
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
File: 92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft (raw, json)
Hash identifier: 03c2CWjb9IkUK2Uv7t9aG0DI2bMPQrvkw3h52CXW/b4=
Subject key identifier: 96:20:92:B4:B4:37:89:5F:A7:CA:16:81:BB:86:D1:CF:C5:27:B1:29
Authority key identifier: 92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
Certificate issuer: /CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Certificate serial: 7B1DC8D747972CE1DD38185DB75148CC6DE3DAE2
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
Manifest number: F8
Signing time: Wed 04 Nov 2026 06:56:55 +0000
Manifest this update: Wed 04 Nov 2026 06:51:55 +0000
Manifest next update: Thu 05 Nov 2026 07:33:55 +0000
Files and hashes: 1: 3130332e3138352e34372e302f32342d3234203d3e20313439363731.roa (hash: I+lY+hFIK96OR37hrIA/lKihinGsUdfLpRm0RyODHnI=)
2: 92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl (hash: HophNg6buTRhZ0fozi5L9omGRhn+jeppyTV6L9Eke3Q=)
3: 3130332e3138352e34362e302f32332d3233203d3e20313439363731.roa (hash: wZBlrqig4xqsQKFByqLNbFJmpywowT6yE+EzAllM1eM=)
4: 3130332e3138352e34362e302f32342d3234203d3e20313439363731.roa (hash: dQGnmXt0ACU8Nqsd0isNjFUqVatDqEn4WBFVgqsTSiw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Nov 2026 07:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:1d:c8:d7:47:97:2c:e1:dd:38:18:5d:b7:51:48:cc:6d:e3:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00
Validity
Not Before: Nov 4 06:51:55 2026 GMT
Not After : Nov 5 07:33:55 2026 GMT
Subject: CN=962092B4B437895FA7CA1681BB86D1CFC527B129
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:71:3a:31:a4:f2:68:14:67:ed:ad:c9:7e:
eb:6b:8d:b1:67:a2:08:8e:c8:b0:05:38:99:76:78:
d0:6d:03:4d:8f:de:7a:4a:ff:ca:9b:b7:a1:ca:27:
cb:ae:a5:17:2e:7a:ed:2c:52:2e:77:fa:e2:09:37:
2d:85:be:11:ce:f6:5f:b0:f8:a0:f3:c4:69:4f:11:
2c:95:a0:f8:25:6b:19:cd:90:5b:3a:e4:8f:fd:8c:
61:ea:4f:44:35:1d:58:1a:26:5f:ba:69:bd:a9:93:
2d:9b:da:60:ca:e6:0d:b9:0c:28:c9:47:25:db:3e:
58:1c:db:a9:2a:64:e2:9e:ab:e1:3e:3a:8d:09:dc:
3a:56:dd:60:43:62:69:fb:05:bf:59:07:5c:4f:ff:
c3:78:de:7d:e3:cd:08:1a:53:0b:5d:6b:57:97:e7:
2e:c7:83:a3:6f:95:25:90:21:94:2b:09:09:c6:2f:
ac:69:6d:b3:1d:9c:4f:2a:18:ba:a5:2d:a9:0e:91:
c3:73:9a:d8:6e:56:50:0b:c7:16:18:df:67:5b:3e:
81:38:5c:19:46:80:d7:b3:1d:6c:0b:5c:2b:9f:5d:
4a:e9:84:09:ca:e1:d9:ee:b2:2b:d1:b6:60:e9:0b:
0a:70:f8:4d:44:44:78:93:05:c2:81:62:aa:11:cc:
c2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:20:92:B4:B4:37:89:5F:A7:CA:16:81:BB:86:D1:CF:C5:27:B1:29
X509v3 Authority Key Identifier:
keyid:92:B2:D5:AC:CA:FD:29:C6:D9:1E:F4:2B:C9:96:29:D2:4F:F6:2C:00
