
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
File: DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft (raw, json)
Hash identifier: XUB43McfikUwDYb91FP//x+2CS5UOyGweqNPj9Qb7W8=
Subject key identifier: C9:A7:97:DD:90:65:F6:42:AC:67:F2:50:20:FB:D9:0F:EC:FA:76:F3
Authority key identifier: DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
Certificate issuer: /CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Certificate serial: 38B366F2E1E1CCD5339D02632104515DEAF8981A
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 00:35:49 +0000
Manifest this update: Fri 25 Sep 2026 00:30:49 +0000
Manifest next update: Sat 26 Sep 2026 01:31:49 +0000
Files and hashes: 1: 3130332e35342e39342e302f32332d3234203d3e20313333383233.roa (hash: 8k8GBdwmmLxxYbQl8hVSFJB11CCZhdmJeHDaxUryxLk=)
2: 3130332e3130342e3133342e302f32342d3234203d3e20313333383233.roa (hash: qduWQnePlEvJvVDz1+kCY3smvF204bP3VzAzFq1FCjU=)
3: DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl (hash: 9vPATzqHyw5G3jcWZVoeW2MFp6GfXkIcHj/OX5l0ggU=)
4: 34352e3131362e3135382e302f32342d3234203d3e20313333383233.roa (hash: Z28vh0NgnW+1aBrpmxYKdmq+pclBZTpS+9KNoM7trNc=)
5: 323430373a646630303a3a2f34382d3438203d3e203338353136.roa (hash: CzpR2y4E7Zo1QOZpSNmtByz2jwVCHD2bth2Q1Yf3tqo=)
6: 3130332e35342e39342e302f32342d3234203d3e20313333383233.roa (hash: 7Wj0at79mxr4FCZ9Hpd3BT3x3HOvoiIhi2Pmm/6ArH0=)
7: 3130332e3130342e3133342e302f32332d3234203d3e20313333383233.roa (hash: XiipUAxKhZpqExkZmaytbPwvFyOgqAUmnU1lD7TzPNc=)
8: 34352e3131362e3135382e302f32332d3234203d3e20313333383233.roa (hash: nQrRB76uG72Hh2LxuDnyKLwPlyh9HS7iYL8/pD1Mrfc=)
9: 34352e3131362e3135392e302f32342d3234203d3e20313333383233.roa (hash: ZItAPK09I34Sz0y4vN9sPudl3u7/pYoXuiySE0aWVzw=)
10: 3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (hash: uaiodumf3rhT3ZNuFDvfCf7glzd9Pb2iPFH1iPXAwiE=)
11: 3130332e3130342e3133352e302f32342d3234203d3e20313333383233.roa (hash: XqdfOz80MkiP/2rgQCkxAmQyHWpujvHUwXiMakIJlMg=)
12: 34352e3131362e3135362e302f32342d3234203d3e20313333383233.roa (hash: L8m06v4lypbJFkBBcAeCl2HHpHbjPmRx4afU7zHtGbs=)
13: 3130332e3130342e3133322e302f32342d3234203d3e20313333383233.roa (hash: QdU3eW1GRvmoS7DD//Q44me2q9Bc9Ncs1A4bKejDmys=)
14: 323430373a646630303a313a3a2f34382d3438203d3e20313333383233.roa (hash: +Eo6/X263G5Flhn1qAu9gyHoX0t17OxYpS6itJBlqnw=)
15: 3130332e3130342e3133322e302f32332d3234203d3e20313333383233.roa (hash: rV3JW0a+XbuONn+Xn+83PSsiUiDGSvLcSPYENSKK998=)
16: 34352e3131362e3135372e302f32342d3234203d3e20313333383233.roa (hash: BUcB/wlQeYt875aEAFYXrzIUGveCpyEGOJqyrP1PQAg=)
17: 34352e3131362e3135362e302f32332d3234203d3e20313333383233.roa (hash: 3HSpbhFt3jsyDHbIYos3Q0wv5WIPJhLhWYlxaO7VL98=)
18: 3130332e35342e39352e302f32342d3234203d3e20313333383233.roa (hash: hMe+orbuTN2RzbgcWeM+BwpjsEbYn/EerG23yS+Aa0g=)
