
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
File: E161BF656F0149CB290354E631915A62950E0DF7.mft (raw, json)
Hash identifier: Xyra6c5xEIdMRHqx5PiQ97H2ufKZrUiT/miJSLKCXpw=
Subject key identifier: 3C:1D:9A:E9:82:15:65:64:98:C7:51:3D:29:B2:8F:6D:51:64:B6:63
Authority key identifier: E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
Certificate issuer: /CN=E161BF656F0149CB290354E631915A62950E0DF7
Certificate serial: 381D5F5B31B52FB35E17E4BC2B1405B035B317E2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
Manifest number: DC
Signing time: Wed 14 Oct 2026 00:51:26 +0000
Manifest this update: Wed 14 Oct 2026 00:46:26 +0000
Manifest next update: Thu 15 Oct 2026 03:53:26 +0000
Files and hashes: 1: E161BF656F0149CB290354E631915A62950E0DF7.crl (hash: mg7lC4MtS8ozKTNuwqgF53GQr5CDxy3MqOxhbs2aO9I=)
2: 3135372e36362e36362e302f32342d3234203d3e20313532373831.roa (hash: grf0YK9bJyH/cVnLX3ovqZL+z5fiMqaMnTX+lrSCaV0=)
3: 3135372e36362e36372e302f32342d3234203d3e20313532373831.roa (hash: OfxEx4cxbUi1PsgMvuv5XcH2kiZ/xjVPvG8pLlZllKE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 03:53:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1d:5f:5b:31:b5:2f:b3:5e:17:e4:bc:2b:14:05:b0:35:b3:17:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E161BF656F0149CB290354E631915A62950E0DF7
Validity
Not Before: Oct 14 00:46:26 2026 GMT
Not After : Oct 15 03:53:26 2026 GMT
Subject: CN=3C1D9AE98215656498C7513D29B28F6D5164B663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d6:7b:c9:6e:7c:d1:23:26:32:4c:6f:93:d4:
78:87:90:f0:bb:36:52:5b:1d:a8:b1:ee:70:af:df:
0d:2f:3d:0b:9f:e5:97:ee:1d:40:5a:c5:fe:77:cc:
ab:95:92:59:f0:cc:01:e3:0c:00:16:ff:16:3c:78:
f9:3d:5f:f7:c2:88:f8:28:1f:91:2e:af:3e:9f:76:
68:5b:bc:57:8f:21:ce:11:48:28:98:1a:1a:cb:5d:
8e:29:0e:49:2b:15:3e:0b:1d:e6:af:27:0f:6d:c9:
79:36:8f:6f:f4:ea:f9:31:63:d7:e6:47:0a:5a:82:
45:90:88:02:d0:41:93:a5:63:d6:cf:09:0f:3d:73:
ac:75:b5:16:5c:14:18:6f:ce:c3:90:0b:13:52:88:
70:ab:b3:4c:20:86:fc:e8:e8:a1:b2:da:1c:fa:f1:
89:56:ed:18:c0:9c:97:54:d0:43:83:bf:d8:45:66:
23:3e:28:1c:f4:54:f1:08:f9:b8:f4:2e:17:ac:03:
40:e4:94:2e:b3:72:af:98:a4:fe:37:8a:ed:19:ef:
bf:3d:9d:1a:5c:0b:c2:86:61:db:04:e6:06:44:c2:
5f:2c:12:10:70:29:9e:8d:48:17:75:b6:f2:56:e9:
30:49:cc:90:42:72:8e:0d:8d:03:7f:2e:8f:59:9a:
04:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:1D:9A:E9:82:15:65:64:98:C7:51:3D:29:B2:8F:6D:51:64:B6:63
X509v3 Authority Key Identifier:
keyid:E1:61:BF:65:6F:01:49:CB:29:03:54:E6:31:91:5A:62:95:0E:0D:F7
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/E161BF656F0149CB290354E631915A62950E0DF7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7670ae76-9594-4980-b410-491a6319ff3a/0/E161BF656F0149CB290354E631915A62950E0DF7.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b5:9d:9a:a7:72:92:26:7e:a1:7f:8f:17:d7:c0:47:b8:83:
b4:0c:54:6f:78:12:32:06:8d:68:5f:74:e3:46:8b:91:b0:fc:
86:ca:ef:4e:1d:55:13:dc:b3:c0:14:27:ac:81:0b:e9:ea:89:
66:39:0c:f2:74:c6:24:ff:c5:1b:27:cb:aa:90:ef:3f:7f:2f:
c8:7a:c6:65:82:e1:b0:45:78:9d:06:2d:9f:1c:04:ba:5c:2a:
0f:20:51:93:fc:41:c3:e1:85:bf:22:01:a7:c0:78:f8:8e:ee:
88:29:df:16:d0:d2:cc:0d:be:08:f6:a3:fc:7b:5b:73:12:c5:
b9:00:e5:20:e4:d5:b7:91:a5:17:43:40:22:a8:ae:24:e3:10:
cb:11:d7:6c:cd:ec:e0:ed:74:2a:6c:0e:24:8a:f1:4e:8a:5d:
54:2a:cb:6e:2f:ca:3f:75:01:ef:5d:c9:58:bc:a9:d9:0f:8a:
cc:57:6d:14:89:8a:bf:73:c6:58:09:4d:7a:f3:e7:bd:47:52:
67:bc:a3:bb:49:2a:f8:cc:fb:93:cf:0d:08:8d:9f:56:bf:41:
0f:19:bc:93:b6:e6:1c:b5:2a:c5:37:b7:b5:1c:e9:53:99:ac:
b1:76:ec:40:65:b2:84:fa:6f:99:66:0e:d6:11:3c:fa:27:a7:
27:57:2c:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 03:55:04 2026 by rpki-client