
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
File: 92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft (raw, json)
Hash identifier: c5ku5uTsz22ghXBFFE5pDEwW/ZIvZ2BA95gNrHuheZ4=
Subject key identifier: 4A:E2:67:E4:32:D2:C1:BC:F9:1F:43:44:31:AA:40:A0:D0:87:C7:A9
Authority key identifier: 92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
Certificate issuer: /CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Certificate serial: 575F68296015F514F8A45D52C82A8CFD4BDA3599
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
Manifest number: 41
Signing time: Fri 19 Jun 2026 18:53:44 +0000
Manifest this update: Fri 19 Jun 2026 18:48:44 +0000
Manifest next update: Sat 20 Jun 2026 19:06:44 +0000
Files and hashes: 1: 3130332e342e38302e302f32342d3234203d3e20313530323034.roa (hash: eF5qNpkBv9+xMCg8eN21WjphiugXQ5NAQI9u6FyR9hY=)
2: 3130332e342e38302e302f32332d3233203d3e20313530323034.roa (hash: fX1aquXy3wBHFbm6F7rqURzeTxgvhXC34YY6g9Q0Yc4=)
3: 3130332e342e38312e302f32342d3234203d3e20313530323034.roa (hash: E1JJ7Pf6RRc9CrvDCrblA/2c1fHnKQijraRY/RXe7gs=)
4: 92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl (hash: H7dogPQ6mG4ah2bm3jCg/bBzUEZVBij0rzvyQDe0lsc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl
rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 20 Jun 2026 19:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:5f:68:29:60:15:f5:14:f8:a4:5d:52:c8:2a:8c:fd:4b:da:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1
Validity
Not Before: Jun 19 18:48:44 2026 GMT
Not After : Jun 20 19:06:44 2026 GMT
Subject: CN=4AE267E432D2C1BCF91F434431AA40A0D087C7A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:a7:57:d9:8e:3e:07:bf:8f:d8:2a:82:6d:
cd:4a:36:82:42:7f:bf:74:df:fd:9c:ac:98:97:f6:
cb:31:b4:b6:78:45:6f:bd:e4:1b:67:48:e1:f0:8d:
71:40:0f:cb:11:b4:1a:3a:62:c8:eb:74:d8:77:78:
2d:19:17:98:c1:a3:b3:2b:c6:18:4f:97:f3:d6:ad:
8b:1f:17:02:8f:d5:9d:64:0b:c3:df:88:4d:42:ad:
e4:ca:f8:f4:25:4c:58:25:98:21:2e:82:86:86:97:
1f:bc:31:29:ae:57:cd:a8:1e:e9:81:c3:2d:c0:8a:
4a:37:92:d3:e7:e8:03:58:2e:1a:f1:2b:e7:67:d5:
ba:57:cb:dc:b5:34:75:6f:4f:88:34:94:db:dc:91:
85:65:cd:0e:2a:0f:57:2e:d0:11:95:44:7c:a9:2c:
2f:45:28:f5:b6:28:37:cd:e3:70:53:e6:f7:b7:db:
1a:45:e2:06:b7:5b:ee:7b:5f:92:71:ba:0b:40:32:
41:b7:8b:cc:a2:db:12:a7:d5:c5:28:2d:88:dd:09:
29:98:f3:d0:76:54:56:d6:ae:1a:ba:74:85:84:c9:
d4:10:87:e7:fb:ab:e4:37:37:63:e2:12:68:ca:14:
a8:0c:28:9a:fe:fa:76:1f:18:3a:b3:ff:d9:f6:ee:
e3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:E2:67:E4:32:D2:C1:BC:F9:1F:43:44:31:AA:40:A0:D0:87:C7:A9
X509v3 Authority Key Identifier:
keyid:92:E9:5F:0E:3C:01:C8:71:CA:33:D5:B4:AF:93:E6:11:24:B6:DB:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9019589a-d525-40fc-894a-12e44010e3e4/0/92E95F0E3C01C871CA33D5B4AF93E61124B6DBE1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:1a:c6:2a:10:33:22:73:8a:9a:2e:74:5b:ff:4e:6b:64:3f:
f1:22:4d:dc:9d:1a:12:61:de:e8:f5:70:90:98:06:d9:77:9b:
c8:35:01:80:16:fa:d0:53:b1:38:b1:46:c3:f8:4f:49:72:28:
6a:94:a5:e9:ff:00:5f:a2:48:d5:49:2b:6f:83:34:f8:c5:fe:
57:82:fb:58:da:92:fb:98:2e:54:b4:be:3d:a5:88:7b:11:8d:
ab:1d:76:85:4e:87:85:03:4d:ea:72:bf:29:b2:10:e7:2f:94:
3b:aa:8b:e5:a2:10:df:d4:c6:e5:eb:c1:3d:4a:34:8e:12:0d:
ff:d1:50:71:76:ae:e2:0d:ed:f5:dc:9d:cc:e0:fc:a9:1f:8c:
de:7c:27:d6:d9:23:86:70:47:23:85:3c:60:9b:11:16:30:61:
1a:af:0d:fa:ca:02:11:18:58:5b:20:41:36:4c:25:dd:2b:25:
38:ee:90:58:12:c0:aa:ae:e6:4d:aa:49:96:28:27:29:93:f6:
d1:9f:c0:60:cc:ab:06:18:be:77:99:96:1e:0b:cc:e2:04:85:
c7:5c:d1:f2:4b:db:86:ec:45:13:c8:64:8c:57:26:fe:50:9c:
12:f2:66:b4:ee:a7:a7:5d:f7:cc:9d:20:04:8b:b0:00:5e:19:
d4:20:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 09:20:16 2026 by rpki-client