
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
File: 2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft (raw, json)
Hash identifier: +k4Ru92zcZruDURnPmdlWBPTjjbDr2vciUXgtr8ZeuI=
Subject key identifier: 76:85:8F:8A:3A:B5:15:60:BE:F9:E3:0B:D1:F1:EC:63:99:51:43:3E
Authority key identifier: 2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE
Certificate issuer: /CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE
Certificate serial: 3087B0D92AEE445C2AFA0EA5C5A06199E20B3256
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
Manifest number: EC
Signing time: Mon 26 Oct 2026 01:13:16 +0000
Manifest this update: Mon 26 Oct 2026 01:08:16 +0000
Manifest next update: Tue 27 Oct 2026 04:49:16 +0000
Files and hashes: 1: 2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl (hash: gEwvjH0yIaRVG1GcegKQvRuptcU3xP3FvJjX5O0GNk4=)
2: 3230322e36312e39382e302f32332d3234203d3e203234353337.roa (hash: NCgxViu3PZp4P1Zo/9Bj21AhLCE0vj8q1oF29Jx6iTY=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl
rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 26 Oct 2026 12:34:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:87:b0:d9:2a:ee:44:5c:2a:fa:0e:a5:c5:a0:61:99:e2:0b:32:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2FE92EE6A0830333094A5215AEFF4EB0217E3EFE
Validity
Not Before: Oct 26 01:08:16 2026 GMT
Not After : Oct 27 04:49:16 2026 GMT
Subject: CN=76858F8A3AB51560BEF9E30BD1F1EC639951433E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:75:3e:47:cb:c6:36:9c:df:2c:cf:2b:fb:9a:
05:d5:40:56:5f:3a:c5:da:3e:d4:f5:a0:76:4f:9c:
fa:b5:65:aa:a3:68:e1:a7:42:08:32:84:cf:4c:78:
92:c8:5e:0d:6b:19:c6:37:aa:e3:2c:27:b7:f6:63:
af:ff:31:20:eb:14:2d:fb:ea:4b:91:ed:c4:d7:d3:
9a:bc:9c:0f:24:21:e8:27:a6:8f:23:b6:3b:29:5f:
92:42:f0:6b:d9:06:ce:c4:90:c4:9e:5c:9c:c7:d7:
75:44:2b:a0:4d:bf:1b:9b:7b:ae:d2:4c:02:86:fc:
99:80:a6:6a:d7:dd:8b:21:6f:24:f9:65:64:ef:4a:
9f:e9:05:5e:4b:ef:a2:82:27:53:a2:c6:e7:56:e8:
f9:6b:a0:36:76:85:08:aa:bc:0c:a8:a7:5d:a3:c7:
02:b7:f9:c7:92:7f:5e:f3:53:3c:c3:ef:d5:96:42:
e3:30:14:72:a7:4c:84:66:e3:82:a1:f3:ba:19:9b:
1f:7c:66:04:6d:4b:0e:eb:5e:25:e7:04:b6:f3:2b:
d9:7e:37:b0:10:1d:d5:5e:26:e9:34:e1:ec:93:83:
14:69:14:5d:e7:56:ef:75:8f:51:0b:f6:69:c9:0c:
3c:77:f2:57:6d:8c:96:b1:07:f5:f9:17:c6:b6:a4:
36:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:8F:8A:3A:B5:15:60:BE:F9:E3:0B:D1:F1:EC:63:99:51:43:3E
X509v3 Authority Key Identifier:
keyid:2F:E9:2E:E6:A0:83:03:33:09:4A:52:15:AE:FF:4E:B0:21:7E:3E:FE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ede4719a-ace4-41f2-a070-8de3192b7f49/0/2FE92EE6A0830333094A5215AEFF4EB0217E3EFE.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:19:2d:68:00:10:7e:24:ef:a9:1f:0b:70:62:4c:a5:e4:d8:
90:fe:73:95:c1:16:34:4c:20:b5:9c:2a:e6:56:b0:20:d1:db:
ab:2a:a2:f7:a7:a1:c9:75:86:b2:65:35:a7:4e:0e:dc:42:9c:
3a:d9:7b:ff:45:ee:af:04:5b:95:9a:2c:19:d9:d9:98:8a:7d:
c0:63:6e:14:13:92:d4:02:f5:9b:8d:13:86:f8:02:85:50:a7:
05:de:3b:00:73:c9:0e:9e:97:de:b2:08:00:bb:3e:0d:da:6c:
a8:5e:63:be:05:af:a2:c8:10:df:18:04:21:ed:a7:9e:e6:58:
e2:f0:85:28:8e:c4:08:aa:e1:7e:0e:f0:99:85:ec:08:37:39:
b4:50:73:59:e5:65:d3:38:af:60:9d:2b:16:74:81:ed:84:7f:
dc:b7:ae:85:b2:3c:a4:08:10:8f:2c:14:92:eb:1d:42:51:d7:
4e:2b:51:d3:77:6d:f9:11:8a:ef:81:05:26:63:ff:16:a4:27:
ba:63:e6:16:16:5a:61:f2:69:84:d7:37:17:37:45:cc:71:7c:
93:94:a5:ba:4d:2c:61:82:19:e1:80:ee:ea:60:29:b5:f3:d2:
78:47:c5:c4:1b:6f:a8:64:9d:52:0d:02:b3:00:75:a7:03:45:
96:72:4a:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 05:46:57 2026 by rpki-client