
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
File: 91C44F4E918B247652B1384F03FD41D436EEC992.mft (raw, json)
Hash identifier: lz1kGBdiuJe8v8clpOlaELi/e6sLrKQgxY/GMksqMNI=
Subject key identifier: 12:72:1A:18:DC:B4:76:55:38:58:C6:DB:69:E1:8E:D5:CF:89:8D:D4
Authority key identifier: 91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
Certificate issuer: /CN=91C44F4E918B247652B1384F03FD41D436EEC992
Certificate serial: 0D79A82C6472A2AE7D1910104EC13382D054BA0C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
Manifest number: C3
Signing time: Fri 25 Sep 2026 21:27:08 +0000
Manifest this update: Fri 25 Sep 2026 21:22:08 +0000
Manifest next update: Sat 26 Sep 2026 23:13:08 +0000
Files and hashes: 1: 91C44F4E918B247652B1384F03FD41D436EEC992.crl (hash: cFvcv48p2yRhSB0hNPau0tvPYOhWZ4+XvJkFiacpKGk=)
2: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: ufeXbfr/jLc+wJlLQ93DC6bBsAaagmv1lEQKSFaOyLc=)
3: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: FEkvsfE4ha6uu8kBv920BlUS4PCELQ7grX+3/QQrY20=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 26 Sep 2026 17:58:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:79:a8:2c:64:72:a2:ae:7d:19:10:10:4e:c1:33:82:d0:54:ba:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C44F4E918B247652B1384F03FD41D436EEC992
Validity
Not Before: Sep 25 21:22:08 2026 GMT
Not After : Sep 26 23:13:08 2026 GMT
Subject: CN=12721A18DCB476553858C6DB69E18ED5CF898DD4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:c1:da:23:47:94:95:8e:89:6e:8c:23:b2:
3c:8b:84:ee:7c:d2:e6:03:6b:4c:70:02:bd:6b:d1:
8f:b9:3b:7f:1b:32:f5:82:77:1c:d1:f2:b7:15:3c:
e9:57:9e:e5:18:5f:e2:c3:a0:fc:6a:70:af:61:ba:
63:b7:07:e4:15:f5:80:20:05:20:af:da:b9:a3:22:
a5:10:d6:ac:a1:1b:ff:44:29:db:2c:89:fb:e1:74:
62:e4:54:01:c6:9f:db:20:41:de:9f:02:a2:15:5d:
0a:14:54:c6:f0:f0:e7:a3:e0:18:b1:95:25:dc:e7:
5a:57:d1:39:3d:3a:ae:9d:9c:6f:5d:8e:bc:91:88:
81:b2:c9:46:70:bb:c9:68:4b:5c:bf:53:4e:40:df:
42:47:64:da:ac:55:13:f5:14:ee:a7:b8:6e:b3:5b:
bd:bf:55:f1:f3:24:54:cb:4b:49:15:d1:22:20:43:
90:b1:c3:7e:61:a8:1a:76:3a:6b:0c:91:b5:79:a5:
17:d1:b9:6b:0d:92:1f:ca:80:99:fb:5c:67:d8:bf:
38:3f:08:85:6f:0a:7c:4a:21:d5:0e:51:d6:88:de:
d3:d5:e4:a5:23:a3:3c:37:cb:83:d4:04:31:8f:de:
eb:35:bc:ba:6c:b2:88:19:a5:20:a7:1a:f6:88:a0:
28:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:72:1A:18:DC:B4:76:55:38:58:C6:DB:69:E1:8E:D5:CF:89:8D:D4
X509v3 Authority Key Identifier:
keyid:91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:ae:d3:b8:06:b0:e0:71:af:36:5f:3f:79:ad:05:34:bf:c8:
8b:fd:aa:94:29:29:43:47:00:34:7d:0e:28:e5:f8:25:0e:20:
da:77:0f:7c:59:63:0a:84:ea:67:b8:c2:16:ee:96:71:b9:01:
c4:9c:1f:d1:5d:9e:c0:e1:31:4d:2a:d3:6b:23:a0:c4:f7:9f:
5b:73:af:b8:4e:41:27:67:94:45:3f:8d:54:3c:09:49:72:28:
1c:b4:5d:ef:53:16:6f:ab:39:90:38:00:58:4c:85:d5:43:46:
8e:ed:87:84:f6:4f:37:99:2a:cd:43:d6:dc:a3:8a:39:b7:13:
bd:6c:da:be:e8:c4:a4:1e:1e:89:ac:60:8b:92:70:97:1e:e5:
eb:8b:3a:50:ac:b9:a9:ef:20:0b:75:c6:f1:95:31:df:08:57:
b2:c2:a0:1f:b8:b8:fc:ab:5f:d5:fb:5a:f3:13:27:ae:66:84:
e6:66:c8:df:b5:b6:d8:67:11:fb:41:89:bb:99:24:f9:6f:53:
f3:7a:03:fd:1c:15:3d:ae:22:95:fe:53:59:96:d8:5f:4c:98:
2c:cf:dc:d0:87:e4:b7:28:61:24:df:da:72:28:f6:3c:43:45:
7d:d0:60:c1:b9:49:e7:c7:9f:de:98:99:ac:a0:3c:50:a4:7c:
4b:0f:fc:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:18:22 2026 by rpki-client