$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json) Hash identifier: /yJAXQVOlpYKZ3xfHmQsJij7xrXwkIIg0jpL3Cu5w4Q= Subject key identifier: 5B:48:F0:28:9E:E7:77:9F:AA:58:69:89:0C:FC:9A:4C:81:E3:02:E3 Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C Certificate serial: 64CDDAA7A727054E8EADC54901EB2DAE61493921 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 18:28:54 +0000 Manifest this update: Wed 23 Sep 2026 18:23:54 +0000 Manifest next update: Thu 24 Sep 2026 19:30:54 +0000 Files and hashes: 1: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: OGZyWdG39AVx3aqAyN3Q5VADU+b+VWw6pGNLwVsr6iU=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:cd:da:a7:a7:27:05:4e:8e:ad:c5:49:01:eb:2d:ae:61:49:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C Validity Not Before: Sep 23 18:23:54 2026 GMT Not After : Sep 24 19:30:54 2026 GMT Subject: CN=5B48F0289EE7779FAA5869890CFC9A4C81E302E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7d:d1:86:e0:07:77:fa:bd:9b:dc:fb:f0:72: a7:6f:b9:61:0e:5a:9b:b2:61:36:51:cb:26:d6:44: 5c:b0:9f:c9:1b:27:8b:ed:4e:f0:85:5d:20:f3:16: ce:b8:b5:49:0c:b5:45:6f:36:80:de:b1:63:ed:94: 99:2b:52:17:f3:8e:72:96:02:eb:a6:57:d3:cc:b1: 2e:e6:2b:54:da:80:91:ba:cf:72:73:77:0d:85:06: 11:93:77:c9:22:9d:51:6e:30:1a:81:7d:23:0a:fb: 1d:ae:c3:71:6e:f5:44:ae:a7:00:32:7d:df:ba:10: 14:8d:12:24:61:54:59:12:69:6f:51:b3:ec:e0:9d: 4d:b9:95:c7:72:33:27:07:e3:a1:c4:4c:08:4c:87: c3:df:bb:89:db:dc:ff:d8:16:dd:5a:49:da:45:d9: 7b:46:87:16:20:7e:0a:cf:80:b8:16:fa:a5:fc:7b: 50:c8:50:4b:1a:43:f2:a2:a3:56:f1:33:03:c5:79: 3d:0d:98:88:d7:31:ec:93:d5:86:c0:38:96:77:ee: 8c:28:a5:6a:4a:e7:c9:cd:7a:c2:88:77:56:0f:bf: 39:07:d4:45:0b:66:b4:a7:bd:0e:1a:44:47:88:e2: 8a:af:9b:54:b0:a2:70:31:28:f6:34:ac:13:21:bc: 6a:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:48:F0:28:9E:E7:77:9F:AA:58:69:89:0C:FC:9A:4C:81:E3:02:E3 X509v3 Authority Key Identifier: keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:88:63:dc:58:ce:90:5c:4c:ee:c0:ea:6e:ea:25:b7:eb:78: ee:2a:76:85:27:0d:4d:64:38:00:a3:2b:2f:39:5e:00:08:73: d3:a4:ea:bc:2b:5e:fc:48:d3:a1:4d:9d:b0:1d:8a:87:91:83: 33:27:2f:a7:29:4e:52:12:80:67:9d:03:0a:17:b6:e2:04:93: 08:bf:33:fe:d6:d6:1f:dc:13:ca:d7:30:4c:d0:46:d6:f9:b8: 08:18:c0:fc:c0:fa:de:e1:72:9f:ce:8f:55:a3:64:69:62:40: 35:a9:5b:40:89:9d:7d:38:b4:5d:ee:48:62:21:7d:4d:81:5c: cc:2e:47:25:62:37:71:59:d4:a8:78:47:7d:91:e8:db:a4:e2: 42:51:32:3f:fe:e2:6c:5e:3e:e6:a0:9b:66:b9:74:84:5e:ce: b1:21:a2:f4:99:70:44:c8:f6:ef:f9:d1:8e:76:9e:58:e7:c7: 7d:e6:d3:4a:b7:ae:19:b3:c5:e4:0e:5b:e8:d5:b8:3e:7d:24: 05:35:17:5d:78:5e:24:9a:7a:bc:c2:d6:97:58:fc:f5:7c:a4: 74:21:cc:f8:ef:cc:01:b6:49:31:02:46:cf:35:4b:31:89:5d: 06:b4:3c:92:a7:81:2b:61:6d:70:47:e4:b8:e1:ea:60:88:fd: 7e:94:49:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZM3ap6cnBU6OrcVJAestrmFJOSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5 NEU0MjgxQzAeFw0yNjA5MjMxODIzNTRaFw0yNjA5MjQxOTMwNTRaMDMxMTAvBgNV BAMTKDVCNDhGMDI4OUVFNzc3OUZBQTU4Njk4OTBDRkM5QTRDODFFMzAyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCefdGG4Ad3+r2b3PvwcqdvuWEO WpuyYTZRyybWRFywn8kbJ4vtTvCFXSDzFs64tUkMtUVvNoDesWPtlJkrUhfzjnKW AuumV9PMsS7mK1TagJG6z3Jzdw2FBhGTd8kinVFuMBqBfSMK+x2uw3Fu9USupwAy fd+6EBSNEiRhVFkSaW9Rs+zgnU25lcdyMycH46HETAhMh8Pfu4nb3P/YFt1aSdpF 2XtGhxYgfgrPgLgW+qX8e1DIUEsaQ/Kio1bxMwPFeT0NmIjXMeyT1YbAOJZ37owo pWpK58nNesKId1YPvzkH1EULZrSnvQ4aREeI4oqvm1SwonAxKPY0rBMhvGrvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW0jwKJ7nd5+qWGmJDPyaTIHjAuMwHwYDVR0j BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0 RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+IY9xYzpBcTO7A6m7qJbfreO4qdoUnDU1k OACjKy85XgAIc9Ok6rwrXvxI06FNnbAdioeRgzMnL6cpTlISgGedAwoXtuIEkwi/ M/7W1h/cE8rXMEzQRtb5uAgYwPzA+t7hcp/Oj1WjZGliQDWpW0CJnX04tF3uSGIh fU2BXMwuRyViN3FZ1Kh4R32R6Nuk4kJRMj/+4mxePuagm2a5dIRezrEhovSZcETI 9u/50Y52nljnx33m00q3rhmzxeQOW+jVuD59JAU1F114XiSaerzC1pdY/PV8pHQh zPjvzAG2STECRs81SzGJXQa0PJKngSthbXBH5Ljh6mCI/X6USV0= -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:09 2026 by rpki-client