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ec7f3533-2278-40e1-a262-7e7e431eb235/0/92B2D5ACCAFD29C6D91EF42BC99629D24FF62C00.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:14:7d:44:cc:2f:7c:37:d5:cb:bc:87:df:ba:04:0d:59:fe:
25:c0:9a:a0:cd:32:73:0e:dd:0b:3e:c6:8e:ae:36:e1:cf:a2:
0c:e0:40:71:c6:68:d1:8c:ea:6a:8c:65:8f:c8:96:1a:8d:7d:
84:72:ce:ca:a2:f2:87:6b:00:d0:21:1f:16:35:5f:6d:d6:ed:
28:fe:a6:1c:87:ef:45:b5:89:b5:43:53:3a:e4:bb:cb:de:aa:
4e:83:c9:92:ae:a3:74:63:14:86:da:f5:4b:5d:f5:65:df:c4:
d7:77:8b:f4:4c:d6:64:cc:54:47:bd:a5:51:06:88:eb:8c:a2:
11:e5:76:bc:20:01:07:10:3a:f9:e9:b2:eb:1f:9d:d1:fe:de:
66:8a:2e:ae:6d:a0:67:44:dd:dd:a1:47:7d:be:b6:70:e5:df:
3f:4b:f6:93:6c:f1:99:38:54:fe:19:a2:4f:e3:2f:5f:81:93:
1a:25:35:89:cd:31:b9:d1:32:30:49:a7:69:2c:5b:bb:ee:98:
ab:c2:c8:f8:6a:18:1a:97:96:c4:64:4d:24:f6:86:e1:d6:99:
2a:14:f7:3b:75:63:1a:1c:fe:3b:06:41:5c:03:eb:6a:f5:8a:
58:2c:a0:c0:1c:c0:b1:b7:3c:fe:b4:79:16:da:e3:13:7d:9a:
3a:10:46:d0
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUex3I10eXLOHdOBhdt1FIzG3j2uIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTJCMkQ1QUNDQUZEMjlDNkQ5MUVGNDJCQzk5NjI5RDI0
RkY2MkMwMDAeFw0yNjExMDQwNjUxNTVaFw0yNjExMDUwNzMzNTVaMDMxMTAvBgNV
BAMTKDk2MjA5MkI0QjQzNzg5NUZBN0NBMTY4MUJCODZEMUNGQzUyN0IxMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7S3E6MaTyaBRn7a3JfutrjbFn
ogiOyLAFOJl2eNBtA02P3npK/8qbt6HKJ8uupRcueu0sUi53+uIJNy2FvhHO9l+w
+KDzxGlPESyVoPglaxnNkFs65I/9jGHqT0Q1HVgaJl+6ab2pky2b2mDK5g25DCjJ
RyXbPlgc26kqZOKeq+E+Oo0J3DpW3WBDYmn7Bb9ZB1xP/8N43n3jzQgaUwtda1eX
5y7Hg6NvlSWQIZQrCQnGL6xpbbMdnE8qGLqlLakOkcNzmthuVlALxxYY32dbPoE4
XBlGgNezHWwLXCufXUrphAnK4dnusivRtmDpCwpw+E1ERHiTBcKBYqoRzMLhAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUliCStLQ3iV+nyhaBu4bRz8UnsSkwHwYDVR0j
BBgwFoAUkrLVrMr9KcbZHvQryZYp0k/2LAAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZWM3ZjM1MzMtMjI3OC00MGUxLWEyNjItN2U3ZTQzMWViMjM1LzAvOTJCMkQ1QUND
QUZEMjlDNkQ5MUVGNDJCQzk5NjI5RDI0RkY2MkMwMC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MkIyRDVBQ0NBRkQyOUM2RDkxRUY0MkJDOTk2MjlEMjRGRjYy
QzAwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZWM3ZjM1MzMtMjI3OC00MGUxLWEy
NjItN2U3ZTQzMWViMjM1LzAvOTJCMkQ1QUNDQUZEMjlDNkQ5MUVGNDJCQzk5NjI5
RDI0RkY2MkMwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAFEUfUTML3w31cu8h9+6BA1Z/iXAmqDNMnMO
3Qs+xo6uNuHPogzgQHHGaNGM6mqMZY/IlhqNfYRyzsqi8odrANAhHxY1X23W7Sj+
phyH70W1ibVDUzrku8veqk6DyZKuo3RjFIba9Utd9WXfxNd3i/RM1mTMVEe9pVEG
iOuMohHldrwgAQcQOvnpsusfndH+3maKLq5toGdE3d2hR32+tnDl3z9L9pNs8Zk4
VP4Zok/jL1+BkxolNYnNMbnRMjBJp2ksW7vumKvCyPhqGBqXlsRkTST2huHWmSoU
9zt1Yxoc/jsGQVwD62r1ilgsoMAcwLG3PP60eRba4xN9mjoQRtA=
-----END CERTIFICATE-----
Generated at Wed Nov 4 19:15:09 2026 by rpki-client