
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
File: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft (raw, json)
Hash identifier: FdYUSrVqEw5CPzAOt6Z/drWikMCjaIDBL1ZFGmGfNKo=
Subject key identifier: A5:9E:65:78:16:1F:F8:DC:AC:61:F4:77:EE:B0:CC:15:9F:AD:B6:62
Authority key identifier: 00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
Certificate issuer: /CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Certificate serial: 6A6737840877D4B4D7EEA118CFE3C44A68F10F0F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
Manifest number: B7
Signing time: Thu 17 Sep 2026 00:08:52 +0000
Manifest this update: Thu 17 Sep 2026 00:03:52 +0000
Manifest next update: Fri 18 Sep 2026 00:54:52 +0000
Files and hashes: 1: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: W6gU13vwkvKOw0VI8aGpc6wnH09tgyU6w+1j71bL/DU=)
2: 0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl (hash: HVhlprubKQiDMrvov+NdsTtLdOdaKphKupLX4RONonU=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 18 Sep 2026 00:54:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:67:37:84:08:77:d4:b4:d7:ee:a1:18:cf:e3:c4:4a:68:f1:0f:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2
Validity
Not Before: Sep 17 00:03:52 2026 GMT
Not After : Sep 18 00:54:52 2026 GMT
Subject: CN=A59E6578161FF8DCAC61F477EEB0CC159FADB662
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:34:ed:5f:8f:4a:92:29:5d:c7:c6:47:f1:6c:
3f:20:49:7f:96:d1:90:b4:df:c9:54:bf:85:59:d3:
5f:16:25:5a:ad:12:fe:ae:72:6a:7e:06:58:dd:56:
1c:db:3a:de:d9:86:2e:72:ad:c5:b5:74:da:7d:26:
b6:9e:37:aa:2a:c1:14:23:0f:eb:3b:c6:8a:ea:90:
d6:c8:69:9a:c9:2c:ac:06:e4:76:09:67:22:70:9d:
01:69:c2:99:5e:e8:7e:4c:c4:21:43:3f:a8:d9:25:
1a:43:14:7f:1d:aa:eb:46:2b:0e:2c:61:03:38:58:
42:18:1e:0b:ee:31:bd:e1:b3:9e:08:62:d7:33:14:
d5:cc:f0:e8:ff:87:07:ff:1c:04:b3:8f:4e:64:29:
70:cc:4b:d0:84:d0:90:2b:a7:f0:21:b1:ca:cf:bb:
cd:59:1e:e3:ef:1b:b9:dd:8f:fe:bf:a9:73:33:a1:
74:99:89:d6:78:6c:5a:45:dc:40:08:39:e5:64:3b:
ae:31:51:3f:ef:c7:2d:f2:45:33:63:a0:da:46:cf:
e0:00:6f:20:fb:b0:6d:d7:bb:65:8f:6d:c1:0e:9d:
13:99:53:ec:5f:92:87:7e:e6:03:25:99:b8:7e:c0:
54:2a:22:fd:55:66:da:43:48:3e:4b:29:74:43:5f:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:9E:65:78:16:1F:F8:DC:AC:61:F4:77:EE:B0:CC:15:9F:AD:B6:62
X509v3 Authority Key Identifier:
keyid:00:92:CC:68:1F:6C:6C:4E:77:F3:D4:6E:F0:DB:33:96:73:2C:3F:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/0092CC681F6C6C4E77F3D46EF0DB3396732C3FE2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:e2:99:a2:c0:60:4a:e5:09:87:62:73:08:b9:b4:e6:27:d1:
6b:3e:35:15:2f:a8:e2:77:3e:f8:32:ff:2b:65:7d:d0:e2:4a:
5a:4b:93:61:89:33:fd:aa:d2:8c:5a:16:c7:3b:ac:05:2f:9b:
ef:98:47:21:3c:68:06:f6:cf:cf:9b:08:c2:ea:31:88:20:22:
fe:02:94:93:2b:82:d3:61:e7:c4:58:3f:89:0b:d1:f3:f2:9c:
14:8d:b5:f3:64:bb:e9:8f:ec:43:91:8c:61:94:01:9c:86:06:
3f:33:cf:9c:08:d7:b5:d6:f8:2a:51:7c:96:5f:d5:67:00:17:
a1:e7:8d:6d:11:aa:c6:92:0a:a3:a4:7c:fc:62:78:e7:7a:d9:
c4:5a:e5:37:e0:04:5e:72:81:f6:3d:0b:bf:66:10:45:cd:d2:
82:67:ec:c7:44:32:b4:ad:02:fd:6e:6a:d8:1e:9b:b6:0b:17:
af:bd:5e:29:33:37:fc:a7:88:2d:16:43:a6:f0:c4:4f:fb:1d:
01:33:2d:7c:15:8e:f2:91:d0:bb:c9:75:50:56:a1:50:46:ff:
f6:e1:4b:19:f2:04:df:4b:1a:e6:eb:07:5d:e0:71:3b:a1:c6:
2f:ce:9f:d2:ac:0a:9c:3f:d3:91:50:3a:e0:b1:d8:47:57:67:
96:95:3e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:03:39 2026 by rpki-client