
$ rpki-client -vvf rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
File: DA20692305010D31E154AE60F41C822DD2D6CECC.mft (raw, json)
Hash identifier: Xlk0WOQmqU+hPdVEk67nYXvwERpjnpZh+2ZhiEECXBo=
Subject key identifier: A5:5D:A7:D7:52:38:DC:65:18:74:54:CA:35:87:1E:E3:C3:8F:B2:29
Authority key identifier: DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
Certificate issuer: /CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Certificate serial: 38AE12B05BBDB4F99B869466D54A1F26C73AF4C4
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 04:07:45 +0000
Manifest this update: Wed 17 Jun 2026 04:02:45 +0000
Manifest next update: Thu 18 Jun 2026 04:40:45 +0000
Files and hashes: 1: 3135372e36362e34302e302f32342d3234203d3e20313532373934.roa (hash: aQMTJYE8nMh07FLcvIjiQtwhdByf/7nyD/zkKRD7jaM=)
2: 3135372e36362e34302e302f32332d3233203d3e20313532373934.roa (hash: o8gOkqGVnHiHCblL7s8ySrSdxhRCwAVnszXZYwnxcmY=)
3: 3135372e36362e34312e302f32342d3234203d3e20313532373934.roa (hash: agruC/We/sLJTlhbwSnl6x4MYxmzcCS3rf7w9cYqIto=)
4: DA20692305010D31E154AE60F41C822DD2D6CECC.crl (hash: uyqcvbKWv3j6G/9VZ9i4Rs3DvQMygiogmi0/eRNjwd0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 04:40:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:ae:12:b0:5b:bd:b4:f9:9b:86:94:66:d5:4a:1f:26:c7:3a:f4:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DA20692305010D31E154AE60F41C822DD2D6CECC
Validity
Not Before: Jun 17 04:02:45 2026 GMT
Not After : Jun 18 04:40:45 2026 GMT
Subject: CN=A55DA7D75238DC65187454CA35871EE3C38FB229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fd:71:25:6f:da:8a:45:cd:ff:6a:22:5b:82:
ca:b5:d8:46:f5:7f:98:ff:7f:56:91:4e:0c:53:28:
b9:e1:73:df:c3:8b:9a:0a:8e:c9:4f:62:90:3e:9a:
b2:db:f4:aa:5b:19:86:01:0b:0a:9e:82:df:56:5f:
5d:a5:d9:49:43:b2:0e:4b:60:cd:14:63:e3:78:01:
63:ac:70:a2:4d:aa:16:df:34:58:1e:a7:75:1c:81:
95:24:25:33:87:d4:53:90:3a:97:93:3a:d9:da:90:
d8:f8:b8:a7:ac:7c:29:17:fc:4a:84:60:d1:fa:f4:
d8:60:44:65:e4:b7:c4:d5:95:17:e5:6d:71:17:ba:
f6:a6:6b:3b:66:9c:a1:2f:30:a9:9e:80:fd:62:9b:
68:f3:70:f6:56:d6:f9:bc:e0:c7:5d:8e:17:d4:ab:
7b:ce:9c:70:79:f7:c7:72:f6:e6:4d:cf:77:35:99:
cf:43:6e:7e:c1:24:4d:93:b8:6c:97:55:af:71:8d:
27:7c:68:39:53:c8:be:00:61:a0:c0:b9:6e:97:cd:
9b:a9:fb:6b:ea:03:80:c2:07:58:7d:87:2b:29:7f:
58:54:c5:b0:39:a8:f3:8e:bd:d8:66:ab:d6:2e:4b:
02:e1:e1:2f:ec:14:9e:c9:8a:ad:4a:5f:49:ac:1b:
98:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5D:A7:D7:52:38:DC:65:18:74:54:CA:35:87:1E:E3:C3:8F:B2:29
X509v3 Authority Key Identifier:
