
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json)
Hash identifier: PG56bHBlFg39bFBHYY3vRHOgHuYV5q/+MP+lCmwGqY8=
Subject key identifier: F4:D5:21:64:37:3B:EB:BA:9C:21:E0:2D:8D:61:C2:0E:5D:07:EC:1F
Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Certificate serial: 153076A0372DA1688A93BCAF28498CC31A5C97BE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
Manifest number: 76
Signing time: Tue 28 Jul 2026 20:36:55 +0000
Manifest this update: Tue 28 Jul 2026 20:31:55 +0000
Manifest next update: Wed 29 Jul 2026 23:49:55 +0000
Files and hashes: 1: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: V4XOnRXQwNj50Iod7IZLiAscs7yUHHAcunzpkap5cVE=)
2: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=)
3: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=)
4: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=)
5: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:49:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:30:76:a0:37:2d:a1:68:8a:93:bc:af:28:49:8c:c3:1a:5c:97:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Validity
Not Before: Jul 28 20:31:55 2026 GMT
Not After : Jul 29 23:49:55 2026 GMT
Subject: CN=F4D52164373BEBBA9C21E02D8D61C20E5D07EC1F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ae:73:76:12:05:e9:66:4e:21:fe:07:1c:1c:
1b:e2:cd:87:e9:d5:65:3e:c3:48:ad:08:6b:ca:5d:
5b:3a:10:15:ac:41:c0:1d:94:52:32:7c:6a:16:7c:
c0:52:b5:c4:51:0a:ea:4c:2c:8b:78:21:68:aa:37:
31:9a:ad:3c:5b:e1:5c:99:dc:ae:f3:a4:f4:89:2e:
f1:17:01:85:27:7e:5b:c9:34:ab:c0:92:60:02:e4:
ff:1f:0d:f5:e5:9b:5f:d9:4f:81:1b:b1:6f:64:00:
58:af:2d:28:4e:1d:64:37:fd:f7:0f:e4:82:f7:2d:
62:81:39:1b:e7:24:15:ac:ac:59:25:91:67:89:3b:
12:ea:92:7c:68:c7:00:9d:78:9b:70:b4:90:a6:9d:
ff:55:db:46:39:8d:e9:85:8c:a1:6d:6a:40:77:4f:
81:7e:16:47:de:82:0a:55:88:07:91:ba:bd:a6:e6:
11:4b:f6:51:4a:e6:87:a0:b4:02:ba:c3:9c:65:99:
97:a6:11:a2:5f:63:b7:79:75:d2:59:91:06:f4:34:
db:0e:8f:34:ee:80:40:4d:20:b4:94:17:fe:62:4a:
33:08:65:38:61:89:82:f7:b4:4f:d4:84:4e:5f:d9:
2d:ab:7e:91:74:b0:a4:33:51:26:d1:f8:b4:3a:a9:
be:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:D5:21:64:37:3B:EB:BA:9C:21:E0:2D:8D:61:C2:0E:5D:07:EC:1F
X509v3 Authority Key Identifier:
keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:17:b2:9a:cb:67:bd:5e:2d:31:af:98:cb:13:ec:6b:c6:12:
73:b4:4a:aa:17:42:73:be:06:b2:ea:aa:f0:0e:2a:be:4e:41:
b4:e2:b7:24:ec:11:a0:ce:b1:eb:74:90:b6:3c:db:8c:58:15:
f7:f0:2a:99:4d:a2:6e:2f:1a:cf:09:94:0b:1c:45:e5:48:7c:
b2:ed:ab:e8:55:20:47:0c:4a:95:41:a2:66:c2:fa:98:d5:6a:
82:d2:ad:1e:d7:b2:31:5c:68:4a:c3:59:4d:0c:41:fa:e2:b5:
53:aa:f5:a4:6f:81:ea:f0:ec:06:86:8b:5c:14:7a:19:d3:74:
9a:cd:67:e3:e0:14:19:09:62:cb:aa:b4:e8:71:ac:96:7e:dd:
76:cc:69:a4:4c:04:de:ac:fb:e2:fb:34:64:2d:63:16:79:e7:
a5:6b:c9:99:13:5f:fd:b1:99:cd:74:4d:9d:6e:58:c7:cf:66:
ea:f8:1d:d1:79:36:41:2a:30:33:cd:70:e4:41:c2:a8:7c:60:
ef:52:56:23:5a:08:7f:79:5e:40:68:4a:ce:a3:ea:1e:d8:a7:
7d:19:d3:60:b0:07:d3:9d:c5:5c:e9:45:92:63:af:25:ad:f3:
6c:9f:37:e8:4b:fb:13:7f:8a:63:ea:a0:c2:ee:4f:32:4d:b6:
f8:3f:3e:27
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUFTB2oDctoWiKk7yvKEmMwxpcl74wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1
NTFDOUNBNTAeFw0yNjA3MjgyMDMxNTVaFw0yNjA3MjkyMzQ5NTVaMDMxMTAvBgNV
BAMTKEY0RDUyMTY0MzczQkVCQkE5QzIxRTAyRDhENjFDMjBFNUQwN0VDMUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjrnN2EgXpZk4h/gccHBvizYfp
1WU+w0itCGvKXVs6EBWsQcAdlFIyfGoWfMBStcRRCupMLIt4IWiqNzGarTxb4VyZ
3K7zpPSJLvEXAYUnflvJNKvAkmAC5P8fDfXlm1/ZT4EbsW9kAFivLShOHWQ3/fcP
5IL3LWKBORvnJBWsrFklkWeJOxLqknxoxwCdeJtwtJCmnf9V20Y5jemFjKFtakB3
T4F+FkfeggpViAeRur2m5hFL9lFK5oegtAK6w5xlmZemEaJfY7d5ddJZkQb0NNsO
jzTugEBNILSUF/5iSjMIZThhiYL3tE/UhE5f2S2rfpF0sKQzUSbR+LQ6qb4jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQU9NUhZDc767qcIeAtjWHCDl0H7B8wHwYDVR0j
BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG
RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5
Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk
OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky
M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBADgXsprLZ71eLTGvmMsT7GvGEnO0SqoXQnO+
BrLqqvAOKr5OQbTityTsEaDOset0kLY824xYFffwKplNom4vGs8JlAscReVIfLLt
q+hVIEcMSpVBombC+pjVaoLSrR7XsjFcaErDWU0MQfritVOq9aRvgerw7AaGi1wU
ehnTdJrNZ+PgFBkJYsuqtOhxrJZ+3XbMaaRMBN6s++L7NGQtYxZ556VryZkTX/2x
mc10TZ1uWMfPZur4HdF5NkEqMDPNcORBwqh8YO9SViNaCH95XkBoSs6j6h7Yp30Z
02CwB9OdxVzpRZJjryWt82yfN+hL+xN/imPqoMLuTzJNtvg/Pic=
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:04:54 2026 by rpki-client