
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
File: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft (raw, json)
Hash identifier: IFJ+AAL0K4qgyjCnzPEQ0AkyScqjqXp4Tfg0ZV4Aris=
Subject key identifier: A8:DF:5A:F0:6D:C2:AA:7F:B8:47:F8:F9:85:43:47:04:B3:21:E9:78
Authority key identifier: DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
Certificate issuer: /CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Certificate serial: 5B9EE3CF19237A08BE172F5BCCB52CF41DD5D92B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 20:55:20 +0000
Manifest this update: Tue 02 Jun 2026 20:50:20 +0000
Manifest next update: Thu 04 Jun 2026 00:10:20 +0000
Files and hashes: 1: DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl (hash: b1RDJ/tCcU9W6LTJlYenCKqaon9e9a/go6lBaxysCh0=)
2: 3130332e31352e3235312e302f32342d3234203d3e20313331373337.roa (hash: n2jgLsgpyvuRu9OXUICieAMoUsWBKFqPo1kbmePbqLI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 04 Jun 2026 00:10:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:9e:e3:cf:19:23:7a:08:be:17:2f:5b:cc:b5:2c:f4:1d:d5:d9:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DB162C17AB46C72EF7494E06260EB3FE574E4CEE
Validity
Not Before: Jun 2 20:50:20 2026 GMT
Not After : Jun 4 00:10:20 2026 GMT
Subject: CN=A8DF5AF06DC2AA7FB847F8F985434704B321E978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:05:ad:f1:ad:3a:ba:77:5c:cb:b3:56:ee:
e2:76:4d:50:e6:d5:ec:13:e2:fc:9c:e1:e6:cc:7c:
b0:00:85:3e:66:b8:5a:25:53:26:74:ab:c3:15:ec:
b8:0f:50:90:b0:b3:ea:74:95:1a:54:b3:f2:35:62:
ad:65:1f:10:af:09:8a:8f:6d:e9:43:4b:15:89:99:
67:a3:fb:5d:40:54:e6:04:1a:74:cd:06:7e:e1:f1:
72:b3:4b:84:72:9a:84:db:92:e7:60:e4:5d:93:6c:
2d:c6:24:c4:4e:c6:13:f0:6b:41:16:8a:df:e5:fb:
09:28:cc:d7:8a:19:e6:09:e5:2f:f5:81:8c:3f:0f:
16:55:e3:09:d1:b9:04:ff:2b:40:79:a0:d5:b9:13:
bf:b4:96:81:b1:30:cf:27:e6:83:50:91:ad:5b:0b:
22:a8:15:c9:ab:d0:25:96:22:f2:34:6c:ce:a4:16:
9c:3d:cb:26:73:a0:72:f3:75:8e:b2:70:b2:a9:d0:
b1:bb:0a:6f:26:77:03:ec:64:a0:b1:98:d9:43:bc:
01:07:ad:0e:50:84:78:79:dc:3d:6e:b8:ac:df:f4:
d5:55:c4:cb:46:ba:7d:5f:90:1d:3c:e8:4b:80:a4:
6b:b4:55:c9:ce:8e:76:ae:2d:d5:ae:75:cf:0c:83:
e3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:5A:F0:6D:C2:AA:7F:B8:47:F8:F9:85:43:47:04:B3:21:E9:78
X509v3 Authority Key Identifier:
keyid:DB:16:2C:17:AB:46:C7:2E:F7:49:4E:06:26:0E:B3:FE:57:4E:4C:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6cdfd8eb-8a40-4e8b-a9e0-9278cd04fa43/0/DB162C17AB46C72EF7494E06260EB3FE574E4CEE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:5d:77:ac:fc:db:e0:2a:b8:b7:95:0e:70:49:53:d2:65:99:
5f:75:80:a6:3e:5a:a1:a7:dc:f6:7e:e2:f5:7e:44:de:f3:a0:
77:4e:f8:23:9b:ed:43:5e:21:62:7a:9f:46:af:3e:f8:a2:03:
97:71:74:4f:9e:e4:28:da:c5:bb:90:02:7f:d1:a8:a6:18:5f:
10:46:e5:b9:6d:3e:35:05:7a:9b:5a:41:2c:ad:c5:52:ea:18:
9c:cf:80:47:8c:62:27:99:e9:99:75:b5:dc:04:cf:09:42:49:
d6:5e:90:69:d7:9f:45:28:e0:6a:15:5e:01:b6:0b:e5:1d:e9:
52:37:92:51:53:b3:36:27:0d:4f:a4:1a:94:15:01:3a:d3:36:
f3:d1:c2:15:17:92:23:2c:3f:50:2b:0a:4d:4b:c4:c4:60:79:
ec:34:27:4b:fc:9d:6c:64:fc:a7:2d:29:df:16:32:51:f2:2d:
05:e0:26:93:1a:ac:a6:9b:05:27:b0:3b:db:61:2f:60:a1:09:
f0:4c:51:e1:9d:42:8c:34:e5:33:25:44:2b:85:51:a6:17:23:
93:7e:9a:de:ef:6e:fd:c7:b6:76:31:18:52:9c:3a:77:24:68:
bd:ab:9e:76:a0:23:18:35:48:cf:6c:41:b0:15:74:4b:af:f7:
71:88:0d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:53:30 2026 by rpki-client