
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
File: 7192B96CAD2F513423F7D689B668C3C7840AC34F.mft (raw, json)
Hash identifier: RT1Jafi7zfjwDeZswROqgs+ZF+cF8PjByaQ5XOt9Xe8=
Subject key identifier: DD:E4:95:EA:5D:D9:4D:9B:AA:56:95:C8:25:96:10:C1:B7:0E:DA:C8
Authority key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
Certificate issuer: /CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Certificate serial: 5B7BC9AEE2C4946278B236C70206F8F457756174
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
Manifest number: 0103
Signing time: Sat 14 Nov 2026 19:29:03 +0000
Manifest this update: Sat 14 Nov 2026 19:24:03 +0000
Manifest next update: Sun 15 Nov 2026 19:56:03 +0000
Files and hashes: 1: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: l0lLcFyKU5R3pxNmqVEUMZ5v6XNKujljaGE/o4pCYb8=)
2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: 47+CX9pKXaasyuVMDOCQ2RbScy70aifxveGUS5xpmVw=)
3: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: 7MfD4tIfKUj308eWVQujRI4K1Si3kCXL7YjAqs5uz1M=)
4: 7192B96CAD2F513423F7D689B668C3C7840AC34F.crl (hash: Lov36oBod5X+mMe4vKe7+/UD2nQQniSyR/b3ScroFFg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 19:56:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:7b:c9:ae:e2:c4:94:62:78:b2:36:c7:02:06:f8:f4:57:75:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Validity
Not Before: Nov 14 19:24:03 2026 GMT
Not After : Nov 15 19:56:03 2026 GMT
Subject: CN=DDE495EA5DD94D9BAA5695C8259610C1B70EDAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:7d:0f:58:6b:02:99:48:d7:b3:f1:76:21:e9:
c0:d3:61:fe:77:e0:1f:7f:68:23:e9:44:e5:7b:c5:
4e:e6:ef:89:7b:25:91:47:64:30:ce:40:ea:db:a8:
ca:54:ba:1c:62:a1:59:6d:d2:76:1a:38:e4:51:50:
08:5b:cc:db:39:4b:37:d7:8e:a8:4f:e8:37:6d:37:
99:bb:ee:df:5f:24:6c:5d:c2:ac:20:a5:f3:e3:3f:
aa:6f:ba:ae:ef:65:0e:5c:74:b9:92:fe:0e:2f:84:
16:10:10:c7:41:43:73:e6:75:28:58:2f:1b:b8:1c:
1d:29:a9:03:be:47:94:34:d5:04:8d:05:bb:c1:1c:
1f:eb:fe:2d:7b:f0:09:c3:04:08:c0:97:68:1b:29:
ff:4e:68:ad:aa:2a:58:a5:e3:aa:08:b2:76:5a:47:
b9:00:44:9b:25:8f:25:3d:b2:a9:fb:29:de:3e:ee:
03:96:41:95:f1:9e:51:eb:24:54:57:f6:84:4d:3f:
e1:25:34:80:ab:2d:22:86:8e:f3:69:af:e4:2e:3b:
d7:da:84:8c:31:67:43:6d:a6:cb:6b:c2:0d:ad:a6:
68:8f:a8:b9:a9:35:f3:36:a0:85:ab:86:1f:74:c5:
27:8a:9c:37:b1:a4:fe:12:0a:be:c9:fd:23:34:00:
15:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E4:95:EA:5D:D9:4D:9B:AA:56:95:C8:25:96:10:C1:B7:0E:DA:C8
X509v3 Authority Key Identifier:
keyid:71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9b:4c:27:0e:cc:ae:ae:22:24:74:77:a1:46:4c:55:d6:87:
