
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
File: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft (raw, json)
Hash identifier: nyK/htZzSUkWkLyR6qxbyBFuKbvynN8xw/oIaEz8gp8=
Subject key identifier: A5:DC:9D:4F:4B:EC:F6:C4:57:5C:1D:DB:F2:94:6B:01:72:94:87:74
Authority key identifier: 00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
Certificate issuer: /CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Certificate serial: 43B0B3677A160A74695C4E71C55E5B390A11B05E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
Manifest number: 40
Signing time: Thu 18 Jun 2026 07:51:46 +0000
Manifest this update: Thu 18 Jun 2026 07:46:46 +0000
Manifest next update: Fri 19 Jun 2026 11:20:46 +0000
Files and hashes: 1: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl (hash: 39xlo33/rUzuQVeIElKK0xm/enQhkbEkhUUqR2OjWcw=)
2: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: W6gU13vwkvKOw0VI8aGpc6wnH09tgyU6w+1j71bL/DU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 19 Jun 2026 08:44:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:b0:b3:67:7a:16:0a:74:69:5c:4e:71:c5:5e:5b:39:0a:11:b0:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Validity
Not Before: Jun 18 07:46:46 2026 GMT
Not After : Jun 19 11:20:46 2026 GMT
Subject: CN=A5DC9D4F4BECF6C4575C1DDBF2946B0172948774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:ff:41:88:4f:e8:fd:bd:9d:3b:6a:7a:6a:
da:7e:35:ea:c6:5b:dd:68:29:2a:15:2d:b9:4b:70:
ca:77:97:ee:54:3b:68:b3:a2:51:d6:b3:2a:62:07:
a6:9d:c7:0b:76:cb:4e:28:74:f3:3b:1d:e4:a1:f2:
93:b2:93:8f:47:18:85:7c:18:15:5f:d1:2c:fc:06:
3d:4c:dd:15:0e:31:c1:c3:0a:fe:1b:4d:19:0c:09:
0b:89:a0:8b:93:97:bd:db:49:d4:d4:5d:b5:62:ef:
84:cd:f0:43:19:bd:f0:64:58:cd:8d:fc:dc:ea:c6:
c5:ab:49:1d:6a:b8:ac:f6:24:f2:ac:b1:a8:0e:d5:
7d:22:88:16:98:d5:81:33:9a:de:a9:03:52:b8:62:
4f:da:b0:49:f5:71:d4:76:de:49:84:95:cc:eb:1e:
63:c8:ff:61:09:dc:5e:88:4f:43:e7:f5:a1:51:bc:
7b:d2:4a:bf:b6:6c:9d:a4:a1:df:10:f0:ec:51:7d:
d8:58:a8:3f:0e:46:b6:0b:0c:12:89:04:5d:1b:cc:
8b:d6:44:64:65:ab:c5:e4:66:80:39:52:b0:eb:3f:
56:b9:17:ca:62:8f:aa:62:60:d5:20:68:64:50:4a:
4e:45:9e:26:91:d1:4e:00:7b:08:87:28:4e:f5:3c:
4f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:DC:9D:4F:4B:EC:F6:C4:57:5C:1D:DB:F2:94:6B:01:72:94:87:74
X509v3 Authority Key Identifier:
keyid:00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:29:d4:4d:fb:a6:cf:3e:c8:3e:57:1b:b6:fc:be:ac:c3:a7:
58:f0:71:cf:0d:a8:67:2b:e4:dd:99:5b:99:cc:0f:16:f4:f6:
86:46:e0:c4:20:9c:cd:32:26:15:2b:db:24:df:09:99:bf:a7:
f3:2c:0f:56:c0:20:3a:b0:8c:c1:29:eb:0c:6d:a2:a5:0d:4d:
5a:7e:fe:d6:fa:d9:bb:77:65:46:d4:12:b9:ee:6b:46:60:cb:
15:3c:61:8e:89:53:af:6a:62:d0:c0:be:6a:b7:f4:e2:53:85:
21:52:a6:74:75:ed:a6:73:d8:50:29:24:53:d9:17:ee:fe:3c:
33:0b:ca:5b:3c:01:cd:60:75:57:5d:e3:e6:ce:9b:be:d3:a3:
d7:40:6b:2a:be:5d:3d:2e:e6:fb:23:91:bb:5c:7f:5a:16:cd:
68:f8:83:e9:f9:5d:f2:9c:ce:87:7e:d3:2c:25:1b:99:18:27:
fe:c0:5a:22:95:1b:a3:79:26:d9:0b:dc:67:fa:b0:78:20:1c:
85:10:70:fb:aa:ac:ba:58:af:cf:65:53:42:d8:7c:04:08:f5:
7c:4c:a0:7a:b8:00:cd:75:a7:3a:37:37:83:1d:fb:f0:89:a9:
ad:c9:d5:da:fa:35:1b:aa:8e:07:ba:b8:b8:a5:fa:e9:0e:cb:
ee:0c:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 18 17:12:33 2026 by rpki-client