
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
File: 91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft (raw, json)
Hash identifier: YiH4NkmueK8k57LOIf9ocfiKRcm/0ZoAWSqqV1GY7zQ=
Subject key identifier: 5A:8E:D3:0E:4A:37:46:7C:61:6A:12:AE:6F:D3:62:3E:88:54:CE:FE
Authority key identifier: 91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
Certificate issuer: /CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Certificate serial: 393073526D9A149111DE9462B5ABAB605A2F0A52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
Manifest number: 0101
Signing time: Tue 10 Nov 2026 01:12:07 +0000
Manifest this update: Tue 10 Nov 2026 01:07:07 +0000
Manifest next update: Wed 11 Nov 2026 02:21:07 +0000
Files and hashes: 1: 3230322e31302e34362e302f32332d3234203d3e203538343837.roa (hash: kKmRE86U5utxwwvOtfvRLdagvzUOQsqXYNn7P0V7LAg=)
2: 3230322e31302e34342e302f32332d3233203d3e203538343837.roa (hash: 5gGU6Ludw6Y05TY5TZpCEOfkE+AhTpTefa6G6vry47k=)
3: 3230322e31302e33362e302f32332d3233203d3e203538343837.roa (hash: vbQLd6cdONw7Pp3qW0mvbEDsNufsb7r6bxU1ZSatIVI=)
4: 3230322e31302e33372e302f32342d3234203d3e203538343837.roa (hash: 9q8vmFKL7oGsGWkB1BKhhu/P2e7OqlLbcokrLiJELeQ=)
5: 3230322e31302e33342e302f32332d3233203d3e203538343837.roa (hash: NFc2WVD68KvDyLGSXGxgzJXnsXBUY7x8VG9AIvZ5nuk=)
6: 3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (hash: qXViQe0IG/eTHkD0fbY5SDfFmHb+Xoz2ICUsMklVTgs=)
7: 3230322e31302e33362e302f32342d3234203d3e203538343837.roa (hash: QhlhHRS58TOKP2TlkeSZ3GSiJh6rVZb0yknG88DBN/8=)
8: 3130332e3235332e3231322e302f32342d3234203d3e203538343837.roa (hash: pLawXbkYKxokhCiGu4htgBjnF2duVmR81lZEpVfXqtE=)
9: 3230322e31302e34322e302f32332d3233203d3e203538343837.roa (hash: zIT7bQQsfuFKgRAuHb2rpJgo4iUY2OkkcZskjqMXX/8=)
10: 3230322e31302e34342e302f32342d3234203d3e203538343837.roa (hash: WKuOJrVVZlYWwTvTmiW45MtVMO0eJoMBeuJku53fqVY=)
11: 3230322e31302e33352e302f32342d3234203d3e203538343837.roa (hash: xPINf6qMhMNXsRzoY5JvjSNwNPIFtsb12j6CHRo1d8o=)
12: 3230322e31302e34302e302f32342d3234203d3e203538343837.roa (hash: Hw0kdXNaECW5DIE3IdeWHlxia0Z8ePgN5IvMwxgcTk4=)
13: 3130332e3235332e3231352e302f32342d3234203d3e203538343837.roa (hash: Vo2Jpt+dSXazibEuz+y6WvVaVvXarzLBSGUclttgvSw=)
14: 323030313a6466313a373830303a3a2f34382d3438203d3e203538343837.roa (hash: vY/Ub03xqcj72v4RHCIezucQY4Qdw7prwT9UpJT80Mk=)
15: 3130332e3235332e3231342e302f32332d3233203d3e203538343837.roa (hash: lLp8Y/uyg9R/4Ak9RdIJf00LqFNskbQ2V+gJZBz02Jg=)
16: 3230322e31302e33342e302f32342d3234203d3e203538343837.roa (hash: P0Lt12HkMOn7Oz1k9JyvB66m4KQafgfYAgd99v0Pdkg=)
17: 3230322e31302e34372e302f32342d3234203d3e203538343837.roa (hash: o/ovZODvAYW8nitqxabUgfoEb6l26ISQ4qAXkJQ9bRQ=)
18: 3230322e31302e34332e302f32342d3234203d3e203538343837.roa (hash: 5bOvpLw6b1VcZVTrWaOK+xges8G3zIybqqd+s4sPxNE=)
19: 3230322e31302e34312e302f32342d3234203d3e203538343837.roa (hash: g0Hx5yrKopEHxPdHtj/SRdO2/5oBYvD/cLkEtfxzcgA=)
20: 3130332e3235332e3231322e302f32322d3232203d3e203538343837.roa (hash: 1jCC2C8CSqcWHluuI8h5rB9IAj4BjYVy3yCbZsU32bo=)
21: 3230322e31302e34302e302f32332d3233203d3e203538343837.roa (hash: bYsTywGdUh8Nwv8Sft0lrumaB+A6L+3snty95MBp9SE=)
22: 3130332e3235332e3231322e302f32332d3233203d3e203538343837.roa (hash: DCKoKYnpwUxGTL6mTQPgNviVbzOSMo7Pt0/wG5p706Q=)
