
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
File: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft (raw, json)
Hash identifier: u7jYLv9Mixhhu2Ylq5MeIdSmC5pvnjDv72my+c70PBM=
Subject key identifier: D1:01:C3:A5:15:60:05:E2:9D:51:41:8D:46:7F:A7:A4:59:04:C2:63
Authority key identifier: 92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
Certificate issuer: /CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Certificate serial: 56E540298515BF356E7EA9BCD4497229EF56A3EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
Manifest number: B8
Signing time: Wed 16 Sep 2026 23:02:23 +0000
Manifest this update: Wed 16 Sep 2026 22:57:23 +0000
Manifest next update: Fri 18 Sep 2026 02:35:23 +0000
Files and hashes: 1: 3131372e3130332e36392e302f32342d3234203d3e203536323334.roa (hash: wrUQ4EMVX+PJSZbONtjRtGC7+n3R84eMm7t/IYNPjw8=)
2: 924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl (hash: aAb2brUq7ZqJ7PkF1Utiu5j/N45ceyskveRUMDoGJtg=)
3: 3131372e3130332e37312e302f32342d3234203d3e203536323334.roa (hash: +bPIyCGaEGWvS82VlAv2EHMMfj7mjRKwJoRxD8Cvfm0=)
4: 3130332e3234332e31312e302f32342d3234203d3e203536323334.roa (hash: dTKCe4paU2IY2Oh+L5IqUZGGFO4TUfQMNiigaYInGe4=)
5: 3131372e3130332e37302e302f32342d3234203d3e203536323334.roa (hash: j5WFyDrMaI9n63JSzTSL6p6/2kiX350w7znF9gXn6oE=)
6: 3130332e3234332e31302e302f32342d3234203d3e203536323334.roa (hash: zufjgeZw/w05det8sEI0LnaWHbULyBgD0ra6w23cC5w=)
7: 3131372e3130332e36382e302f32342d3234203d3e203536323334.roa (hash: iZLgBREB8douvHYZz9gauKXSkvDFXVOW+Mvm3xgORFU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 02:35:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:e5:40:29:85:15:bf:35:6e:7e:a9:bc:d4:49:72:29:ef:56:a3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=924279908A47C1011B4B6A54AA05C7BD9D4B6ADA
Validity
Not Before: Sep 16 22:57:23 2026 GMT
Not After : Sep 18 02:35:23 2026 GMT
Subject: CN=D101C3A5156005E29D51418D467FA7A45904C263
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:89:0c:20:87:18:76:51:81:ca:b9:5d:41:e9:
63:1d:93:1e:cb:e0:52:f1:ed:13:69:e5:ec:c7:1a:
5f:c4:b5:ed:60:85:46:2e:0f:57:46:27:5a:65:bc:
98:a4:bd:f0:8a:69:bc:63:ad:bf:e5:f8:e2:2a:79:
48:9b:c0:0b:e4:3f:78:65:c8:7e:cb:97:d3:3b:82:
41:03:b7:a0:26:ad:29:80:c0:c7:c3:be:47:b5:eb:
25:b8:e0:de:b4:2f:ea:cc:96:5e:af:61:30:44:6f:
a6:cf:03:85:4c:10:13:b7:e3:38:0b:97:ab:2d:83:
4c:90:74:9a:46:c6:3e:33:3b:94:9a:8a:bf:b3:26:
00:d7:62:60:d0:cf:67:d1:5b:87:5d:24:01:f6:62:
ef:bc:a2:63:ff:72:ff:fa:c3:04:ce:d5:28:f0:90:
ec:df:37:48:f3:cc:c9:46:83:54:a7:4c:f4:9d:de:
64:cf:3f:b5:27:3c:a3:e8:52:6b:68:bd:8b:05:18:
48:69:f9:f6:58:53:84:02:e9:07:03:c8:60:b8:7a:
48:e5:9e:8b:c3:ad:6f:d0:5e:80:45:02:c8:0c:14:
d2:1d:09:bc:c3:df:53:53:e8:56:51:b0:12:bc:d5:
53:bc:a9:c3:cc:2c:7b:20:b9:aa:57:57:33:10:94:
cf:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:01:C3:A5:15:60:05:E2:9D:51:41:8D:46:7F:A7:A4:59:04:C2:63
X509v3 Authority Key Identifier:
keyid:92:42:79:90:8A:47:C1:01:1B:4B:6A:54:AA:05:C7:BD:9D:4B:6A:DA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/42c7dfd4-e510-4707-9818-a2b1e2c6b216/0/924279908A47C1011B4B6A54AA05C7BD9D4B6ADA.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ca:e3:51:ff:ae:9d:d7:ac:07:cd:c8:82:b0:21:f8:fc:8f:
54:68:64:69:6a:ef:9c:cd:6e:b9:03:ce:8e:bb:f1:cb:7d:42:
04:49:0d:99:40:68:e3:66:b2:34:48:10:57:3c:d8:7b:22:8e:
59:a1:ef:c1:ff:8d:1c:a4:68:d2:7a:15:8d:38:2c:66:99:f2:
16:ab:9a:d2:5b:8d:d5:e9:77:aa:56:f6:1c:09:53:50:1e:c6:
61:1c:4a:76:4a:83:aa:85:e6:1b:d2:c1:35:b1:53:fc:72:db:
99:3a:7f:19:cb:2a:f1:f2:19:2c:d2:b6:29:cf:e9:94:99:cc:
f1:99:7f:92:9b:20:84:9f:fe:34:d9:0d:1e:5d:6c:e4:db:4d:
03:cb:e3:04:a5:de:cb:81:17:a6:e0:bc:f3:91:da:d8:e1:bf:
e7:32:ad:d0:5f:23:81:52:ed:bf:8e:ee:23:57:00:30:57:92:
4b:e0:29:e8:d5:da:2a:6b:8a:e2:a3:97:fe:1d:60:b6:09:42:
ea:0b:54:8b:de:4c:a2:27:72:f0:ce:3f:df:61:47:2d:b6:69:
46:59:9c:be:ef:aa:20:c6:d4:eb:f6:76:18:1d:2b:0f:38:1e:
38:e7:de:02:fb:1a:73:f1:9c:a7:37:99:ac:5f:85:35:fa:9b:
48:8d:c8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 16:01:41 2026 by rpki-client