fe:e3:88:7d:31:81:
d1:3e:69:df:69:66:30:fe:ba:65:6a:1b:26:43:8f:
d5:0f:e6:6c:4d:71:3d:69:26:38:bb:82:92:57:3a:
3e:8e:50:78:a3:cd:9d:e5:6a:6c:1f:41:87:b2:5c:
13:37:7c:01:cf:ab:dc:a0:ee:c4:23:66:16:9e:3b:
bd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:89:90:1B:77:81:AF:4A:73:8C:61:97:B8:E5:06:F9:03:D6:C9:23
X509v3 Authority Key Identifier:
keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:99:81:2e:4c:73:7f:98:be:fb:1e:e0:fd:7e:8b:39:52:30:
aa:58:1f:c8:e2:8d:30:78:85:ec:2d:f2:53:b6:8e:ef:57:1f:
b7:f7:70:ad:e7:2a:00:76:ac:8b:0e:b4:70:19:74:4c:19:3b:
4b:da:a6:b5:fc:1e:8a:49:2e:97:59:31:78:28:7a:88:48:b7:
bf:fc:e9:57:c6:e4:36:aa:96:a4:7a:69:42:04:5a:06:40:4e:
c9:82:2e:47:dd:22:3d:af:ab:f7:35:76:63:74:eb:df:c2:a5:
cc:36:5e:34:ca:6e:d9:a3:ab:b6:c3:53:8e:ad:b1:27:a0:63:
b6:46:65:e3:11:81:3f:cb:12:7c:62:59:92:63:c4:cd:03:50:
31:f7:59:4d:b1:bf:b6:cb:ce:b1:bf:3c:95:62:cf:ff:59:04:
54:47:56:65:0f:9f:ac:d1:2b:63:6f:ce:b5:5b:e6:e6:6d:a4:
d9:2a:7c:f0:65:9a:7e:3b:cd:66:e3:ff:05:d6:72:13:83:a5:
af:a7:62:32:22:17:0e:af:27:3c:ae:fa:5b:5e:25:21:2c:3c:
e4:c1:8d:59:9b:55:c6:c9:21:99:40:21:8b:ae:9a:e3:62:e2:
89:2a:12:3c:26:87:2f:a6:c2:66:d3:5a:1d:ba:e8:c8:30:8c:
8c:7c:83:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 00:44:10 2026 by rpki-client