
$ rpki-client -vvf repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
File: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft (raw, json)
Hash identifier: AqcJzPSzgQue3rhZwacL+xKBM3Ft0cxU0EDCVjt7gzY=
Subject key identifier: D4:94:AA:2E:A5:27:01:D3:F7:46:76:0A:56:D9:77:61:95:5A:DE:0B
Authority key identifier: 91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
Certificate issuer: /CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Certificate serial: 2C8F0757A2BE5F955B3D38C01C12C2C5024CCD6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
Manifest number: 0566
Signing time: Fri 17 Apr 2026 16:01:29 +0000
Manifest this update: Fri 17 Apr 2026 15:56:29 +0000
Manifest next update: Mon 20 Apr 2026 21:17:29 +0000
Files and hashes: 1: 3130332e3134322e31342e302f32332d3234203d3e20313339333735.roa (hash: Grgdt8iRUAIyZ2qFHWZrH4g5ALyIzB9vEqddBLCgUpI=)
2: 91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl (hash: aXcbGEsLGsPdcRxs3KGNts67uQNecZ3UA0y88N9xH6o=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 20 Apr 2026 21:17:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:8f:07:57:a2:be:5f:95:5b:3d:38:c0:1c:12:c2:c5:02:4c:cd:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91E7E283422E38A6A6EDB38593EE074DF8FA29C6
Validity
Not Before: Apr 17 15:56:29 2026 GMT
Not After : Apr 20 21:17:29 2026 GMT
Subject: CN=D494AA2EA52701D3F746760A56D97761955ADE0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:eb:f9:65:60:1f:d1:3f:9b:96:0f:f1:b6:cf:
c6:01:d4:64:85:71:b0:10:da:e9:c5:5c:48:6d:77:
a0:10:78:be:b4:36:fc:3a:17:58:a1:8c:db:1d:07:
61:4c:36:f9:6c:20:6c:b6:5d:65:b1:16:56:c1:45:
24:9e:c8:ac:a4:b2:a7:01:66:ae:bd:1b:5a:79:b7:
a6:fc:90:cd:b6:3b:44:d5:5c:0c:45:12:48:c3:01:
38:43:44:fa:89:dc:ba:0e:ff:38:33:1c:02:aa:b1:
df:3d:dc:37:ea:8c:ec:14:3e:96:af:df:8a:c4:e1:
78:56:0c:df:48:e4:e8:91:36:b8:7c:b0:92:6e:21:
cc:ad:b9:28:39:c2:0d:6f:ee:ca:8e:22:e3:ca:a8:
25:8b:2a:a6:93:bc:9a:90:44:ba:5c:05:01:d3:c7:
dc:85:55:3e:a0:68:3f:59:5f:0b:6d:9d:79:eb:ee:
1a:37:e0:29:8c:ac:c0:67:c9:1b:6d:54:55:54:5a:
1e:71:2f:b2:8c:1c:dd:fb:2f:42:50:43:0d:be:71:
14:09:b1:e1:42:18:9c:af:f8:c1:9e:11:87:ba:c1:
1f:20:8f:0c:48:94:47:4b:b3:78:39:01:68:fc:84:
71:c2:9d:5b:c6:53:c3:13:8c:3b:77:57:87:fe:03:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:AA:2E:A5:27:01:D3:F7:46:76:0A:56:D9:77:61:95:5A:DE:0B
X509v3 Authority Key Identifier:
keyid:91:E7:E2:83:42:2E:38:A6:A6:ED:B3:85:93:EE:07:4D:F8:FA:29:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21cbc927-f4e2-4153-b66b-ce1ec02d7410/0/91E7E283422E38A6A6EDB38593EE074DF8FA29C6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:25:c7:3d:95:a7:57:87:39:38:e2:53:bf:da:9a:0f:cd:08:
26:52:b3:0f:1f:ee:41:3a:56:51:7c:97:fd:37:7f:36:72:96:
df:22:cc:82:ec:c6:6c:2d:b2:a0:f8:aa:a8:ef:68:5c:73:c0:
8b:d1:79:ba:f3:6c:a4:0a:ce:f9:64:e5:df:c1:45:ff:f2:1c:
1a:6f:9a:82:fd:31:fe:16:c2:e4:71:39:38:57:9d:3d:ca:53:
86:fe:97:88:88:81:12:3c:1d:b9:45:e5:f7:77:95:85:20:17:
2b:40:ed:65:81:b0:77:79:54:98:9d:2f:57:09:62:3b:b7:bd:
c2:e8:71:b9:8f:34:f6:53:e6:52:21:cf:c1:a4:7d:cd:45:6f:
57:4c:2a:01:3d:12:3c:c6:f4:98:84:98:6f:04:86:5c:da:7a:
79:69:24:ce:90:97:4b:5d:fb:0c:76:39:ee:c8:8f:cb:ee:26:
f0:73:9f:af:46:ca:89:51:37:56:06:cd:ab:f8:8f:40:31:27:
d6:9d:21:d2:25:7f:17:81:70:0c:eb:fc:32:3c:8f:a1:c5:fc:
37:33:66:24:05:d0:28:e0:d5:2d:a2:7a:e4:e8:c7:7d:37:c3:
48:17:01:67:4a:76:6c:c7:95:a3:1a:47:f1:08:f4:67:c2:b3:
c4:aa:02:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:52 2026 by rpki-client