
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
File: B92828ABEAB7476AE406E35D620052C840B4D768.mft (raw, json)
Hash identifier: /pYrayemCaj4c9IiQd3T1nepGbkxukviGKtw/QjzdTE=
Subject key identifier: 0E:3D:29:52:8D:20:D6:2F:33:9E:45:E3:84:2D:BD:07:44:48:00:32
Authority key identifier: B9:28:28:AB:EA:B7:47:6A:E4:06:E3:5D:62:00:52:C8:40:B4:D7:68
Certificate issuer: /CN=B92828ABEAB7476AE406E35D620052C840B4D768
Certificate serial: 454FD1F5221E41DD5034B422D4465A768717E33F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
Manifest number: BC
Signing time: Mon 21 Sep 2026 05:13:05 +0000
Manifest this update: Mon 21 Sep 2026 05:08:05 +0000
Manifest next update: Tue 22 Sep 2026 06:48:05 +0000
Files and hashes: 1: B92828ABEAB7476AE406E35D620052C840B4D768.crl (hash: 0dZx60qKQ66n5m6BjLb30lYEUEU2Po0wF8msajhCxVk=)
2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: eFHp6Mqo646PIybT2578/19BpYOBLtOMwfgE5FAeDn8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.crl
rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 22 Sep 2026 05:55:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4f:d1:f5:22:1e:41:dd:50:34:b4:22:d4:46:5a:76:87:17:e3:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B92828ABEAB7476AE406E35D620052C840B4D768
Validity
Not Before: Sep 21 05:08:05 2026 GMT
Not After : Sep 22 06:48:05 2026 GMT
Subject: CN=0E3D29528D20D62F339E45E3842DBD0744480032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:32:49:78:cd:53:37:af:85:9a:e7:c0:67:
00:94:ec:20:88:37:f2:17:e8:31:c3:6c:73:7f:2a:
25:7f:48:5e:a4:8a:8e:3a:50:0e:51:eb:42:87:41:
2b:cd:df:ff:73:1a:f6:33:39:05:e8:c5:ba:8e:43:
92:31:65:27:3e:1e:86:90:2d:8b:fc:df:9a:3b:50:
4a:83:bf:7e:b7:78:20:91:7f:5d:ae:1f:92:fc:b4:
d9:29:a8:ed:b6:4f:ce:f3:da:f5:3e:2a:9d:8e:f8:
aa:fe:ce:a6:e0:fd:57:fc:2a:2e:03:72:7f:3a:41:
c7:e2:7c:78:1b:29:a3:e7:8b:ab:52:d1:e0:10:dc:
54:8e:a8:31:ca:b4:7e:49:f5:f5:17:3e:8c:90:92:
b5:2a:38:de:b9:aa:e1:e3:6b:c2:a2:1d:29:f6:ba:
bb:55:30:22:8d:91:8d:0c:c9:b7:bf:9b:1b:12:6e:
4a:af:50:cd:68:1e:c0:b6:a3:3d:a0:12:5c:72:78:
f9:13:9d:7c:fc:f6:44:69:55:75:4c:55:78:3c:14:
db:1a:ee:28:fb:74:b7:0d:f3:c1:c9:fa:96:02:b6:
e4:47:ee:dd:f1:92:93:d3:da:1d:fe:81:7f:76:51:
32:5c:85:81:a2:c4:46:0e:0f:9b:b0:1f:3e:d7:ef:
c7:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:29:52:8D:20:D6:2F:33:9E:45:E3:84:2D:BD:07:44:48:00:32
X509v3 Authority Key Identifier:
keyid:B9:28:28:AB:EA:B7:47:6A:E4:06:E3:5D:62:00:52:C8:40:B4:D7:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:14:ad:be:28:2f:1f:3a:a2:52:5c:da:02:4d:35:9c:16:e6:
6a:6f:5c:39:00:84:fd:4f:d2:32:c6:39:21:1f:e5:a2:3e:58:
96:97:0e:cd:cc:44:aa:38:fa:df:e0:10:00:3e:9c:7f:b2:94:
de:c1:24:fe:fd:8a:a5:75:1e:40:24:26:09:fc:f5:cb:dc:be:
c0:d1:08:c4:ed:97:b0:1e:51:6a:fe:c9:ce:b4:e5:d6:57:1b:
a0:1b:10:60:cc:3a:cf:0b:d0:50:59:cf:9a:78:79:f9:b1:a6:
82:91:df:5d:79:1b:c2:24:27:ca:71:ed:7f:e7:07:3c:a3:fb:
f7:83:8a:a4:39:c1:83:7c:df:2b:67:7f:ff:ab:27:85:94:4b:
e9:ac:a8:44:b1:aa:0d:41:f2:fc:fa:8c:c6:85:4d:6e:ec:51:
0f:e9:3b:ac:32:ed:4c:80:23:0f:1d:9d:88:ce:80:a2:10:60:
47:56:5e:c3:07:b9:eb:90:be:bf:55:d7:c2:56:4d:0d:c1:92:
fe:c8:91:c6:d9:c9:88:35:7a:cd:16:03:d3:aa:ec:0b:60:b3:
25:55:56:83:0c:22:90:f9:b3:52:ee:fb:b3:af:a1:55:4f:e3:
25:6e:7d:68:21:df:1f:d5:84:90:22:e8:a3:69:ce:62:10:69:
59:04:c9:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:42:46 2026 by rpki-client