
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
File: 7192B96CAD2F513423F7D689B668C3C7840AC34F.mft (raw, json)
Hash identifier: olCfxAEMJ89wy2sg+IginRSwA0Yb37s0zorTqC4hVSY=
Subject key identifier: AC:4C:FA:C1:FE:88:43:62:DF:83:3E:91:7C:3E:A3:ED:AC:BE:BB:E4
Authority key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
Certificate issuer: /CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Certificate serial: 222041335FF29B1EF640181A6C2CD0484BE59332
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
Manifest number: BF
Signing time: Thu 24 Sep 2026 08:31:13 +0000
Manifest this update: Thu 24 Sep 2026 08:26:13 +0000
Manifest next update: Fri 25 Sep 2026 11:57:13 +0000
Files and hashes: 1: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: 7MfD4tIfKUj308eWVQujRI4K1Si3kCXL7YjAqs5uz1M=)
2: 7192B96CAD2F513423F7D689B668C3C7840AC34F.crl (hash: VPvDFy/rL602MbMM3QlTk2aP1q0kABXBFQ8KPbbsjSQ=)
3: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: 47+CX9pKXaasyuVMDOCQ2RbScy70aifxveGUS5xpmVw=)
4: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: l0lLcFyKU5R3pxNmqVEUMZ5v6XNKujljaGE/o4pCYb8=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 25 Sep 2026 11:52:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:20:41:33:5f:f2:9b:1e:f6:40:18:1a:6c:2c:d0:48:4b:e5:93:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Validity
Not Before: Sep 24 08:26:13 2026 GMT
Not After : Sep 25 11:57:13 2026 GMT
Subject: CN=AC4CFAC1FE884362DF833E917C3EA3EDACBEBBE4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:cb:fb:43:15:64:58:00:71:e3:69:42:69:05:
ff:42:d9:89:20:49:3c:75:fc:5b:16:f8:0f:f6:37:
34:43:64:45:b6:09:5d:da:72:dc:ec:da:a3:22:cc:
29:5c:27:d7:f2:f4:f1:b6:85:f0:97:32:dc:ff:01:
13:70:83:1a:4e:8d:e2:b8:ad:32:34:2c:41:e5:3e:
cf:66:4c:0f:ab:92:b2:7e:37:3a:91:3a:99:0d:dc:
72:69:ac:2f:6b:83:ee:de:b7:63:e5:a8:b1:8c:62:
10:06:49:f3:79:97:17:c3:04:c5:ba:8c:e8:59:4c:
91:3f:d9:99:1b:2b:75:b6:6f:36:33:14:ba:b4:48:
21:3f:15:4a:4d:82:6f:ad:2d:1c:ae:fb:dc:d4:73:
0d:4d:c0:2e:85:38:64:fd:2c:aa:59:95:c6:b9:5d:
b8:d7:49:8e:f6:4f:ba:5a:d6:cc:ee:1a:a9:54:3e:
e2:d9:58:41:59:b8:92:9c:68:6e:c4:3d:98:59:18:
b4:b0:ef:6e:97:6d:34:c7:67:ce:9c:fb:74:b7:0d:
b9:ec:8f:9a:1b:c1:4a:ad:8c:46:72:88:95:be:c6:
ba:fc:5f:42:5c:8a:df:41:17:6a:7f:0d:bb:12:9d:
67:e6:fd:df:d7:5b:db:b3:eb:4a:ec:90:fb:b8:96:
c9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:4C:FA:C1:FE:88:43:62:DF:83:3E:91:7C:3E:A3:ED:AC:BE:BB:E4
X509v3 Authority Key Identifier:
keyid:71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:82:d1:1f:4f:a8:f4:73:82:61:70:e0:cb:3a:2b:02:ac:c9:
11:f0:fc:59:ee:7c:98:b6:20:74:2e:28:46:b7:b2:f3:e3:ec:
7b:2f:1e:e7:60:6f:ea:c2:97:51:1f:2e:b9:59:31:db:a7:5b:
2f:cb:91:56:d6:db:99:96:5e:d9:f5:22:e6:1f:e7:5e:49:3d:
f3:86:f9:0a:d0:00:58:08:35:e5:72:d5:1d:bf:f4:9b:c3:ed:
90:ac:d4:b4:79:ed:91:5c:ef:fb:a3:10:95:9b:57:18:c6:31:
a1:7b:90:70:61:94:cf:26:06:d5:31:10:3c:1b:45:32:39:ed:
42:8c:78:21:de:18:33:fb:3d:58:d3:19:23:63:9c:14:90:58:
16:c3:4e:03:4c:e9:55:ad:c2:54:89:c2:73:d3:be:7e:55:02:
a4:bb:b5:72:30:6c:14:fb:66:95:e7:ef:d7:13:22:a4:78:72:
0f:c1:ef:34:e7:f7:9f:fa:91:e2:fb:9b:83:86:cb:d4:77:5f:
ac:36:d3:d4:d9:2a:5e:72:65:db:30:89:7a:45:58:a1:0c:46:
31:70:21:a1:d8:da:04:54:40:10:f0:0a:84:37:d6:71:26:b6:
bb:77:78:b1:cf:d8:7b:11:f1:e4:f9:dd:18:e6:66:27:28:e4:
32:b7:e4:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:45:38 2026 by rpki-client