
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft (raw, json)
Hash identifier: uet+tJGPEwlxynChgk0np+q8jEVfCsEMp15+26vTG4g=
Subject key identifier: E4:DC:4D:2B:BE:2B:D3:63:DD:BA:5B:23:81:B5:FD:F5:58:8C:2A:CF
Authority key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89
Certificate issuer: /CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589
Certificate serial: 0866D68A479CB3C034A5FEAB9A257B007CCD4C7F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 19:15:41 +0000
Manifest this update: Sun 20 Sep 2026 19:10:41 +0000
Manifest next update: Mon 21 Sep 2026 19:40:41 +0000
Files and hashes: 1: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl (hash: VI/ORlEDomFEnhG103SuRDwM0tTDmvuZCritrcCGyXk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl
rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 17:28:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:66:d6:8a:47:9c:b3:c0:34:a5:fe:ab:9a:25:7b:00:7c:cd:4c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589
Validity
Not Before: Sep 20 19:10:41 2026 GMT
Not After : Sep 21 19:40:41 2026 GMT
Subject: CN=E4DC4D2BBE2BD363DDBA5B2381B5FDF5588C2ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:25:14:96:01:09:df:79:ea:b4:aa:62:79:05:
29:bd:92:d6:f1:d3:89:38:c9:38:13:12:5c:40:94:
42:c9:e1:7e:5a:4e:a6:6e:dd:f4:16:5a:74:dc:8b:
69:46:ad:41:01:5e:e9:04:39:c5:3c:57:ab:c7:f0:
cd:96:d8:35:59:76:2d:89:26:2f:5a:2d:fb:e3:cb:
e5:7f:9a:f9:65:cd:85:e5:4e:18:d4:0e:75:5e:d1:
7b:8c:77:7a:1a:e0:ef:e7:cf:16:36:bf:2b:05:90:
87:e0:c9:70:ba:e2:98:4d:72:88:a2:14:18:ca:d9:
cd:41:99:a3:c7:dd:af:fe:fa:93:ed:2a:b7:8c:6f:
29:49:1c:27:76:a5:36:2e:88:58:45:e8:b1:61:9e:
70:65:7d:82:6e:e6:54:87:0b:df:fd:6b:b9:2c:f5:
da:20:fd:d4:99:73:9b:94:85:ff:46:af:2e:15:ea:
1b:14:37:f3:a0:24:61:65:f8:ba:89:d8:19:99:f7:
d4:e4:49:d1:73:1f:2b:34:ed:5a:98:44:13:b1:f6:
80:99:99:3b:e4:0b:df:be:09:c7:6c:1f:58:9c:ce:
0e:d0:a7:7a:81:46:32:76:29:f3:65:e2:6e:92:43:
d3:1f:1a:5e:d2:e8:df:6d:67:31:56:be:06:a4:8f:
8f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:DC:4D:2B:BE:2B:D3:63:DD:BA:5B:23:81:B5:FD:F5:58:8C:2A:CF
X509v3 Authority Key Identifier:
keyid:A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:45:f3:86:3f:53:92:fe:d2:a8:96:35:47:91:fc:58:91:65:
b8:85:61:1b:3d:6a:d6:5f:4f:89:89:aa:b0:7b:1b:85:3a:2a:
a1:1e:6a:d1:da:ca:c6:cb:4e:40:67:a9:87:d1:6e:e7:0b:43:
fc:1c:2a:41:87:2a:83:13:29:1c:c9:36:4d:d0:9a:a2:92:91:
3a:50:44:a5:94:88:5d:50:04:62:ad:c6:ef:6c:4f:b9:2c:e4:
a8:f9:a8:96:74:6d:26:72:2a:5a:7b:e3:1e:16:a3:a8:f6:4d:
9b:4f:48:f7:41:a4:19:a0:d8:cd:9d:ec:df:6c:08:29:a3:9c:
83:15:ec:99:15:2f:00:32:df:6c:bf:a4:07:c4:fe:c1:63:f6:
ff:18:75:e2:fb:8a:cc:4d:5b:9d:9b:f3:f2:22:9e:92:b6:0b:
ff:32:4a:70:b3:27:3e:39:60:44:28:0b:c2:a8:15:7c:d1:b8:
5c:03:a0:3b:31:d3:63:7e:e7:9e:48:7e:d2:59:27:c0:bc:eb:
c5:fc:0f:82:5b:63:35:07:da:2a:70:e5:69:92:96:f8:3b:db:
5a:2c:60:ff:0b:22:d6:32:f3:53:40:a2:ba:c6:a1:d2:1e:be:
80:a3:d3:c2:76:17:f7:63:d3:bf:fa:9f:02:2c:c9:ac:cd:d7:
ff:4d:86:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:10:11 2026 by rpki-client