keyid:DA:20:69:23:05:01:0D:31:E1:54:AE:60:F4:1C:82:2D:D2:D6:CE:CC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/DA20692305010D31E154AE60F41C822DD2D6CECC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/77f2c190-30f5-4f19-bfca-0b987a52fd55/0/DA20692305010D31E154AE60F41C822DD2D6CECC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1a:b1:fd:a0:86:bb:3c:1b:86:e8:0d:0e:0a:6d:80:a4:fb:
18:f0:6c:ac:10:de:4c:28:b4:9b:e2:99:c0:0c:ab:c8:a1:f5:
c3:4f:f7:f7:09:15:b8:2d:63:6d:c3:2f:f2:9c:db:43:01:40:
26:b7:68:79:59:4f:1d:f3:9e:2c:aa:7a:a5:a9:57:e4:21:94:
f1:4f:40:e6:36:85:12:a6:6e:68:1a:a1:c3:a5:7e:0b:2f:58:
42:4d:b4:dc:33:33:2a:2a:ae:33:d0:96:28:83:e9:38:db:0d:
71:fc:f7:69:42:73:6a:a0:c3:1b:94:30:dc:44:a2:b5:17:00:
c3:a6:98:cb:64:6b:c7:2b:b7:91:ee:39:25:4b:e1:aa:7e:02:
c8:f8:f3:db:3c:06:1d:d5:bd:26:9e:17:25:81:e8:90:39:c4:
57:69:57:8b:7f:f6:9d:06:9b:11:af:d1:5c:58:3a:ed:43:61:
0f:31:77:b1:27:fe:de:17:3b:64:b9:ef:e7:eb:7b:e4:40:a7:
ca:f9:9c:13:97:89:a6:b3:17:4e:5a:c5:85:b8:61:3d:cd:12:
ca:06:a0:22:7f:b2:2d:27:da:e4:d3:fe:a4:81:5d:ae:97:d1:
40:a6:3f:f5:f0:d6:fe:53:fe:b8:5b:56:97:2b:89:1b:55:c5:
48:21:29:3c
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOK4SsFu9tPmbhpRm1UofJsc69MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEyMDY5MjMwNTAxMEQzMUUxNTRBRTYwRjQxQzgyMkRE
MkQ2Q0VDQzAeFw0yNjA2MTcwNDAyNDVaFw0yNjA2MTgwNDQwNDVaMDMxMTAvBgNV
BAMTKEE1NURBN0Q3NTIzOERDNjUxODc0NTRDQTM1ODcxRUUzQzM4RkIyMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3/XElb9qKRc3/aiJbgsq12Eb1
f5j/f1aRTgxTKLnhc9/Di5oKjslPYpA+mrLb9KpbGYYBCwqegt9WX12l2UlDsg5L
YM0UY+N4AWOscKJNqhbfNFgep3UcgZUkJTOH1FOQOpeTOtnakNj4uKesfCkX/EqE
YNH69NhgRGXkt8TVlRflbXEXuvamaztmnKEvMKmegP1im2jzcPZW1vm84MddjhfU
q3vOnHB598dy9uZNz3c1mc9Dbn7BJE2TuGyXVa9xjSd8aDlTyL4AYaDAuW6XzZup
+2vqA4DCB1h9hyspf1hUxbA5qPOOvdhmq9YuSwLh4S/sFJ7Jiq1KX0msG5hvAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUpV2n11I43GUYdFTKNYce48OPsikwHwYDVR0j
BBgwFoAU2iBpIwUBDTHhVK5g9ByCLdLWzswwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NzdmMmMxOTAtMzBmNS00ZjE5LWJmY2EtMGI5ODdhNTJmZDU1LzAvREEyMDY5MjMw
NTAxMEQzMUUxNTRBRTYwRjQxQzgyMkREMkQ2Q0VDQy5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC9EQTIwNjkyMzA1MDEwRDMxRTE1NEFFNjBGNDFDODIyREQyRDZD
RUNDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzdmMmMxOTAtMzBmNS00ZjE5LWJm
Y2EtMGI5ODdhNTJmZDU1LzAvREEyMDY5MjMwNTAxMEQzMUUxNTRBRTYwRjQxQzgy
MkREMkQ2Q0VDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAF0asf2ghrs8G4boDQ4KbYCk+xjwbKwQ3kwo
tJvimcAMq8ih9cNP9/cJFbgtY23DL/Kc20MBQCa3aHlZTx3zniyqeqWpV+QhlPFP
QOY2hRKmbmgaocOlfgsvWEJNtNwzMyoqrjPQliiD6TjbDXH892lCc2qgwxuUMNxE
orUXAMOmmMtka8crt5HuOSVL4ap+Asj489s8Bh3VvSaeFyWB6JA5xFdpV4t/9p0G
mxGv0VxYOu1DYQ8xd7En/t4XO2S57+fre+RAp8r5nBOXiaazF05axYW4YT3NEsoG
oCJ/si0n2uTT/qSBXa6X0UCmP/Xw1v5T/rhbVpcriRtVxUghKTw=
-----END CERTIFICATE-----
Generated at Wed Jun 17 12:24:57 2026 by rpki-client