
$ rpki-client -vvf rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
File: 92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft (raw, json)
Hash identifier: v5bgdSKj3bMHz09yLiYCciSTwxMvAwU+TNLfbhG0xrE=
Subject key identifier: 6E:98:AB:97:0C:30:3E:30:BF:F5:8E:59:EE:54:23:84:27:CF:58:57
Authority key identifier: 92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
Certificate issuer: /CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Certificate serial: 4072989D2F0FE586B926A963B6BC08A809F2ACAD
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
Manifest number: 3D
Signing time: Wed 17 Jun 2026 02:35:51 +0000
Manifest this update: Wed 17 Jun 2026 02:30:51 +0000
Manifest next update: Thu 18 Jun 2026 04:01:51 +0000
Files and hashes: 1: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: dQGnmXt0ACU8Nqsd0isNjFUqVatDqEn4WBFVgqsTSiw=)
2: 92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl (hash: 32ICyRcMWtB3dS28C6b4dpJD+QC9E/G4f9WioxxAbhY=)
3: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: I+lY+hFIK96OR37hrIA/lKihinGsUdfLpRm0RyODHnI=)
4: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: wZBlrqig4xqsQKFByqLNbFJmpywowT6yE+EzAllM1eM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 03:08:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:72:98:9d:2f:0f:e5:86:b9:26:a9:63:b6:bc:08:a8:09:f2:ac:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Validity
Not Before: Jun 17 02:30:51 2026 GMT
Not After : Jun 18 04:01:51 2026 GMT
Subject: CN=6E98AB970C303E30BFF58E59EE54238427CF5857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:47:6b:18:73:a1:b2:1d:d7:ef:2e:0f:d9:
1a:d0:fe:6a:0b:50:4c:6d:4f:5c:57:fd:fe:07:dc:
47:6b:eb:27:aa:b9:5b:a1:14:d2:03:f6:94:93:2d:
93:dc:75:dc:94:73:e1:8f:7f:bb:fc:51:b5:c7:65:
64:13:07:33:b0:e2:04:e8:d5:20:34:25:ed:dd:7c:
7e:65:77:50:d3:88:12:6b:a3:f9:f5:f6:6d:17:8e:
2c:ca:7a:3e:b3:8f:9d:3c:fa:30:cb:c1:5a:99:2c:
9c:9b:da:23:25:0a:00:c5:9d:e7:54:be:02:0a:45:
37:2d:c7:0d:8e:f3:b9:92:72:a9:b1:cf:44:f0:48:
0b:6c:b5:1c:d3:52:b5:a3:b5:10:e4:b5:1f:b0:d3:
9e:68:d3:82:fa:67:f1:a0:37:d4:8b:d1:f3:5b:34:
a2:7a:5e:9b:78:90:d5:d9:60:f6:e8:d8:b4:b3:b1:
00:e5:f7:44:8d:36:ab:ca:d3:b8:5c:ff:ca:fb:ea:
ff:4a:65:e2:74:53:89:77:80:f8:2b:34:a2:ff:99:
9a:41:c5:6b:e6:dd:00:fc:4b:26:29:9a:d3:30:3b:
a4:82:7b:c3:30:d4:c2:94:da:38:e3:f0:b8:89:67:
5c:3c:e3:b8:da:8d:d7:03:66:41:59:a8:9d:9b:69:
ef:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:98:AB:97:0C:30:3E:30:BF:F5:8E:59:EE:54:23:84:27:CF:58:57
X509v3 Authority Key Identifier:
