
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: Fhd3uAVKYcosJSQur127N3IUa4++XjgtoYElGVKVOAk=
Subject key identifier: 61:03:BB:C9:8C:05:C7:C8:E9:F0:D5:ED:7B:22:4C:48:A0:D7:72:19
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 66B528904D700A5903AEADE0EBD1521D5B2FB4C5
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 09:52:48 +0000
Manifest this update: Wed 29 Jul 2026 09:47:48 +0000
Manifest next update: Thu 30 Jul 2026 11:19:48 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
2: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
4: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
5: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: BL98HtfAnDuiWBUqTvxHmNNDPrACTzHoexMqdM8/F+I=)
6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 11:19:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:b5:28:90:4d:70:0a:59:03:ae:ad:e0:eb:d1:52:1d:5b:2f:b4:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: Jul 29 09:47:48 2026 GMT
Not After : Jul 30 11:19:48 2026 GMT
Subject: CN=6103BBC98C05C7C8E9F0D5ED7B224C48A0D77219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:1e:c5:ff:8e:00:ee:a3:cf:9e:0f:a4:98:
da:d4:85:18:f7:89:be:5b:e4:ba:6c:b8:cf:5c:53:
a9:14:64:d4:e0:d8:3a:ad:c2:24:de:12:ef:6d:58:
5a:ac:2b:82:36:dd:b8:6e:85:05:69:31:7b:f9:31:
f5:0c:c7:81:29:80:61:fc:d0:9c:ac:e1:27:7a:44:
ae:13:02:38:d7:fe:4c:33:86:be:20:5c:39:96:72:
29:93:2e:ae:17:bd:6e:84:b4:ac:14:31:1d:fc:6f:
49:1d:45:77:fc:9c:34:ec:64:48:0c:19:65:f5:b7:
30:b8:c3:af:8c:1d:e3:07:8e:8b:af:ff:ab:43:0c:
d9:9e:e4:71:3f:f1:bb:1d:68:4e:f4:fb:73:27:a7:
d8:dc:6a:5b:6c:34:7f:72:a7:b1:9d:79:6b:d6:fa:
92:98:bd:0f:e9:c9:f4:31:a7:12:0c:2b:d0:df:56:
b7:0f:12:6f:a6:92:e0:91:2a:f3:86:49:d4:26:56:
e0:1d:60:b5:02:0e:7d:0a:04:c4:c8:80:a3:85:38:
a7:67:a2:4a:77:d0:56:98:b0:c8:f6:f7:b0:1f:e2:
e5:34:ad:b3:5c:10:1c:38:14:7c:0f:a4:b2:de:9e:
69:9c:f4:c7:fc:be:1a:2c:d6:d6:ea:e2:38:ae:fd:
18:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:03:BB:C9:8C:05:C7:C8:E9:F0:D5:ED:7B:22:4C:48:A0:D7:72:19
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:36:08:e1:2b:48:53:d7:bd:7f:62:f1:9b:16:aa:b6:34:a7:
05:e4:8a:46:95:54:92:98:02:ce:6b:70:3f:2e:46:16:75:40:
1b:cd:28:ad:b0:12:5d:e9:67:77:85:cf:49:0c:ac:b6:64:d8:
bc:ca:d7:ed:74:53:aa:56:64:8b:67:4e:d2:32:24:68:f0:c9:
07:3f:ff:b8:9a:5f:04:e8:b7:a9:c3:b5:fa:01:02:ff:eb:e4:
f0:d1:11:6d:99:45:2d:8e:09:52:b8:13:4a:45:b3:50:bc:fa:
25:8c:b8:93:a4:0c:35:01:68:82:3b:4b:9c:8d:0d:76:83:d0:
bb:97:0e:51:b8:75:17:9a:98:95:82:66:29:68:f9:83:4f:32:
33:1e:81:cc:c2:b5:62:33:37:b1:04:eb:e7:6a:e0:00:6c:02:
92:2e:4f:21:bb:24:80:0d:d0:fe:3e:d7:00:45:ce:78:d0:be:
49:41:77:47:ea:f4:37:b3:71:81:ab:24:f6:b4:b2:22:ef:19:
d4:93:a1:8c:56:b3:b0:4d:7e:bd:25:24:eb:1e:04:b9:b3:e9:
cd:a6:00:26:33:6c:b4:76:b4:7c:08:cc:70:ae:36:14:79:47:
0c:12:8c:9c:36:8d:05:63:b2:5a:40:c0:2a:1c:e9:88:dd:b6:
b3:a5:eb:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:30:01 2026 by rpki-client