
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft
File: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft (raw, json)
Hash identifier: 2ws2anQTUw5Grig7bjq6RKBpoCRemiZTp8isFHrjYQA=
Subject key identifier: 30:67:55:6C:23:AB:BC:A6:D8:82:B0:C1:CA:08:42:55:9A:2C:9C:97
Authority key identifier: DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0
Certificate issuer: /CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0
Certificate serial: 6988FA44E1FF520A35C1DCDCE5639DCBAA4599D4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft
Manifest number: A6
Signing time: Wed 02 Sep 2026 23:37:17 +0000
Manifest this update: Wed 02 Sep 2026 23:32:17 +0000
Manifest next update: Fri 04 Sep 2026 02:26:17 +0000
Files and hashes: 1: DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl (hash: 7cXy6vTnpGxWmeEHDbItdRo1eoErRftjRJUVrdncqU0=)
2: 3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (hash: 73zmQhG7Zu+0eZu4dZISk1NiR9ExgcKyarQj6CIDk/k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl
rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:88:fa:44:e1:ff:52:0a:35:c1:dc:dc:e5:63:9d:cb:aa:45:99:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC2E00B21267A46BD695F6DBBEC2989F4830C8B0
Validity
Not Before: Sep 2 23:32:17 2026 GMT
Not After : Sep 4 02:26:17 2026 GMT
Subject: CN=3067556C23ABBCA6D882B0C1CA0842559A2C9C97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:81:9b:49:83:67:d2:bd:da:84:ff:18:cf:ca:
ee:55:11:cb:9d:7a:25:e0:01:44:29:69:03:e0:2d:
26:84:a3:58:dd:1c:5e:bb:5a:f6:ea:69:eb:f1:3f:
ae:3d:e9:40:0d:2e:03:ad:74:a5:c5:71:6d:f4:89:
18:00:82:a5:b0:94:4a:8a:1a:f6:0b:e8:9a:cb:bf:
a8:5a:4f:58:8b:ba:27:ab:9b:0d:21:4a:46:8e:cf:
35:af:38:00:68:fd:5e:51:e6:38:18:26:c0:69:d5:
01:b2:55:aa:68:82:dc:e9:a8:b8:1e:73:b4:44:ab:
96:af:38:13:ed:bb:d6:bc:f1:1d:44:36:46:65:6d:
a8:85:57:1f:e0:00:8a:0a:44:0a:8f:d8:58:46:55:
11:0d:16:0b:db:3e:5d:d5:f8:3f:22:cd:af:51:f7:
e3:93:2b:7f:1d:04:7a:64:a4:da:ac:d0:ed:cc:78:
0f:87:42:4d:33:bc:e3:0e:44:93:0f:c8:4b:8b:44:
b5:d9:64:c0:fd:c4:5d:a5:5b:80:ae:c7:57:3c:ed:
dc:a6:3f:61:ab:c2:70:58:f2:54:cb:d8:13:f9:96:
26:00:38:d1:90:ba:4c:63:a7:16:c1:d0:61:a2:c7:
c1:b2:ac:f9:46:e5:1f:6e:02:ed:28:d2:c0:db:4b:
da:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:67:55:6C:23:AB:BC:A6:D8:82:B0:C1:CA:08:42:55:9A:2C:9C:97
X509v3 Authority Key Identifier:
keyid:DC:2E:00:B2:12:67:A4:6B:D6:95:F6:DB:BE:C2:98:9F:48:30:C8:B0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/DC2E00B21267A46BD695F6DBBEC2989F4830C8B0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:c5:39:da:f7:db:c1:59:d3:d7:22:5a:bd:b6:80:52:bd:97:
87:0a:75:c2:8f:30:b2:2d:b5:a9:22:dd:ea:eb:27:c0:dc:bf:
be:54:19:62:54:98:cd:7f:72:1d:b5:87:04:9d:14:3d:18:eb:
e3:90:09:2d:a8:d2:7d:ad:87:23:0a:03:e8:99:52:7d:ff:a7:
6f:90:52:4d:5b:be:a0:61:b1:df:bd:aa:2b:b6:78:a9:9d:0c:
f6:b2:50:c0:b4:f2:74:63:e4:7f:59:54:50:25:dc:82:7d:77:
e3:13:0f:60:34:ea:ba:0e:ef:81:c3:99:1c:c1:43:16:88:51:
77:e7:fc:48:f8:e8:f8:c3:e5:35:0f:60:5b:33:53:2b:fb:ea:
09:28:1a:8a:ff:ab:b9:a5:8d:1a:ba:30:db:e3:36:ab:c2:ca:
43:18:93:2c:70:69:d9:91:74:e0:9a:14:1c:39:4c:a3:2e:fc:
00:14:f6:02:32:e9:34:26:56:1f:33:99:22:95:7d:19:8a:1c:
71:a1:ab:74:40:4d:5d:2e:ca:80:40:8b:d5:06:65:88:fe:ca:
a5:c9:e9:59:44:97:6c:16:68:2c:f6:48:34:ac:9e:a3:e5:de:
ea:3d:c8:56:e0:15:69:e3:98:78:82:e1:51:ac:c0:de:3e:99:
25:9e:0f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:24:50 2026 by rpki-client