
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
File: 2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft (raw, json)
Hash identifier: CDJBA+aZVnp4wurHmeyy3mvS/8T+kK8Eqlw0IFU1V1A=
Subject key identifier: DB:F4:DC:71:02:66:18:9D:8B:8A:15:48:88:70:33:0F:C3:59:65:31
Authority key identifier: 2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE
Certificate issuer: /CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE
Certificate serial: 28F8AB242C11A1CC98E6AADD791D13BACB5EFAD1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
Manifest number: A5
Signing time: Wed 02 Sep 2026 21:29:16 +0000
Manifest this update: Wed 02 Sep 2026 21:24:16 +0000
Manifest next update: Thu 03 Sep 2026 22:35:16 +0000
Files and hashes: 1: 2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl (hash: xyGIO6xNhGF+6J1GCXWfo3TBM0Hba1TazrsgThzIUzo=)
2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: NCgxViu3PZp4P1Zo/9Bj21AhLCE0vj8q1oF29Jx6iTY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl
rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f8:ab:24:2c:11:a1:cc:98:e6:aa:dd:79:1d:13:ba:cb:5e:fa:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE
Validity
Not Before: Sep 2 21:24:16 2026 GMT
Not After : Sep 3 22:35:16 2026 GMT
Subject: CN=DBF4DC710266189D8B8A15488870330FC3596531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5c:b0:5d:f6:27:44:91:ee:af:42:18:e5:c7:
39:d9:c9:ed:52:05:ff:5b:f2:75:0c:db:2e:5d:f2:
53:00:e4:08:15:a8:9f:71:00:06:c6:9f:b4:9f:e3:
cb:0b:17:b5:e2:ca:d4:1d:27:53:8d:77:9e:63:32:
b0:b9:90:17:dc:85:e4:35:03:64:3e:10:ea:09:a4:
a7:37:e9:1f:cd:c2:02:2c:55:5e:7b:a2:7c:4b:cd:
49:ae:d4:95:8d:46:e5:86:fe:17:05:33:19:c4:af:
ec:01:c6:b6:8c:7d:63:d6:6c:c6:04:a6:20:f3:9f:
68:b5:06:90:e1:86:e9:0b:20:a7:f2:e6:35:34:1b:
9f:d9:d9:49:d9:4c:77:96:2c:de:7b:f0:72:93:6f:
9d:00:7e:d1:88:a1:f0:bf:52:b0:92:9b:6a:ed:e2:
62:21:b5:32:ea:c5:8e:43:42:9e:e6:db:f5:bf:15:
16:b7:ff:e8:9d:8d:0e:15:0f:c6:49:bc:c1:09:65:
f5:53:cd:b1:bb:07:06:2d:c6:49:9a:02:e9:8e:20:
96:84:12:82:b5:f7:a5:b9:be:39:71:e5:7c:15:c7:
a0:21:d3:3b:9b:98:ce:92:3e:a3:1d:eb:6b:8e:18:
e5:42:a4:1c:5d:50:8d:50:54:1c:27:ff:d1:0f:42:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:F4:DC:71:02:66:18:9D:8B:8A:15:48:88:70:33:0F:C3:59:65:31
X509v3 Authority Key Identifier:
keyid:2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:26:4f:50:06:66:57:b5:75:ea:70:6b:1a:5b:cb:6f:8e:87:
40:7c:e5:7b:a8:e3:a4:1e:70:e8:5e:4e:bf:b7:b1:b3:1a:68:
b3:fa:86:15:39:8e:3a:17:95:17:a5:a7:7e:19:d7:c2:bb:a4:
fd:1e:2a:91:8f:54:cd:ef:d4:5c:3e:03:79:f9:59:06:c9:a1:
a1:fb:60:ac:d6:e6:e1:77:05:9b:d4:87:ac:e8:02:89:86:c6:
ee:59:ee:72:1e:5f:0a:73:bf:90:16:80:53:f3:52:4d:9f:f3:
6c:85:68:2b:99:9f:3e:ed:a0:7b:71:37:2a:c5:2d:c5:10:f2:
66:1c:02:d0:49:48:26:28:04:a2:81:00:d1:1e:8d:df:20:d0:
39:b4:ff:7e:f2:ee:29:1c:87:cc:28:e6:0f:67:fc:6e:52:00:
2f:65:50:99:3a:f5:62:99:cb:ce:60:9f:05:34:ab:1e:0d:e5:
2b:a9:b2:7f:eb:7e:33:d4:9e:b7:0a:42:a4:f0:b7:56:1b:6f:
0e:c2:04:89:e9:ae:3d:01:13:5b:af:70:64:7d:3b:79:dc:2c:
fc:4e:af:af:18:db:78:df:8c:2a:e6:0f:26:9f:41:cc:10:d1:
8a:16:80:5a:6c:43:06:53:35:04:70:bf:6f:56:00:91:c9:44:
1d:ae:48:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 05:56:43 2026 by rpki-client