
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json)
Hash identifier: OrFxTwunP2y0eT7BAI/X/uHcgKJw5APsNGAMk7dP4DQ=
Subject key identifier: FD:63:2C:D8:E1:93:9B:E6:69:9E:9E:78:2D:EC:73:9F:3E:2B:03:FD
Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Certificate serial: 678E6E461A46B03ED4334BEA6505B8EFD4F2C2DA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 06:25:01 +0000
Manifest this update: Thu 18 Jun 2026 06:20:01 +0000
Manifest next update: Fri 19 Jun 2026 10:08:01 +0000
Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=)
2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: NYx8q7+nUmQT7rJA14PnVpTCilC6VnfBHQ/LkEBTN/I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 10:08:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:8e:6e:46:1a:46:b0:3e:d4:33:4b:ea:65:05:b8:ef:d4:f2:c2:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Validity
Not Before: Jun 18 06:20:01 2026 GMT
Not After : Jun 19 10:08:01 2026 GMT
Subject: CN=FD632CD8E1939BE6699E9E782DEC739F3E2B03FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c9:20:39:f7:65:76:6f:b8:f8:1a:7d:9d:36:
56:1f:47:d0:0b:b5:21:9f:76:19:a1:04:91:9c:19:
4f:f8:3f:6f:4e:ac:f4:f9:7f:df:11:d7:12:d5:f4:
88:ae:ad:ed:14:be:cf:25:5f:b4:b3:46:a2:5d:6c:
a8:56:53:43:78:6b:c8:a8:52:9e:4a:82:d4:dc:27:
30:9b:8d:50:f6:ef:ed:c6:bc:89:9d:ba:be:ae:57:
3e:d3:f7:30:da:86:a9:1e:06:43:93:e1:f3:c8:18:
f1:22:de:e7:01:fa:83:87:97:83:ae:ab:4e:45:5a:
04:78:ea:f7:3b:b7:cd:0a:c6:35:54:1e:81:55:e2:
33:b7:3a:45:41:cd:1d:e5:e5:11:51:2b:37:e4:d0:
48:02:d3:ae:9f:25:ff:0d:ef:f7:07:c7:ee:8a:1d:
f0:9f:38:e3:b3:38:95:56:96:20:70:ef:d8:65:75:
9c:77:4b:c8:d2:e1:14:a9:dd:99:b6:34:e3:d9:4e:
67:67:aa:48:2c:44:0c:d9:bb:5d:b2:d4:9f:42:f7:
a5:f3:04:a0:e0:36:af:af:60:89:f3:97:1d:61:9d:
88:63:79:47:65:57:40:ca:0c:2c:49:a1:ec:91:93:
ba:9f:b3:a2:21:1c:7c:97:6c:b0:50:5a:5d:f2:ab:
b7:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:63:2C:D8:E1:93:9B:E6:69:9E:9E:78:2D:EC:73:9F:3E:2B:03:FD
X509v3 Authority Key Identifier:
keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:5b:3a:6d:89:5b:90:e5:3c:61:ea:2f:76:1c:48:e2:00:68:
59:ab:4c:b3:36:37:9d:e5:51:76:f3:24:a7:bf:5d:58:fd:63:
c9:e5:79:f1:c1:52:85:8e:6c:96:85:ec:5f:2f:96:dc:7b:13:
19:0d:10:43:ac:fb:d5:0c:13:d3:7a:a6:6b:53:66:5a:8e:0a:
26:cd:48:f3:50:bb:55:c0:ae:88:52:67:60:70:54:70:49:e8:
db:da:ef:aa:ea:be:b7:f7:95:f5:c5:d9:93:06:1c:03:cb:31:
6d:6e:41:12:07:9c:15:ad:a6:de:db:a7:dc:b0:4d:5f:16:85:
49:92:cf:d8:29:e6:e2:74:83:7c:e9:3d:a7:99:00:bf:04:48:
95:6d:f2:1a:74:3c:1e:0f:1a:65:f2:47:ff:e7:cb:15:8e:71:
f6:9d:33:17:e6:ae:7d:58:a1:44:1e:00:47:00:41:e9:74:e9:
e9:d5:b9:cc:dd:bf:e8:0d:e7:d5:58:de:0b:29:dc:04:d5:8a:
83:64:c6:33:f1:3b:1d:4a:1c:3a:e9:c6:b0:e0:28:f5:00:c6:
55:52:d7:6d:ec:49:ea:09:3a:e6:2b:65:e2:3c:f0:ab:b0:2d:
10:8c:fa:38:66:48:25:00:02:a9:e3:75:13:8a:0d:92:9c:a8:
e0:dd:58:f0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUZ45uRhpGsD7UM0vqZQW479TywtowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5
NEU0MjgxQzAeFw0yNjA2MTgwNjIwMDFaFw0yNjA2MTkxMDA4MDFaMDMxMTAvBgNV
BAMTKEZENjMyQ0Q4RTE5MzlCRTY2OTlFOUU3ODJERUM3MzlGM0UyQjAzRkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUySA592V2b7j4Gn2dNlYfR9AL
tSGfdhmhBJGcGU/4P29OrPT5f98R1xLV9Iiure0Uvs8lX7SzRqJdbKhWU0N4a8io
Up5KgtTcJzCbjVD27+3GvImdur6uVz7T9zDahqkeBkOT4fPIGPEi3ucB+oOHl4Ou
q05FWgR46vc7t80KxjVUHoFV4jO3OkVBzR3l5RFRKzfk0EgC066fJf8N7/cHx+6K
HfCfOOOzOJVWliBw79hldZx3S8jS4RSp3Zm2NOPZTmdnqkgsRAzZu12y1J9C96Xz
BKDgNq+vYInzlx1hnYhjeUdlV0DKDCxJoeyRk7qfs6IhHHyXbLBQWl3yq7dLAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/WMs2OGTm+Zpnp54Lexznz4rA/0wHwYDVR0j
BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0
RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy
ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk
MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw
QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE5bOm2JW5DlPGHqL3YcSOIAaFmrTLM2N53l
UXbzJKe/XVj9Y8nlefHBUoWObJaF7F8vltx7ExkNEEOs+9UME9N6pmtTZlqOCibN
SPNQu1XArohSZ2BwVHBJ6Nva76rqvrf3lfXF2ZMGHAPLMW1uQRIHnBWtpt7bp9yw
TV8WhUmSz9gp5uJ0g3zpPaeZAL8ESJVt8hp0PB4PGmXyR//nyxWOcfadMxfmrn1Y
oUQeAEcAQel06enVuczdv+gN59VY3gsp3ATVioNkxjPxOx1KHDrpxrDgKPUAxlVS
123sSeoJOuYrZeI88KuwLRCM+jhmSCUAAqnjdROKDZKcqODdWPA=
-----END CERTIFICATE-----
Generated at Thu Jun 18 19:09:17 2026 by rpki-client