
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
File: 91C44F4E918B247652B1384F03FD41D436EEC992.mft (raw, json)
Hash identifier: L2ZcXsfQgmsB4IPFLVOSNh6YIRLGWYR9nVni4ckRrjE=
Subject key identifier: 47:11:32:FE:C7:80:12:AC:67:61:18:92:96:42:07:7B:FE:A5:23:5B
Authority key identifier: 91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
Certificate issuer: /CN=91C44F4E918B247652B1384F03FD41D436EEC992
Certificate serial: 757C4A9401AA2C9D41BD6EEF6B6B1CED023F6868
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
Manifest number: 3D
Signing time: Tue 16 Jun 2026 18:31:31 +0000
Manifest this update: Tue 16 Jun 2026 18:26:31 +0000
Manifest next update: Wed 17 Jun 2026 20:43:31 +0000
Files and hashes: 1: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: FEkvsfE4ha6uu8kBv920BlUS4PCELQ7grX+3/QQrY20=)
2: 91C44F4E918B247652B1384F03FD41D436EEC992.crl (hash: YJeuyz9QVaoK2lIEvPo1dXJZWcXJ3xvyZB7StLl/cGw=)
3: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: ufeXbfr/jLc+wJlLQ93DC6bBsAaagmv1lEQKSFaOyLc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 17 Jun 2026 20:43:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:7c:4a:94:01:aa:2c:9d:41:bd:6e:ef:6b:6b:1c:ed:02:3f:68:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C44F4E918B247652B1384F03FD41D436EEC992
Validity
Not Before: Jun 16 18:26:31 2026 GMT
Not After : Jun 17 20:43:31 2026 GMT
Subject: CN=471132FEC78012AC676118929642077BFEA5235B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:97:fe:01:f5:34:3a:22:5b:12:62:44:06:5a:
e1:a6:a8:17:49:b4:f0:c0:25:74:44:44:b9:4f:71:
8f:43:d6:2b:ce:8c:aa:96:d3:55:07:b2:dc:da:54:
4e:70:cd:5e:da:a5:da:39:a7:c3:6f:72:52:8d:f6:
a0:4c:3f:db:89:84:41:03:bf:ab:0d:b8:13:e2:f8:
7a:cf:7f:21:58:e9:b6:4c:4d:99:ee:70:b1:5d:41:
71:b0:5b:89:62:16:eb:b8:af:3d:6d:38:89:70:7f:
f7:72:30:77:3b:83:db:8b:08:03:0b:68:bf:35:66:
32:63:9c:16:82:90:7f:4e:54:a9:45:c3:a6:ea:f3:
fd:44:66:d5:1e:3c:89:78:4b:6d:06:b8:55:0e:b2:
dc:96:95:bb:f2:d9:8b:65:73:ce:dc:16:6e:7d:a1:
c9:f1:65:ff:21:34:a0:43:76:bd:c1:09:c6:50:07:
52:54:95:fc:28:ae:49:d8:4e:e3:69:18:af:30:7b:
39:e5:1b:df:1c:7f:93:e9:79:1a:eb:ac:3b:79:af:
33:8a:94:4b:54:86:cd:3e:95:7a:f5:12:b0:53:fa:
72:f7:87:c8:6e:90:7d:77:d2:47:14:33:f0:31:dd:
ea:2c:17:63:ad:f9:7d:ee:98:fb:89:a1:77:74:87:
eb:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:11:32:FE:C7:80:12:AC:67:61:18:92:96:42:07:7B:FE:A5:23:5B
X509v3 Authority Key Identifier:
keyid:91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c1:bb:c6:3f:e2:65:d9:64:29:15:31:1a:1d:1c:b3:57:3d:
