
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
File: 92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft (raw, json)
Hash identifier: 9k0chED1ArOJLlCYsNCYokik2p0B9GzZSchc5YeMMQY=
Subject key identifier: 53:4A:66:42:9C:75:76:1B:75:93:8D:8D:84:B2:6C:EC:51:A8:BC:C0
Authority key identifier: 92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF
Certificate issuer: /CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
Certificate serial: 4FC3EA26C9E5F5E46C3A2174F211C6E76F786145
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
Manifest number: EC
Signing time: Sun 25 Oct 2026 10:34:46 +0000
Manifest this update: Sun 25 Oct 2026 10:29:46 +0000
Manifest next update: Mon 26 Oct 2026 11:07:46 +0000
Files and hashes: 1: 3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (hash: F4/wHPAccFzld5vK7uqr9YYnVjEcR6HK4IaAZ9Ldlyk=)
2: 3130332e3138342e3138312e302f32342d3234203d3e20313339333831.roa (hash: QYC7ssGyglRNpqD1o8dtha7i7+fZYRx/MOOkcBtU2G8=)
3: 3130332e3138342e3138302e302f32342d3234203d3e203435333035.roa (hash: uX052Tj5rGF2pdx/AzNTc46gCVZ9O0oMkrpcZfXHTKQ=)
4: 92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl (hash: tPO5vjW6+uV3sS8ayparpQvvqzCFWgKMm29MeOtlP/4=)
5: 3130332e3138342e3138302e302f32342d3234203d3e20313339333831.roa (hash: 4XDkg051W8n8V41hi/l03/yAasU7b+3VGGYDYDWaT7A=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl
rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 11:07:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:c3:ea:26:c9:e5:f5:e4:6c:3a:21:74:f2:11:c6:e7:6f:78:61:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92CAA744707BC6EC7B059C523AD55BFB0DD800DF
Validity
Not Before: Oct 25 10:29:46 2026 GMT
Not After : Oct 26 11:07:46 2026 GMT
Subject: CN=534A66429C75761B75938D8D84B26CEC51A8BCC0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:ee:35:f2:ca:23:8b:0a:bb:b5:69:0e:de:
7d:8b:65:76:c2:3d:85:a2:22:f7:37:c7:68:79:a7:
5c:e4:7b:4a:1a:b0:c6:db:2c:f0:37:5b:e6:ba:f6:
39:0d:3e:a1:97:75:42:4d:05:d8:2c:c0:5c:c1:51:
0b:0e:d0:78:aa:17:0e:e5:df:a8:d7:83:d8:83:70:
58:d0:44:82:26:05:41:76:ae:e5:8d:11:fe:ce:b9:
4e:2d:92:ea:10:a1:cf:ba:ad:7c:cd:56:9a:8e:55:
aa:c7:ae:43:a4:3e:02:51:ac:52:a5:b8:22:71:1f:
41:76:af:4d:8a:88:39:0d:e7:7d:f9:e0:b3:f7:2b:
1b:32:51:50:ec:11:7c:e8:e5:54:2e:81:8b:92:94:
b0:61:cd:a8:8b:08:b0:b9:6f:45:36:3e:b5:f1:f7:
e2:e4:6e:23:c3:48:87:1a:48:87:86:47:7e:4b:bc:
cc:6a:12:04:dd:69:1e:cf:81:7f:01:6c:42:f9:89:
a8:d0:7e:c1:1d:35:41:1e:15:05:65:7c:a3:1d:64:
d8:7f:5b:8e:d0:f2:2d:e7:6b:a6:75:13:22:21:1d:
37:cf:93:9e:a7:b1:9d:25:5b:2c:dd:09:15:4a:8c:
7b:aa:07:1f:7e:a5:ba:bc:53:0a:9c:bf:a1:19:be:
54:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:4A:66:42:9C:75:76:1B:75:93:8D:8D:84:B2:6C:EC:51:A8:BC:C0
X509v3 Authority Key Identifier:
keyid:92:CA:A7:44:70:7B:C6:EC:7B:05:9C:52:3A:D5:5B:FB:0D:D8:00:DF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/92CAA744707BC6EC7B059C523AD55BFB0DD800DF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:bc:10:d6:67:da:24:3e:4f:13:ab:9f:77:d6:cc:0f:2f:22:
47:a1:2a:6b:db:8e:68:d5:28:60:14:f2:d0:d4:44:68:ab:fa:
16:76:83:07:c9:8b:92:88:0f:f4:90:4a:db:76:ed:a8:5e:b0:
13:be:99:ee:8f:9b:9c:e3:43:be:d8:53:53:09:d9:fc:ae:84:
1b:64:e4:2f:0a:03:a6:81:ca:be:99:04:79:71:9a:d7:c3:a1:
06:03:b9:89:13:7a:79:bc:72:a9:44:3c:b8:d4:56:6f:7b:a8:
f7:29:ab:81:73:75:aa:43:ae:71:b6:65:e0:da:60:21:98:0d:
98:ba:4d:8e:c9:cd:3b:3d:7a:41:3d:20:3c:0d:09:ca:18:0e:
0c:07:a1:fc:7a:84:85:bd:d0:2d:d6:b3:99:56:2d:5d:2f:8b:
83:75:37:b8:36:48:b8:6e:17:c9:2b:b1:aa:47:fa:34:f0:fa:
3c:8e:c9:75:5c:c1:98:7b:2f:9d:4c:04:21:8d:90:7a:5b:69:
4a:a9:3d:3b:52:00:6f:01:90:17:0e:a9:18:49:72:9a:d1:16:
51:2a:fb:0a:95:ef:5a:88:10:d8:e2:9d:76:17:2b:6d:94:03:
dc:24:5c:5d:bc:2e:1d:e9:57:0a:fd:71:64:45:34:46:d6:c1:
1f:4b:46:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:31:20 2026 by rpki-client