
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json)
Hash identifier: 2ols6SxYvt9u9mZGPQN+5XluyE6umCjvulQ0Ziv3gZM=
Subject key identifier: B6:99:93:45:07:F3:40:97:6D:22:05:AE:40:26:30:CC:03:C0:8A:2A
Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Certificate serial: 4E6C48B8537E84F0087D415A76451299A3A6C454
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
Manifest number: 76
Signing time: Wed 29 Jul 2026 03:09:58 +0000
Manifest this update: Wed 29 Jul 2026 03:04:58 +0000
Manifest next update: Thu 30 Jul 2026 04:12:58 +0000
Files and hashes: 1: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: e6FJicqcXoD/N/8o41FKN7GoDxO+BcQP4wws25+37/8=)
2: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 30 Jul 2026 04:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:6c:48:b8:53:7e:84:f0:08:7d:41:5a:76:45:12:99:a3:a6:c4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Validity
Not Before: Jul 29 03:04:58 2026 GMT
Not After : Jul 30 04:12:58 2026 GMT
Subject: CN=B699934507F340976D2205AE402630CC03C08A2A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:9b:93:77:c3:3b:29:83:95:f8:f8:03:c2:86:
d4:d1:cb:27:16:9a:94:51:bf:af:e6:24:ed:bf:f7:
50:2f:37:45:85:3b:42:ec:b0:e4:ec:61:22:ae:3c:
7a:48:08:2e:50:f8:4f:65:07:b1:e3:f1:55:26:1d:
5e:86:f9:20:1f:e9:a4:43:d6:93:8d:2c:0c:bf:c6:
93:4b:f4:08:33:c1:4e:f6:5e:4e:15:2b:eb:3f:a8:
7d:48:4f:c3:47:2d:12:70:7a:7c:81:82:e4:af:08:
f5:23:46:fe:00:27:de:60:72:24:2b:d1:37:41:81:
e7:21:78:a8:f8:82:28:7a:66:54:71:0b:c9:b8:86:
e2:14:17:25:a3:64:57:ec:fe:6d:95:1a:52:6e:3b:
86:99:82:61:84:4a:0b:4f:44:17:f4:e3:b3:81:04:
69:6d:ba:ed:74:3d:77:47:5e:ac:29:c7:56:dc:c3:
24:5d:5c:ff:a4:b5:a3:61:02:86:e6:0b:40:1d:50:
73:10:be:18:8f:92:4f:bb:ff:79:81:e0:57:d2:75:
09:e9:e0:14:42:5d:0d:5c:bc:69:a7:8d:ea:a9:f8:
5c:c2:26:75:5d:6d:92:d9:73:63:59:d6:c0:42:05:
ae:84:12:79:e8:71:b6:32:ec:88:4c:8d:04:69:8a:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:99:93:45:07:F3:40:97:6D:22:05:AE:40:26:30:CC:03:C0:8A:2A
X509v3 Authority Key Identifier:
keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:21:52:07:e8:c0:7a:d5:98:f5:3f:a6:3f:84:d0:f8:53:89:
95:b9:76:ab:03:a8:35:a7:e3:06:eb:0c:22:51:a1:9b:7c:14:
da:44:16:9b:29:5c:4c:f1:e2:31:dc:7d:12:59:f3:b8:9b:c3:
a1:23:70:a2:2f:e8:da:06:d7:9e:a8:f7:21:22:4a:b9:04:f0:
cd:e3:61:8e:b1:d4:30:ca:83:d9:53:fa:97:8f:13:e7:50:07:
3a:4d:3c:37:c5:bf:87:99:f2:e9:95:9f:d2:54:75:1f:ca:37:
4e:1a:f8:ca:5b:c0:3e:d5:06:1c:fb:9f:46:ee:7b:23:5a:b8:
d8:03:78:71:a5:bd:06:1d:8c:5d:fc:6e:35:39:5b:59:89:3d:
55:82:4e:36:c0:9e:e7:d0:86:4e:83:8b:5c:99:16:57:b4:d1:
4d:19:82:77:d6:49:d3:dc:e2:e3:df:b6:2b:c4:4b:01:bb:2e:
f7:76:69:05:4f:8f:0f:c1:89:36:95:83:a7:4f:76:3d:c8:0c:
4f:ee:95:00:aa:d8:5e:be:02:da:e5:a9:dd:6e:3f:27:d5:35:
bd:93:48:6a:af:1c:a0:b2:46:e3:03:08:a2:2e:1e:9d:4a:da:
30:64:b8:71:d7:cb:d8:61:30:65:83:b7:99:62:ee:41:70:fd:
c1:38:26:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:42:11 2026 by rpki-client