
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft
File: DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft (raw, json)
Hash identifier: 0PWmGZwhk8kz2mR43r7hneOhQ4nRNcVxqxd0xSd+B3s=
Subject key identifier: FA:F8:74:8F:19:12:3E:3B:6B:E5:11:11:5D:B0:5C:C8:F6:0E:56:D4
Authority key identifier: DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC
Certificate issuer: /CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC
Certificate serial: 31AE0C73DA3B7EA2FC8EF992491E97F20D1D49D9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft
Manifest number: CD
Signing time: Sat 03 Oct 2026 04:46:31 +0000
Manifest this update: Sat 03 Oct 2026 04:41:31 +0000
Manifest next update: Sun 04 Oct 2026 05:04:31 +0000
Files and hashes: 1: 3130332e3138392e302e302f32342d3234203d3e20313439383830.roa (hash: 8lXuq/DeovKiTSw+1KX+GVyNFO7DCMSlCXzJz4jkGN8=)
2: DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl (hash: zW2t+eT3xqJX6bP0KOn4A3mwCNh0mrPtaMzf+cgh3SQ=)
3: 3130332e3138392e312e302f32342d3234203d3e20313439383830.roa (hash: 8bw4CbbPmgFdSPOl3wk5Lxb6WEH9Yu6WI8ZoRW3ng/U=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl
rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 03 Oct 2026 21:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:ae:0c:73:da:3b:7e:a2:fc:8e:f9:92:49:1e:97:f2:0d:1d:49:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DEAC9203802C179789B24C5A3169AA7AA104ABFC
Validity
Not Before: Oct 3 04:41:31 2026 GMT
Not After : Oct 4 05:04:31 2026 GMT
Subject: CN=FAF8748F19123E3B6BE511115DB05CC8F60E56D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:ae:03:ae:76:74:1c:8e:f9:3d:88:4e:ea:
91:47:ba:3d:82:f0:dc:8f:e7:be:5a:df:58:34:23:
6d:72:b9:62:1b:7e:f2:a6:20:c9:be:dd:2e:16:ea:
5b:20:30:22:73:09:80:1b:9f:04:14:e7:ff:9f:bf:
94:02:7e:9d:73:47:66:0a:be:d9:b6:06:6d:b4:7c:
51:78:1c:f8:22:31:43:97:0e:e9:e2:eb:b6:f5:53:
4c:d9:88:fe:42:29:c4:5d:88:22:e9:ed:03:fd:4f:
8e:57:e1:cc:4c:96:ac:a8:17:93:f5:9e:8a:c7:b1:
46:fb:eb:23:f3:53:d7:60:40:6c:52:c8:f1:17:cf:
60:b9:55:ca:5f:d8:f2:ef:46:f2:54:5e:9d:6f:7e:
98:30:f3:7d:fb:3a:64:cb:60:c0:77:4b:c7:51:70:
a3:c4:99:86:0d:f3:79:dd:df:98:a1:7f:92:40:f0:
b3:a2:d6:6f:74:32:c1:70:20:0c:c8:c8:eb:fa:8c:
1c:52:9b:cf:26:be:21:01:f6:88:69:6c:90:5d:69:
d2:47:05:f6:e2:c8:1c:2f:3f:a4:dc:f6:eb:29:c1:
a9:f3:14:46:0e:14:fd:d9:16:90:a2:3e:f1:e6:7d:
bf:2b:69:55:0e:e9:77:82:62:48:37:37:78:bc:bf:
f7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F8:74:8F:19:12:3E:3B:6B:E5:11:11:5D:B0:5C:C8:F6:0E:56:D4
X509v3 Authority Key Identifier:
keyid:DE:AC:92:03:80:2C:17:97:89:B2:4C:5A:31:69:AA:7A:A1:04:AB:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DEAC9203802C179789B24C5A3169AA7AA104ABFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/DEAC9203802C179789B24C5A3169AA7AA104ABFC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:7c:c1:9c:cf:d5:30:fd:d3:e4:8b:63:9a:1f:1a:4d:86:
ac:b3:1a:19:ce:42:ef:bf:cd:42:35:4c:4e:09:9d:93:d6:8b:
31:01:6c:08:8b:dd:90:9a:b8:59:5d:72:7f:d0:aa:77:5b:ad:
6a:e3:8f:9a:2e:b7:83:f7:03:b3:43:a3:52:f9:ca:92:98:7a:
42:ff:be:bb:1b:a7:bd:85:c3:f6:09:80:b9:9f:45:d7:38:88:
3c:a0:31:16:e6:1a:1c:3a:07:0f:94:b1:39:7f:6d:aa:9b:33:
54:67:48:56:f1:ab:95:19:1e:2a:df:c0:78:e9:c6:03:63:5f:
da:41:7f:ff:07:6f:10:c1:94:98:aa:d2:5f:da:15:46:df:c9:
d3:98:5a:b5:3e:7a:92:c7:8f:33:06:b8:f3:dc:f3:9b:ab:57:
35:06:4a:c4:65:c3:e8:4a:54:81:ec:88:c6:c6:30:d4:56:50:
ef:24:79:e0:f2:4d:b5:19:b6:2a:6a:03:a3:44:de:d6:69:d0:
33:48:83:8b:0e:9d:43:8e:0e:55:ec:5e:87:5e:a2:12:cf:75:
56:ae:1b:34:b4:4a:d7:2c:0b:2a:8c:6a:e5:da:a3:99:21:ce:
d5:08:52:44:55:f7:04:67:d7:b4:37:f4:3b:1d:96:5b:94:18:
6d:98:13:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:46:34 2026 by rpki-client