
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
File: DA20692305010D31E154AE60F41C822DD2D6CECC.mft (raw, json)
Hash identifier: nJgx43/GNBZKeMOA6IVxIgqxmB1dzP8Obkeq26vy7uM=
Subject key identifier: 1B:46:5E:BC:3E:81:05:AA:DA:7F:D4:AD:08:9D:4D:7A:10:47:55:81
Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
Certificate issuer: /CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Certificate serial: D274B0F97EA50058166B01F0810AC01697CF55
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
Manifest number: 3F
Signing time: Wed 17 Jun 2026 20:42:41 +0000
Manifest this update: Wed 17 Jun 2026 20:37:41 +0000
Manifest next update: Thu 18 Jun 2026 23:56:41 +0000
Files and hashes: 1: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: o8gOkqGVnHiHCblL7s8ySrSdxhRCwAVnszXZYwnxcmY=)
2: DA20692305010D31E154AE60F41C822DD2D6CECC.crl (hash: JLgpce8Egm2vHcmgY9riYR20vgdF8BzxTUSadyZyU7Q=)
3: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: aQMTJYE8nMh07FLcvIjiQtwhdByf/7nyD/zkKRD7jaM=)
4: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: agruC/We/sLJTlhbwSnl6x4MYxmzcCS3rf7w9cYqIto=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 23:56:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
d2:74:b0:f9:7e:a5:00:58:16:6b:01:f0:81:0a:c0:16:97:cf:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Validity
Not Before: Jun 17 20:37:41 2026 GMT
Not After : Jun 18 23:56:41 2026 GMT
Subject: CN=1B465EBC3E8105AADA7FD4AD089D4D7A10475581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:3c:c9:50:05:a6:60:e5:80:57:d8:54:62:
af:7d:63:e3:99:5e:17:3d:21:2a:24:65:16:84:26:
70:5d:fe:d9:10:8c:1e:91:d2:23:01:3a:36:41:cb:
f4:4f:db:fa:2e:18:04:3a:f0:e8:0c:fb:14:ec:40:
55:5d:d5:9f:96:f2:6b:27:0b:84:b9:c0:80:b6:cf:
95:cf:6b:51:bd:7b:1a:0b:45:31:51:81:c1:8b:b7:
5c:41:af:82:80:27:9b:74:a7:86:22:d2:04:6e:55:
4e:5f:d5:24:84:84:c0:01:70:1b:5d:ea:3e:e2:5e:
64:d1:99:bf:55:6a:3b:89:f9:b1:54:2c:8e:5e:fc:
2c:63:36:fa:0a:0c:93:59:2a:f4:ed:6f:51:04:2c:
70:b8:fc:ec:7c:68:12:76:e3:02:fd:01:08:5b:7b:
13:62:c6:7a:0e:6e:31:41:97:cf:d2:df:d5:72:ae:
e5:c0:e3:6c:35:f9:44:37:ff:b7:03:61:a5:ea:de:
a8:a3:6f:1f:93:3a:dd:b1:2a:4a:1f:57:76:b9:eb:
43:ce:96:a3:a1:91:8f:dc:8b:6e:d0:a8:55:27:4d:
fa:d3:a2:8d:4a:75:ee:6e:a0:e5:47:75:67:78:5a:
0c:04:fc:bf:11:a8:9b:98:49:87:36:d3:b2:a3:42:
f5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:46:5E:BC:3E:81:05:AA:DA:7F:D4:AD:08:9D:4D:7A:10:47:55:81
X509v3 Authority Key Identifier:
keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:06:13:df:7a:4c:26:06:e2:bd:60:c4:ca:08:84:5e:f2:df:
2b:10:d4:e3:2b:6a:71:49:fb:67:79:7c:cc:55:81:e0:c6:c0:
be:f3:11:e8:de:6d:96:ed:18:f2:0c:da:e7:e9:66:09:a4:68:
af:cb:2a:2f:e8:63:a2:10:dc:04:26:28:a6:71:ca:38:f0:b4:
25:b1:83:62:11:e8:19:0e:8d:db:0c:66:3b:51:1d:19:19:e6:
df:91:ad:2e:71:38:78:10:df:4d:a6:53:26:3a:a2:e7:c0:34:
94:3a:86:78:92:df:8a:f0:43:08:50:63:87:fd:d5:87:a5:af:
c5:c7:51:0f:2b:ce:89:78:8c:14:14:46:22:5b:bf:41:90:da:
e9:46:74:6e:9a:47:12:01:dc:aa:20:fb:e5:16:bb:23:84:7e:
c5:ab:ae:c1:27:5e:ed:9a:20:67:43:e1:e9:b8:02:b9:2f:05:
78:17:44:0a:4d:b3:cc:65:95:e4:ea:34:8c:f7:19:5b:e8:75:
84:14:2c:4e:b1:93:b1:4d:bb:25:7a:8c:e0:ef:d5:21:a6:be:
80:13:60:82:ed:53:8e:d5:06:3f:c6:e1:26:4d:46:0b:34:9e:
95:e7:43:f3:64:4b:86:cc:75:dd:51:55:14:44:57:19:1d:ae:
11:f1:ee:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:53 2026 by rpki-client