
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: P8StokdQG8qj0Rv5V9Q4granynvqFQS0MSuyfYgqBys=
Subject key identifier: FE:63:6A:52:4D:E9:95:49:05:7B:B8:B0:7D:39:A2:8B:7B:10:FF:FF
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 2B9868F0CBB52BBA1C7FD3C3EE0C4FDECDC73E11
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 0107
Signing time: Sat 14 Nov 2026 22:37:30 +0000
Manifest this update: Sat 14 Nov 2026 22:32:30 +0000
Manifest next update: Mon 16 Nov 2026 01:53:30 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
2: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
3: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: vkTT4p23BwUzpz44VwQHd3cbtj+Gg4bFBowzkveB9Pc=)
4: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
5: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
6: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 16 Nov 2026 01:53:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:98:68:f0:cb:b5:2b:ba:1c:7f:d3:c3:ee:0c:4f:de:cd:c7:3e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: Nov 14 22:32:30 2026 GMT
Not After : Nov 16 01:53:30 2026 GMT
Subject: CN=FE636A524DE99549057BB8B07D39A28B7B10FFFF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:51:ce:0e:2c:a0:b4:e7:0e:37:12:09:b5:a4:
ba:36:ca:44:09:21:75:3c:47:c8:8f:5b:79:bd:9e:
3a:5f:9e:2c:bd:1d:ef:1b:9e:c0:d7:56:78:72:ec:
4f:b8:00:e9:5c:a6:43:b3:fa:80:f4:32:09:e8:c9:
f7:e7:f3:38:45:e4:54:be:b9:57:55:58:af:b4:c0:
29:3b:a8:7f:f1:11:83:be:1b:46:08:f8:ee:c2:a0:
aa:c0:19:48:65:dd:62:fa:dc:09:3f:bb:60:ee:bd:
31:d0:78:87:98:a5:89:9d:7d:51:47:cb:c7:f6:53:
95:a0:67:2f:fe:36:98:ad:c6:86:d1:67:60:21:98:
48:9f:e5:1f:d4:24:17:36:96:45:13:88:7a:13:9c:
24:59:a7:a2:fe:15:3c:7b:86:fc:b1:1c:81:f0:c3:
99:0f:c2:0a:68:f5:61:a3:35:da:53:a0:dc:74:08:
af:62:75:ed:fe:2f:77:58:49:31:1c:0c:be:07:ac:
46:2c:e1:66:b2:e7:08:cc:18:f8:f8:4b:24:31:c5:
a2:8d:15:39:fb:c1:81:b1:3d:76:1e:00:4b:c9:73:
99:bd:56:3d:57:5b:1d:8f:07:b6:fa:8d:97:b5:e3:
2b:ad:e9:d3:38:b7:b6:a6:18:06:dc:f3:81:22:61:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:63:6A:52:4D:E9:95:49:05:7B:B8:B0:7D:39:A2:8B:7B:10:FF:FF
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:62:05:c0:d7:5b:71:58:f0:29:ad:dd:2b:88:32:ef:f9:dc:
c5:e5:47:9c:50:d3:ff:72:c0:ea:60:d3:4f:30:35:18:e0:40:
cf:17:d9:ea:01:4a:f1:2b:1a:10:3e:6c:5f:f1:09:02:67:80:
1a:7f:54:20:b1:a5:ef:44:2a:55:2d:a6:2a:e6:08:57:76:45:
93:72:34:a5:2c:55:02:f8:57:a1:dd:d3:59:8d:3c:8b:07:45:
f1:0a:a2:0e:93:6d:21:4f:65:14:2d:d5:66:6a:70:02:3a:88:
4c:f0:b4:03:47:af:50:d9:2b:cd:10:39:07:91:a1:28:a4:e0:
ce:aa:d0:f9:0a:fe:4e:ab:b6:d6:29:73:5b:03:26:7d:fb:dc:
67:20:98:3a:46:47:52:37:a3:ca:5d:b0:61:8b:50:f5:ad:16:
60:05:57:67:f8:76:15:b9:99:a3:99:8e:fa:f0:78:54:4a:8d:
33:78:20:61:aa:ba:ad:6c:d3:43:b1:e1:e9:f5:41:14:88:91:
a0:8d:2a:00:48:22:a2:30:73:91:a2:7e:c4:0f:4f:02:06:0e:
e2:8a:1b:87:df:71:97:0f:25:f5:4c:14:d8:48:e7:03:e7:4f:
a3:d4:32:16:13:cb:cc:61:d5:a0:f0:b0:26:82:64:e5:72:3e:
a5:73:d9:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:55:35 2026 by rpki-client