
$ rpki-client -vvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json)
Hash identifier: FqDDXyPpBRKCM87w+2izHkhbRXsqjgsoVMFWnkrFSuQ=
Subject key identifier: 05:06:EE:9E:F8:3E:B9:F8:35:5B:2D:1E:1A:9B:4E:3B:A7:98:7F:AA
Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Certificate serial: 08C62FF84D16220F01123A109FF82FA801769984
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 17:05:57 +0000
Manifest this update: Thu 23 Jul 2026 17:00:57 +0000
Manifest next update: Fri 24 Jul 2026 20:01:57 +0000
Files and hashes: 1: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=)
2: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: T2o4rgYv6uOn5W+8vRJFSBWgLSRAfDkLj6dt20M3Vtg=)
3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 20:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:c6:2f:f8:4d:16:22:0f:01:12:3a:10:9f:f8:2f:a8:01:76:99:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Validity
Not Before: Jul 23 17:00:57 2026 GMT
Not After : Jul 24 20:01:57 2026 GMT
Subject: CN=0506EE9EF83EB9F8355B2D1E1A9B4E3BA7987FAA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:af:f9:f6:70:1e:f8:ce:f3:6e:a2:fa:c2:ae:
86:29:7f:47:12:ee:a5:e1:d3:f9:06:aa:52:e7:20:
92:b9:81:ba:12:59:19:87:ce:74:55:90:09:ec:7c:
26:06:76:ac:9b:31:12:8e:eb:90:8b:b4:35:b6:7e:
27:42:0f:14:8b:a0:d4:55:d7:69:e0:5f:7b:71:07:
5f:9f:a2:34:52:13:cc:bc:eb:3d:02:e9:73:0b:7c:
b9:0f:72:f0:13:9c:7a:65:3c:cf:ac:09:f0:89:46:
ed:2f:2e:8d:9e:fa:1f:fd:89:ec:80:0a:e8:31:9e:
3c:8e:23:df:63:32:56:bb:8e:5d:cc:f7:19:57:5c:
36:c3:5e:5b:1e:27:59:e8:3c:68:4f:50:9f:67:c5:
88:f1:6f:ed:74:36:44:97:6c:27:98:db:a6:ca:0b:
6e:71:5f:14:ad:84:dd:e5:a7:94:6c:2a:8e:39:94:
7d:e7:12:06:c1:51:4b:c4:3d:c3:4c:0d:d7:0e:81:
d3:ee:06:4a:b6:2f:7a:86:68:e4:db:64:f0:d4:72:
db:7d:dc:36:ed:1e:8f:91:78:46:21:42:26:f9:c0:
12:0b:78:d8:74:c1:ea:06:ce:2a:e6:fe:70:b3:e1:
1b:8d:50:ce:db:7d:2e:cf:b0:4e:2d:e1:8e:49:8d:
b4:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:06:EE:9E:F8:3E:B9:F8:35:5B:2D:1E:1A:9B:4E:3B:A7:98:7F:AA
X509v3 Authority Key Identifier:
keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:c2:ae:9a:67:ad:ef:4d:34:a6:46:26:42:fa:1f:5d:76:89:
fa:5c:87:4a:fd:47:45:cd:a9:d7:e4:7a:a4:df:99:b7:52:35:
0a:08:5e:d3:bf:c1:39:00:aa:55:98:75:9f:fb:2b:8d:e5:21:
af:d0:06:6c:7b:aa:76:6c:3e:1f:03:02:4d:7b:97:4f:1f:8c:
3a:07:49:60:64:ce:a2:e9:08:a3:84:cf:a7:89:e5:75:8e:00:
c5:01:b8:c5:58:a4:c5:0d:ef:32:d1:bd:5e:2f:bb:b1:5e:19:
94:79:51:2a:c3:ca:d9:15:f8:bc:0f:9d:2c:c8:3a:ca:0f:e6:
a7:77:2e:c5:78:45:28:c5:0e:1a:6e:52:ad:30:0e:85:6f:a1:
0b:c3:d7:84:22:29:f4:78:38:b7:2c:b3:ca:fa:01:38:61:ac:
10:8a:1d:20:f9:80:76:4b:44:d4:a0:33:65:a4:7c:b3:0c:27:
b6:1c:e6:55:52:a7:bf:52:19:ad:00:bc:bd:72:56:18:ba:ba:
55:3a:bf:bd:81:22:22:2d:fc:8f:3f:52:c8:c3:19:6d:cb:b5:
d4:2a:f2:e7:4f:43:c9:aa:98:51:47:9c:49:ee:6f:82:87:3e:
43:5b:e4:bc:8f:ab:90:06:01:ed:6a:03:2a:36:ab:4d:71:80:
53:df:2a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:44:35 2026 by rpki-client