
$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json)
Hash identifier: EQRX7KpQ6fvzDnN97H0c8VqSi0ut+2J/yFLFqX7Hg90=
Subject key identifier: FC:B9:29:1A:7D:AC:66:C9:AB:5D:56:4C:61:01:71:8E:E7:B1:A3:8B
Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Certificate serial: 16F26955C55BF666B5C2EA8026A66F7F77DF12AD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 15:09:49 +0000
Manifest this update: Tue 12 May 2026 15:04:49 +0000
Manifest next update: Wed 13 May 2026 16:00:49 +0000
Files and hashes: 1: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: OcyJkYSpl9WdkOKasOgfxAw+/DQ6lczIcCWjhhMWZbc=)
2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:f2:69:55:c5:5b:f6:66:b5:c2:ea:80:26:a6:6f:7f:77:df:12:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C
Validity
Not Before: May 12 15:04:49 2026 GMT
Not After : May 13 16:00:49 2026 GMT
Subject: CN=FCB9291A7DAC66C9AB5D564C6101718EE7B1A38B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:53:cc:1f:0a:b9:b2:11:d8:da:36:de:71:a4:
7a:c9:63:24:d4:07:7e:15:ac:f6:72:c4:bb:7e:4c:
17:d1:bd:d9:e5:1e:83:dc:79:b7:12:e1:ce:5e:28:
74:10:9d:a4:44:9e:74:fa:18:b4:38:8f:7b:44:e5:
c1:14:9d:7d:0a:40:2f:0a:95:4c:05:bf:b2:10:d5:
57:7b:af:8e:5f:11:b9:a9:9c:11:4e:5c:c5:2e:0d:
9a:8e:66:86:91:95:74:60:0f:eb:98:74:85:56:22:
40:c6:e0:8b:38:bd:fe:5c:5c:eb:ca:d5:df:a1:24:
3f:70:79:46:a6:90:16:4b:6f:a1:93:60:c7:15:b5:
a9:82:02:0d:12:a5:0f:64:2e:10:5a:bc:b6:f3:4d:
7b:3a:aa:74:f0:d5:8d:4e:02:3d:ca:60:8a:d3:0f:
1c:bd:63:82:7c:ed:82:4e:60:aa:e7:07:bf:f8:0e:
4b:5d:9e:d6:76:f8:71:87:c0:ba:1d:26:a8:96:91:
cb:cb:cf:20:1c:0f:1d:6b:25:87:31:bd:7c:39:8e:
5c:17:58:04:56:56:a8:1b:b9:5f:7a:fc:27:58:37:
64:3b:bb:76:7b:cb:f3:b4:c2:27:f1:99:ad:ea:86:
b1:94:d9:bf:23:ab:f6:73:dd:c7:93:d7:f1:18:7f:
4d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B9:29:1A:7D:AC:66:C9:AB:5D:56:4C:61:01:71:8E:E7:B1:A3:8B
X509v3 Authority Key Identifier:
keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:9b:97:d4:33:4b:cf:44:f8:fc:bb:34:f9:4e:69:80:93:7e:
66:bc:fe:46:8b:87:eb:aa:01:72:92:ea:ba:6b:e3:9c:cd:ea:
60:09:41:4b:20:28:a0:94:1c:6b:be:af:5f:b6:72:01:78:61:
1f:99:68:c7:2d:e5:16:7e:1b:7e:e7:cc:e7:d2:cb:7b:4e:d2:
46:29:16:85:14:ed:68:f1:3f:41:a4:b1:ff:8a:72:3d:b0:26:
ab:44:ab:0f:8d:17:4b:20:2b:6b:74:6a:6f:a7:b8:e9:ec:bb:
26:f2:57:90:c1:19:00:9e:7e:dc:6e:25:9e:e3:ec:5b:72:81:
32:6e:16:10:c6:8e:65:a2:0f:fc:9a:03:73:30:52:c6:c5:cc:
c2:0b:62:d1:73:17:54:48:3c:df:1d:28:0c:8d:13:dc:ef:53:
5f:bc:7a:b6:64:06:15:db:bb:7a:3f:6d:17:99:43:67:09:bf:
e8:2f:fe:57:01:9b:66:1f:eb:6b:10:c7:15:c3:d9:92:33:17:
63:00:48:18:56:c5:d6:ca:80:0a:a1:ff:57:f1:3d:9f:50:44:
2d:fa:93:1d:fe:b6:51:43:d3:fe:06:78:da:8d:e4:09:f0:7c:
58:58:b6:08:81:d6:a7:a2:3e:d3:0b:06:2c:04:85:99:a8:13:
66:42:0a:2e
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFvJpVcVb9ma1wuqAJqZvf3ffEq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5
NEU0MjgxQzAeFw0yNjA1MTIxNTA0NDlaFw0yNjA1MTMxNjAwNDlaMDMxMTAvBgNV
BAMTKEZDQjkyOTFBN0RBQzY2QzlBQjVENTY0QzYxMDE3MThFRTdCMUEzOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLU8wfCrmyEdjaNt5xpHrJYyTU
B34VrPZyxLt+TBfRvdnlHoPcebcS4c5eKHQQnaREnnT6GLQ4j3tE5cEUnX0KQC8K
lUwFv7IQ1Vd7r45fEbmpnBFOXMUuDZqOZoaRlXRgD+uYdIVWIkDG4Is4vf5cXOvK
1d+hJD9weUamkBZLb6GTYMcVtamCAg0SpQ9kLhBavLbzTXs6qnTw1Y1OAj3KYIrT
Dxy9Y4J87YJOYKrnB7/4DktdntZ2+HGHwLodJqiWkcvLzyAcDx1rJYcxvXw5jlwX
WARWVqgbuV96/CdYN2Q7u3Z7y/O0wifxma3qhrGU2b8jq/Zz3ceT1/EYf02TAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU/LkpGn2sZsmrXVZMYQFxjuexo4swHwYDVR0j
BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0
RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy
ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk
MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw
QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAEubl9QzS89E+Py7NPlOaYCTfma8/kaLh+uq
AXKS6rpr45zN6mAJQUsgKKCUHGu+r1+2cgF4YR+ZaMct5RZ+G37nzOfSy3tO0kYp
FoUU7WjxP0Gksf+Kcj2wJqtEqw+NF0sgK2t0am+nuOnsuybyV5DBGQCeftxuJZ7j
7FtygTJuFhDGjmWiD/yaA3MwUsbFzMILYtFzF1RIPN8dKAyNE9zvU1+8erZkBhXb
u3o/bReZQ2cJv+gv/lcBm2Yf62sQxxXD2ZIzF2MASBhWxdbKgAqh/1fxPZ9QRC36
kx3+tlFD0/4GeNqN5AnwfFhYtgiB1qeiPtMLBiwEhZmoE2ZCCi4=
-----END CERTIFICATE-----
Generated at Tue May 12 22:19:44 2026 by rpki-client