
$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
File: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft (raw, json)
Hash identifier: 4+B10+SdT5C4ytLoGUxcqXt6w/cvjWrSC0oFp6asfgw=
Subject key identifier: BB:D2:D5:3B:9E:C5:33:C8:67:8E:C8:F3:19:2F:61:FC:4F:82:96:BA
Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
Certificate issuer: /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Certificate serial: 2856913C2C30EE7895AF76256ACC4D464E7BD8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
Manifest number: 0562
Signing time: Tue 17 Mar 2026 15:30:47 +0000
Manifest this update: Tue 17 Mar 2026 15:25:47 +0000
Manifest next update: Fri 20 Mar 2026 22:59:47 +0000
Files and hashes: 1: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: VFU5DB8dG4nbadxLuF1q/tdYpIsYXQE4+EO3tI62s+c=)
2: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: gsHZwZaZZrGPSnKeaXQwKe0du+uegJ+SJ020XW50DPw=)
3: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: 5TAHWOIN003fsG8ycbo1mXpMVA4osDGLXqixgvxFexI=)
4: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl (hash: lnqygXg/O3Xqb440IL/uiIDq6pnQ3cMBzKlZdLbsk+Y=)
5: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: 3A9aXUT5ZliAMgJstYpcWHFTfUmMESodAfeb3G4B9tY=)
6: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: bUSsrxVSpx0QU4u2uNBA7y70+DlmrDl9YAKqMzKuk/Y=)
7: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: hlIP+MRQ5Nc1S7Ft5ZfPefr9DGR/+EoZGD9rJ2XoFDc=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 20 Mar 2026 22:59:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:56:91:3c:2c:30:ee:78:95:af:76:25:6a:cc:4d:46:4e:7b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89
Validity
Not Before: Mar 17 15:25:47 2026 GMT
Not After : Mar 20 22:59:47 2026 GMT
Subject: CN=BBD2D53B9EC533C8678EC8F3192F61FC4F8296BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1b:f3:49:04:57:24:e4:86:70:76:0d:65:18:
f0:12:3d:d3:0f:4e:1b:c2:92:76:51:19:de:0c:49:
4c:1e:1f:53:38:ff:76:ad:64:a7:d1:3e:fa:04:b8:
31:b1:a5:43:dd:aa:05:69:2b:74:02:7d:69:d5:c4:
cf:47:1d:d4:6a:7b:6f:9d:7a:4b:89:25:d9:9e:50:
9d:d4:d7:7b:78:cb:d7:3d:70:c2:a4:5f:dd:2a:4b:
2e:45:f1:90:97:70:66:f2:62:e6:27:2d:21:77:e4:
3d:b1:13:d5:e7:af:48:e5:8e:db:57:a8:32:ff:bf:
5a:24:d0:25:a8:e8:44:59:b9:32:61:43:58:27:b9:
8c:33:87:c7:89:85:b5:2c:dd:86:85:b1:0a:96:ce:
25:ce:d5:4a:67:0f:af:45:81:4a:b6:ea:4c:62:33:
28:f1:b3:82:e0:e7:19:21:81:bb:c1:48:71:93:b6:
b2:15:ee:5d:b9:3f:bd:29:b7:b1:c0:9a:55:dd:fe:
05:52:8b:c4:62:44:97:a7:84:57:90:91:61:e8:91:
9d:fc:fd:a8:fa:db:75:22:ca:91:3a:87:3b:96:76:
a4:ca:97:ae:ea:1c:a9:c7:ba:27:cb:da:a0:32:17:
b9:e2:30:e9:1f:bf:71:8e:57:48:c6:16:77:84:3f:
d1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:D2:D5:3B:9E:C5:33:C8:67:8E:C8:F3:19:2F:61:FC:4F:82:96:BA
X509v3 Authority Key Identifier:
keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:cf:9b:9d:fe:41:f9:2b:84:4b:a5:1e:9b:dd:7e:71:ea:5c:
2d:56:2a:bd:5a:32:db:f2:d7:6c:38:8b:df:c1:2a:fe:eb:0e:
83:39:1f:b7:ad:49:f0:41:69:3f:37:f7:06:d3:d6:d4:7d:f2:
31:76:4b:de:e0:f2:48:fa:63:9d:df:b8:b5:5d:e4:d0:70:c6:
70:cb:da:b7:44:84:6a:91:26:9d:c9:e9:44:71:73:3c:87:6b:
0f:15:d6:f0:18:b5:27:23:04:04:84:0f:81:d9:56:48:8d:98:
94:d7:d2:42:97:ba:66:6e:d0:b0:d5:49:44:6a:10:37:1e:94:
79:51:2e:cd:19:00:a4:25:80:a9:92:27:85:ae:6f:cb:d4:f7:
03:cc:a1:26:4e:47:29:90:c7:c2:44:fe:33:0d:24:35:be:30:
7b:56:3f:52:d5:dd:1e:25:cf:89:25:44:4d:21:de:9c:57:b0:
fd:ca:f5:c6:0c:f1:3f:f9:b6:7b:4e:86:f1:07:8a:51:e1:ad:
d8:6b:78:b3:89:e9:ee:1d:62:0f:25:2c:06:b9:4a:c1:87:d8:
cc:3e:1c:59:63:3b:0f:7a:d8:ab:f5:cd:92:9f:92:a6:01:ee:
2b:b1:b1:7d:64:a9:23:a8:52:47:1d:49:83:84:db:73:0e:a0:
ee:ce:da:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 09:41:26 2026 by rpki-client