
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
File: 92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft (raw, json)
Hash identifier: Ffgn37CJjJkEpV0t7psD8Mn0itkz7O1QxONlKGbJBWc=
Subject key identifier: E1:10:00:55:7F:BE:D5:C3:1C:64:DB:80:3F:76:D0:2F:E7:1B:2A:66
Authority key identifier: 92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF
Certificate issuer: /CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
Certificate serial: 497DAE0920E1848F5DDA37650B847DB4A234B39B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
Manifest number: BF
Signing time: Mon 21 Sep 2026 15:41:04 +0000
Manifest this update: Mon 21 Sep 2026 15:36:04 +0000
Manifest next update: Tue 22 Sep 2026 18:59:04 +0000
Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: F4/wHPAccFzld5vK7uqr9YYnVjEcR6HK4IaAZ9Ldlyk=)
2: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: uX052Tj5rGF2pdx/AzNTc46gCVZ9O0oMkrpcZfXHTKQ=)
3: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: QYC7ssGyglRNpqD1o8dtha7i7+fZYRx/MOOkcBtU2G8=)
4: 92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl (hash: 1ZKItMHe+8jlGPm6mT/K6qefKOTY5lnxNrOrOWIMZSw=)
5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 4XDkg051W8n8V41hi/l03/yAasU7b+3VGGYDYDWaT7A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl
rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:24:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:7d:ae:09:20:e1:84:8f:5d:da:37:65:0b:84:7d:b4:a2:34:b3:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
Validity
Not Before: Sep 21 15:36:04 2026 GMT
Not After : Sep 22 18:59:04 2026 GMT
Subject: CN=E11000557FBED5C31C64DB803F76D02FE71B2A66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:82:1b:b9:19:21:3b:cf:47:56:d0:b0:1c:e9:
b8:67:89:8a:c3:c5:df:f1:b2:42:71:1e:01:d3:b1:
12:2f:2b:db:d0:47:30:96:05:33:e5:c9:5f:72:2c:
03:8e:97:b8:5b:a5:74:eb:83:8f:12:0f:f9:83:77:
c7:69:4f:1a:ce:cd:11:93:9f:a8:52:c5:2b:36:57:
1b:1b:05:8f:4d:60:26:e3:34:8f:e4:2a:30:65:44:
71:ee:e2:c1:56:2f:43:cb:6f:2e:31:23:d2:1b:82:
3d:5c:46:f2:e3:ee:be:4d:d7:ee:30:d3:fc:86:ad:
fb:1c:9c:65:68:fb:7e:91:0f:f5:cf:53:8c:a5:74:
4f:c3:7f:4d:68:dd:f4:d3:fe:44:18:c8:02:bd:f0:
53:b4:dc:2d:35:8e:6a:52:ca:64:43:fb:e4:c2:c3:
ff:6b:5b:8a:69:fb:09:be:dc:df:31:3c:05:2a:2f:
1d:b4:d9:54:15:1e:d3:73:40:0a:52:94:0c:27:f7:
6f:c8:12:f4:45:e0:ab:a7:f6:2f:c5:33:4a:00:33:
84:c7:f8:e5:6e:cb:b7:5a:fd:10:0a:d9:dc:c5:9b:
95:cc:e5:e2:a8:f2:25:45:31:6e:a8:52:77:58:cd:
49:7a:0d:d3:70:80:0f:53:dd:12:b1:42:30:3c:6f:
47:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:00:55:7F:BE:D5:C3:1C:64:DB:80:3F:76:D0:2F:E7:1B:2A:66
X509v3 Authority Key Identifier:
keyid:92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:68:92:3e:3a:70:66:f1:87:df:4f:f0:b0:07:2b:09:b4:c7:
3f:15:01:80:9c:db:24:e1:19:95:1f:fb:9a:fb:02:17:5b:f4:
d8:25:a8:3a:f3:14:5d:e2:27:b3:dd:d2:d6:eb:78:02:7a:d8:
fc:ad:b4:b0:9b:a9:89:47:18:f3:20:19:be:85:72:c2:15:9a:
77:bc:b3:86:36:8c:90:28:a9:6d:f1:97:89:ec:ce:ba:f7:cb:
83:c3:a7:66:c2:ab:df:a6:40:9f:17:bf:7b:2a:92:aa:53:8d:
d1:04:e4:d0:19:39:d7:c1:f2:f4:20:8f:34:2a:07:44:7e:ea:
4a:de:17:42:be:8b:ce:be:b5:fe:a6:07:57:22:18:3c:f5:07:
9f:a6:6a:bd:03:9f:25:cf:1b:61:5d:25:64:2f:e6:90:04:33:
0c:f7:c7:11:4e:ff:b4:c8:72:1a:b4:ac:76:b7:eb:c7:ef:a7:
86:be:75:c2:e1:23:62:c5:9a:b1:5c:ef:7c:da:93:0c:69:7f:
75:cd:2d:8d:35:bb:30:8f:4e:46:f4:a4:c0:0b:b7:25:69:c7:
4a:b4:0a:3c:00:e7:d6:ba:75:8e:bc:f1:b0:15:0a:af:d8:9e:
07:d8:1f:30:5d:08:93:2f:c9:c8:9d:04:a5:05:b7:1e:16:83:
e1:1a:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:21:17 2026 by rpki-client