
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
File: 7192B96CAD2F513423F7D689B668C3C7840AC34F.mft (raw, json)
Hash identifier: O4bqJAoZLKaxtlXrThPhUZVepfWDhaQQx4q8kPojXYA=
Subject key identifier: 9D:4B:4E:EE:72:30:D5:84:61:B9:CC:4B:25:60:CE:E6:64:4C:E0:E1
Authority key identifier: 71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
Certificate issuer: /CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Certificate serial: 40B820FF5E369F0B239726F6170D99548F55F79B
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
Manifest number: B5
Signing time: Wed 16 Sep 2026 16:24:20 +0000
Manifest this update: Wed 16 Sep 2026 16:19:20 +0000
Manifest next update: Thu 17 Sep 2026 19:19:20 +0000
Files and hashes: 1: 3136302e32352e3232332e302f32342d3234203d3e20313533303837.roa (hash: l0lLcFyKU5R3pxNmqVEUMZ5v6XNKujljaGE/o4pCYb8=)
2: 3136302e32352e3232322e302f32342d3234203d3e20313533303837.roa (hash: 47+CX9pKXaasyuVMDOCQ2RbScy70aifxveGUS5xpmVw=)
3: 7192B96CAD2F513423F7D689B668C3C7840AC34F.crl (hash: USfZIoWDik0FWQetLUGJFE20y8bGTvuTV/RT9zDphRo=)
4: 3136302e32352e3232322e302f32332d3233203d3e20313533303837.roa (hash: 7MfD4tIfKUj308eWVQujRI4K1Si3kCXL7YjAqs5uz1M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 17 Sep 2026 19:19:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:b8:20:ff:5e:36:9f:0b:23:97:26:f6:17:0d:99:54:8f:55:f7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7192B96CAD2F513423F7D689B668C3C7840AC34F
Validity
Not Before: Sep 16 16:19:20 2026 GMT
Not After : Sep 17 19:19:20 2026 GMT
Subject: CN=9D4B4EEE7230D58461B9CC4B2560CEE6644CE0E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5b:98:fd:02:99:e7:8a:1e:d2:79:db:fd:70:
df:48:9a:1f:47:d7:34:cc:84:2f:16:8a:ec:c2:8a:
3d:5a:7a:78:f6:b2:50:fd:3d:71:2e:98:a4:60:a7:
b0:80:c1:c2:1f:e3:bc:d1:6e:5b:90:68:ed:92:56:
fe:dc:22:e3:6f:76:44:55:fd:f1:00:0a:7b:ef:82:
c7:89:6f:96:69:ce:a2:0e:6d:55:4e:a2:48:5b:94:
2e:35:22:da:c3:70:71:40:f0:c3:a7:2a:f4:df:53:
cf:6a:81:fa:6b:33:d8:6c:b8:9f:e4:f6:4f:ce:cd:
55:c7:52:74:5b:37:da:3f:a4:90:af:11:5b:95:63:
25:f9:8b:af:f3:3a:f6:b1:ac:49:a4:0c:48:4e:b4:
9d:d4:ef:e1:94:3c:4e:1d:e0:48:bd:ee:57:4d:3e:
41:58:4a:10:9b:81:3c:7e:29:53:53:ae:c0:aa:d5:
fb:98:b4:78:b0:7b:f9:7f:3b:2d:b7:0e:e2:68:8e:
a7:c8:26:b1:3e:e1:03:7a:20:b9:6b:e7:03:11:49:
d7:ae:4b:e5:df:03:11:55:62:a4:f3:0f:c1:3b:2e:
ba:21:70:56:90:db:bf:3f:f3:aa:2f:6c:4a:46:22:
2c:49:d6:62:9c:c9:d8:ad:31:34:22:ac:2d:6e:71:
ba:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4B:4E:EE:72:30:D5:84:61:B9:CC:4B:25:60:CE:E6:64:4C:E0:E1
X509v3 Authority Key Identifier:
keyid:71:92:B9:6C:AD:2F:51:34:23:F7:D6:89:B6:68:C3:C7:84:0A:C3:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/1ded5811-be50-4caa-9f96-63d3720311de/0/7192B96CAD2F513423F7D689B668C3C7840AC34F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:aa:29:61:0e:6f:66:eb:6d:55:59:8f:f3:fe:93:f4:1e:61:
f8:28:3e:b2:4d:a7:9b:98:ea:b5:67:35:57:c2:0e:cb:82:31:
a8:7c:e9:68:a0:e4:de:85:33:11:2b:4b:dd:64:13:d3:c8:04:
67:52:df:aa:bf:f4:bd:90:a3:c9:93:b1:95:87:cf:50:41:8e:
f6:a5:11:2e:57:ef:27:22:ef:7e:a2:c1:83:58:c2:3f:5b:26:
e2:9a:09:78:3e:e7:b3:a4:3e:8d:a2:d2:b1:0a:02:fd:85:4e:
39:7e:a5:d3:82:e3:77:e4:aa:2a:b5:0d:2d:a3:1c:c7:80:69:
8b:a8:97:3c:1c:8c:32:71:6d:10:88:59:76:ce:cd:15:ef:a9:
72:f9:3b:93:82:80:4b:eb:ba:c8:dd:7e:54:46:57:28:23:43:
1d:15:a1:2f:ff:dc:62:2e:4a:fd:28:1c:76:0a:28:58:00:14:
25:70:41:9e:43:07:83:ff:19:f6:bc:85:6d:01:cf:10:c9:f7:
42:05:fa:cc:25:11:12:ba:44:e4:d4:a5:b7:1f:3f:3a:05:b9:
5e:56:7a:0f:21:a7:bf:08:7b:5a:6c:c3:ff:4d:15:cb:82:c5:
4f:d3:7e:e2:a4:28:97:3f:b8:b4:8b:5e:17:9a:b3:bc:aa:a1:
ce:dd:29:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 10:50:08 2026 by rpki-client