
$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json)
Hash identifier: U9k5tvl368nRAQ5eCEmpmEjEPHd3iZZEiwDpczf6suA=
Subject key identifier: 29:D9:02:1C:A1:2B:97:AB:BB:D6:9A:F7:24:28:FB:CE:65:25:08:A2
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial: 021823ACD7989F86570D805D1C6E51ED00717DAB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
Manifest number: 0266
Signing time: Thu 16 Apr 2026 18:32:31 +0000
Manifest this update: Thu 16 Apr 2026 18:27:31 +0000
Manifest next update: Sun 19 Apr 2026 22:17:31 +0000
Files and hashes: 1: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: 0LzQOb0WsF4zbvu/BiZULiwoqsooLVeyDtFIW7XmI1c=)
2: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: WW9tBSldj8iyWpSA5bF/L55RlpOsbOMVhaRQFMrUgB0=)
3: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: GHHb1yqE1wOoGtgYPHtE6eZxVJDfpmBbJSSPPvGdsuE=)
4: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: 6YppYQBmze+QjQsjns3D6bEx0CLiUBYJBxjSLx6K1N0=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 19 Apr 2026 22:17:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:18:23:ac:d7:98:9f:86:57:0d:80:5d:1c:6e:51:ed:00:71:7d:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
Validity
Not Before: Apr 16 18:27:31 2026 GMT
Not After : Apr 19 22:17:31 2026 GMT
Subject: CN=29D9021CA12B97ABBBD69AF72428FBCE652508A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:a8:2c:f4:58:d9:eb:8f:39:62:bc:44:ce:13:
26:36:6d:9d:21:70:f0:96:d8:07:f8:5b:64:9f:88:
c9:3a:e2:43:d7:af:f4:c0:0f:e3:52:45:d8:13:6e:
a5:4e:55:0d:94:6f:72:a7:b8:62:12:c0:c7:11:89:
09:8d:32:48:1a:ad:0d:cb:96:1b:c2:8a:d1:e0:7f:
81:38:34:7a:ba:aa:c5:72:cb:a9:c8:64:fd:c0:46:
c6:23:91:de:97:40:66:99:90:d0:6d:d3:73:99:9b:
b8:5b:a7:5e:1a:ba:26:3f:79:3b:69:f3:ea:8a:2d:
93:47:b7:9c:7a:8f:75:b7:5c:d0:02:3d:fd:ce:64:
04:38:0c:82:f1:5b:f2:13:3a:d1:d8:b1:6a:be:97:
ba:ca:8e:80:64:7a:4a:33:be:1b:76:82:cd:17:ff:
27:42:8d:00:b6:6d:82:0f:91:83:27:4c:87:ef:f2:
77:90:b9:f0:7c:9a:d5:f3:9c:14:1d:ba:e0:79:29:
45:5a:78:bd:70:8e:bf:2c:a6:2f:36:9e:58:26:3d:
aa:3f:3c:a3:43:0d:88:68:1f:b7:81:6c:4e:9e:e6:
c3:16:c9:8a:b3:1d:33:0c:a1:64:55:7e:bd:3a:a9:
b4:1e:ed:0f:21:99:29:e6:72:ba:43:16:ce:67:ea:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D9:02:1C:A1:2B:97:AB:BB:D6:9A:F7:24:28:FB:CE:65:25:08:A2
X509v3 Authority Key Identifier:
keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:d8:64:78:8f:9c:ec:5d:3c:c7:b3:ed:de:07:25:7f:e7:5b:
36:a9:ad:d7:87:29:ff:e3:59:74:23:29:b8:e1:b0:77:47:fd:
77:d4:00:45:8f:f6:a4:06:ad:12:99:5c:cc:6b:76:4d:02:29:
3e:e5:ef:67:dd:d7:3d:8a:fb:7d:52:e9:ff:47:45:8f:90:5a:
a8:43:85:65:63:49:ed:48:ef:b2:8b:21:68:e9:c2:5f:6a:b2:
bf:81:7f:de:d0:a7:90:c7:1a:85:e7:22:f7:ec:e9:66:c4:c5:
7d:bc:94:46:91:9b:37:44:4e:51:cc:c3:cf:bf:6d:29:f6:9b:
b4:4a:2d:50:2e:41:0c:47:27:e0:d5:48:7a:40:99:9d:ec:9e:
8d:ed:71:26:c8:dd:f3:9a:99:3f:79:e8:1a:b3:ed:20:50:83:
e4:b3:c2:f2:5b:1a:e9:18:fc:8d:91:54:88:a8:ca:da:0b:d3:
26:63:af:43:05:ab:b7:9a:4a:70:79:c2:01:c0:01:71:e4:32:
d3:7f:b3:fc:17:27:6d:35:ef:85:47:c0:a8:4f:2e:d4:e0:43:
9d:2e:cf:ba:e3:b7:e0:f9:c9:5a:37:5f:c1:09:e6:ab:4c:78:
b1:22:8f:a8:fe:c5:de:76:6a:0b:06:00:3a:90:09:9b:9c:8b:
6d:ea:47:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:35:22 2026 by rpki-client