
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
File: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft (raw, json)
Hash identifier: UrxbknDFtetdAWcGKAO/m1pPq1hN0u21NO66xErFYoc=
Subject key identifier: 81:EA:1B:95:77:8A:4A:D1:18:C7:8E:87:66:74:6D:2F:35:E1:4C:58
Authority key identifier: 9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
Certificate issuer: /CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Certificate serial: 7DFCA4C9D1FB54C8A91F007AE3F008BAE405D74D
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
Manifest number: C1
Signing time: Thu 24 Sep 2026 06:33:53 +0000
Manifest this update: Thu 24 Sep 2026 06:28:53 +0000
Manifest next update: Fri 25 Sep 2026 09:01:53 +0000
Files and hashes: 1: 9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl (hash: yhzDMQqRUdUWaqxcwvEXA8QFgViKNq7maCm9Yje1qOk=)
2: 323430343a643863303a3a2f33322d3438203d3e20313338383630.roa (hash: OBT9V34k6UtzzKNYWF9awZ7+etL3ZsNE8k4xpnFdPg0=)
3: 3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (hash: LO0XYAcYP+wJFsgGl9xbalFh8oG/l3nUuL82q6wx3FE=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 09:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:fc:a4:c9:d1:fb:54:c8:a9:1f:00:7a:e3:f0:08:ba:e4:05:d7:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9D92E93EB1580E3CD40FF34CFAB304ADDB068187
Validity
Not Before: Sep 24 06:28:53 2026 GMT
Not After : Sep 25 09:01:53 2026 GMT
Subject: CN=81EA1B95778A4AD118C78E8766746D2F35E14C58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:65:e7:f4:ef:4d:c3:74:d0:08:5a:9d:ce:5d:
54:a3:ac:99:66:63:74:9b:7b:17:0c:83:16:ba:aa:
a5:60:d0:36:b3:c8:0a:6f:6a:2f:41:3f:4b:b6:4f:
6c:05:72:33:0b:a1:22:8a:70:1f:61:3c:4c:5a:81:
bd:16:9f:86:d7:4d:ab:b6:3d:e5:e8:6c:e2:16:b5:
1d:56:66:84:b5:1a:27:83:0d:d0:87:ee:51:2a:30:
46:31:20:b4:76:6c:5e:10:ef:d5:a7:ef:54:0b:76:
d0:90:47:8f:bc:bf:a4:38:71:b4:57:e0:da:e4:69:
20:6e:60:8f:a4:19:24:d8:ac:7c:58:34:e2:94:d6:
dd:82:11:be:1e:85:31:4e:e2:86:d9:01:01:e4:00:
dc:34:6d:aa:51:4d:a0:63:3b:89:d9:5d:56:83:78:
b3:ba:d9:5d:72:98:5a:39:d1:36:0f:ee:cf:b7:ef:
9f:19:c1:d5:00:71:d4:98:c1:76:df:4d:38:00:13:
b9:96:96:e5:d1:71:fe:42:2e:07:3e:6b:a8:ba:ab:
09:6c:93:aa:0a:5d:05:dd:47:ab:62:ad:2c:67:5a:
d5:70:95:7f:24:7d:ab:03:d7:08:2c:be:a2:8e:cb:
28:64:19:41:01:00:d1:bd:22:87:89:10:f1:2d:e2:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EA:1B:95:77:8A:4A:D1:18:C7:8E:87:66:74:6D:2F:35:E1:4C:58
X509v3 Authority Key Identifier:
keyid:9D:92:E9:3E:B1:58:0E:3C:D4:0F:F3:4C:FA:B3:04:AD:DB:06:81:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/9D92E93EB1580E3CD40FF34CFAB304ADDB068187.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:4a:43:d4:af:3d:43:fe:5a:68:a6:da:3b:5f:bc:b0:16:84:
8f:44:3d:b6:ab:e9:4f:0e:64:2b:e9:a4:8f:3a:e2:88:00:af:
e7:29:69:86:54:3d:c1:34:e5:89:0d:20:91:e7:83:3f:8b:d9:
83:f1:bc:01:dd:fc:33:cc:e0:5b:c0:1a:cb:f3:da:04:d4:d9:
f8:65:7e:6e:2a:ee:2a:a9:56:e0:c1:c6:03:4e:3a:27:ac:44:
1e:e6:b4:f1:4b:55:27:23:b6:7f:9b:14:6f:9d:44:08:3e:60:
e1:a7:67:fd:95:d7:7b:8f:c9:53:73:51:49:cd:f9:86:00:92:
4e:b2:2f:d2:6d:b6:da:ea:f5:3a:c9:9d:b2:75:ef:62:4f:67:
65:ff:7a:6e:10:53:0d:7c:65:6f:2f:d0:61:ab:40:d2:fb:d5:
d9:04:69:ae:9c:e5:f9:1d:49:c1:9f:7c:74:16:32:73:d6:5a:
71:b1:ff:b6:87:fd:83:dd:12:c7:f2:d3:79:96:42:f7:52:e1:
d3:01:31:43:95:25:a1:37:2e:fe:2d:b1:a6:db:12:67:7b:28:
e2:8d:35:56:54:84:c6:3f:e0:17:e2:d1:df:b4:d9:39:2c:4f:
75:cb:45:62:42:0d:04:99:79:12:70:ff:68:d0:75:9b:47:59:
b1:af:80:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:16:33 2026 by rpki-client