19: 3130332e3130342e3133332e302f32342d3234203d3e20313333383233.roa (hash: yk8SbJDjIgwpR1q5UUTthk+GnMv3YbsIc4PcYf72L0s=)
20: 3130332e35342e39322e302f32342d3234203d3e203338353136.roa (hash: JMnD/FckAq7CGqxhM7d0QezPRZyfqhzkSaCB6jbBlL4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 01:31:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:b3:66:f2:e1:e1:cc:d5:33:9d:02:63:21:04:51:5d:ea:f8:98:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DECA93C2172E503BC5CAAA1974410D3FA59D2454
Validity
Not Before: Sep 25 00:30:49 2026 GMT
Not After : Sep 26 01:31:49 2026 GMT
Subject: CN=C9A797DD9065F642AC67F25020FBD90FECFA76F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:2d:fd:84:95:36:db:c9:28:fb:12:4b:d0:
d0:67:e2:f6:19:64:04:c9:d4:9d:e0:9a:b3:43:37:
67:98:6b:09:15:5a:0b:1a:f4:7e:71:7b:f3:18:2e:
9d:8b:a2:ff:e4:28:37:93:80:b3:8e:94:fa:79:01:
91:f6:46:c1:42:a0:eb:3e:fa:b9:a9:44:42:3e:c0:
a9:29:59:df:aa:5e:c2:cc:f2:1f:27:21:c4:78:95:
a0:db:c3:a2:f7:bd:67:c0:a9:9d:dc:b2:be:36:32:
1f:1f:04:7c:5f:18:80:2f:6f:fc:70:d0:ef:42:c4:
39:a9:4f:7c:82:f7:ec:4d:57:7e:86:78:bd:b7:79:
d6:ec:eb:33:84:8a:f6:47:6d:7b:ca:76:43:fd:0c:
e3:8d:03:e2:bd:b9:eb:98:c5:8f:24:15:53:01:50:
9d:76:2f:00:d9:35:71:63:39:a3:7e:ae:d9:b8:02:
c9:be:f9:81:ba:f4:30:1f:b0:e7:b7:c0:be:0d:27:
0c:ec:b0:2e:22:4d:57:bd:11:6b:57:c6:5a:45:15:
73:cd:c3:c1:ad:59:17:a6:cf:d5:4d:61:01:85:aa:
1a:fd:5b:2e:54:a0:c2:69:39:9c:23:44:8d:34:11:
1f:b8:e3:9c:05:95:fb:b3:d0:33:ad:d8:b4:23:56:
58:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:A7:97:DD:90:65:F6:42:AC:67:F2:50:20:FB:D9:0F:EC:FA:76:F3
X509v3 Authority Key Identifier:
keyid:DE:CA:93:C2:17:2E:50:3B:C5:CA:AA:19:74:41:0D:3F:A5:9D:24:54
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DECA93C2172E503BC5CAAA1974410D3FA59D2454.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/DECA93C2172E503BC5CAAA1974410D3FA59D2454.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:36:23:8f:4e:e7:62:01:44:7d:b2:0c:a7:42:d7:3a:b8:2e:
86:b0:43:15:58:5b:21:1e:ae:bc:a0:c2:0f:5e:a2:a0:48:8f:
51:49:82:7c:09:0e:dc:43:bc:a3:ca:ad:f5:15:69:03:25:d8:
c2:ed:e0:90:fd:18:cf:8a:2a:8e:45:2a:b6:0c:46:e8:52:ab:
6d:d1:32:f9:54:c2:a0:b2:7a:ec:47:16:51:81:e2:16:63:83:
a2:cd:af:f4:3c:de:ad:a5:8d:4d:cb:73:7a:96:ca:22:27:2b:
d1:17:6c:2e:5d:4c:35:e4:29:a9:e1:4e:f3:cd:ee:04:b1:d6:
df:01:84:1d:f5:1f:2f:3e:74:56:be:8e:15:f8:96:77:9f:47:
b3:bd:ea:99:cf:fc:bc:2d:4a:46:ef:0a:fa:ad:22:6b:ae:87:
6e:e0:86:a3:b1:6b:f4:fd:e6:cf:7c:d6:53:34:33:79:7b:20:
8f:fa:66:70:da:00:b7:e2:8b:d8:5a:58:27:76:ae:eb:69:a1:
45:28:31:4a:d0:83:9f:7a:75:4b:b2:13:3b:d3:a8:41:f3:ba:
bc:6a:54:e4:55:52:c8:a3:1e:38:33:fe:3f:56:56:bd:c2:b3:
16:6f:b9:45:bc:d4:ec:02:55:70:b2:d3:cd:91:cd:77:94:bb:
85:ef:a7:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:35:41 2026 by rpki-client