
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
File: 91C44F4E918B247652B1384F03FD41D436EEC992.mft (raw, json)
Hash identifier: zkho3WqwFQrupEHuHMDZN1z5O1GzCApx1NV91Wg4sDg=
Subject key identifier: 6A:85:A4:96:0C:22:A4:8E:37:A8:36:A0:0A:D8:F3:0A:7B:F3:3F:4C
Authority key identifier: 91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
Certificate issuer: /CN=91C44F4E918B247652B1384F03FD41D436EEC992
Certificate serial: 39123AD2FEC6E797D1DB2F78EA330596E6D538A1
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 07:23:39 +0000
Manifest this update: Tue 12 May 2026 07:18:39 +0000
Manifest next update: Wed 13 May 2026 10:12:39 +0000
Files and hashes: 1: 91C44F4E918B247652B1384F03FD41D436EEC992.crl (hash: fYDabOcKUWjEc0Mf6ZOisiXZ9sxdlsA+3FVQhIhbTVI=)
2: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: ufeXbfr/jLc+wJlLQ93DC6bBsAaagmv1lEQKSFaOyLc=)
3: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: FEkvsfE4ha6uu8kBv920BlUS4PCELQ7grX+3/QQrY20=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 09:32:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:12:3a:d2:fe:c6:e7:97:d1:db:2f:78:ea:33:05:96:e6:d5:38:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C44F4E918B247652B1384F03FD41D436EEC992
Validity
Not Before: May 12 07:18:39 2026 GMT
Not After : May 13 10:12:39 2026 GMT
Subject: CN=6A85A4960C22A48E37A836A00AD8F30A7BF33F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:81:04:5d:29:76:ea:09:db:6d:70:a5:5f:13:
17:07:99:1f:5c:40:7d:12:f1:ae:b4:17:d3:3f:75:
78:0b:c0:d3:60:f3:8a:00:01:dc:4c:f8:4f:f3:08:
62:90:7b:1e:7a:7b:26:db:44:23:fb:a9:1a:98:ae:
bd:3d:76:59:6d:00:84:be:9b:a4:e6:f1:5d:68:f8:
21:1a:6f:ad:1f:cf:a9:71:67:2a:91:dd:9a:a4:d3:
85:9f:05:89:b4:dc:bf:a9:37:0b:37:72:03:0d:e8:
03:83:bc:32:cd:ec:51:be:e6:5c:5f:7f:0c:52:17:
00:a8:d1:15:3f:ef:9f:ad:45:34:d2:7f:87:60:e5:
63:ed:fe:87:ce:d9:14:39:52:09:b5:44:5a:38:fd:
26:78:34:c8:f0:9c:b9:3d:ff:06:3b:98:02:05:e1:
85:f5:06:79:c8:4f:87:9d:f7:69:b6:d0:25:f5:da:
23:b3:60:df:17:66:70:84:c9:3d:50:ca:5f:f0:a9:
22:c1:f6:42:3c:ff:6d:4f:b3:d1:e9:5c:b1:f4:3b:
45:e6:aa:2a:98:e4:1e:b3:01:65:07:03:7d:e1:13:
85:83:1a:9d:b4:7d:18:1a:78:03:63:1a:cc:78:81:
23:06:ad:2f:65:a4:55:7a:e8:cf:0e:0c:04:24:63:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:85:A4:96:0C:22:A4:8E:37:A8:36:A0:0A:D8:F3:0A:7B:F3:3F:4C
X509v3 Authority Key Identifier:
keyid:91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0b:88:e7:cd:be:6e:af:ce:9c:47:30:6c:22:2d:8c:b9:ba:
70:00:6b:a0:64:9a:6f:4a:cd:94:86:df:74:06:d5:64:bb:42:
16:a6:8c:c1:8c:52:f4:1c:98:fe:2a:0b:e4:06:82:cb:42:d7:
ad:d4:a0:c2:32:2b:e9:da:7c:a5:4e:5c:3d:76:cd:ed:9e:0f:
12:e9:31:c3:7f:d5:93:df:62:68:c9:b8:52:78:49:f1:2e:0a:
9b:b8:ac:c2:36:92:ad:e1:64:7e:cc:03:88:6e:2d:d6:0e:c6:
54:f7:ce:d8:1e:9d:3b:3d:1d:2c:ec:ac:87:bb:e0:d3:c7:5c:
ee:6c:dc:71:33:88:60:8f:68:9a:dd:82:eb:79:9e:0f:71:13:
c2:20:13:59:9f:dc:0c:e9:25:99:96:52:ea:10:1f:77:69:64:
13:96:e3:79:e0:e2:cf:63:da:0a:ff:34:e3:cc:0d:7a:d5:0f:
fa:06:96:4e:4c:25:a5:a5:89:d5:49:3d:bc:9e:3b:97:0c:ef:
cf:34:26:07:63:d1:cb:6e:14:26:61:c2:3b:c8:28:a6:f2:cd:
54:f6:24:a0:4c:d2:51:bd:3a:02:8b:4e:fd:5c:60:e8:74:7a:
d4:00:97:63:93:1c:d4:a0:93:ed:93:7c:50:85:86:95:a4:2b:
ce:10:59:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:34:32 2026 by rpki-client