
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
File: B92828ABEAB7476AE406E35D620052C840B4D768.mft (raw, json)
Hash identifier: 5ReG1H6rl/zTNL4A4RKzQSdnavtUaruRVyGHPaGRU/w=
Subject key identifier: 21:84:5F:0F:A9:4C:F4:C9:1E:EA:32:80:04:65:6E:20:53:36:A5:7A
Authority key identifier: B9:28:28:AB:EA:B7:47:6A:E4:06:E3:5D:62:00:52:C8:40:B4:D7:68
Certificate issuer: /CN=B92828ABEAB7476AE406E35D620052C840B4D768
Certificate serial: 4136A0F7D1DDC9536767791CA0F9C015510378AF
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
Manifest number: F5
Signing time: Mon 02 Nov 2026 15:01:50 +0000
Manifest this update: Mon 02 Nov 2026 14:56:50 +0000
Manifest next update: Tue 03 Nov 2026 18:51:50 +0000
Files and hashes: 1: B92828ABEAB7476AE406E35D620052C840B4D768.crl (hash: AfiEWkUiJV7muAeVNTBpwWaIbH/zhaZVGfLqYqZqdMs=)
2: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (hash: eFHp6Mqo646PIybT2578/19BpYOBLtOMwfgE5FAeDn8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.crl
rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Nov 2026 11:54:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:36:a0:f7:d1:dd:c9:53:67:67:79:1c:a0:f9:c0:15:51:03:78:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B92828ABEAB7476AE406E35D620052C840B4D768
Validity
Not Before: Nov 2 14:56:50 2026 GMT
Not After : Nov 3 18:51:50 2026 GMT
Subject: CN=21845F0FA94CF4C91EEA328004656E205336A57A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:dd:24:5c:b1:ca:c0:7e:4f:70:b8:f8:97:a4:
8f:ab:63:bd:1c:03:c2:28:7a:d6:fb:83:ef:f4:cf:
cb:57:30:b6:70:09:d7:c3:bd:76:f9:0a:1f:4b:58:
27:76:2e:c8:43:f1:3e:ec:e5:ed:04:67:87:a0:06:
92:5f:a6:04:b5:63:11:40:b2:8f:6f:08:35:27:81:
29:75:23:d5:37:a5:52:07:cc:d1:e8:a2:81:08:24:
8d:06:36:03:4e:15:b9:48:b5:34:a7:2d:4c:40:dc:
41:00:e9:3f:c7:55:d9:83:56:25:e0:79:ef:5d:4a:
2b:9d:b5:11:ac:0b:4e:3c:73:2a:86:d9:f7:17:c0:
4a:0f:30:49:10:cd:c6:0b:09:8c:d8:74:d7:09:e4:
a1:3d:cb:73:71:72:ab:6c:cd:06:e1:b0:83:be:c6:
0b:33:23:98:ec:23:6a:48:cd:3d:43:15:99:3c:fd:
4c:3a:30:c9:e7:72:ed:bb:67:f4:a5:b4:e6:7b:df:
46:7a:26:c4:cb:06:82:fa:7c:66:05:82:59:1d:64:
ef:48:ef:7c:4c:11:47:73:5e:07:35:99:39:ad:ae:
0a:b6:1a:74:f1:53:46:75:43:7c:1a:35:5d:a6:f9:
cd:c7:d5:72:b4:c6:1e:a0:ce:02:34:e8:64:23:df:
40:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:84:5F:0F:A9:4C:F4:C9:1E:EA:32:80:04:65:6E:20:53:36:A5:7A
X509v3 Authority Key Identifier:
keyid:B9:28:28:AB:EA:B7:47:6A:E4:06:E3:5D:62:00:52:C8:40:B4:D7:68
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B92828ABEAB7476AE406E35D620052C840B4D768.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/B92828ABEAB7476AE406E35D620052C840B4D768.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:61:d2:5d:89:00:ce:c7:70:1e:2f:21:e0:2d:dd:cc:19:f7:
67:8b:46:9f:aa:58:0b:b2:af:bb:9a:f8:6f:02:d1:bc:1b:f9:
2a:af:1d:9b:be:24:fa:67:ba:53:e4:74:ac:67:f1:06:44:ca:
57:bd:36:8a:d2:f6:ef:8f:e4:7a:e2:0b:71:b2:1c:b3:ff:d5:
3d:b9:b2:e8:31:c0:85:2f:22:d8:15:5f:b7:bd:43:55:62:03:
56:7f:aa:fd:c0:03:da:74:04:7f:56:a9:75:ab:0e:5f:2a:36:
87:4b:6b:5c:7b:de:88:34:57:ae:2d:7e:c9:0a:ea:75:1e:03:
8f:25:0e:8d:05:b4:8f:2c:d4:78:c8:b6:5b:2e:2e:ff:54:8f:
c9:4e:bf:e0:55:a3:1c:83:9a:48:4f:53:92:e5:e4:68:07:31:
e7:95:23:60:0d:bb:91:bf:23:36:3f:68:7b:58:06:e3:48:c3:
d9:21:af:e4:43:28:af:fe:f7:5a:31:c7:c3:f2:3a:63:70:f8:
f0:7f:95:c6:89:bb:ab:5a:ba:b0:66:2c:64:72:ee:6b:6c:47:
ef:1a:d0:fe:f6:62:bb:2c:8c:c2:32:fa:c8:7f:2f:e9:fd:17:
ce:92:64:38:29:e7:40:63:a0:9b:4a:fa:31:c8:20:05:78:9e:
2c:86:62:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 19:33:56 2026 by rpki-client