
$ rpki-client -vvf rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
File: 092239A9C28840E7E025454A2EA108ED5A8BF369.mft (raw, json)
Hash identifier: sqbIQOzEiV1WYUt0nCk5GpnAcNWvZPQAYLDt1vL3YyQ=
Subject key identifier: 92:6C:F4:44:21:F0:27:1F:EA:D7:21:04:29:ED:B1:4B:D6:AD:41:11
Authority key identifier: 09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
Certificate issuer: /CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Certificate serial: 3102CBB70AC4BBA2878867EC566B2B9D0AE30C03
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
Manifest number: 3E
Signing time: Wed 17 Jun 2026 00:28:35 +0000
Manifest this update: Wed 17 Jun 2026 00:23:35 +0000
Manifest next update: Thu 18 Jun 2026 01:54:35 +0000
Files and hashes: 1: 323430353a346338303a3a2f33322d3438203d3e20313335343635.roa (hash: A/ozUYyvaDadcj+xsfOVvgriixFLbEAH6FL6zdv2bCc=)
2: 3130332e3231392e37322e302f32322d3234203d3e20313335343635.roa (hash: 9NL2C7FOxcvOHwTRTmo9h9A795ncThfKAUagyOzQnW8=)
3: 092239A9C28840E7E025454A2EA108ED5A8BF369.crl (hash: gz5Dmuvl2cRgTX190pAXcT/5FAwivPzqJuUNZXyGiHI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 18 Jun 2026 01:54:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:02:cb:b7:0a:c4:bb:a2:87:88:67:ec:56:6b:2b:9d:0a:e3:0c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=092239A9C28840E7E025454A2EA108ED5A8BF369
Validity
Not Before: Jun 17 00:23:35 2026 GMT
Not After : Jun 18 01:54:35 2026 GMT
Subject: CN=926CF44421F0271FEAD7210429EDB14BD6AD4111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:85:1b:87:d8:ba:71:32:42:7d:60:a6:77:38:
a5:e3:e3:f6:6b:b7:08:8e:54:49:17:9b:d6:c4:30:
fe:c8:d9:b1:38:74:7a:17:f2:4f:fa:e1:cf:d2:c4:
ee:1f:08:df:2b:90:98:ee:cb:7f:e3:81:38:ac:c5:
24:a9:4e:d1:d8:e7:09:e2:fe:4a:72:41:f4:c6:eb:
22:c7:04:be:2d:5d:dd:12:cb:34:6c:d6:53:2a:13:
a7:84:2b:7a:be:f9:25:36:d6:d6:b0:7d:e8:e9:64:
05:21:23:a4:5c:8a:d8:71:3b:74:07:c2:08:89:10:
89:07:52:0f:d3:67:22:ed:c4:9a:92:95:0c:bc:fb:
ba:8b:74:29:88:55:e8:94:87:3c:2b:ff:a2:8c:49:
e1:92:6d:81:c3:d7:a4:33:0b:87:0c:61:c0:9d:e4:
ba:fc:75:b3:77:54:74:8c:6d:3e:80:3c:81:ef:38:
89:09:50:12:b1:20:85:6f:1c:d4:e6:38:e9:72:78:
a9:28:b1:56:06:3b:2d:e6:d2:37:96:04:d2:d2:c2:
ef:89:57:4d:59:3f:53:90:f3:25:4a:73:e8:d3:22:
6e:8c:f1:9a:61:99:15:50:11:4f:f6:94:34:f0:30:
3c:18:06:f3:62:05:a1:1e:e5:2c:da:25:16:e4:af:
d0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:6C:F4:44:21:F0:27:1F:EA:D7:21:04:29:ED:B1:4B:D6:AD:41:11
X509v3 Authority Key Identifier:
keyid:09:22:39:A9:C2:88:40:E7:E0:25:45:4A:2E:A1:08:ED:5A:8B:F3:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/092239A9C28840E7E025454A2EA108ED5A8BF369.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/f3a62c9a-d4f0-454b-807f-84f9b3c202b3/0/092239A9C28840E7E025454A2EA108ED5A8BF369.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a8:b4:1b:56:83:0d:94:a3:09:81:5a:ac:c3:8e:7e:32:41:
d8:25:7e:04:ce:47:21:f1:62:78:22:50:b0:bd:bd:7f:b0:a6:
e4:00:1b:38:a2:c9:08:35:c7:64:6e:50:f3:44:5d:8f:9c:09:
0c:f5:b4:b1:1a:ee:8b:d8:45:40:8b:76:f2:97:07:4a:1b:19:
a5:c3:fe:5d:d5:66:fe:54:27:ea:81:9b:f5:43:f0:fb:50:55:
6f:45:81:31:34:ca:0d:c2:24:aa:7f:af:ad:b9:8a:09:67:38:
fb:ab:a8:1e:e2:25:5f:a5:ee:a1:b6:1d:c4:e3:37:1d:1e:f4:
48:b0:68:df:ca:26:61:d2:9d:4a:a2:cc:01:80:12:94:bb:dd:
1e:e0:aa:e5:e8:e6:56:2d:b6:ee:22:8c:ad:a3:dd:c1:12:60:
dc:3b:84:08:b8:0b:54:ac:6d:19:e5:4b:46:d1:fd:be:9a:8e:
1c:13:37:17:16:9f:88:69:00:e1:86:f7:22:a9:6f:b0:34:06:
60:61:bb:88:a7:a2:43:6e:59:eb:7d:e1:b5:97:69:06:94:5c:
64:e2:0e:2e:0d:c6:f8:73:7d:26:2a:62:20:78:9d:58:d5:fc:
c6:b7:7c:87:1d:66:24:7f:9d:ff:d4:7c:f7:0c:a8:c5:49:66:
cb:c7:72:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:33:37 2026 by rpki-client