keyid:92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:2c:90:fe:f0:21:37:60:7e:e9:01:6b:f7:e8:b8:74:40:84:
fb:82:3c:f4:0f:27:38:39:88:42:cd:6e:09:9f:20:3b:c3:cf:
02:c1:fb:b4:28:f1:a8:5a:c2:e9:83:f3:ce:9e:de:7e:9a:f7:
a7:30:ce:d3:4b:bb:88:9b:d0:8a:f4:aa:5a:84:e4:26:ba:27:
1d:49:3c:20:78:63:8a:c4:09:f9:d2:0a:ea:ca:26:97:28:bc:
50:21:93:b7:f5:0d:98:76:dd:09:74:3d:a0:d8:5e:c7:ea:8e:
e5:61:a2:a8:df:70:b0:da:84:a1:af:35:ca:b3:2c:e3:c6:7c:
a8:91:2a:1d:2b:02:01:24:44:f7:ab:ea:2d:3b:57:2f:76:54:
cb:2f:14:a6:d7:c2:52:e6:d7:66:8d:4c:45:c1:63:86:64:ee:
ef:a4:7e:f5:4a:d5:e2:14:b7:e2:51:53:12:cd:bf:c6:91:dd:
1a:88:f9:d0:03:a7:cb:bc:96:89:69:5b:64:6e:22:cf:1e:06:
25:04:e3:7d:45:aa:31:ca:d4:2a:ff:52:f9:aa:69:7c:28:40:
1e:0f:e6:11:42:da:a0:79:77:fe:2a:8a:3a:8f:34:5c:24:76:
ef:f5:3a:2e:82:fc:db:86:a9:4c:3e:4e:9d:37:37:0d:5a:7d:
ed:02:6c:2a
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUQHKYnS8P5Ya5JqljtrwIqAnyrK0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCMkQ1QUNDQUZEMjlDNkQ5MUVGNDJCQzk5NjI5RDI0
RkY2MkMwMDAeFw0yNjA2MTcwMjMwNTFaFw0yNjA2MTgwNDAxNTFaMDMxMTAvBgNV
BAMTKDZFOThBQjk3MEMzMDNFMzBCRkY1OEU1OUVFNTQyMzg0MjdDRjU4NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvVUdrGHOhsh3X7y4P2RrQ/moL
UExtT1xX/f4H3Edr6yequVuhFNID9pSTLZPcddyUc+GPf7v8UbXHZWQTBzOw4gTo
1SA0Je3dfH5ld1DTiBJro/n19m0XjizKej6zj508+jDLwVqZLJyb2iMlCgDFnedU
vgIKRTctxw2O87mScqmxz0TwSAtstRzTUrWjtRDktR+w055o04L6Z/GgN9SL0fNb
NKJ6Xpt4kNXZYPbo2LSzsQDl90SNNqvK07hc/8r76v9KZeJ0U4l3gPgrNKL/mZpB
xWvm3QD8SyYpmtMwO6SCe8Mw1MKU2jjj8LiJZ1w847jajdcDZkFZqJ2bae/dAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUbpirlwwwPjC/9Y5Z7lQjhCfPWFcwHwYDVR0j
BBgwFoAUkrLVrMr9KcbZHvQryZYp0k/2LAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM3ZjM1MzMtMjI3OC00MGUxLWEyNjItN2U3ZTQzMWViMjM1LzAvOTJCMkQ1QUND
QUZEMjlDNkQ5MUVGNDJCQzk5NjI5RDI0RkY2MkMwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkIyRDVBQ0NBRkQyOUM2RDkxRUY0MkJDOTk2MjlEMjRGRjYy
QzAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy
NjItN2U3ZTQzMWViMjM1LzAvOTJCMkQ1QUNDQUZEMjlDNkQ5MUVGNDJCQzk5NjI5
RDI0RkY2MkMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHQskP7wITdgfukBa/fouHRAhPuCPPQPJzg5
iELNbgmfIDvDzwLB+7Qo8ahawumD886e3n6a96cwztNLu4ib0Ir0qlqE5Ca6Jx1J
PCB4Y4rECfnSCurKJpcovFAhk7f1DZh23Ql0PaDYXsfqjuVhoqjfcLDahKGvNcqz
LOPGfKiRKh0rAgEkRPer6i07Vy92VMsvFKbXwlLm12aNTEXBY4Zk7u+kfvVK1eIU
t+JRUxLNv8aR3RqI+dADp8u8lolpW2RuIs8eBiUE431FqjHK1Cr/UvmqaXwoQB4P
5hFC2qB5d/4qijqPNFwkdu/1Oi6C/NuGqUw+Tp03Nw1afe0CbCo=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:02:54 2026 by rpki-client