
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft
File: 92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft (raw, json)
Hash identifier: P2nJtPeeRV8jmUyO7odq/InUe1ioQrWjgq/ehlkLZLs=
Subject key identifier: 9A:A9:D3:E4:F4:F3:DA:18:13:58:57:2A:8A:2D:B4:03:E3:E1:49:13
Authority key identifier: 92:E8:40:D5:BB:3B:BE:FE:82:4F:11:6A:51:FE:10:40:CA:FA:E5:79
Certificate issuer: /CN=92E840D5BB3BBEFE824F116A51FE1040CAFAE579
Certificate serial: 52E1F7DF16A1D33608CEF43499D596EFD9C6C93D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft
Manifest number: C2
Signing time: Tue 22 Sep 2026 06:29:35 +0000
Manifest this update: Tue 22 Sep 2026 06:24:35 +0000
Manifest next update: Wed 23 Sep 2026 07:38:35 +0000
Files and hashes: 1: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: AdKJaik96R1JVPh+LhauIKIwFMvKlCATViTuixYxhKg=)
2: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: VEdnUCKoac/4e3F+B8uGYgqASxpfvU2DOLkdnZz4anY=)
3: 92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl (hash: b5uU1RqPf41VyRUseN0XGF1zadjkFBH5oLGIMrVZn78=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl
rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 07:38:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:e1:f7:df:16:a1:d3:36:08:ce:f4:34:99:d5:96:ef:d9:c6:c9:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E840D5BB3BBEFE824F116A51FE1040CAFAE579
Validity
Not Before: Sep 22 06:24:35 2026 GMT
Not After : Sep 23 07:38:35 2026 GMT
Subject: CN=9AA9D3E4F4F3DA181358572A8A2DB403E3E14913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1c:0d:a0:42:13:8c:cf:07:84:6f:8e:30:cb:
cd:f3:07:27:a8:cf:ad:2a:72:54:55:28:c6:df:1d:
11:d9:14:b5:85:2c:37:c3:db:25:e0:a7:39:70:6f:
24:46:78:32:08:d8:a2:a3:c5:98:2d:90:ce:b4:9e:
d8:01:1c:e8:63:86:bd:4b:7a:ae:c3:a4:5f:a0:58:
4f:9d:82:df:aa:fe:33:ba:84:53:c9:1a:bf:ca:4b:
d5:14:ea:b6:18:cf:97:d9:43:ce:84:85:b3:ab:64:
aa:d2:a5:f2:e6:5d:50:76:d4:d4:74:a1:70:e1:de:
3d:62:93:7b:3b:fd:cd:9d:06:37:77:8e:98:d1:2f:
db:9b:b5:43:c8:12:b4:bd:28:e2:3a:89:71:fa:ec:
87:74:69:1b:83:f7:3f:7b:5d:ba:d5:f0:3b:6f:67:
3f:46:36:a9:b6:18:d5:58:6c:7e:ff:b4:8b:4e:2b:
fb:64:c9:8c:fb:fb:a9:51:21:02:00:03:64:7d:a4:
11:01:88:1d:b8:f4:c1:92:98:c0:ee:38:62:64:4f:
21:31:1d:49:31:f3:b5:7f:73:87:48:82:82:98:d3:
55:35:4e:98:b3:cc:db:e2:27:81:77:09:d2:eb:54:
91:b2:48:f4:22:a8:2f:a9:c0:d5:07:38:21:d6:ec:
3e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A9:D3:E4:F4:F3:DA:18:13:58:57:2A:8A:2D:B4:03:E3:E1:49:13
X509v3 Authority Key Identifier:
keyid:92:E8:40:D5:BB:3B:BE:FE:82:4F:11:6A:51:FE:10:40:CA:FA:E5:79
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/92E840D5BB3BBEFE824F116A51FE1040CAFAE579.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ed:a4:ad:86:e3:62:f5:1f:20:87:78:0b:2c:2f:8d:12:00:
5f:72:9b:f3:94:fc:0d:94:6f:73:c4:ae:c0:8e:59:b5:d2:44:
44:f6:35:82:c1:60:7c:24:b6:43:00:6a:35:ba:e8:c2:fa:c5:
03:98:cf:15:db:4d:ca:41:38:98:6e:cc:eb:70:20:0d:eb:11:
63:9e:b0:a4:b8:c8:32:f4:95:44:9a:fb:d5:4b:d1:39:9c:5f:
f7:12:8c:29:6f:6b:e8:98:01:9e:75:d8:32:f1:64:b7:a6:f9:
cf:67:cf:af:bf:8e:b5:cd:a0:78:28:68:7c:5f:43:9f:fb:32:
43:79:7f:db:15:70:eb:4a:19:47:15:24:cc:bf:a4:75:cd:0f:
5e:61:9f:56:6e:85:92:c9:8c:1f:84:b4:8d:03:6d:40:c0:37:
78:bf:87:50:43:6e:22:d5:9f:4c:f4:93:a6:40:a8:23:4d:c3:
cd:2c:a6:bd:8f:dd:3d:28:5a:53:e3:88:3c:40:ba:c4:fe:ca:
0f:46:ca:5b:0d:19:1b:f4:4d:d8:50:8b:ef:5f:fc:9b:30:66:
2a:e7:0c:84:1f:ff:aa:d4:6b:6c:6b:e9:88:22:50:20:a5:cf:
f7:4d:60:f4:9e:a0:68:2a:c5:3e:29:74:fa:dc:c6:aa:6e:a6:
c8:26:c2:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:17:15 2026 by rpki-client