53:12:af:64:a2:ef:b6:25:64:f4:de:2a:bc:d1:2a:56:4a:ad:
43:27:9a:a6:9b:cd:ce:9a:30:81:38:32:62:98:d7:90:69:c3:
74:9f:e1:e6:7d:59:fe:3e:5a:ef:16:8a:08:8c:ac:2f:0f:41:
91:1a:2f:44:15:31:c3:d6:55:80:ef:d0:be:c2:b9:e4:ce:cb:
58:81:06:54:dc:c6:53:4d:8f:43:f9:97:b0:68:1f:8d:f4:68:
b0:e7:b7:42:12:fb:90:17:88:fb:11:18:50:ae:03:02:67:f8:
ab:5f:60:2a:eb:41:e1:20:10:21:cf:fe:77:fe:4f:b1:06:71:
10:64:fc:71:9a:cc:b9:25:30:ce:a2:9f:a4:a0:f7:a2:0e:8d:
03:50:63:3c:98:f1:2f:0b:4b:6f:d2:43:fb:46:3e:24:c5:de:
22:63:2e:7d:af:8b:0b:22:c4:36:f7:51:d8:06:0b:49:e6:03:
ec:21:1f:9e:f4:09:9b:76:ea:db:ac:59:9d:6e:98:e1:ad:70:
22:2d:52:7c:96:6b:8e:ec:19:53:4c:8f:a4:b1:4f:74:18:89:
ae:0c:4e:50:92:69:76:d7:e1:67:8c:52:78:77:45:45:cf:59:
69:0f:ce:d5
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUdXxKlAGqLJ1BvW7va2sc7QI/aGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTFDNDRGNEU5MThCMjQ3NjUyQjEzODRGMDNGRDQxRDQz
NkVFQzk5MjAeFw0yNjA2MTYxODI2MzFaFw0yNjA2MTcyMDQzMzFaMDMxMTAvBgNV
BAMTKDQ3MTEzMkZFQzc4MDEyQUM2NzYxMTg5Mjk2NDIwNzdCRkVBNTIzNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCll/4B9TQ6IlsSYkQGWuGmqBdJ
tPDAJXRERLlPcY9D1ivOjKqW01UHstzaVE5wzV7apdo5p8NvclKN9qBMP9uJhEED
v6sNuBPi+HrPfyFY6bZMTZnucLFdQXGwW4liFuu4rz1tOIlwf/dyMHc7g9uLCAML
aL81ZjJjnBaCkH9OVKlFw6bq8/1EZtUePIl4S20GuFUOstyWlbvy2Ytlc87cFm59
ocnxZf8hNKBDdr3BCcZQB1JUlfworknYTuNpGK8weznlG98cf5PpeRrrrDt5rzOK
lEtUhs0+lXr1ErBT+nL3h8hukH130kcUM/Ax3eosF2Ot+X3umPuJoXd0h+ubAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQURxEy/seAEqxnYRiSlkIHe/6lI1swHwYDVR0j
BBgwFoAUkcRPTpGLJHZSsThPA/1B1DbuyZIwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
NGM0YzJmNjItZjczNS00ZDYwLTkyMzctOTI3ZWZhZDlkYWQwLzAvOTFDNDRGNEU5
MThCMjQ3NjUyQjEzODRGMDNGRDQxRDQzNkVFQzk5Mi5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MUM0NEY0RTkxOEIyNDc2NTJCMTM4NEYwM0ZENDFENDM2RUVD
OTkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNGM0YzJmNjItZjczNS00ZDYwLTky
MzctOTI3ZWZhZDlkYWQwLzAvOTFDNDRGNEU5MThCMjQ3NjUyQjEzODRGMDNGRDQx
RDQzNkVFQzk5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAE/Bu8Y/4mXZZCkVMRodHLNXPVMSr2Si77Yl
ZPTeKrzRKlZKrUMnmqabzc6aMIE4MmKY15Bpw3Sf4eZ9Wf4+Wu8WigiMrC8PQZEa
L0QVMcPWVYDv0L7CueTOy1iBBlTcxlNNj0P5l7BoH430aLDnt0IS+5AXiPsRGFCu
AwJn+KtfYCrrQeEgECHP/nf+T7EGcRBk/HGazLklMM6in6Sg96IOjQNQYzyY8S8L
S2/SQ/tGPiTF3iJjLn2viwsixDb3UdgGC0nmA+whH570CZt26tusWZ1umOGtcCIt
UnyWa47sGVNMj6SxT3QYia4MTlCSaXbX4WeMUnh3RUXPWWkPztU=
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:45:04 2026 by rpki-client