
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
File: 92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft (raw, json)
Hash identifier: kty4W+d/08WbGVdAEorPP2C2kX/xDkO6+DzYymtyC5A=
Subject key identifier: C5:56:F9:DC:2A:39:B8:CC:4B:98:0D:57:E6:E3:3D:9A:A6:56:24:EB
Authority key identifier: 92:A9:FA:5A:9F:B8:67:F8:A8:19:F3:5E:87:7A:7F:B5:31:CC:D4:D1
Certificate issuer: /CN=92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1
Certificate serial: 3A01B8BB0B7FBC6655BCF94442815CA98134508B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 06:34:17 +0000
Manifest this update: Wed 26 Aug 2026 06:29:17 +0000
Manifest next update: Thu 27 Aug 2026 06:55:17 +0000
Files and hashes: 1: 92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.crl (hash: pIt9qEigl2mZnd8XZo+QsbAm3ECYlUOkiiwHlyxh6xE=)
2: 3130332e3133342e38372e302f32342d3234203d3e203538333639.roa (hash: a0nrg7/o0A+n8cUhvipajpvQyODSYOdKkwoNuLc2XHA=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.crl
rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 27 Aug 2026 06:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:01:b8:bb:0b:7f:bc:66:55:bc:f9:44:42:81:5c:a9:81:34:50:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1
Validity
Not Before: Aug 26 06:29:17 2026 GMT
Not After : Aug 27 06:55:17 2026 GMT
Subject: CN=C556F9DC2A39B8CC4B980D57E6E33D9AA65624EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:89:5a:29:25:ae:8e:b3:00:56:a2:69:15:03:
c4:95:7f:76:5a:09:70:bf:74:bb:8d:76:ce:73:5d:
1d:a1:66:c2:b1:4e:d9:a6:ad:6f:69:bb:30:e0:87:
ea:a0:56:5d:3c:9a:03:39:01:f7:ea:44:8f:72:bf:
9b:1e:f5:5d:1b:21:91:12:19:d0:2d:15:90:87:8d:
91:33:e9:8a:d5:5f:ea:fc:02:61:39:f5:c9:6c:49:
2d:3e:ae:db:4f:4e:eb:c0:58:d5:6f:fb:e3:d3:eb:
2b:3e:a0:d9:60:eb:e6:20:64:cc:ef:b3:4b:e3:14:
2f:f8:bb:7f:ad:9b:9e:69:2e:c8:fb:73:2c:42:f5:
72:49:7b:c3:7e:07:2f:92:8c:4a:85:2d:18:d8:a5:
fa:e6:0f:69:97:a4:e3:e3:f6:e7:98:f9:5c:a4:18:
d0:ea:ea:e8:6c:d4:61:1b:76:ec:d7:7e:da:03:89:
1d:db:c6:18:01:48:7f:5d:22:6d:60:c3:45:1a:68:
59:40:de:11:9a:0b:69:ab:c9:76:f0:a2:0e:7b:6d:
bd:3d:c4:d0:44:ed:ff:ce:4c:00:2d:ca:8c:b3:51:
83:3b:31:5b:1c:04:a8:c0:34:ad:8d:b1:d8:2f:9f:
40:32:2b:42:a7:1c:79:2b:d4:c9:ab:24:50:8e:65:
66:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:56:F9:DC:2A:39:B8:CC:4B:98:0D:57:E6:E3:3D:9A:A6:56:24:EB
X509v3 Authority Key Identifier:
keyid:92:A9:FA:5A:9F:B8:67:F8:A8:19:F3:5E:87:7A:7F:B5:31:CC:D4:D1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a82db9d3-d6eb-4d6b-9a24-feeb21aa8f53/0/92A9FA5A9FB867F8A819F35E877A7FB531CCD4D1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:e0:64:0a:e2:a1:cc:03:98:9b:99:2a:55:f2:ba:4b:b2:e9:
ca:9a:03:9f:e8:72:d5:3b:10:ee:fe:ed:0a:9d:bb:67:44:6b:
35:f0:f1:63:7d:0c:77:43:6e:b0:3d:c3:c2:74:b4:3e:dd:d0:
86:63:3d:10:27:41:5a:08:cd:c1:11:ab:f2:5b:44:95:05:e9:
96:11:80:72:e5:cb:b2:96:f1:c7:06:91:fa:a8:de:a9:ad:6d:
81:05:31:5b:7e:a4:b8:f4:62:b5:72:91:5d:49:de:df:d8:74:
e6:9f:52:81:67:70:a9:92:cc:65:ac:51:e7:81:4b:79:e7:b5:
03:81:75:cb:71:b0:02:83:ca:4a:57:f3:06:c2:54:38:d9:5d:
50:30:69:40:04:cd:b6:3a:67:48:e7:7f:7d:27:52:11:b7:26:
be:f8:46:38:55:d7:c0:b3:96:c0:a3:e3:3a:31:7c:73:79:3f:
11:52:3f:5a:5a:2d:de:d5:4e:ec:a2:2a:83:77:40:e9:41:ac:
f3:27:0e:e0:ae:f6:ff:a6:a7:5c:d2:55:4a:31:87:db:40:df:
9b:79:71:46:46:6c:04:8a:20:02:fd:d7:6f:fa:a4:0e:75:e1:
cb:17:d2:54:f4:7c:07:68:a2:fb:f4:ac:d7:2e:60:28:29:de:
6c:b0:89:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 23:19:27 2026 by rpki-client