
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File: DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier: rXrsDWqJDapywK0FBlFjuMlMvbMstrIpFg29i9IDBzY=
Subject key identifier: DF:15:AE:2D:3F:FB:6B:27:C0:85:38:09:1F:88:7E:B5:D2:C6:6A:42
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 11F3A976F8C0CCD94B06DF28D4E27362BC11056D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number: C4
Signing time: Fri 25 Sep 2026 17:31:58 +0000
Manifest this update: Fri 25 Sep 2026 17:26:58 +0000
Manifest next update: Sat 26 Sep 2026 17:48:58 +0000
Files and hashes: 1: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
2: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
3: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
4: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
5: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
6: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
7: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
8: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
9: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
10: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
11: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
12: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: /GeZsDqi7Uv/VIkcLYrOvCuvdISOLR97PXOgOGbmcl0=)
13: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
14: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
15: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
16: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
17: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
18: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
19: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
20: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:48:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:f3:a9:76:f8:c0:cc:d9:4b:06:df:28:d4:e2:73:62:bc:11:05:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: Sep 25 17:26:58 2026 GMT
Not After : Sep 26 17:48:58 2026 GMT
Subject: CN=DF15AE2D3FFB6B27C08538091F887EB5D2C66A42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a2:c2:94:5a:28:81:38:2d:63:73:d0:d2:fa:
e2:8b:83:ac:d3:28:23:8c:54:a2:ec:ff:1d:dd:4f:
d3:69:57:3c:fc:94:79:8d:21:cb:03:ec:18:83:72:
23:98:33:59:fb:1e:4a:3e:3f:1a:c3:cf:72:b3:bb:
ee:0c:38:7b:47:68:ec:d5:80:85:12:e6:89:9a:f7:
59:a4:02:b6:87:f9:aa:52:07:15:7b:17:7b:38:d8:
fd:ee:53:c9:33:50:13:7c:75:5c:eb:82:c8:f6:c3:
7f:bd:62:54:6e:df:17:a2:40:95:9c:e1:cf:29:cb:
30:41:33:8a:cd:e7:11:92:5e:bb:60:28:35:88:ef:
8f:83:ad:0d:f7:83:ff:da:a1:d4:2d:42:7a:cc:4f:
60:2e:ca:10:74:4b:17:af:66:fd:34:40:bd:d1:ce:
d3:a2:6e:ab:b6:19:63:b2:a3:58:e8:7a:b1:dc:cb:
8d:f5:21:be:b6:cd:d7:b4:37:45:7b:27:af:55:0a:
9b:5e:59:2b:6f:ed:99:39:83:e2:13:b0:eb:a3:9d:
28:3b:34:0c:2d:d8:02:57:b7:ff:e7:cd:2b:95:c5:
6c:02:a2:e0:3b:db:bf:b3:ba:e0:fb:cb:cf:50:1f:
dd:64:6c:15:7c:15:1b:eb:d6:4e:5e:bc:a2:61:8f:
c7:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:15:AE:2D:3F:FB:6B:27:C0:85:38:09:1F:88:7E:B5:D2:C6:6A:42
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:99:1a:ca:75:b7:4e:78:73:15:ef:e7:15:ce:0c:94:32:26:
37:84:cd:b5:bb:fc:15:59:11:85:f4:66:f2:83:77:87:7c:2c:
02:30:4f:85:db:70:63:93:18:5d:ef:b3:59:ec:4c:3b:45:ff:
c9:bb:9a:df:3a:c8:36:63:e0:aa:03:d1:42:57:1f:3a:d2:bb:
ce:b4:60:98:ca:c4:a4:ac:91:c7:e3:aa:ee:d2:04:d6:b1:65:
0e:55:d2:fd:cf:8d:5f:32:28:af:53:d6:1f:3a:f7:da:bd:9a:
18:17:df:73:c2:1b:fc:10:fd:5b:96:36:42:48:1c:66:1a:ce:
ec:d6:21:c0:0f:c3:6c:42:e6:32:dc:51:f8:16:5f:ad:5f:c0:
f4:81:58:53:c9:7d:99:a2:9a:f2:23:53:20:76:3c:13:4d:16:
de:25:e0:ab:35:45:ba:33:2e:89:d0:5f:af:20:8c:7c:5c:ee:
b5:10:2f:4c:39:bf:85:54:ac:a7:a0:de:fc:97:b2:0f:08:7f:
be:06:e4:b0:56:3a:38:0a:27:69:95:22:7c:c8:15:35:4e:d5:
6e:0e:b9:38:6a:02:a1:a8:91:01:3a:95:5e:96:e9:6e:c7:07:
bb:6e:c4:35:93:26:89:b2:ea:c3:86:dc:a7:88:63:2a:e9:e1:
e6:31:30:56
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUEfOpdvjAzNlLBt8o1OJzYrwRBW0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZB
NTlEMjQ1NDAeFw0yNjA5MjUxNzI2NThaFw0yNjA5MjYxNzQ4NThaMDMxMTAvBgNV
BAMTKERGMTVBRTJEM0ZGQjZCMjdDMDg1MzgwOTFGODg3RUI1RDJDNjZBNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNosKUWiiBOC1jc9DS+uKLg6zT
KCOMVKLs/x3dT9NpVzz8lHmNIcsD7BiDciOYM1n7Hko+PxrDz3Kzu+4MOHtHaOzV
gIUS5oma91mkAraH+apSBxV7F3s42P3uU8kzUBN8dVzrgsj2w3+9YlRu3xeiQJWc
4c8pyzBBM4rN5xGSXrtgKDWI74+DrQ33g//aodQtQnrMT2AuyhB0SxevZv00QL3R
ztOibqu2GWOyo1joerHcy431Ib62zde0N0V7J69VCpteWStv7Zk5g+ITsOujnSg7
NAwt2AJXt//nzSuVxWwCouA727+zuuD7y89QH91kbBV8FRvr1k5evKJhj8dHAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3xWuLT/7ayfAhTgJH4h+tdLGakIwHwYDVR0j
BBgwFoAU3sqTwhcuUDvFyqoZdEENP6WdJFQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NDQ3OTFiMWYtNmRhOS00MDBkLThiMTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIx
NzJFNTAzQkM1Q0FBQTE5NzQ0MTBEM0ZBNTlEMjQ1NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9ERUNBOTNDMjE3MkU1MDNCQzVDQUFBMTk3NDQxMEQzRkE1OUQy
NDU0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNDQ3OTFiMWYtNmRhOS00MDBkLThi
MTQtOTkyYWFlNjM3NDZjLzAvREVDQTkzQzIxNzJFNTAzQkM1Q0FBQTE5NzQ0MTBE
M0ZBNTlEMjQ1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFCZGsp1t054cxXv5xXODJQyJjeEzbW7/BVZ
EYX0ZvKDd4d8LAIwT4XbcGOTGF3vs1nsTDtF/8m7mt86yDZj4KoD0UJXHzrSu860
YJjKxKSskcfjqu7SBNaxZQ5V0v3PjV8yKK9T1h8699q9mhgX33PCG/wQ/VuWNkJI
HGYazuzWIcAPw2xC5jLcUfgWX61fwPSBWFPJfZmimvIjUyB2PBNNFt4l4Ks1Rboz
LonQX68gjHxc7rUQL0w5v4VUrKeg3vyXsg8If74G5LBWOjgKJ2mVInzIFTVO1W4O
uThqAqGokQE6lV6W6W7HB7tuxDWTJomy6sOG3KeIYyrp4eYxMFY=
-----END CERTIFICATE-----
Generated at Sat Sep 26 00:32:06 2026 by rpki-client