
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
File: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft (raw, json)
Hash identifier: N+wofJkOCQoyLbQlC2F4z9oT5Y4/F/x/sxtrYgoyrBs=
Subject key identifier: 06:97:62:81:5A:68:7D:5F:AC:54:A0:8B:37:27:B5:51:F2:61:DF:5F
Authority key identifier: A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89
Certificate issuer: /CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589
Certificate serial: 323A7E0FA7EFBD08D871B3468A56F1A9CC9252B9
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
Manifest number: C2
Signing time: Thu 24 Sep 2026 12:05:38 +0000
Manifest this update: Thu 24 Sep 2026 12:00:38 +0000
Manifest next update: Fri 25 Sep 2026 13:37:38 +0000
Files and hashes: 1: A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl (hash: IW53bu/lGJfaSVbC54pvcsPuEf+FOLAXw+r1qGmRUO4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl
rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 10:59:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:3a:7e:0f:a7:ef:bd:08:d8:71:b3:46:8a:56:f1:a9:cc:92:52:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A94192CB262FA78C5FC67CE18BDB9CCF1F42D589
Validity
Not Before: Sep 24 12:00:38 2026 GMT
Not After : Sep 25 13:37:38 2026 GMT
Subject: CN=069762815A687D5FAC54A08B3727B551F261DF5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:53:b4:d0:8e:10:42:31:9f:af:56:a4:06:37:
0d:e7:93:85:4d:f2:d4:10:96:16:cf:9c:5e:35:a9:
a7:e8:6f:51:57:93:58:65:ca:b5:70:1e:b0:f8:69:
af:74:0e:b1:51:59:fe:cc:0e:92:70:19:8f:5a:b1:
12:05:b4:32:6d:8e:47:9e:88:fc:31:e4:28:9d:b1:
9d:60:8d:f1:19:ec:50:80:bb:cf:ba:af:ed:cc:e3:
f8:b8:8b:20:d9:5b:86:00:32:18:9c:a6:7e:8c:26:
f7:16:3b:62:70:bc:9b:bf:f2:a4:6e:fd:21:fb:08:
b3:f3:1d:8b:1b:95:1f:43:a7:25:32:08:c0:f1:c0:
2f:10:ff:0b:09:6d:3c:88:a4:3f:74:5a:60:4b:f4:
17:48:25:6f:84:7d:28:06:b6:0c:3a:a9:5f:9e:22:
78:d3:9b:e5:1b:fd:a6:36:75:e0:7e:30:e5:a9:c8:
af:c7:00:cf:78:ee:34:fa:65:23:a5:4f:f8:4a:87:
e5:4a:16:76:4e:85:7b:e8:41:5e:29:c0:dd:ff:31:
86:5e:90:44:31:34:fd:26:94:67:35:d8:49:57:b3:
cd:bf:ad:41:06:1c:21:67:d9:d8:4f:cd:c5:4c:77:
27:41:7d:db:7a:fc:97:a6:d0:b3:4e:08:bb:3a:2f:
68:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:97:62:81:5A:68:7D:5F:AC:54:A0:8B:37:27:B5:51:F2:61:DF:5F
X509v3 Authority Key Identifier:
keyid:A9:41:92:CB:26:2F:A7:8C:5F:C6:7C:E1:8B:DB:9C:CF:1F:42:D5:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/1/A94192CB262FA78C5FC67CE18BDB9CCF1F42D589.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:38:6f:c0:9f:d2:1f:c1:fd:d2:75:4e:8f:46:0d:27:4f:58:
61:05:23:b3:c9:73:3a:6f:59:f9:a1:52:ac:03:27:db:b7:50:
9d:39:9d:f1:f4:e6:a5:6e:d5:9e:4f:ed:a5:a7:4f:e1:65:84:
51:aa:23:85:6e:04:c8:22:e8:aa:5a:ea:fa:2f:22:e1:0c:da:
e7:7c:7f:22:e0:c5:92:de:bb:0e:48:85:8b:ad:34:a8:3f:9c:
ca:86:03:f3:40:c5:44:08:25:9b:88:c4:18:18:60:4e:8b:a3:
aa:7a:d0:bd:cd:cd:7d:35:2f:13:0d:74:ce:ab:4a:32:8b:7a:
bd:cb:78:d5:d4:ec:47:82:61:7a:c6:78:cd:90:31:8e:d1:f2:
06:01:17:72:e4:53:62:62:f0:f3:49:41:94:38:7e:18:49:ce:
01:ba:8a:c9:4a:67:15:7f:b0:03:4c:9f:8c:ee:0a:f6:b7:ab:
0c:a0:3b:f9:d5:c1:d9:40:9e:ce:c5:f6:0b:1f:f9:f7:a8:fe:
3f:9d:af:df:b8:d7:89:98:3a:1f:5d:35:66:1d:15:8c:76:64:
70:b0:41:ce:ac:40:8d:7a:07:10:1d:73:57:e3:2e:31:ed:b9:
01:18:b1:4c:67:03:9e:c1:4b:82:d9:e0:66:17:cc:8d:c3:ac:
84:5f:0a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:00:04 2026 by rpki-client