$ rpki-client -vvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json) Hash identifier: onozkK/LPrLGnz1QwjulQ5nK9hvJE2RU8KXJfyOqsYM= Subject key identifier: 84:B9:CF:40:D9:AF:AF:11:B3:8F:E2:AE:C2:40:07:2F:29:E4:1A:39 Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C Certificate serial: 446B125870DE1D88BF6C94B4697C7DF79E25E1F1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft Manifest number: 3C Signing time: Mon 15 Jun 2026 08:36:49 +0000 Manifest this update: Mon 15 Jun 2026 08:31:49 +0000 Manifest next update: Tue 16 Jun 2026 10:38:49 +0000 Files and hashes: 1: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=) 2: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: Oyq1lHK9bYnPItBKosBdY812wkxOlSg0+7YuZ8P7tm8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:6b:12:58:70:de:1d:88:bf:6c:94:b4:69:7c:7d:f7:9e:25:e1:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C Validity Not Before: Jun 15 08:31:49 2026 GMT Not After : Jun 16 10:38:49 2026 GMT Subject: CN=84B9CF40D9AFAF11B38FE2AEC240072F29E41A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ee:e2:58:45:74:5f:2c:8c:f2:1e:52:84:6c: 93:e1:01:97:d7:7c:44:30:dd:21:93:2f:42:bc:ce: 04:29:7c:1b:e9:c2:51:20:ea:94:ba:83:b3:be:57: 3f:dc:f3:da:31:b1:a8:c2:8f:0e:d3:65:b3:6f:76: dc:81:de:61:61:71:2b:7e:19:fc:e3:48:90:7a:18: da:73:3d:9c:2e:1e:b4:05:86:e0:7c:90:ed:9b:38: c4:c6:16:24:2b:64:9a:18:0e:69:b3:1b:e6:d1:d4: e3:a6:6b:af:d9:e8:ce:b2:c1:00:fb:21:69:e5:ff: e0:ea:ee:c3:2c:6f:b6:83:74:33:0a:98:ca:8c:8d: bb:44:01:dc:a7:cd:93:66:16:e0:6e:24:79:ba:2d: f5:5b:22:2f:77:ab:1d:cc:4e:11:74:c0:55:12:68: 07:bd:19:60:50:27:8c:15:04:ff:f2:2f:c6:6e:e7: 08:e0:e7:69:88:77:f6:7c:a3:f6:ef:a8:6f:65:bc: 65:04:01:e3:37:05:7e:f9:1d:27:6a:83:6b:4d:63: 17:90:fa:68:fa:18:41:0d:57:1e:b4:ef:bf:80:e3: 66:57:9d:2c:63:00:0b:f6:f5:c6:c2:85:ee:af:84: 1b:6d:e9:53:11:0d:c0:8f:f3:14:b4:2d:a6:7d:2f: 18:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:B9:CF:40:D9:AF:AF:11:B3:8F:E2:AE:C2:40:07:2F:29:E4:1A:39 X509v3 Authority Key Identifier: keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:de:ab:19:16:b5:dc:ee:fb:ba:b9:54:42:ef:79:34:64:e3: 36:f4:d5:af:98:42:ea:3a:4e:85:8d:0a:04:33:92:96:8c:e1: cb:10:04:fc:78:fc:65:a6:45:21:d8:25:4d:97:eb:13:46:07: 38:0a:3d:e0:51:f2:38:18:dc:bd:1c:4e:a1:48:a7:a8:95:e8: cb:cf:d7:c8:2e:8b:c6:f7:4c:51:7c:16:16:73:bf:00:8a:a3: c5:12:dd:a3:dd:8f:23:b8:07:6b:16:ae:7b:bc:e5:c7:09:a6: 1b:82:7e:c5:0e:46:40:f8:31:37:d7:92:8f:01:96:13:0f:8c: 6c:72:50:37:b2:dd:6d:da:c6:fa:61:75:52:39:1c:cd:cf:49: 78:7f:e3:34:0a:ff:a2:1c:c7:c3:ff:a1:ca:38:c4:a6:a4:f3: 4d:c6:13:55:c1:04:ad:c0:01:ea:92:c7:78:80:91:80:7d:e5: a5:6c:b0:b1:e2:e8:7b:71:55:dd:64:df:29:17:a2:e5:69:f1: 13:fc:70:ea:b6:e9:80:d9:ce:19:4e:5c:8c:9f:29:6d:41:b1: e5:9e:9f:e9:b5:32:51:d5:1b:cb:35:e5:d2:e6:4d:55:2d:26: a3:2a:88:e4:af:ce:dd:ed:d1:24:87:a1:a7:a6:66:11:37:b9: 8e:6b:95:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGsSWHDeHYi/bJS0aXx9954l4fEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5 NEU0MjgxQzAeFw0yNjA2MTUwODMxNDlaFw0yNjA2MTYxMDM4NDlaMDMxMTAvBgNV BAMTKDg0QjlDRjQwRDlBRkFGMTFCMzhGRTJBRUMyNDAwNzJGMjlFNDFBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt7uJYRXRfLIzyHlKEbJPhAZfX fEQw3SGTL0K8zgQpfBvpwlEg6pS6g7O+Vz/c89oxsajCjw7TZbNvdtyB3mFhcSt+ GfzjSJB6GNpzPZwuHrQFhuB8kO2bOMTGFiQrZJoYDmmzG+bR1OOma6/Z6M6ywQD7 IWnl/+Dq7sMsb7aDdDMKmMqMjbtEAdynzZNmFuBuJHm6LfVbIi93qx3MThF0wFUS aAe9GWBQJ4wVBP/yL8Zu5wjg52mId/Z8o/bvqG9lvGUEAeM3BX75HSdqg2tNYxeQ +mj6GEENVx6077+A42ZXnSxjAAv29cbChe6vhBtt6VMRDcCP8xS0LaZ9LxjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhLnPQNmvrxGzj+KuwkAHLynkGjkwHwYDVR0j BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0 RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACHeqxkWtdzu+7q5VELveTRk4zb01a+YQuo6 ToWNCgQzkpaM4csQBPx4/GWmRSHYJU2X6xNGBzgKPeBR8jgY3L0cTqFIp6iV6MvP 18gui8b3TFF8FhZzvwCKo8US3aPdjyO4B2sWrnu85ccJphuCfsUORkD4MTfXko8B lhMPjGxyUDey3W3axvphdVI5HM3PSXh/4zQK/6Icx8P/oco4xKak803GE1XBBK3A AeqSx3iAkYB95aVssLHi6HtxVd1k3ykXouVp8RP8cOq26YDZzhlOXIyfKW1BseWe n+m1MlHVG8s15dLmTVUtJqMqiOSvzt3t0SSHoaemZhE3uY5rlZU= -----END CERTIFICATE-----Generated at Mon Jun 15 14:10:42 2026 by rpki-client