
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File: DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier: jCNlTnkcBiYPuYQVbvnTB2E44xyIsOFvV7cOxKWePLk=
Subject key identifier: 2B:89:82:73:09:C2:3D:B4:EA:A4:1A:5F:3D:A1:16:C9:B6:0D:97:85
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 0D4BAED6B153AA7F08D088570097E641862AD328
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 13:11:13 +0000
Manifest this update: Tue 02 Jun 2026 13:06:13 +0000
Manifest next update: Wed 03 Jun 2026 16:45:13 +0000
Files and hashes: 1: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: 12orfUefYuLCp9TFmb7d47YzTvaajSbQjiFbH9ew1Rg=)
2: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
3: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
4: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
5: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
6: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
7: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
8: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
9: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
10: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
11: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
12: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
13: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
14: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
15: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
16: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
17: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
18: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
19: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
20: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:4b:ae:d6:b1:53:aa:7f:08:d0:88:57:00:97:e6:41:86:2a:d3:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: Jun 2 13:06:13 2026 GMT
Not After : Jun 3 16:45:13 2026 GMT
Subject: CN=2B89827309C23DB4EAA41A5F3DA116C9B60D9785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:af:58:5b:4a:ac:48:03:c8:c6:02:56:7f:b5:
5f:5c:47:75:7c:43:6e:6e:a9:96:87:85:50:7b:74:
6f:1e:27:fb:c0:52:e3:aa:11:7f:72:72:de:41:ea:
88:15:12:0e:8a:40:68:9e:d8:34:10:0b:a5:e9:53:
5a:6d:77:78:87:ad:f9:7a:29:3a:21:5a:cb:d9:ad:
e6:26:70:e6:d5:dd:37:89:da:9f:45:9c:7c:18:1a:
b1:ad:5d:7a:c6:bd:9e:ca:64:f7:8e:f3:7b:ac:7e:
9a:87:a6:06:41:2a:26:41:0f:ea:d5:26:ca:de:e5:
d9:68:70:fc:13:46:a4:11:4e:ea:6d:aa:34:f0:05:
39:a4:d8:32:38:34:1f:5d:a5:74:6c:ff:8b:54:20:
75:8f:a4:4b:dd:7a:cc:c3:8b:eb:ed:e4:a5:1f:a8:
a6:60:c0:e6:35:22:67:13:6a:b5:82:e9:2f:67:ee:
85:9b:cb:5a:c7:dd:b6:0b:84:bc:c4:3f:74:3a:cd:
22:9f:32:a6:27:72:2a:43:82:5d:a3:d9:fa:22:86:
18:b2:df:e7:d2:4f:5e:60:bb:b2:18:97:1f:fe:e4:
60:56:d7:c3:11:10:d2:7f:10:3a:ce:7b:e6:22:53:
d7:e5:8c:98:b8:2d:b0:15:9d:24:70:89:ab:83:79:
d4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:89:82:73:09:C2:3D:B4:EA:A4:1A:5F:3D:A1:16:C9:B6:0D:97:85
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:7b:61:84:1e:fa:30:1f:74:61:2a:f2:82:cd:f7:37:d9:35:
62:2d:b0:05:7c:2b:13:b4:fb:c9:0b:78:2e:79:0c:fb:7b:ca:
3b:1b:7f:6e:54:25:ae:1c:68:89:8f:30:da:d6:36:3a:af:61:
c5:86:8f:a9:07:03:42:d5:dc:00:22:5d:33:80:fa:e7:74:8f:
82:48:f9:5f:f8:14:c0:af:35:62:00:3a:17:69:39:7b:bb:8c:
fd:9d:4e:76:3e:33:17:21:b5:fb:6c:38:68:31:c6:01:60:0e:
3e:87:ff:49:22:f4:05:c9:0c:6e:f7:5e:1d:14:cb:a4:32:17:
c3:d4:92:80:34:2e:ec:34:af:fb:9b:e8:48:62:78:91:82:9b:
fd:47:19:70:fa:1a:d0:da:84:b9:ad:45:43:aa:c6:22:c8:55:
0a:28:45:65:2a:15:0e:62:64:65:5a:21:a8:d2:30:71:86:96:
e1:3a:f2:75:ab:cc:8e:3c:eb:f1:98:4e:c0:32:42:43:f5:26:
83:d0:56:d4:be:73:9e:84:c1:84:60:60:25:20:e7:6f:70:44:
a4:25:1c:66:38:19:90:22:d9:d2:7b:be:cd:41:71:1c:95:63:
7d:2e:1e:bd:c1:26:59:bc:3a:15:05:19:74:93:04:e0:d4:f7:
a5:44:54:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 03:20:57 2026 by rpki-client