
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json)
Hash identifier: Ih+1Lo8IZte12TxpRTfWsUXE1kbsDWAfQDyUtLlhIDE=
Subject key identifier: 57:6B:1D:89:40:08:3F:D9:15:AB:01:F5:A9:E1:95:A1:5F:6D:D1:DE
Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Certificate serial: 1DE75336F2C66ED345CF4AD9E8F8F945D45EE2EB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
Manifest number: BC
Signing time: Sun 20 Sep 2026 12:32:41 +0000
Manifest this update: Sun 20 Sep 2026 12:27:41 +0000
Manifest next update: Mon 21 Sep 2026 14:52:41 +0000
Files and hashes: 1: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=)
2: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: 8M19R2rNMWqS0vDdcRn4dFOy/bBSPJ/fx6y7M0OEikk=)
3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 14:52:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:e7:53:36:f2:c6:6e:d3:45:cf:4a:d9:e8:f8:f9:45:d4:5e:e2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Validity
Not Before: Sep 20 12:27:41 2026 GMT
Not After : Sep 21 14:52:41 2026 GMT
Subject: CN=576B1D8940083FD915AB01F5A9E195A15F6DD1DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e1:49:bc:ec:27:04:1a:9c:b3:a5:b7:27:fe:
82:74:5e:98:2a:63:5e:22:a2:9f:0c:df:e9:ba:d9:
c4:1e:15:0e:04:91:d4:9b:ba:a8:0b:df:4c:94:11:
8b:6b:49:15:54:7f:9c:a4:7b:3e:df:24:96:bb:59:
03:37:57:f1:00:c8:cf:1d:34:90:11:ba:88:b2:98:
e0:ab:8a:d8:06:4c:4c:2e:99:49:31:af:07:49:ec:
f4:79:b6:82:66:3a:37:0d:d2:32:79:e9:6e:af:2c:
4b:03:b5:4b:ff:21:c3:10:0d:24:c7:d9:b6:ed:34:
f6:95:f9:89:db:29:d2:7c:3d:9e:aa:92:e5:b2:4e:
05:68:69:44:eb:33:40:08:75:ea:e6:08:0b:5e:5c:
d8:c2:ad:0d:32:ea:0e:5b:ce:3e:b1:6b:06:ce:05:
ec:50:28:db:a4:87:b5:99:07:f4:22:0b:57:3d:67:
31:f0:41:ea:9b:12:4b:09:57:99:7a:36:e6:a8:c3:
5c:4c:89:01:40:7b:61:d3:d8:d9:1c:4d:c6:d7:60:
1f:59:ee:20:c5:17:a9:73:82:38:54:ab:e1:e0:54:
c3:e8:0f:52:1b:96:22:c1:0b:77:d7:7f:20:12:7e:
95:1c:c9:0b:fd:30:fe:f2:ab:30:d8:43:b4:65:12:
c9:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:6B:1D:89:40:08:3F:D9:15:AB:01:F5:A9:E1:95:A1:5F:6D:D1:DE
X509v3 Authority Key Identifier:
keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b6:49:54:b6:49:32:aa:b2:a4:64:0f:84:ed:65:b2:5c:22:
67:1f:1f:fc:13:42:80:54:98:e0:65:a4:9f:88:6f:3d:ec:f8:
aa:d7:96:84:94:6d:86:4e:b8:e1:96:f7:e3:23:bf:59:03:18:
eb:a4:f0:27:62:27:7e:d2:1d:39:55:61:4a:76:d0:9c:f0:f2:
82:81:3d:f4:ab:b9:ec:ed:9b:53:5f:6b:bc:31:ab:10:e2:da:
0b:0c:24:84:e1:55:ed:98:a4:5f:c6:6e:13:cb:d2:4a:6f:d7:
90:33:64:a5:29:75:9e:8f:cf:ba:88:e8:43:b2:f7:a7:5b:af:
e3:81:a4:16:86:37:b8:72:e2:0f:93:da:79:6f:63:5a:ef:be:
26:f8:ba:41:bb:9c:e6:fd:b0:77:c4:47:87:c9:67:a9:8f:20:
23:c1:24:81:74:c4:6d:15:85:7f:8e:fd:02:bb:a3:f7:39:8e:
9a:eb:b0:9d:2b:79:50:63:4b:d1:9f:b2:c6:ff:7c:f8:d3:cb:
9a:52:7c:82:d9:14:15:4c:23:5d:e1:74:75:66:4f:20:7b:e6:
52:27:c2:e5:4e:bf:34:1c:6d:96:61:79:e7:19:f8:b8:0f:8e:
1f:d8:c3:32:dd:7f:55:79:20:e2:0d:00:0c:56:fb:4f:3a:44:
a8:d0:e1:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 00:05:37 2026 by rpki-client