23: 3130332e3235332e3231332e302f32342d3234203d3e203538343837.roa (hash: E+N1immRENPXVU/7bbv3smD3y2taIwXbBggOaxh1iyw=)
24: 3230322e31302e34362e302f32342d3234203d3e203538343837.roa (hash: qBJmiieahiSmBerrZ+MrOlgczH6EjYj5/TLPwBkeogE=)
25: 3230322e31302e33382e302f32342d3234203d3e203538343837.roa (hash: BuU2j2Tzku9Y+Nv4sLTJnMWdagAd0n4W+YSomxmWS8w=)
26: 3230322e31302e33392e302f32342d3234203d3e203538343837.roa (hash: FMOzKFepxalJiA9R7ziV+8N8e6PtElsKQhGhROCbxF4=)
27: 3230322e31302e34322e302f32342d3234203d3e203538343837.roa (hash: iq+TPsb2JWtOfSocldqSjmo2icbhTwmo72t7zi5fLU4=)
28: 3230322e31302e34352e302f32342d3234203d3e203538343837.roa (hash: Pq42kdvVdDx27B5bNAeqjUJLTlrLQKyMHAB5zlyHMPU=)
29: 3230322e31302e33382e302f32332d3233203d3e203538343837.roa (hash: FfgCUaM5r0YJEAtUKJB14M1Hd/RxAj7aA8Zb83q8BcM=)
30: 91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl (hash: IklOuHjk+YPGp6oSisSJInEhn2Jl9GssrZ1wh/TxkZc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 11 Nov 2026 02:21:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:30:73:52:6d:9a:14:91:11:de:94:62:b5:ab:ab:60:5a:2f:0a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91D8B8BF467FE8EAC193DF4D263C87F5A91259A9
Validity
Not Before: Nov 10 01:07:07 2026 GMT
Not After : Nov 11 02:21:07 2026 GMT
Subject: CN=5A8ED30E4A37467C616A12AE6FD3623E8854CEFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8f:b4:bf:9a:af:30:fa:82:5f:66:ac:1c:aa:
37:03:58:b4:3c:da:ed:45:fb:76:c9:67:d5:12:ae:
96:ee:04:56:0a:d1:b1:92:91:dd:ae:b6:40:03:8c:
c6:da:14:9a:31:af:69:64:af:58:61:15:77:74:2b:
ac:f7:5b:07:65:c6:96:41:ee:f0:bb:cc:40:87:a5:
fe:39:09:fe:cc:0d:c0:cc:c3:6f:39:14:97:4c:ad:
4c:40:f5:93:f7:72:8e:35:99:a5:98:4a:0d:00:97:
2e:68:4d:df:3b:b5:af:ba:c7:8f:e9:d4:a2:a0:88:
4b:6a:24:b8:e9:39:11:44:c6:47:17:30:db:3f:ea:
5c:e7:69:9b:09:68:1b:bc:fe:57:5b:3d:9e:e5:82:
48:15:70:22:43:d2:9a:ed:84:d1:8a:33:c5:68:ed:
ad:cb:8c:d7:68:90:ec:3d:d4:63:84:f3:ab:90:8c:
62:5e:13:8f:f4:02:bf:88:63:7a:08:46:cf:17:14:
af:fc:c6:56:49:4c:18:2f:f0:46:58:6a:85:b0:ff:
46:8a:b8:0d:f3:f4:cc:f1:1a:b8:eb:cb:eb:9a:79:
28:3d:f3:01:cb:32:52:c4:1a:1b:27:2a:6c:e5:cc:
d4:e1:c2:8d:d0:3b:a8:de:c8:b0:4c:25:70:29:7f:
a4:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:8E:D3:0E:4A:37:46:7C:61:6A:12:AE:6F:D3:62:3E:88:54:CE:FE
X509v3 Authority Key Identifier:
keyid:91:D8:B8:BF:46:7F:E8:EA:C1:93:DF:4D:26:3C:87:F5:A9:12:59:A9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/91D8B8BF467FE8EAC193DF4D263C87F5A91259A9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:29:0d:52:83:e9:19:f4:cb:67:79:3d:03:7a:21:68:1d:b8:
32:de:8c:5b:14:e3:ab:7d:0b:e6:9b:52:08:f5:56:c3:f4:59:
97:cd:a0:99:78:2f:ef:d5:a4:65:bf:2a:c9:1f:9f:a4:8c:2e:
a9:97:13:ef:45:01:4f:8d:df:ea:18:65:c9:17:d8:f4:36:14:
ae:66:27:7a:98:6d:57:c6:32:9f:36:20:9c:74:3a:db:ab:9e:
d8:ab:43:99:cc:fd:5e:6c:d1:c7:b0:03:06:df:55:95:cb:1a:
5b:76:27:d2:58:5d:52:5d:89:f0:82:f7:71:a5:da:37:d2:d5:
9a:27:e7:00:81:f6:b0:92:2b:8b:48:3d:d0:7d:6a:76:f6:16:
41:19:6f:c2:9b:bd:8b:46:d9:16:53:5d:96:ae:93:08:ef:6d:
58:ec:bc:31:18:29:52:c8:df:ae:0c:41:84:57:b6:c7:07:b0:
de:27:fe:27:77:ae:25:a7:0b:be:02:e4:3f:c3:30:c0:b6:5c:
63:c6:73:38:61:9f:24:0b:f9:57:06:20:b4:30:1b:2c:60:5c:
a9:9a:99:ba:d8:b2:91:b2:51:1a:23:c2:dc:ed:99:52:7c:30:
ce:36:30:0d:eb:a0:ac:50:84:3f:61:b3:14:1a:e9:50:1d:c9:
ed:47:ee:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 19:10:59 2026 by rpki-client