$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft File: DCA916604EAE55F638D4691DA6D930A094E4281C.mft (raw, json) Hash identifier: Huj/Rk0fVI62LAVxa65XscCPI542DnSP+1Mb2a4X2l0= Subject key identifier: 5F:95:27:42:B7:B6:B3:A5:21:BC:F8:4C:AE:FA:1A:F0:4F:A1:D7:DE Authority key identifier: DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C Certificate issuer: /CN=DCA916604EAE55F638D4691DA6D930A094E4281C Certificate serial: 4307597BFE9C4D65BE918FFD9B48E88DEFA7AE4A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft Manifest number: BE Signing time: Mon 21 Sep 2026 10:19:24 +0000 Manifest this update: Mon 21 Sep 2026 10:14:24 +0000 Manifest next update: Tue 22 Sep 2026 14:04:24 +0000 Files and hashes: 1: DCA916604EAE55F638D4691DA6D930A094E4281C.crl (hash: hPzhGzEqvvwfAnGFavZuostbci6e/NPNQer5NcCY0dY=) 2: 323030313a6466343a366234303a3a2f34382d3438203d3e20313533313331.roa (hash: 0ggaPePdCSw/n+Sh533ZsWKg9491ZisyRCt3cB57Hw0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:07:59:7b:fe:9c:4d:65:be:91:8f:fd:9b:48:e8:8d:ef:a7:ae:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCA916604EAE55F638D4691DA6D930A094E4281C Validity Not Before: Sep 21 10:14:24 2026 GMT Not After : Sep 22 14:04:24 2026 GMT Subject: CN=5F952742B7B6B3A521BCF84CAEFA1AF04FA1D7DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bb:0d:50:68:cf:32:bd:e5:f3:4a:7e:be:9a: 92:cc:de:59:9c:89:bd:0b:12:99:f0:1e:84:23:92: 91:3d:74:e4:2e:e3:3f:66:52:e0:bf:8a:58:5a:71: 93:17:2d:11:f8:78:6e:90:de:57:b6:6a:72:bc:61: 68:bb:b4:62:05:a6:46:c2:ae:27:1a:d3:e6:d8:62: 31:c5:7d:ef:3a:9d:41:43:4e:57:f9:cc:7e:9d:eb: 18:10:11:25:ae:4a:2c:20:44:c0:d8:75:e1:1d:8f: 9a:5e:cb:ac:eb:e6:b8:19:ed:9f:9f:e5:3b:46:36: 67:de:ae:74:0a:35:99:b9:2b:c8:6e:89:52:db:e7: 4f:fd:94:0e:e0:42:7e:02:06:18:3b:01:f9:44:0b: 09:d8:5e:57:05:09:de:ba:80:ff:25:10:7a:6e:f1: d9:1b:03:f8:4e:c8:35:5d:75:0d:49:63:bc:e5:09: a6:bd:31:fe:b4:f5:51:41:ce:bd:16:7d:c2:b6:b9: 08:69:50:0e:fe:d2:6e:95:34:01:88:33:f3:ea:38: 24:78:22:ca:49:97:3a:99:24:60:7f:0a:ba:a3:9e: bd:d9:a4:2d:c6:2a:21:52:90:2b:49:4d:ef:94:ca: d6:cb:0b:26:b5:4f:07:9c:92:fb:db:a9:c0:72:b8: d8:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:95:27:42:B7:B6:B3:A5:21:BC:F8:4C:AE:FA:1A:F0:4F:A1:D7:DE X509v3 Authority Key Identifier: keyid:DC:A9:16:60:4E:AE:55:F6:38:D4:69:1D:A6:D9:30:A0:94:E4:28:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DCA916604EAE55F638D4691DA6D930A094E4281C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a211f347-a1e7-471d-ad20-da76aabf384c/1/DCA916604EAE55F638D4691DA6D930A094E4281C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:21:41:99:0e:91:7c:5e:e0:a4:de:7c:00:96:35:50:94:7b: 