
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json)
Hash identifier: ED376zh1AZzJJAHNvu2gJTCJEu/T4+NQ5f0QHjqVDDM=
Subject key identifier: 29:5C:7E:24:81:02:CC:35:5C:59:B3:AC:36:F1:28:1D:07:65:2E:75
Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Certificate serial: 5F765BA44E4C1E87BB6CA62C5B187A7A2511CA7A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
Manifest number: 7C
Signing time: Sun 02 Aug 2026 16:06:56 +0000
Manifest this update: Sun 02 Aug 2026 16:01:56 +0000
Manifest next update: Mon 03 Aug 2026 18:38:56 +0000
Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=)
2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: nyNO6jOsLFQGQgAjV860bEh8wiB4OjstV9CZ9J69nkE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 03 Aug 2026 08:45:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:76:5b:a4:4e:4c:1e:87:bb:6c:a6:2c:5b:18:7a:7a:25:11:ca:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Validity
Not Before: Aug 2 16:01:56 2026 GMT
Not After : Aug 3 18:38:56 2026 GMT
Subject: CN=295C7E248102CC355C59B3AC36F1281D07652E75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:32:9c:2b:5d:5f:aa:5f:28:92:ea:e3:df:
e3:2a:de:c5:36:5b:37:fd:ab:06:fe:f6:f9:f6:85:
ab:04:d4:0e:7c:a4:ae:f8:7c:76:f4:c8:b0:ab:7c:
7c:3c:34:25:fb:0a:5a:13:1e:93:99:7b:fa:50:21:
27:90:b7:e1:9f:79:56:20:75:90:4b:88:85:d0:41:
37:17:37:c2:25:27:0f:b1:5d:a2:22:c4:8b:19:dd:
b4:c8:08:08:a2:ab:8b:ed:4f:0b:79:0f:25:1f:a5:
ce:db:12:e4:fc:c9:d7:3c:95:04:95:59:36:bb:dd:
31:22:58:0b:3c:72:5c:db:92:e9:f4:d4:40:06:ff:
bd:99:8c:df:1e:88:2b:52:ec:91:84:7a:9d:84:58:
d5:81:04:c1:9d:f7:ec:76:6c:90:c0:3e:46:59:66:
4d:4d:c2:d4:b4:8a:53:07:f3:e7:b9:7d:82:dd:0f:
7c:e0:41:66:28:aa:0d:6b:23:05:85:b9:7a:47:16:
8a:80:5f:f2:1c:f4:49:1b:f6:3c:b9:38:53:d4:06:
88:b3:2d:1d:da:9e:17:f3:a4:32:94:cf:f9:9c:7f:
33:19:34:d1:d8:38:fb:3c:74:74:b6:ea:05:bf:a4:
cf:16:59:2c:29:13:5b:f5:40:69:a5:4f:49:93:58:
e7:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:5C:7E:24:81:02:CC:35:5C:59:B3:AC:36:F1:28:1D:07:65:2E:75
X509v3 Authority Key Identifier:
keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:07:98:77:00:b2:c9:25:51:a9:0c:f3:1a:31:d0:ee:0d:5a:
fe:88:dd:6d:ed:59:13:75:7f:c3:81:26:06:af:98:d6:83:93:
53:f0:43:cf:fe:46:91:d1:c1:14:d8:b6:84:75:e7:c2:22:10:
98:67:62:e0:02:bb:37:09:df:a9:80:1c:1c:59:c8:80:a3:1a:
3d:08:11:b1:1e:ad:37:cf:43:d9:74:1b:eb:ce:9f:da:3c:13:
5d:03:1e:11:a2:a6:c9:f8:34:a2:50:f6:f7:ca:64:b4:31:14:
67:d1:cd:4d:d9:77:a2:55:9a:4c:f0:4d:23:98:80:30:30:18:
47:63:5e:b4:22:e4:bd:69:3c:cf:45:e2:75:43:7e:e1:42:b5:
89:9b:8d:bb:4f:b6:64:95:97:56:87:81:37:74:b8:74:63:7e:
ce:f8:f8:e6:28:f3:78:bf:c5:b9:7a:94:d4:38:be:9d:2a:14:
6f:bb:df:e0:5d:7e:6c:18:ee:2a:de:f1:a2:5c:a5:e1:67:e6:
28:48:1a:7f:40:63:37:d9:0d:36:e3:21:4d:e9:60:c8:f2:68:
99:ee:c0:26:7e:70:54:9c:a3:65:dd:a6:3c:ed:ac:b4:77:d9:
a1:8f:33:1f:3f:0c:f6:20:ea:64:44:93:71:09:74:fb:9a:5e:
3a:df:64:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 22:45:40 2026 by rpki-client