
$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
File: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft (raw, json)
Hash identifier: MzsysYTDw1vBJibZp+uYgjPPDRToIlwlD/vSFNbLEaw=
Subject key identifier: 30:7C:0F:04:26:F2:05:96:25:CC:DB:B7:A2:B2:2F:69:40:3E:A0:F6
Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Certificate serial: 468DE7B8BF8BBB5B1E4CC43B285A10983AEC0188
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
Manifest number: 41
Signing time: Sat 18 Apr 2026 00:04:25 +0000
Manifest this update: Fri 17 Apr 2026 23:59:25 +0000
Manifest next update: Tue 21 Apr 2026 11:53:25 +0000
Files and hashes: 1: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (hash: QaVL8FZIkXQEPUlKXDz1K7gc9JnXnHYzpgLLHSEIXzo=)
2: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (hash: Vp8nm0q1fVdfpoUq1ph6iBsHdLxuIgv5gZec72xD2Lk=)
3: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (hash: IjL8U7j0DmBIXMsuGkW1RQCn11k2vE+wQV790Ok5z/U=)
4: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (hash: 2gNt0b6scD0Vr6P6DjjlOCkxUmLu97iptlipFu8yVHU=)
5: 3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (hash: vN+gGGeaJ1gj8tThDKmMiECC35znNoNYchE+0HwB4qo=)
6: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (hash: UnBNpg7Ki5yb8nLJihGU6CQzLaBHjw3/oRDo43eNzRA=)
7: 34352e3234392e3232332e302f32342d3234203d3e203535363634.roa (hash: JpmEn7WaRdkeEFa5ZGloCMsN5J170hstOwttgz6U1Z0=)
8: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl (hash: gPxrqIlYJ2WxePKkkbbyCf3gey/UemkpMXdy2jXsW5M=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Apr 2026 11:53:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8d:e7:b8:bf:8b:bb:5b:1e:4c:c4:3b:28:5a:10:98:3a:ec:01:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5
Validity
Not Before: Apr 17 23:59:25 2026 GMT
Not After : Apr 21 11:53:25 2026 GMT
Subject: CN=307C0F0426F2059625CCDBB7A2B22F69403EA0F6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:d3:6b:47:11:89:fb:fd:47:72:08:9b:e7:f8:
54:81:46:db:41:39:e7:02:55:e1:13:1f:23:fa:f7:
57:d7:69:72:68:8a:f1:fe:59:28:fe:58:3a:d9:30:
89:6f:87:4d:02:2a:e5:80:01:1b:89:f8:98:9b:e3:
55:04:4d:dd:bc:ce:32:b5:a8:f4:59:c9:8f:00:fe:
3f:4e:62:29:d9:af:0c:cd:85:31:cd:f6:e1:e0:bc:
c6:14:d9:26:75:69:d1:3a:17:b0:98:c4:72:8d:66:
d7:21:a8:87:8f:3d:c3:98:a7:88:29:d6:c1:fb:42:
9f:86:6d:da:53:98:e0:48:2c:35:b9:ce:6d:46:f8:
96:74:9d:78:02:b0:da:65:eb:b1:ef:23:a4:45:28:
c9:92:4f:28:36:4a:35:0a:ac:a8:ee:5d:ea:f8:33:
0f:ba:62:60:74:ce:fb:d8:2e:48:9b:a1:7a:16:f2:
53:d7:c2:31:60:b6:bd:db:da:cf:99:32:e4:83:6d:
b0:3a:af:7b:f5:ad:53:09:ce:f3:8f:24:50:48:1d:
8a:ce:31:3f:5c:0f:aa:52:37:4f:4a:74:ac:91:af:
b2:2c:bb:01:31:73:5e:0f:a0:f9:c5:62:60:a9:b4:
c3:22:c2:17:51:f6:c4:09:2e:1b:eb:18:ad:57:83:
16:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7C:0F:04:26:F2:05:96:25:CC:DB:B7:A2:B2:2F:69:40:3E:A0:F6
X509v3 Authority Key Identifier:
keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:48:22:a3:40:97:8b:c5:ad:a1:6f:be:08:26:cb:64:bc:b0:
61:e0:46:ac:7c:aa:e3:18:06:f0:ee:a7:b3:3f:32:5e:c2:d3:
3f:c3:49:de:d1:7c:81:98:fd:25:0e:9b:de:5e:20:50:e5:b0:
9a:ce:e5:6b:90:35:07:1e:23:25:74:19:44:db:4c:c5:c7:fc:
66:c4:2a:b5:e6:2e:3e:5e:07:f9:c2:f9:70:c7:9d:bb:93:e4:
e2:51:5f:ff:16:3a:1c:b0:99:6c:8a:c1:01:bf:7c:36:60:c7:
69:b2:e9:2f:d5:52:9c:12:1f:58:45:b9:5a:94:cd:01:e3:7a:
ea:e6:94:75:fe:86:48:ba:9d:ce:b0:6f:e6:74:8e:78:43:97:
43:bc:15:8a:01:8d:ba:8e:ca:de:89:3d:2e:38:8a:fe:97:79:
45:26:77:2a:98:ec:fa:9b:60:9a:88:1b:0a:60:e9:de:6c:99:
93:04:de:2b:39:ed:c6:31:88:13:bc:4e:4d:13:aa:ec:c4:0c:
0f:48:e4:5c:d6:74:be:58:be:33:44:ee:1e:02:52:f7:62:59:
da:40:da:62:26:ba:34:b9:1f:27:9b:0f:fe:62:04:eb:fe:9a:
ad:e8:59:33:f9:e3:fd:cd:06:8a:f3:fe:45:d7:20:2d:1b:f2:
c4:8c:9b:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:37 2026 by rpki-client