
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
File: 92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft (raw, json)
Hash identifier: RGlfO2KsT8D1vFIQxgM004lqSwDHQG9rynLPN34S4Q0=
Subject key identifier: 48:C4:E7:D4:15:BF:1D:7D:A6:9E:BE:D7:CB:D9:49:FB:24:61:2D:18
Authority key identifier: 92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
Certificate issuer: /CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Certificate serial: 5630115FC95E4943F1E56637065690C2A08818CB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
Manifest number: C4
Signing time: Sat 26 Sep 2026 10:07:18 +0000
Manifest this update: Sat 26 Sep 2026 10:02:18 +0000
Manifest next update: Sun 27 Sep 2026 13:11:18 +0000
Files and hashes: 1: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: wZBlrqig4xqsQKFByqLNbFJmpywowT6yE+EzAllM1eM=)
2: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: dQGnmXt0ACU8Nqsd0isNjFUqVatDqEn4WBFVgqsTSiw=)
3: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: I+lY+hFIK96OR37hrIA/lKihinGsUdfLpRm0RyODHnI=)
4: 92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl (hash: Dql6W8jRmz/pshwS0hUoO8P6CHYouaZ2qirLsE9g6Nw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 27 Sep 2026 12:52:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:30:11:5f:c9:5e:49:43:f1:e5:66:37:06:56:90:c2:a0:88:18:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Validity
Not Before: Sep 26 10:02:18 2026 GMT
Not After : Sep 27 13:11:18 2026 GMT
Subject: CN=48C4E7D415BF1D7DA69EBED7CBD949FB24612D18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:9a:a4:fa:68:cb:e0:74:c3:b2:11:0d:83:
10:73:ca:3d:c6:46:79:20:51:40:27:09:38:32:5b:
8c:ec:37:e5:7f:cb:f5:99:82:e7:53:84:56:23:21:
61:9b:2e:07:87:7b:c7:60:67:4f:6b:4e:70:e3:47:
09:b6:32:c2:13:2b:4e:80:4d:6d:9a:a2:38:ad:d9:
d3:08:09:15:3f:07:0b:80:d2:8c:c4:62:fc:bc:5b:
71:c2:28:dd:4b:e3:59:ca:fc:74:39:a1:b3:85:75:
e3:3e:65:f5:ed:31:dd:48:24:cd:e5:ab:31:68:58:
8f:31:bc:2c:c0:c5:12:2d:22:f2:65:bd:dd:23:cd:
c4:70:ff:0c:37:87:70:01:96:42:5e:78:76:40:66:
f2:b9:8f:22:ee:0a:a6:63:9f:3a:cb:a5:ef:1e:c3:
53:3e:ed:53:b1:f4:26:c6:e5:9e:ff:be:39:ec:d2:
5e:16:ff:6c:38:59:3e:d3:6a:36:15:45:e6:6f:70:
83:5a:16:6a:1f:14:76:b1:63:97:4d:b6:f2:4a:e4:
80:2e:71:49:17:2d:ef:cf:4e:7f:07:e2:b8:75:bd:
78:85:52:8e:3c:16:f2:12:5c:c5:6b:29:f0:ba:a1:
b3:55:0d:eb:ab:ab:c5:1d:cd:43:bf:3b:57:81:06:
e6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C4:E7:D4:15:BF:1D:7D:A6:9E:BE:D7:CB:D9:49:FB:24:61:2D:18
X509v3 Authority Key Identifier:
keyid:92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:15:c4:00:5a:de:45:0d:c0:4a:67:48:b3:35:a9:7b:62:28:
98:f4:b7:20:ea:ea:0c:44:b6:23:53:62:a2:52:03:7a:6f:01:
5d:3c:ab:b5:13:35:8c:bf:1d:3a:35:02:61:15:85:4b:6f:8a:
30:20:11:f5:59:2b:2f:87:62:b5:a3:23:62:6d:86:60:95:a7:
08:48:6f:9d:b9:ec:d1:bf:2d:64:0f:b9:c6:4a:8e:a7:1b:62:
94:04:7a:fc:37:4c:2d:e9:22:00:79:5b:7d:18:c5:70:ea:63:
16:7c:be:01:5f:34:fc:0e:79:61:4a:24:0a:26:db:34:90:57:
c4:fd:02:04:64:8a:7f:25:2b:a0:b2:64:ab:6f:37:9a:35:ca:
7d:0a:df:71:18:3f:39:e5:fc:80:04:cd:4a:7d:b4:e9:df:b0:
c3:fd:12:d9:5d:b4:c3:5d:8f:58:b0:4d:5a:0f:6b:38:72:a3:
8e:5d:9d:4c:e9:4c:ce:c6:d4:36:7f:65:ee:fd:85:c2:87:aa:
85:4c:98:f3:6e:a5:54:a4:89:ec:ac:a4:52:3e:0a:c1:12:ec:
1f:bd:04:a5:8a:d0:18:d4:fe:76:2d:ce:ef:56:ab:ba:31:a1:
f8:70:96:9d:3b:b5:a6:8c:50:98:d9:71:68:95:b2:4e:7c:58:
55:dc:a8:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:08:02 2026 by rpki-client