76:ca:99:fe:82:e6:bb:ed:b6:6e:bf:f6:4a:16:16:40:4f:9a: c4:7b:fb:9d:20:1d:4f:03:f4:9e:17:12:2b:95:19:8e:99:c8: 4a:54:6b:c8:b2:09:c1:d9:9d:5e:27:47:bc:5b:8b:e7:24:b0: a3:c6:de:56:9c:1e:b5:47:a7:4d:2b:19:76:fe:a9:91:38:b9: 19:82:82:da:73:a1:d7:f0:16:8b:51:12:2f:d4:65:f7:a7:ba: f6:3c:84:d1:1e:ce:dc:0d:7b:f1:11:87:ec:98:d5:ec:ca:cb: 7b:94:43:fc:5a:b0:b0:62:46:71:7d:09:a2:f9:0c:87:cb:07: 01:95:ab:a3:91:a6:bd:3f:69:bc:16:ed:5a:e7:e3:74:60:4a: c5:a9:46:71:52:74:b6:12:e0:71:27:c3:6f:1a:1e:bb:b4:e7: 69:4e:08:d4:eb:ca:2a:96:c3:eb:62:ab:ff:39:08:b7:91:bd: 61:e3:06:36:ee:9f:20:e7:19:0f:8b:ec:0b:6e:2f:81:30:6d: 48:fc:c4:6b:ec:43:d1:b3:66:40:b0:bc:ab:66:ae:5f:c8:5f: 2f:d3:87:ff:e6:7e:b8:cd:ee:70:6b:23:08:d3:ff:2a:c1:7d: a8:af:8c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwdZe/6cTWW+kY/9m0joje+nrkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5 NEU0MjgxQzAeFw0yNjA5MjExMDE0MjRaFw0yNjA5MjIxNDA0MjRaMDMxMTAvBgNV BAMTKDVGOTUyNzQyQjdCNkIzQTUyMUJDRjg0Q0FFRkExQUYwNEZBMUQ3REUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuw1QaM8yveXzSn6+mpLM3lmc ib0LEpnwHoQjkpE9dOQu4z9mUuC/ilhacZMXLRH4eG6Q3le2anK8YWi7tGIFpkbC rica0+bYYjHFfe86nUFDTlf5zH6d6xgQESWuSiwgRMDYdeEdj5pey6zr5rgZ7Z+f 5TtGNmfernQKNZm5K8huiVLb50/9lA7gQn4CBhg7AflECwnYXlcFCd66gP8lEHpu 8dkbA/hOyDVddQ1JY7zlCaa9Mf609VFBzr0WfcK2uQhpUA7+0m6VNAGIM/PqOCR4 IspJlzqZJGB/Crqjnr3ZpC3GKiFSkCtJTe+UytbLCya1TweckvvbqcByuNgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX5UnQre2s6UhvPhMrvoa8E+h194wHwYDVR0j BBgwFoAU3KkWYE6uVfY41GkdptkwoJTkKBwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTIxMWYzNDctYTFlNy00NzFkLWFkMjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0 RUFFNTVGNjM4RDQ2OTFEQTZEOTMwQTA5NEU0MjgxQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQ0E5MTY2MDRFQUU1NUY2MzhENDY5MURBNkQ5MzBBMDk0RTQy ODFDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTIxMWYzNDctYTFlNy00NzFkLWFk MjAtZGE3NmFhYmYzODRjLzEvRENBOTE2NjA0RUFFNTVGNjM4RDQ2OTFEQTZEOTMw QTA5NEU0MjgxQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIhQZkOkXxe4KTefACWNVCUe3bKmf6C5rvt tm6/9koWFkBPmsR7+50gHU8D9J4XEiuVGY6ZyEpUa8iyCcHZnV4nR7xbi+cksKPG 3lacHrVHp00rGXb+qZE4uRmCgtpzodfwFotREi/UZfenuvY8hNEeztwNe/ERh+yY 1ezKy3uUQ/xasLBiRnF9CaL5DIfLBwGVq6ORpr0/abwW7Vrn43RgSsWpRnFSdLYS 4HEnw28aHru052lOCNTryiqWw+tiq/85CLeRvWHjBjbunyDnGQ+L7AtuL4EwbUj8 xGvsQ9GzZkCwvKtmrl/IXy/Th//mfrjN7nBrIwjT/yrBfaivjKA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:45:33 2026 by rpki-client