
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft
File: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft (raw, json)
Hash identifier: WG2CcTSrl2p7geaHQHk65NAUn26pGJvn6aJphhWzNxo=
Subject key identifier: D4:D2:32:62:CC:A8:10:48:B3:9A:78:83:CB:64:07:3A:F9:81:E9:09
Authority key identifier: 79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F
Certificate issuer: /CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F
Certificate serial: 7D5518F7C3275F63144CDA4C0A2FCB19D4F6E768
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft
Manifest number: 0105
Signing time: Sat 14 Nov 2026 06:22:05 +0000
Manifest this update: Sat 14 Nov 2026 06:17:05 +0000
Manifest next update: Sun 15 Nov 2026 07:50:05 +0000
Files and hashes: 1: 792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl (hash: Zrg1BUPA02XNQ7e6XSGw+wf0PkMW+cgNQHRbFRwfpp0=)
2: 3136302e32322e36342e302f32332d3234203d3e203435333035.roa (hash: ogtnejoe1lu/pUVl9hn0Y1Pmvr2UyFdPnQq+gSyIODw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl
rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 15 Nov 2026 07:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:55:18:f7:c3:27:5f:63:14:4c:da:4c:0a:2f:cb:19:d4:f6:e7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F
Validity
Not Before: Nov 14 06:17:05 2026 GMT
Not After : Nov 15 07:50:05 2026 GMT
Subject: CN=D4D23262CCA81048B39A7883CB64073AF981E909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:b3:c1:e8:17:ef:69:cf:6c:48:e2:e6:e2:ba:
6d:7b:64:03:db:4d:36:22:d8:c4:f6:8f:27:c7:85:
98:81:e6:43:87:0e:c5:2a:b2:ba:7f:26:27:a1:4e:
5a:e9:fd:96:27:61:23:f1:e4:69:a3:63:30:d4:9e:
11:b0:b6:a6:b1:e3:c5:9a:c4:71:9a:86:0c:a6:31:
b3:2c:51:49:1c:94:92:46:b0:00:fe:7d:54:fc:76:
6c:7c:0e:8a:e6:dc:c7:c5:08:64:07:83:9a:37:48:
42:2e:53:13:df:90:d7:e9:38:7d:5b:1b:04:38:ba:
10:d8:70:4f:84:80:b8:2b:5e:ac:20:c7:52:07:51:
9b:57:9f:2d:b6:c7:94:e8:b4:ae:5e:47:57:39:2d:
de:d8:c6:11:70:fa:ca:b5:1f:8f:54:28:48:47:9b:
fb:27:0f:99:a1:97:e4:f6:f9:fa:98:74:9c:bc:fd:
90:33:fd:ab:72:54:10:e0:8a:1e:ad:a8:1f:a7:d3:
2d:c5:6f:07:ca:9b:cd:f8:4b:5d:93:83:d9:b6:54:
d7:2c:df:30:e6:64:6e:1b:34:ba:af:09:9b:89:3c:
3d:d7:51:1a:6f:98:fc:b3:2e:ac:70:d5:36:af:a6:
a2:17:ae:50:7d:eb:fc:9f:d1:84:07:76:56:20:33:
79:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:32:62:CC:A8:10:48:B3:9A:78:83:CB:64:07:3A:F9:81:E9:09
X509v3 Authority Key Identifier:
keyid:79:2B:EA:B6:45:44:6E:1A:9A:6E:1B:AF:76:74:BC:69:04:C8:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5e4aba0a-1c2c-4f8a-a4b4-ea72d9b2a60a/0/792BEAB645446E1A9A6E1BAF7674BC6904C8BE1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a6:38:ca:fb:8d:5f:67:16:d6:66:af:21:55:27:89:29:95:
da:b7:e4:e9:c6:2c:d4:f0:60:1a:51:6f:19:6e:31:27:10:2f:
3c:54:51:36:fb:ae:32:1a:8d:83:dc:16:c3:41:e8:47:ca:95:
b3:91:f9:b6:9d:da:ca:1c:c4:95:c3:90:b1:9b:a5:62:0d:15:
cd:d2:6f:24:ed:5d:80:0b:df:63:23:e0:42:f2:e6:71:5f:f4:
6b:ff:63:8b:65:b5:a8:e9:34:aa:c4:87:35:13:07:38:8e:3f:
9a:39:f5:77:8c:02:d0:25:7b:b0:cc:da:69:86:a8:7c:ac:a5:
7f:e8:99:2f:22:69:75:ae:6f:4c:99:2f:f5:a5:b3:e9:9c:ea:
27:23:25:85:7e:d3:a8:34:a8:d6:ff:85:be:1d:0c:3b:00:16:
c8:f8:71:89:39:b5:57:0a:2a:a4:f4:fe:3c:11:ef:87:a0:50:
86:b8:51:1f:26:5f:84:db:5c:c5:f9:0e:32:d4:5b:54:37:44:
60:4b:6e:6c:91:7d:6b:b0:6b:9b:1d:51:f3:11:74:df:4d:51:
a9:9a:45:3d:67:1a:91:f2:8a:96:65:dc:15:ee:b1:9b:e9:7c:
ef:15:93:e7:80:d5:22:d0:89:2a:13:8a:85:b7:ae:24:97:2a:
b7:7a:1d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:32:51 2026 by rpki-client