
$ rpki-client -vvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json)
Hash identifier: IbyRONjrxwrCG6W4KNpd0Z/D7yTHoaLDUABQdWxj1aU=
Subject key identifier: D5:DF:7C:0A:DA:25:B3:3E:BC:EE:3F:EE:1C:96:54:DB:8E:56:2C:EF
Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Certificate serial: 5A43E503DBC909993AD5D4EE5B8424BBEB0F4218
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 13:42:18 +0000
Manifest this update: Wed 29 Jul 2026 13:37:18 +0000
Manifest next update: Thu 30 Jul 2026 16:04:18 +0000
Files and hashes: 1: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=)
2: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: E/ZxNpcpp3TpPXNO3hWVT27Gx2fDNfE/NSq9bcW4kz0=)
3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 14:31:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:43:e5:03:db:c9:09:99:3a:d5:d4:ee:5b:84:24:bb:eb:0f:42:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Validity
Not Before: Jul 29 13:37:18 2026 GMT
Not After : Jul 30 16:04:18 2026 GMT
Subject: CN=D5DF7C0ADA25B33EBCEE3FEE1C9654DB8E562CEF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:4e:5e:e9:0e:b8:d9:ae:28:d2:aa:d2:ad:06:
e7:29:04:7f:05:ed:f2:e9:11:0e:85:13:53:58:b4:
00:39:93:25:68:be:a9:48:ad:4e:10:58:0e:0b:8c:
2a:f8:03:96:af:30:39:5f:95:5c:eb:1d:e2:72:67:
a9:a2:91:5c:c3:4d:28:46:ea:28:ed:14:b9:45:22:
2e:6e:7a:6d:e8:8e:e9:cb:50:58:9a:bf:bf:00:bd:
e2:61:14:4b:2d:a0:65:95:03:d7:aa:49:c2:57:c9:
4e:e1:4e:2d:a1:60:ed:4d:11:93:0b:40:c0:1c:0a:
e5:fb:05:14:20:8c:0a:62:4c:7e:1c:79:7a:78:24:
d1:a5:c8:e4:94:a0:f7:f8:97:72:cc:2d:a7:45:a5:
b8:5c:0c:5a:45:8a:34:a3:9a:d0:17:6e:b1:82:15:
4d:23:3f:d2:09:bb:10:1c:8b:24:49:76:3f:03:c8:
ae:64:09:32:6b:94:0a:25:1c:8f:96:fb:e5:90:07:
03:0b:b6:eb:9c:1f:a3:af:78:e7:e6:40:fa:71:1b:
50:fb:21:d7:af:ae:ec:92:0d:24:c1:38:cb:78:48:
1f:b4:c1:18:a1:03:c4:7c:1b:59:f4:30:72:ff:1c:
9b:66:2a:e8:45:2d:d3:cb:5f:26:36:63:53:6e:75:
ad:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:DF:7C:0A:DA:25:B3:3E:BC:EE:3F:EE:1C:96:54:DB:8E:56:2C:EF
X509v3 Authority Key Identifier:
keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:16:2d:84:0e:6c:69:17:89:76:e2:f5:50:60:cd:82:ef:
a4:bd:2a:29:11:01:84:70:8c:04:1a:5e:8f:00:0e:af:4f:91:
9b:db:34:c4:89:b0:de:13:c7:7e:4e:0f:f1:a3:73:c4:6c:e8:
9a:de:37:1f:ea:18:ba:2a:2f:05:62:9f:2a:08:19:10:31:bb:
fb:b8:57:70:4f:e4:45:bf:6a:a6:46:12:c3:37:05:1a:9f:7d:
f3:64:a0:d9:d7:59:c0:7f:d7:3c:e9:b0:af:5a:39:e0:af:1a:
07:d4:26:a5:86:16:fe:3c:f3:6f:e7:1f:9d:40:2b:be:09:c5:
2d:67:6e:00:fd:fc:a2:91:9b:b6:0c:1f:94:b7:14:a9:31:b6:
0e:4b:6a:12:88:57:f5:1f:85:e4:72:f7:14:96:58:a2:35:85:
dd:63:d1:08:55:4a:4c:9a:89:53:fd:01:11:59:78:f6:cd:26:
2b:90:6f:1d:e7:b9:f2:be:35:3d:84:8b:c0:bb:83:19:6e:d4:
b7:b4:48:1b:a9:d2:24:03:9f:e8:bb:7f:a6:10:a9:e6:2b:79:
bf:e9:cf:cf:a0:66:9f:b9:d3:a2:20:c7:f1:77:a2:dd:09:20:
7d:e8:2e:a3:2e:12:29:e2:f8:8e:0c:5b:87:94:4c:f2:cf:8c:
99:fd:ff:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 20:18:32 2026 by rpki-client