
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
File: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft (raw, json)
Hash identifier: Uu2oJdZOaokkRvJ2Z/Zu8Jw3TILDu0yY64uT9Yvil2Y=
Subject key identifier: C7:C0:E5:50:73:19:8F:3E:7F:8D:7A:34:FB:45:DE:F0:85:E4:C7:9A
Authority key identifier: DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3
Certificate issuer: /CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3
Certificate serial: 60EAAD35B965FC08B4CA1848C5905C7F0630734D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
Manifest number: DC
Signing time: Wed 14 Oct 2026 08:41:15 +0000
Manifest this update: Wed 14 Oct 2026 08:36:15 +0000
Manifest next update: Thu 15 Oct 2026 12:19:15 +0000
Files and hashes: 1: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: f+1xV3V7eIo4yjJqos+xUQVvX1GIUuOZUCoIKtF+llo=)
2: DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl (hash: 6X3WBUGt8FEHAHDJLKRvUWb8ZgM2aMYXCt1Q1yAjnkU=)
3: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: D8gdQFYf8NnWhum3Srq97Jkm5hnXUuKFuTsge2OROqA=)
4: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: BDfl1ljAlzUeNiFgOAogNvfZpmtNq6Kp37cGWuK0R5E=)
5: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: lZy/D3zEI+V1zNnvBB6OJZ7BzAoFD7HSvYryTbhRU2s=)
6: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: 2xJo8vO5RtzGv7BkUmxulZhOANWhCfhuYoau31MaZh0=)
7: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: zZohFjEfg5KbgTKUDn03P4ViER6I84zu0tvUUBWCbms=)
8: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: ovVBKtJH+Wixf+bjFfGN0BaqhZuS+FBdLYnDH3wV8vw=)
9: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: 7Jy3y4ltltsmzNhSvINfLmQPgIpSxy3LDWGrSnNQ3Zk=)
10: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: zkjugBCGR1RTN3rv+4fVMMpCR+DjhaqSm22RICfrfmA=)
11: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: d26NLF/sKVXadNSIsUNq9koHjOM/iTFNcX1v1zkyxRU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl
rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 15 Oct 2026 12:19:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:ea:ad:35:b9:65:fc:08:b4:ca:18:48:c5:90:5c:7f:06:30:73:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3
Validity
Not Before: Oct 14 08:36:15 2026 GMT
Not After : Oct 15 12:19:15 2026 GMT
Subject: CN=C7C0E55073198F3E7F8D7A34FB45DEF085E4C79A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f1:5f:64:2b:bd:c3:5f:71:15:5f:ce:20:16:
09:f3:98:61:0e:88:5b:ad:74:e5:d6:8c:64:94:eb:
e3:05:fe:98:a4:02:1e:d4:e0:40:83:7d:05:c5:e3:
40:ee:40:2e:52:e8:cb:35:9b:bd:5b:c4:8f:b2:01:
9c:65:d5:17:fd:72:b3:ca:14:04:94:23:a7:46:f5:
58:33:d5:92:24:3f:87:e8:bf:db:1f:81:98:93:1b:
ef:40:9f:65:d1:6b:ad:30:42:6e:d9:4f:3c:f3:38:
32:f9:d0:09:e4:ce:fb:0e:aa:17:f7:a3:39:51:89:
f7:f9:6c:69:9e:4c:39:c2:6e:c5:37:68:4b:b6:26:
e8:8f:fc:ea:9f:3a:6b:54:1f:a3:fe:d3:0c:6a:88:
8f:33:2f:6f:b3:32:87:c9:da:87:c2:2b:b4:67:60:
1b:0e:96:9a:62:80:7d:33:f2:40:2f:20:57:64:3e:
c6:7f:65:1a:d6:62:a6:f3:42:42:f8:a6:75:5e:8b:
12:9d:18:31:01:b6:66:70:89:f0:d8:6b:1a:a7:d8:
f5:2e:12:b8:4e:3d:79:e2:f9:b3:78:d6:9f:0c:f5:
19:68:cc:11:9f:5e:52:28:8d:9f:78:61:1c:a5:e1:
c2:db:57:e7:da:ef:c9:5c:52:e7:29:58:4f:77:e9:
fc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:C0:E5:50:73:19:8F:3E:7F:8D:7A:34:FB:45:DE:F0:85:E4:C7:9A
X509v3 Authority Key Identifier:
keyid:DE:4E:99:EA:03:0A:F8:AE:BF:B7:B6:A7:A0:E9:16:74:DD:B2:9A:C3
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/DE4E99EA030AF8AEBFB7B6A7A0E91674DDB29AC3.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:25:41:83:3a:01:4c:fb:fb:bf:f8:f7:2d:57:02:59:99:b9:
41:c7:8d:28:0a:9e:14:03:47:39:2d:85:48:d9:84:a4:b8:c6:
78:bd:37:3f:1f:bc:0a:b3:59:ae:14:f2:ae:a3:84:63:fa:1f:
69:ec:e6:26:c4:04:7b:b7:b6:54:9a:97:51:c1:dc:01:f5:53:
90:4a:cb:b1:c7:43:64:d6:55:93:12:17:a7:90:51:06:2a:bf:
90:88:03:52:d7:5e:38:59:a0:84:7f:7b:b8:23:e7:6f:11:4a:
1d:bb:c9:ae:43:61:f9:50:5d:b5:3c:5b:64:7d:f3:30:48:7b:
62:5b:00:99:dc:a5:dd:1b:4e:40:51:4d:e0:a0:96:93:ca:c5:
a0:2f:40:7f:4f:c0:b0:1d:fb:53:e7:05:78:f2:9c:09:42:4d:
df:76:86:89:df:f9:44:41:f9:9d:92:48:21:60:af:a0:1b:f2:
6a:5f:08:ea:8f:01:ee:89:0a:0c:68:57:e9:88:00:74:ba:16:
a1:8e:4b:74:7f:e5:dc:db:5c:2a:02:52:42:49:22:bb:73:2e:
f8:dd:46:46:19:ad:46:b2:e8:69:92:05:00:7e:c7:ea:55:88:
3e:7b:6f:ae:9d:65:f9:f2:f0:96:a7:17:8e:0c:b5:23:0d:74:
e1:a9:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 23:00:21 2026 by rpki-client