02:e2:9d:e6:1e:79:9c:e6:c6:63:9c:9c:3e:f2:eb:bc:4a:e3:
d1:05:27:ae:94:d4:10:35:1b:ae:96:7b:ff:e2:48:6e:21:a7:
ca:92:91:89:a3:fd:d0:a1:2a:7d:21:62:ab:32:fb:82:6f:02:
8d:5f:4c:3d:bf:c6:63:d9:14:f3:08:91:35:3b:cc:9f:89:43:
d5:5c:e2:8a:a8:61:e4:84:58:52:f4:c0:46:b1:f9:04:e9:9a:
a2:4e:d7:02:04:97:1d:96:60:76:af:04:d6:87:a9:58:49:39:
4f:15:2b:5d:2b:ba:ec:7c:f9:00:0d:51:0f:eb:72:d0:14:d6:
91:3d:2a:5c:0d:0a:e7:fd:e1:b4:18:2e:8e:5e:f6:4a:2b:89:
9e:65:98:e5:e0:19:38:f5:ca:f1:27:d8:d6:1e:0f:95:21:0d:
6e:e8:ba:df:23:60:bd:37:ae:e4:1a:6f:a2:28:b9:18:f7:f6:
ed:b6:d5:a3:02:da:4d:a8:42:57:94:14:04:5b:1d:48:5f:af:
d4:6c:93:64:7f:d2:05:3b:a7:55:e2:f2:3a:51:dd:6a:03:c1:
81:4c:57:ba:ab:58:2f:32:13:09:be:4b:90:67:1d:38:be:68:
d9:dd:1b:ec
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUW3vJruLElGJ4sjbHAgb49Fd1YXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE5MkI5NkNBRDJGNTEzNDIzRjdENjg5QjY2OEMzQzc4
NDBBQzM0RjAeFw0yNjExMTQxOTI0MDNaFw0yNjExMTUxOTU2MDNaMDMxMTAvBgNV
BAMTKERERTQ5NUVBNUREOTREOUJBQTU2OTVDODI1OTYxMEMxQjcwRURBQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjfQ9YawKZSNez8XYh6cDTYf53
4B9/aCPpROV7xU7m74l7JZFHZDDOQOrbqMpUuhxioVlt0nYaOORRUAhbzNs5SzfX
jqhP6DdtN5m77t9fJGxdwqwgpfPjP6pvuq7vZQ5cdLmS/g4vhBYQEMdBQ3PmdShY
Lxu4HB0pqQO+R5Q01QSNBbvBHB/r/i178AnDBAjAl2gbKf9OaK2qKlil46oIsnZa
R7kARJsljyU9sqn7Kd4+7gOWQZXxnlHrJFRX9oRNP+ElNICrLSKGjvNpr+QuO9fa
hIwxZ0Ntpstrwg2tpmiPqLmpNfM2oIWrhh90xSeKnDexpP4SCr7J/SM0ABXVAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU3eSV6l3ZTZuqVpXIJZYQwbcO2sgwHwYDVR0j
BBgwFoAUcZK5bK0vUTQj99aJtmjDx4QKw08wDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
MWRlZDU4MTEtYmU1MC00Y2FhLTlmOTYtNjNkMzcyMDMxMWRlLzAvNzE5MkI5NkNB
RDJGNTEzNDIzRjdENjg5QjY2OEMzQzc4NDBBQzM0Ri5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMC83MTkyQjk2Q0FEMkY1MTM0MjNGN0Q2ODlCNjY4QzNDNzg0MEFD
MzRGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMWRlZDU4MTEtYmU1MC00Y2FhLTlm
OTYtNjNkMzcyMDMxMWRlLzAvNzE5MkI5NkNBRDJGNTEzNDIzRjdENjg5QjY2OEMz
Qzc4NDBBQzM0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBABGbTCcOzK6uIiR0d6FGTFXWhwLineYeeZzm
xmOcnD7y67xK49EFJ66U1BA1G66We//iSG4hp8qSkYmj/dChKn0hYqsy+4JvAo1f
TD2/xmPZFPMIkTU7zJ+JQ9Vc4oqoYeSEWFL0wEax+QTpmqJO1wIElx2WYHavBNaH
qVhJOU8VK10ruux8+QANUQ/rctAU1pE9KlwNCuf94bQYLo5e9koriZ5lmOXgGTj1
yvEn2NYeD5UhDW7out8jYL03ruQab6IouRj39u221aMC2k2oQleUFARbHUhfr9Rs
k2R/0gU7p1Xi8jpR3WoDwYFMV7qrWC8yEwm+S5BnHTi+aNndG+w=
-----END CERTIFICATE-----
Generated at Sun Nov 15 13:31:58 2026 by rpki-client