
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
File: C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft (raw, json)
Hash identifier: 8P561KL+2y9iQdtI93+QMemCwAuCB5p2PKsn1kcLfjE=
Subject key identifier: 5F:A9:40:92:3F:6D:F5:CA:7D:40:7C:24:A5:F3:04:38:48:1C:2D:E6
Authority key identifier: C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43
Certificate issuer: /CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
Certificate serial: 05EEE3FAC956399EFD2F2FD61474B24E70FDFB2B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 17:38:48 +0000
Manifest this update: Sun 20 Sep 2026 17:33:48 +0000
Manifest next update: Mon 21 Sep 2026 21:12:48 +0000
Files and hashes: 1: C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl (hash: zrAJxDY0Q+VfSVd8YE3x6JdSsQ9/TfCvAF6EkausnIk=)
2: 3130332e3134302e37362e302f32342d3234203d3e203535363636.roa (hash: e5gnW9OEBYEcLrNdmUD7Puv+F0xnUvunAEVJcokdKwI=)
3: 3130332e3134302e37372e302f32342d3234203d3e203535363636.roa (hash: HnENUUYM0kbvUs9NmK+JbWee/N7YOJOVKTfwCVimUf0=)
4: 3130332e3134302e37362e302f32332d3234203d3e203535363636.roa (hash: kaKolGrEwM0axjoYKTFASTapi8JaDpN9O6GnVZtyVik=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl
rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 21:12:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:ee:e3:fa:c9:56:39:9e:fd:2f:2f:d6:14:74:b2:4e:70:fd:fb:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C92E90B711F341989DF94E2CE7301FDCDCDB3843
Validity
Not Before: Sep 20 17:33:48 2026 GMT
Not After : Sep 21 21:12:48 2026 GMT
Subject: CN=5FA940923F6DF5CA7D407C24A5F30438481C2DE6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b3:fd:bd:f8:7b:9b:a3:03:5c:f5:c8:43:2f:
d2:82:0b:d1:82:c2:ae:95:05:48:8d:ca:eb:53:f3:
38:3c:b3:82:f2:0b:85:69:23:56:d3:b5:d2:f8:92:
44:23:d7:f8:4b:c3:bf:2e:bd:7d:e3:be:93:17:ff:
21:60:88:25:df:05:ca:9f:c2:93:56:5f:77:27:be:
57:c3:1d:8d:b9:0b:3b:53:07:04:31:2c:58:1f:d5:
9d:d5:4a:fa:e7:e3:d7:a0:26:7a:eb:28:55:d4:c7:
4b:10:38:2b:2d:2d:46:8a:01:bc:b2:d0:59:2a:dc:
14:6b:ed:36:e0:1f:eb:53:e3:bf:47:8d:e7:63:36:
51:52:d4:65:54:20:e3:54:e3:e2:9e:89:2f:6e:9f:
7c:9d:11:09:87:85:96:5f:95:65:b3:e9:20:61:bc:
dc:1f:1e:bf:99:06:30:c1:60:a3:38:45:36:82:0b:
30:19:fa:e0:1f:e6:21:af:1c:ff:cf:e5:c7:9d:29:
f9:56:c5:0b:8d:66:4d:ad:f5:1e:10:d6:cd:4d:3b:
88:76:1b:29:4e:86:d0:fc:a3:32:a7:56:1d:5e:36:
98:05:78:53:2d:3d:18:44:eb:b9:8d:e2:f3:a9:71:
1b:92:4f:1d:42:ee:dd:77:62:1c:1a:0c:aa:65:f5:
4c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:A9:40:92:3F:6D:F5:CA:7D:40:7C:24:A5:F3:04:38:48:1C:2D:E6
X509v3 Authority Key Identifier:
keyid:C9:2E:90:B7:11:F3:41:98:9D:F9:4E:2C:E7:30:1F:DC:DC:DB:38:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C92E90B711F341989DF94E2CE7301FDCDCDB3843.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90073164-8008-49c6-b186-3c7fe9b80a17/0/C92E90B711F341989DF94E2CE7301FDCDCDB3843.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:17:b4:9d:0d:8b:57:21:a2:a4:57:a1:6f:32:2a:6d:1a:2c:
10:87:a3:0d:51:f3:da:a8:10:f6:13:06:0a:37:31:27:db:85:
01:43:43:65:68:2e:86:5c:b2:a6:9e:14:1f:0e:8a:94:f0:c9:
eb:d7:f3:f6:f1:ee:41:9b:b3:3e:93:7a:f4:d5:34:1c:97:ec:
20:81:3d:89:15:22:15:97:da:45:a1:ae:86:3a:4b:84:a5:f2:
17:f6:a2:db:3e:f5:96:b5:fa:45:34:15:ed:c6:c4:35:58:87:
72:e0:87:6c:de:4a:73:a7:eb:8d:96:e0:55:8a:14:55:48:83:
10:7e:de:0e:d4:f2:f0:91:66:c7:a5:42:41:df:91:7c:dd:90:
f6:8a:1a:2c:49:5b:8b:30:21:28:77:9b:b7:5b:9b:36:f3:89:
e9:ad:38:ee:a5:a0:89:04:47:6f:21:d5:f5:38:d2:e9:e1:84:
38:ce:0d:d1:0a:a8:b6:bf:a9:59:26:bd:36:f5:b0:b7:d7:a5:
97:b2:6a:f6:b2:9c:24:e5:a7:de:b9:0e:af:c4:ef:81:0c:1d:
d3:26:50:4b:0e:79:f1:3b:44:73:5e:79:bc:6c:19:e8:c0:35:
27:57:46:ba:3c:1b:77:61:75:a0:da:c7:be:be:68:09:09:3e:
6b:0e:91:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:23:45 2026 by rpki-client