
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: CLf2jeUdDBeQ2b0B5NycRxWyPBvlDNvpyoyZ2zDK15M=
Subject key identifier: 55:3A:9E:CA:15:37:86:46:E7:22:30:6B:82:63:6B:F6:A5:10:A4:B8
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 02DD14ECF258D7169CEB0D8387A249228C4F7B70
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 39
Signing time: Sat 13 Jun 2026 11:33:36 +0000
Manifest this update: Sat 13 Jun 2026 11:28:36 +0000
Manifest next update: Sun 14 Jun 2026 14:30:36 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
2: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: yF7Drn2eqnQ03pV+/GKFCIM+N3oCoDiMfOQc9CAtSWU=)
3: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
4: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:dd:14:ec:f2:58:d7:16:9c:eb:0d:83:87:a2:49:22:8c:4f:7b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: Jun 13 11:28:36 2026 GMT
Not After : Jun 14 14:30:36 2026 GMT
Subject: CN=553A9ECA15378646E722306B82636BF6A510A4B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6c:a2:10:8b:34:6c:8a:9d:74:c8:c9:33:db:
36:de:2a:f9:40:9a:c3:94:cd:2a:22:3a:6d:a3:ca:
30:72:5f:1a:07:de:bf:c2:b2:d5:dc:07:75:b0:e6:
73:c3:29:3d:65:10:4d:35:c9:8a:32:c5:29:f5:c6:
0e:2a:bc:04:39:f2:c4:79:95:c4:bd:55:3e:67:9d:
36:fe:51:e2:23:b5:02:69:4a:6a:d6:fb:bd:9e:e3:
0b:b5:00:46:7a:2f:f2:0c:2b:04:13:de:88:2f:b3:
11:87:f5:8c:8a:09:c4:f3:48:56:72:b0:e7:82:ac:
b4:0b:9e:b8:5c:77:44:c9:14:13:9a:10:69:82:3a:
8d:04:ad:46:27:ca:d0:2b:74:a5:77:63:8f:aa:84:
61:4e:31:13:d1:a3:5a:dd:2f:21:8f:f0:c7:c3:00:
5d:04:e7:58:51:08:db:54:92:f0:2a:45:f7:7b:2f:
9e:fb:21:ee:08:ba:09:66:77:d0:f3:b0:98:fd:7c:
d7:ae:35:31:43:86:86:09:ac:82:d2:c2:88:b0:bb:
ad:c4:66:ef:6b:ba:0c:30:49:77:8b:79:ee:70:c5:
82:9e:02:c8:48:65:33:aa:bb:5c:07:d6:b9:a2:d1:
f3:df:4a:88:b6:7b:81:6a:af:e8:68:56:fe:d0:ab:
c0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:3A:9E:CA:15:37:86:46:E7:22:30:6B:82:63:6B:F6:A5:10:A4:B8
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1c:a0:de:0d:ad:ac:e8:f9:49:d4:fa:f5:a6:be:13:de:6b:
84:f4:c9:78:48:db:e1:93:17:d9:bd:a8:13:7c:2a:a7:5f:67:
3a:a2:81:30:8b:af:07:6b:6f:3f:f0:17:ec:94:d4:b0:6c:2b:
d3:1e:98:84:d7:7e:02:18:02:2e:59:27:76:14:fe:e2:07:3a:
e5:84:ff:c1:9a:24:5b:75:13:1e:b0:3b:52:5f:8b:08:67:de:
a2:16:21:d8:4e:5f:50:3c:9f:2b:0c:0a:e9:cd:ca:0f:0c:42:
64:3f:19:93:f9:c4:b5:34:c0:3f:3f:2c:2b:91:75:98:c9:80:
37:b7:dd:11:70:70:a6:6a:1d:d6:9b:b2:a4:75:0d:f7:ba:e5:
e7:f5:04:05:48:03:67:56:55:85:a1:c7:9b:7c:61:b2:b1:61:
8f:62:a9:a0:1f:03:3f:83:36:f9:ca:2c:ea:7f:d8:cc:16:d1:
07:88:53:b5:45:0e:f4:8e:9f:fd:c6:12:0a:dd:40:f9:86:e5:
da:9e:39:c0:0c:9b:c2:76:78:90:c2:a1:46:b9:4f:69:dc:f1:
c9:40:77:fe:01:55:f7:cc:cc:43:a7:23:f6:69:8f:b3:77:15:
93:2a:40:48:29:91:13:30:c9:80:42:8c:c8:1a:5b:af:ee:5a:
30:36:9f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:22:51 2026 by rpki-client