
$ rpki-client -vvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
File: 7192B96CAD2F513423F7D689B668C3C7840AC34F.mft (raw, json)
Hash identifier: TKY4I6ZDpSQjBsdEaEmB1FPwykU/riGpbYyKHCSB3m8=
Subject key identifier: 20:F3:88:3D:7B:6B:6F:62:40:D3:C9:D4:01:28:6D:13:BF:DC:DC:EA
Authority key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
Certificate issuer: /CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Certificate serial: 532F282C66E753371D3B4DEB1D3E69C04869E70B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
Manifest number: 3B
Signing time: Mon 15 Jun 2026 09:42:55 +0000
Manifest this update: Mon 15 Jun 2026 09:37:55 +0000
Manifest next update: Tue 16 Jun 2026 11:23:55 +0000
Files and hashes: 1: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: l0lLcFyKU5R3pxNmqVEUMZ5v6XNKujljaGE/o4pCYb8=)
2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: 47+CX9pKXaasyuVMDOCQ2RbScy70aifxveGUS5xpmVw=)
3: 7192B96CAD2F513423F7D689B668C3C7840AC34F.crl (hash: stWSGbjoGmcbThXE7I1l1VIexlvSLiHX64cUxmjCn6k=)
4: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: 7MfD4tIfKUj308eWVQujRI4K1Si3kCXL7YjAqs5uz1M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 16 Jun 2026 11:23:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:2f:28:2c:66:e7:53:37:1d:3b:4d:eb:1d:3e:69:c0:48:69:e7:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Validity
Not Before: Jun 15 09:37:55 2026 GMT
Not After : Jun 16 11:23:55 2026 GMT
Subject: CN=20F3883D7B6B6F6240D3C9D401286D13BFDCDCEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:20:b6:b5:12:70:6c:f7:68:83:43:6c:1c:6d:
60:8c:c8:a8:f7:d6:3b:25:25:a6:b9:d2:ba:eb:62:
42:60:e5:4b:d9:38:86:09:97:3a:91:c7:57:49:18:
24:cf:1e:70:86:64:0e:0f:ed:fe:33:fa:d6:3d:88:
a5:87:a7:2b:55:7f:e8:b4:77:a4:d5:c5:d9:e6:8e:
26:c5:f4:74:57:84:c3:ac:ff:a2:02:be:86:fe:31:
1a:2b:1d:c0:27:0b:28:82:01:71:58:0e:44:89:9f:
74:db:e2:b3:9e:50:5a:f7:dd:e1:44:46:2f:30:5c:
08:fa:cf:a0:d9:17:00:0b:a0:88:4f:fc:0c:6c:cd:
c5:4c:76:97:8c:27:9b:95:46:93:1e:81:d8:53:ef:
ad:64:ef:31:72:2a:8f:0a:93:71:66:d2:39:34:8a:
a3:97:ae:11:d7:71:e3:55:ac:1d:e5:b5:b2:cb:08:
36:18:d3:ed:07:66:b9:a3:ec:39:cb:ff:1e:a4:53:
60:a6:12:ef:90:8b:4d:76:1f:42:57:5b:99:4e:3c:
47:aa:dc:9e:2b:c6:61:6b:15:25:47:11:72:14:81:
4d:b3:d6:e0:d7:99:5b:67:fc:90:d9:1d:81:be:2b:
d2:24:64:58:2b:bd:f6:fb:bc:99:39:4d:ba:a7:d8:
53:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F3:88:3D:7B:6B:6F:62:40:D3:C9:D4:01:28:6D:13:BF:DC:DC:EA
X509v3 Authority Key Identifier:
keyid:71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:21:d8:be:e9:f9:1f:36:c6:60:f0:d8:8d:83:bd:5f:4c:4a:
66:61:a9:f8:03:29:7e:39:5a:38:92:f2:f1:71:74:c4:c4:fe:
49:22:ba:95:83:e5:f5:e1:67:62:18:0a:65:6e:cf:5e:f6:23:
c6:16:c4:ab:42:b7:e1:05:9e:f2:f0:31:cf:31:0c:67:39:cb:
19:98:8c:2f:81:b5:13:52:03:26:e8:70:4a:f1:3e:96:dc:03:
5c:f2:fa:e7:5e:cf:a2:e4:16:49:b2:3e:92:6e:bc:94:3f:8c:
be:4a:20:f9:65:d7:25:42:11:a1:63:d7:2f:46:0c:ee:86:fe:
9a:ab:59:ac:b4:ae:1a:6b:3f:87:56:a7:c8:6d:01:b2:ff:36:
ef:62:a9:af:02:2c:20:95:6f:b6:41:82:00:52:8d:78:49:e6:
85:dd:2e:47:31:7d:e8:bf:9b:34:e3:5e:4f:7b:65:77:42:08:
95:ea:3f:a6:50:7b:60:1a:34:7a:e9:90:17:5a:10:2f:59:32:
37:8a:4f:59:fc:70:4d:30:20:44:ed:ef:46:40:a4:03:63:bf:
ab:a8:c7:84:b3:a9:b1:ad:72:2f:25:db:01:85:ae:1e:dd:24:
01:46:11:31:b5:bd:a7:e7:be:b4:a2:c6:e2:d6:fd:8b:87:f6:
6b:78:22:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 15 19:05:58 2026 by rpki-client