
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
File: 7192B96CAD2F513423F7D689B668C3C7840AC34F.mft (raw, json)
Hash identifier: cD1KBCwWHhqzLttay3TVwRNL2+dlCAWHp/WWAFoV0bg=
Subject key identifier: 7A:BB:84:27:6F:D4:1B:8B:56:81:49:89:A8:29:DD:3C:BD:47:FA:56
Authority key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
Certificate issuer: /CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Certificate serial: 309B3BE40D7D0793C3350BA1F70546912DC6A36E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
Manifest number: BD
Signing time: Tue 22 Sep 2026 16:57:24 +0000
Manifest this update: Tue 22 Sep 2026 16:52:24 +0000
Manifest next update: Wed 23 Sep 2026 20:34:24 +0000
Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: 7MfD4tIfKUj308eWVQujRI4K1Si3kCXL7YjAqs5uz1M=)
2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: 47+CX9pKXaasyuVMDOCQ2RbScy70aifxveGUS5xpmVw=)
3: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: l0lLcFyKU5R3pxNmqVEUMZ5v6XNKujljaGE/o4pCYb8=)
4: 7192B96CAD2F513423F7D689B668C3C7840AC34F.crl (hash: 7FqxVvCH8m75/WN1+/1Z09WZXhTEQFKL4SyFINpipw4=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 15:18:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:9b:3b:e4:0d:7d:07:93:c3:35:0b:a1:f7:05:46:91:2d:c6:a3:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Validity
Not Before: Sep 22 16:52:24 2026 GMT
Not After : Sep 23 20:34:24 2026 GMT
Subject: CN=7ABB84276FD41B8B56814989A829DD3CBD47FA56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:18:ec:85:57:77:c5:5a:96:7c:4f:63:af:d6:
1d:a2:19:b0:59:25:73:78:49:b0:a3:d4:22:88:00:
4e:ef:05:72:7b:b0:4c:ec:0e:33:59:fe:ba:0b:86:
f0:db:02:8c:c1:ee:c6:5a:24:cb:5a:59:91:31:09:
13:a3:46:1e:26:37:22:ab:9f:04:51:b2:e6:b8:de:
8e:d8:fe:cc:cc:c2:45:1c:c1:76:8c:cf:26:30:b9:
48:5c:be:d9:d0:ff:33:93:b1:f4:91:3e:af:b3:ad:
9b:78:5d:32:22:80:dc:e0:8e:cb:41:24:4a:7e:b6:
94:be:e7:ab:b2:6e:1c:e2:9d:f6:4c:70:84:95:61:
f7:1c:86:06:3a:0e:46:89:8f:c4:9c:0f:7f:75:f0:
5e:58:b7:f2:e6:21:7a:37:04:83:af:37:e6:96:57:
7c:29:d1:4b:ac:3a:17:22:13:a2:ef:0f:3a:e0:70:
43:df:d4:2c:3f:2c:96:75:92:0e:19:c4:23:ee:df:
13:aa:71:52:3c:19:b2:ef:05:3b:29:2f:a7:a1:04:
2c:38:18:3b:87:fe:6b:8d:6f:d5:e4:ef:5f:ca:d9:
46:45:3b:4b:e5:a4:ea:c9:54:aa:ac:8b:19:54:52:
ba:02:29:9e:e7:82:2e:f4:58:ee:bd:72:e4:4a:94:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:BB:84:27:6F:D4:1B:8B:56:81:49:89:A8:29:DD:3C:BD:47:FA:56
X509v3 Authority Key Identifier:
keyid:71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:17:4b:06:be:97:4f:3a:c0:d9:0e:91:9a:97:06:1f:f6:4d:
e5:5f:48:3e:f1:95:b6:70:52:89:a9:18:35:db:96:28:59:2b:
c4:9a:9e:73:df:5f:9d:cf:56:84:98:be:89:a4:25:f8:2f:c6:
c3:01:16:0c:42:b0:a6:df:b0:6e:26:53:cc:23:76:63:45:9d:
a3:c7:92:3f:7e:df:de:f9:27:06:c9:d8:5b:5a:84:52:64:21:
e2:01:5e:49:0e:dd:05:1e:33:5c:c5:07:7e:8f:70:d7:2e:bb:
4e:e4:dc:52:2e:a5:ad:72:d7:94:3e:98:40:69:b3:ae:97:31:
ce:e1:9a:36:fd:19:9a:e6:e7:7f:cb:35:10:fe:51:35:ff:5e:
bd:4e:b9:af:0f:8a:82:83:98:f2:22:0c:55:c7:bb:05:d8:d9:
69:a5:0b:0a:35:b9:9f:ca:2d:e1:a0:1e:73:8f:ac:19:53:26:
82:2c:98:3a:45:ff:33:40:4f:53:0d:ac:d9:66:1d:d0:37:6c:
ad:ba:79:f6:39:30:35:74:09:a8:c8:b8:8e:b8:18:58:5c:32:
31:f6:6f:4d:9f:cd:0e:49:8b:3c:a4:93:3a:ca:a9:49:18:ad:
8e:e2:17:47:ee:2c:c5:37:0f:8e:5d:b7:bc:7c:c5:85:7a:99:
da:18:96:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 03:51:58 2026 by rpki-client