
$ rpki-client -vvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File: DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier: Pf4s7CPAenOm2e9h6OvHJE3nGCf+oR3ZNYxMtj4vMuk=
Subject key identifier: 4E:49:DB:F7:AF:11:67:B6:F5:C4:E9:3F:9E:1A:AC:25:19:52:EC:28
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 21FEB14E2219C452333CDE7DB9518B7D17EC0E61
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 08:14:40 +0000
Manifest this update: Tue 12 May 2026 08:09:40 +0000
Manifest next update: Wed 13 May 2026 10:14:40 +0000
Files and hashes: 1: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
2: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
3: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
4: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
5: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
6: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
7: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
8: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
9: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: /c8CIN/l3Y4mraC2PpuFCGZh7vg3ps1DdWq/h23fais=)
10: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
11: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
12: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
13: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
14: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
15: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
16: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
17: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
18: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
19: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
20: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 10:14:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fe:b1:4e:22:19:c4:52:33:3c:de:7d:b9:51:8b:7d:17:ec:0e:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: May 12 08:09:40 2026 GMT
Not After : May 13 10:14:40 2026 GMT
Subject: CN=4E49DBF7AF1167B6F5C4E93F9E1AAC251952EC28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:db:fb:ce:5d:d1:2f:0b:30:2a:0e:fb:a6:
fe:5d:1e:8d:38:14:f9:bf:d0:78:12:30:62:d7:4f:
33:fa:97:fb:69:07:74:e1:66:99:01:92:16:e6:c6:
4b:e9:d6:73:6e:57:10:67:27:0e:d8:ca:18:3d:17:
8f:e0:75:f9:a0:9c:8c:39:78:63:dd:94:d6:fb:bb:
70:12:79:fc:e9:e8:27:65:25:c1:01:ff:e2:15:e9:
67:86:3d:7d:11:4a:8c:17:4f:2a:84:86:a8:66:d5:
03:c6:b5:2c:4a:4d:e4:85:da:ca:68:64:9d:da:d6:
24:5e:d7:34:1c:47:2e:05:90:02:45:03:bd:a5:3c:
ad:25:25:42:d9:91:c9:e1:16:52:4c:05:a7:54:97:
de:b2:bf:d3:e8:5b:24:50:e2:c4:87:f1:bb:07:8f:
ae:91:f6:f5:2a:62:93:d6:15:33:d2:5c:06:50:37:
a4:32:31:6b:c0:8d:0b:0c:92:1d:66:5a:9b:29:a5:
4d:b9:8c:9a:de:53:b8:6d:8d:ce:96:2f:f4:a5:70:
1f:36:b0:d6:76:13:68:b6:8c:fa:e6:87:3a:0f:b0:
38:ef:9c:53:9c:7c:74:b0:f1:20:93:be:f9:8e:1a:
aa:19:20:8f:05:6f:f9:ab:ac:58:aa:11:ba:99:7b:
9a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:49:DB:F7:AF:11:67:B6:F5:C4:E9:3F:9E:1A:AC:25:19:52:EC:28
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:d7:b1:06:5a:a1:f6:85:7d:54:05:c9:8c:14:ff:00:24:4a:
07:8a:84:dc:e8:96:24:6a:f7:a0:5f:b6:c4:3c:23:04:44:e1:
7d:76:74:9c:8d:64:34:10:4c:12:19:69:f2:0d:d6:76:94:ac:
a1:7f:cc:14:f6:e4:72:cb:9a:1e:14:ec:34:2c:26:23:8d:ef:
21:c0:b9:f3:a9:79:5d:06:ec:e2:3a:d2:6b:cd:56:91:72:80:
d2:54:d2:78:77:a5:3e:31:a6:ee:0f:d0:2a:40:3e:de:14:1d:
67:b4:7a:a4:13:d6:4c:7e:5b:df:ea:ee:c6:1e:69:4a:33:0e:
61:22:31:04:95:4a:2b:33:1e:27:f3:9c:5a:d8:81:9e:0a:f9:
22:f2:1f:a7:99:f1:25:2a:e1:e3:1b:29:a1:36:cc:8f:52:d8:
b7:ee:43:4a:35:fd:59:4a:4c:04:af:e3:e6:d6:db:47:60:b6:
57:a6:ea:4d:17:ab:f8:2b:cd:48:30:e1:2c:cc:18:d5:97:a9:
8d:91:37:5f:0d:76:e3:90:0e:d9:b5:3a:96:2a:df:39:ba:da:
14:75:4c:1c:b3:de:34:32:80:21:7b:58:b0:9e:ac:90:57:d7:
3e:ae:ab:cb:bf:95:de:1d:04:79:ed:e9:8f:00:ef:ae:25:f7:
9a:c6:0e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:52:01 2026 by rpki-client