
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
File: 92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft (raw, json)
Hash identifier: vwREJtYU6mbcFTwUnPkdG6YQ/vdt79GWmkEtCuRRaO0=
Subject key identifier: B2:20:A8:59:66:4B:DC:00:F3:0E:03:AF:06:E4:43:30:E4:7D:B2:D4
Authority key identifier: 92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
Certificate issuer: /CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Certificate serial: 7F9B72D33B017CBAA229920E376CDCDE35E7B325
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
Manifest number: C1
Signing time: Wed 23 Sep 2026 10:08:42 +0000
Manifest this update: Wed 23 Sep 2026 10:03:42 +0000
Manifest next update: Thu 24 Sep 2026 11:52:42 +0000
Files and hashes: 1: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: fX1aquXy3wBHFbm6F7rqURzeTxgvhXC34YY6g9Q0Yc4=)
2: 92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl (hash: JFcEpuJghzAZ1ShO0nxFXoOutnvKHYmI5lg4hSzc98A=)
3: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: eF5qNpkBv9+xMCg8eN21WjphiugXQ5NAQI9u6FyR9hY=)
4: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: E1JJ7Pf6RRc9CrvDCrblA/2c1fHnKQijraRY/RXe7gs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl
rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 24 Sep 2026 11:52:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:9b:72:d3:3b:01:7c:ba:a2:29:92:0e:37:6c:dc:de:35:e7:b3:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Validity
Not Before: Sep 23 10:03:42 2026 GMT
Not After : Sep 24 11:52:42 2026 GMT
Subject: CN=B220A859664BDC00F30E03AF06E44330E47DB2D4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:7f:cd:f2:c7:28:50:3b:99:d2:ed:59:9a:0f:
af:38:74:e8:1a:85:65:dd:0d:18:77:b7:3e:f7:71:
c3:df:52:6c:25:9f:d5:1a:75:37:24:99:2c:02:c7:
c3:0f:a1:2b:47:20:46:41:c0:43:d2:6a:46:a6:4e:
9f:a8:95:84:09:dd:c9:bb:d2:a9:f3:29:4e:eb:e4:
03:c2:12:af:5b:b9:76:45:f5:6d:fd:09:f7:90:fd:
7c:05:8c:d1:31:f9:9f:8d:87:d5:16:e9:84:42:70:
1d:ff:4d:a6:33:a0:8d:e1:44:59:ac:07:fa:a9:60:
99:af:f3:0e:34:47:56:46:dc:9e:ea:6b:16:59:7d:
29:dc:76:22:d6:75:b3:a8:71:ab:28:39:60:b7:f3:
da:07:0f:b0:23:19:f6:a1:be:ae:6c:ad:45:e7:93:
51:6c:a5:5b:09:1c:25:8b:52:c2:4d:43:8d:20:34:
4e:98:f0:7d:72:e8:02:ff:34:ec:93:92:bf:ac:9d:
4d:6a:ae:63:7d:7e:20:c2:6f:3c:60:c5:20:bb:64:
43:ad:31:fb:26:3d:d0:70:3c:58:dc:6b:6c:1a:d7:
c8:1f:c8:69:97:84:8b:67:c1:60:b3:b4:fd:c3:e4:
34:ab:94:0d:82:39:82:96:33:3a:1b:4b:c1:70:c5:
09:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:20:A8:59:66:4B:DC:00:F3:0E:03:AF:06:E4:43:30:E4:7D:B2:D4
X509v3 Authority Key Identifier:
keyid:92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:90:ee:1f:b7:64:88:03:fc:56:b7:6d:93:f8:1a:6a:b9:b2:
19:b3:9a:97:16:77:d3:44:ec:46:64:79:3b:76:2e:5a:90:f5:
ba:63:38:18:8e:0d:33:ec:97:77:4d:23:6f:9e:25:93:96:96:
c6:48:79:86:36:cf:a9:bd:cc:82:dc:b3:c9:2e:55:34:42:11:
99:1d:84:ab:c2:e9:cb:89:8d:f0:91:87:be:dc:6a:a2:4c:e3:
3b:54:4b:56:af:a1:77:43:32:1a:d1:67:7f:85:73:89:5d:1c:
57:41:f3:a2:63:94:1e:4b:7e:32:78:71:65:f5:24:41:50:e6:
5b:77:5e:5a:ff:47:9f:f0:17:d1:d9:f4:2e:8d:5e:d6:de:9b:
24:63:60:7b:d3:4f:79:e4:d1:73:14:c5:f9:2a:86:f0:3f:ba:
88:1a:9a:ab:c4:dd:e7:29:b9:ac:78:7a:e1:ff:58:a7:78:38:
12:18:51:49:f8:b5:a8:14:d1:62:ba:d5:58:2c:26:23:d0:fb:
41:f0:3d:62:18:f2:a3:de:ab:60:f6:ad:0c:f5:50:53:c2:64:
f3:bc:34:35:83:7b:35:71:46:7d:a2:b9:bb:f0:ea:23:ee:22:
e9:f5:89:29:56:bd:d4:8c:48:25:70:ba:2d:35:4d:bf:b3:8d:
4d:59:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:44:45 2026 by rpki-client