
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
File: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft (raw, json)
Hash identifier: 6Zzls27xynwA7Q7thLLMXrXnflakZ2ZsGqdV8/8WSg4=
Subject key identifier: AB:16:CC:E5:FC:C7:3C:F2:E9:24:A9:C2:29:78:1E:9A:06:57:20:3D
Authority key identifier: 00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
Certificate issuer: /CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Certificate serial: 55A8BC4ED5B047B67DE46A475C4342B47A7EECEB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 16:19:55 +0000
Manifest this update: Thu 23 Jul 2026 16:14:55 +0000
Manifest next update: Fri 24 Jul 2026 19:10:55 +0000
Files and hashes: 1: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: W6gU13vwkvKOw0VI8aGpc6wnH09tgyU6w+1j71bL/DU=)
2: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl (hash: elV8ZsujmNtA0hbXcDJo4NfLaVTMMy/WrwVcO/coawI=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 19:10:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:a8:bc:4e:d5:b0:47:b6:7d:e4:6a:47:5c:43:42:b4:7a:7e:ec:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Validity
Not Before: Jul 23 16:14:55 2026 GMT
Not After : Jul 24 19:10:55 2026 GMT
Subject: CN=AB16CCE5FCC73CF2E924A9C229781E9A0657203D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:2d:1e:f3:d1:92:47:59:de:b9:72:3a:e3:2c:
2f:0e:55:a1:61:49:d4:6d:7b:f6:7a:0f:c9:f7:86:
0a:bd:55:b5:e1:07:9f:4b:bc:03:15:6a:52:c3:57:
a7:ec:20:ba:88:57:51:bf:fe:b7:47:c7:db:e8:eb:
9a:21:a4:6d:35:3b:c3:a5:2f:28:cb:ee:8d:96:e4:
76:ee:b7:cd:bc:ea:2b:16:95:8a:bd:23:27:2f:0d:
0a:93:58:5c:e8:0a:35:64:44:72:f8:3e:bc:7f:3a:
85:9c:2a:0c:1f:70:1d:7c:c0:9b:97:e8:7d:be:18:
84:a4:80:5b:6d:66:43:1b:01:ef:cd:c3:6a:de:d0:
fb:ea:15:a2:22:68:1f:60:cf:5a:28:34:ba:28:f2:
4c:25:1a:82:51:9c:d5:31:6d:da:db:8f:9b:8c:09:
12:f7:cb:50:5a:57:ba:86:be:c5:ea:a8:0f:ce:40:
48:f7:8f:c6:38:98:be:86:93:5e:f5:56:a0:1c:bc:
24:ab:3c:0b:43:02:d1:ff:e3:78:46:d6:26:16:16:
cd:eb:65:cb:e1:da:6d:26:ba:6c:34:24:71:16:5d:
a8:0a:0f:84:59:f3:46:30:d5:78:b3:1f:3a:b3:87:
a8:3c:be:72:8d:4e:63:93:0f:9d:90:c5:3a:38:96:
b5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:16:CC:E5:FC:C7:3C:F2:E9:24:A9:C2:29:78:1E:9A:06:57:20:3D
X509v3 Authority Key Identifier:
keyid:00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:db:0f:4b:25:d2:ff:bc:15:86:16:b4:f4:f6:c5:62:ba:5b:
59:3b:14:4b:e9:a0:4a:8b:56:b7:49:35:bc:82:04:44:e1:77:
ca:dc:b4:45:fe:ae:22:da:f4:a0:f3:6a:1e:31:24:5f:6a:cd:
b5:7f:e7:91:44:b2:1e:e3:db:c9:7f:5e:65:55:8e:ce:6b:79:
c5:1c:e3:da:b5:96:3b:0a:45:b6:b9:63:50:9d:0b:9c:12:19:
ad:b3:f0:b7:07:ca:90:e4:a8:36:f8:3c:e2:c9:db:9d:25:48:
06:83:d2:ac:ef:cc:d2:5f:4d:22:c7:fa:7f:97:f1:8f:86:1e:
27:df:eb:ca:2b:05:5b:42:39:8c:d2:42:54:c8:d4:64:d1:05:
ef:d9:bd:f6:ea:01:a8:9f:d6:d4:8f:cd:68:56:5d:b8:c8:db:
2d:be:4e:be:0d:26:5d:1b:2c:61:79:1f:aa:36:8b:ad:c3:4a:
b4:a7:fb:0a:07:c6:e1:dd:b3:42:44:d9:d0:75:2d:ff:ca:44:
79:7f:82:57:57:32:a3:f8:8d:ff:ef:c4:8f:93:01:bc:69:f7:
22:a6:44:99:2d:d0:3f:7c:94:0b:a3:8b:e0:67:66:5e:e0:39:
4e:0c:93:f5:7a:f2:19:3d:90:b7:8f:69:9e:ee:b1:df:c8:a2:
1e:56:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:05 2026 by rpki-client