
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
File: DA20692305010D31E154AE60F41C822DD2D6CECC.mft (raw, json)
Hash identifier: mQow6ioQq3p+7V4jqvMtz3MM8PLkePqsgd8Xk5x79A0=
Subject key identifier: C5:C1:96:4A:DF:D5:2E:BB:16:96:4C:5C:13:1D:93:BD:E2:27:F6:F0
Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
Certificate issuer: /CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Certificate serial: 0ADAC98AF478F096DE2B56C10C14D54E9E52D95A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 20:47:56 +0000
Manifest this update: Tue 12 May 2026 20:42:56 +0000
Manifest next update: Wed 13 May 2026 21:41:56 +0000
Files and hashes: 1: DA20692305010D31E154AE60F41C822DD2D6CECC.crl (hash: bpVdyinoWQofXmXvYih4JipKtVAbur7DCJ0qUaEgZvE=)
2: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: agruC/We/sLJTlhbwSnl6x4MYxmzcCS3rf7w9cYqIto=)
3: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: aQMTJYE8nMh07FLcvIjiQtwhdByf/7nyD/zkKRD7jaM=)
4: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: o8gOkqGVnHiHCblL7s8ySrSdxhRCwAVnszXZYwnxcmY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:47:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:da:c9:8a:f4:78:f0:96:de:2b:56:c1:0c:14:d5:4e:9e:52:d9:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Validity
Not Before: May 12 20:42:56 2026 GMT
Not After : May 13 21:41:56 2026 GMT
Subject: CN=C5C1964ADFD52EBB16964C5C131D93BDE227F6F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b7:31:7e:c9:d4:8b:26:84:d9:67:6f:e4:ba:
5b:6f:89:44:c0:ad:3a:6c:08:ab:77:65:ad:24:5a:
e4:f0:24:b1:ce:97:c3:dd:8b:70:d0:de:dc:58:41:
c1:83:11:07:82:8d:c9:70:27:42:fc:2f:bf:1e:44:
ac:86:68:40:d7:d7:5b:22:08:ff:b8:4d:23:eb:d2:
55:5c:00:29:39:45:d1:38:25:25:40:c7:3c:3e:b2:
38:fd:2d:ce:00:c2:ff:6e:fe:29:34:8d:d7:a1:29:
72:b7:d7:bf:e0:12:cc:af:cb:95:c3:8a:d9:c9:86:
33:09:24:f0:6d:cd:c8:44:62:7a:6d:c4:32:52:3d:
2a:02:60:68:f1:c9:cd:11:98:83:84:25:72:86:c4:
1f:ba:cd:9e:51:ff:a6:13:c7:74:23:7c:b5:10:3d:
40:2e:77:6e:a5:99:8a:65:a2:6e:ac:66:69:8b:5c:
c6:d4:87:5e:78:ed:5e:8a:34:24:61:81:1d:08:b4:
ba:0c:d1:7e:74:88:ce:80:c1:b4:f4:20:8e:dc:4e:
2e:92:4c:9a:7a:a2:54:fc:56:d6:54:8c:98:9a:8b:
37:04:9a:08:8e:96:f2:3e:43:37:6e:3b:65:da:73:
90:88:0f:64:32:bf:ff:2a:2f:94:e7:94:3e:ad:03:
34:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C1:96:4A:DF:D5:2E:BB:16:96:4C:5C:13:1D:93:BD:E2:27:F6:F0
X509v3 Authority Key Identifier:
keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:51:e8:3c:9e:48:6a:5b:08:c0:ae:56:11:1e:6d:0b:9b:70:
2e:ad:3f:64:83:e3:11:8c:01:0b:7b:88:68:ee:b9:2d:3b:bd:
18:f6:b2:85:fb:f6:74:f5:11:2d:c2:c6:74:9d:dc:98:e5:40:
30:d4:e7:22:68:d9:1b:ab:a7:77:73:36:02:43:b7:f6:19:4c:
aa:d3:22:b8:9c:37:e3:03:9b:90:88:38:e8:d3:1d:29:4b:d1:
e5:bd:ba:b2:7c:e3:24:5a:a3:8f:f7:3c:42:19:ec:92:07:ad:
45:ce:de:f6:bb:ab:c8:6f:70:5b:98:cf:c4:3a:00:88:ca:b4:
e3:ff:be:92:9a:14:ab:2b:6c:6e:86:45:f3:31:91:51:ab:86:
0b:a9:64:ff:8f:41:57:89:d8:ab:26:c6:c3:90:4a:af:b7:a5:
5d:72:5d:2a:9f:22:20:f3:9a:17:94:29:92:35:28:5d:ea:83:
af:2e:9a:69:fb:e1:90:05:5f:84:29:e4:0d:9c:c3:f0:bd:59:
03:48:dc:01:24:73:69:b5:e3:a8:31:ac:2b:2e:15:43:38:b9:
e7:e3:4a:1c:40:14:d4:91:71:bc:e2:1a:35:53:ed:6f:ef:44:
0c:ce:d7:f3:3a:be:ec:20:9f:be:05:5f:30:09:ad:8d:8d:b3:
c0:56:21:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:20:43 2026 by rpki-client