
$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json)
Hash identifier: eN60e1+LAUZp8ubPTKLTeVa3GskfuE/SgfusCoFJMes=
Subject key identifier: 23:48:30:49:36:34:91:1F:F1:5A:E2:B4:16:12:D6:72:A4:0C:4F:02
Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Certificate serial: 0A16C5A5F24ABEA06816A83DC1CD4CB85975E4B1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
Manifest number: 0570
Signing time: Fri 17 Apr 2026 12:31:33 +0000
Manifest this update: Fri 17 Apr 2026 12:26:33 +0000
Manifest next update: Mon 20 Apr 2026 14:43:33 +0000
Files and hashes: 1: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: etbWGeSjVYbqYZZMPVvxJ5PNehJHsptjSIChJ05okfk=)
2: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: 8V7ZayO1EWtoGgR7suJnzq42sHcJ3tI9V47XAXCkvzA=)
3: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: rYgMn0qf5Si8F9ykekewfrOOH5qLGsXSWGvHlZ0POHo=)
4: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: +RTivfqLEwyAM8Z9a8tLky4YZfcHjdt6gpcJXVO2krI=)
5: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: wjmU/K5zRzNrMxAbA5/SGYFAg8fk9jDDkhO1NhPUnYI=)
6: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: fyFpznbRMF6ODJByEnZRGU+1l5nWWTK42b2kDTub5ng=)
7: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: 0qjl6ejKCXE+eF92NFpusciVm5OV6Kg83rjP6jAiQxg=)
8: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: uWwiOJltrZFVipiBhXuhkZCxDk18qXrBbeqh2tDeBHY=)
9: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: 9cT4iugSxv8GmMun4x7hly+W1FXP98Oz1aJbYUXbphk=)
10: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: /x0d/B7SH930zGuc3qy32lnZBzw3Tko/OpPt1flx/d4=)
11: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: 6nG++9Zfsyp00x723uMAP6ndpbIZ+69e5sHDGWiKNkk=)
12: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: UTSVYP8TuDxGN9w/aLP45n2ry9eglsw2DYtgDGOkId4=)
13: 3230332e3139302e3234302e302f32342d3234203d3e203234323131.roa (hash: f2/bnQrR/MLXFGa/5XG9w5LNWrb6RKk/0zpBaeZlPjA=)
14: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: 0OoYNlOze5a/9ttNe9sBQQbuE9yAtd7c5OJ+5KSdFxg=)
15: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 4jp4D5hGaWte1m9qxFKzFTLNIkMefUQAPu+RDi1XoZE=)
16: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: r90oooPXsPD/pnpllTc725GeFR2YL1gljw1b4rTRnLY=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 14:43:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:16:c5:a5:f2:4a:be:a0:68:16:a8:3d:c1:cd:4c:b8:59:75:e4:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B
Validity
Not Before: Apr 17 12:26:33 2026 GMT
Not After : Apr 20 14:43:33 2026 GMT
Subject: CN=234830493634911FF15AE2B41612D672A40C4F02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:df:48:4b:1d:09:e7:fe:6b:bf:0b:fa:e7:1b:
27:aa:40:0f:94:11:4e:df:b9:4c:b5:6e:fe:10:19:
3b:88:98:5a:26:6d:0a:11:5f:9a:30:83:8f:70:da:
c3:23:17:93:0c:ff:ed:d4:33:b3:7e:4b:b8:76:37:
78:1a:ea:5f:bb:5b:1e:d8:26:4d:4e:3d:b0:fa:85:
98:e1:dd:50:4b:35:ce:d1:6e:1e:02:35:a3:b3:98:
6e:db:41:6a:ed:4e:dc:0b:1a:e1:7f:f1:e8:b7:92:
3f:a3:26:e3:a5:49:33:6d:27:1a:c0:23:04:0b:01:
a5:42:51:7f:bc:3e:ac:54:03:75:8a:03:66:fe:0a:
5c:22:19:6f:ea:03:b4:49:55:23:f1:19:b3:8d:33:
9e:dd:9b:41:00:8f:29:d8:ab:92:68:2e:17:20:87:
4e:5b:60:11:35:9d:2e:a5:36:fb:f3:2a:aa:18:29:
53:da:16:ff:f9:f5:b5:10:11:f8:b5:61:c4:e1:f0:
35:03:5f:31:a1:8e:b3:b2:ab:1c:96:b5:ed:c9:53:
ae:45:e5:69:58:94:ef:57:e2:52:f3:5c:ca:d5:34:
d4:29:18:e3:24:50:25:4d:f2:0c:29:9e:cc:ab:34:
0f:24:c7:6f:8c:aa:34:68:25:74:46:8f:f6:db:b2:
e7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:48:30:49:36:34:91:1F:F1:5A:E2:B4:16:12:D6:72:A4:0C:4F:02
X509v3 Authority Key Identifier:
keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8f:ec:da:45:23:ee:5e:49:b8:13:cc:60:c7:81:a4:d6:f5:
db:8b:11:b9:22:4a:69:60:20:94:d7:da:89:43:46:7a:95:0d:
81:75:1b:0a:cd:87:d2:e6:8a:f9:ea:74:e6:44:d2:97:92:eb:
f3:9c:72:c4:fe:3d:3b:1e:ac:e8:a5:71:45:d0:f6:64:65:83:
8e:9d:b0:63:ca:84:e3:03:3e:29:7a:86:4a:c6:9b:a9:97:1c:
ee:d6:53:6e:be:13:8c:34:94:58:d1:0c:15:9d:6b:c8:5e:53:
1d:8f:22:22:ba:24:5d:3c:07:23:48:14:37:58:e9:91:50:c1:
c7:aa:9d:29:80:a4:43:2b:67:86:b1:9c:21:e0:d9:86:03:53:
fa:5a:22:fc:14:e7:f4:ce:db:9a:16:e8:01:12:b8:18:52:7a:
d8:67:29:82:28:02:99:79:d0:8f:0d:4b:fa:9e:df:92:a0:40:
df:f5:6e:d3:b4:b5:6b:c8:cb:78:81:88:a5:ff:b4:52:e1:2a:
6f:59:39:ed:15:7c:10:d8:92:44:7b:c8:9d:22:b3:78:01:43:
e2:58:99:9a:c1:4e:2e:90:84:5d:20:75:8a:3b:d4:a4:53:d7:
e6:55:4d:f4:e6:b1:87:cd:09:26:62:df:e5:d5:99:a8:75:bf:
39:c5:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:03 2026 by rpki-client