
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json)
Hash identifier: 1mKETY8/g7P5NXBdeY5PLkFnkKerBoQzguZ+7Az8zv0=
Subject key identifier: B4:0B:13:DB:EB:2D:90:EC:F3:07:59:76:EE:ED:67:60:1F:A2:72:29
Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Certificate serial: 4C561E3BF298A0B6798566D8E660FF48DEE14F39
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 23:07:36 +0000
Manifest this update: Wed 16 Sep 2026 23:02:36 +0000
Manifest next update: Thu 17 Sep 2026 23:22:36 +0000
Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=)
2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: fg2zvQQQPeV6aTzikZk3pXOatTdJEijNZLVwByQpJGk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 23:22:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:56:1e:3b:f2:98:a0:b6:79:85:66:d8:e6:60:ff:48:de:e1:4f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Validity
Not Before: Sep 16 23:02:36 2026 GMT
Not After : Sep 17 23:22:36 2026 GMT
Subject: CN=B40B13DBEB2D90ECF3075976EEED67601FA27229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:32:dc:07:2a:ad:0b:00:89:33:3d:0a:7a:45:
e7:ba:4c:0a:ca:ff:04:81:2b:00:14:5e:d8:8e:2c:
8d:4a:05:6a:f3:cd:08:1c:e1:10:2b:a8:40:0e:06:
10:cc:a5:a4:23:5c:e7:b0:d6:4b:1a:da:ca:a0:ba:
5e:94:34:b0:45:38:85:5c:7e:2b:43:f4:62:e2:6a:
4f:28:95:79:70:93:5e:e3:ca:76:dd:e6:eb:a2:78:
8f:2f:8f:e5:05:af:83:a6:8d:fa:b7:a6:73:aa:60:
d4:68:28:d3:e5:88:ce:30:99:3e:20:fb:99:8b:6c:
f7:35:f9:5b:39:0a:1b:81:a5:9e:17:5b:f4:cb:59:
c3:63:4b:40:d8:fd:cd:ef:0a:73:5f:09:bf:ed:e9:
9e:7b:cd:d8:f5:4f:d6:65:4a:53:8c:47:81:fb:d3:
34:21:27:e9:bb:ba:86:ec:26:d5:d3:1d:a8:b4:53:
27:c3:63:2c:af:2c:73:6b:3d:9c:2a:4d:2c:0f:87:
1e:cc:12:a8:ba:e3:8d:89:6f:fb:e1:ed:44:f7:89:
f6:e3:30:f4:0b:1f:57:dd:5e:2c:fc:99:e9:f7:c9:
b7:2e:42:97:e5:0e:2c:33:24:5d:4a:b8:74:1b:24:
23:9d:0a:84:d7:00:0d:5e:a3:06:2d:8e:b5:74:39:
5a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0B:13:DB:EB:2D:90:EC:F3:07:59:76:EE:ED:67:60:1F:A2:72:29
X509v3 Authority Key Identifier:
keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:86:0a:c8:72:28:de:02:0c:ff:9d:10:8d:aa:98:cc:db:a3:
44:f3:c5:45:01:8d:07:4a:a7:2b:27:5c:e9:d5:10:22:f8:3f:
cb:7e:a5:af:77:59:5d:f0:58:f8:e4:f1:da:ff:07:53:ed:f4:
f4:3d:4d:2b:93:11:74:cd:43:4d:03:61:36:61:8c:f8:0b:90:
28:05:a6:e3:99:1d:0b:ef:cc:d8:58:27:04:fb:c0:65:6a:b8:
07:cd:f6:6a:06:3f:e8:cb:3a:10:08:dc:91:b1:0d:05:78:c8:
b1:9a:b9:a8:11:76:82:c1:00:75:b8:33:ef:dd:6c:51:c3:36:
63:16:c9:a3:72:b2:f5:ee:27:44:f2:95:b9:51:65:35:e6:2f:
7a:e5:34:50:d1:66:44:a9:eb:26:0c:ea:cc:7a:00:60:f2:07:
c0:cc:f2:83:a6:15:25:e5:93:4c:e0:a1:3c:7c:e3:36:bc:4b:
9b:d2:fd:72:f2:ae:76:25:34:a0:37:63:b9:66:9f:fa:0a:a3:
dd:04:9d:bf:8d:bc:a4:5c:fd:cb:d6:70:06:c6:e1:04:0a:d9:
b8:ce:d8:0b:fa:15:7f:35:7f:e1:81:9a:e7:fb:31:2e:41:1a:
05:7d:ce:15:6d:b0:d6:d3:c9:da:03:a5:12:0d:87:79:3a:24:
05:27:55:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 13:08:05 2026 by rpki-client