
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: 0UH2U36z3ypZf63R3vbICGkyMNHfK4aD3tbLTaCEH2E=
Subject key identifier: 3C:31:96:BD:AC:38:1F:91:D0:74:22:47:1C:9E:9C:34:F8:30:AF:69
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 626BFD44FFDC51F626C8029B3E2CFB0A2CD2D3EA
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 0E
Signing time: Tue 12 May 2026 06:11:58 +0000
Manifest this update: Tue 12 May 2026 06:06:58 +0000
Manifest next update: Wed 13 May 2026 07:40:58 +0000
Files and hashes: 1: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
2: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
3: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: NL09//xhZtYl0BNXJ+SnAheQUywOSv404vOPxRVyU9w=)
4: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
6: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 07:40:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6b:fd:44:ff:dc:51:f6:26:c8:02:9b:3e:2c:fb:0a:2c:d2:d3:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: May 12 06:06:58 2026 GMT
Not After : May 13 07:40:58 2026 GMT
Subject: CN=3C3196BDAC381F91D07422471C9E9C34F830AF69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:22:8f:d2:e5:3c:e6:a1:7e:b1:b1:8c:83:7b:
aa:eb:e2:48:0d:df:47:46:43:d7:8e:e7:6c:8c:4a:
26:6a:6f:8c:c4:cf:31:08:b3:1c:97:11:0e:8a:90:
d9:a9:0e:b8:58:3e:68:92:99:93:0b:6b:55:90:36:
61:4b:a2:6d:f8:9c:14:1a:14:30:fa:82:dd:05:05:
99:40:f8:5b:30:8c:27:a7:b8:27:d8:b5:1a:0b:0c:
b6:8b:3c:d7:9a:1d:59:46:2d:ae:72:f9:12:1b:f4:
67:e3:e5:e5:34:09:6f:20:af:b8:ae:8b:0e:11:db:
5e:6b:55:70:82:35:c6:0c:b5:77:7e:91:12:57:c8:
66:bc:c1:61:a8:4d:a1:f6:b3:fe:87:e9:1f:c2:11:
2c:75:06:55:9e:f2:73:dc:7d:02:23:ac:16:67:42:
01:27:af:e5:4a:2f:61:c8:41:22:6d:eb:e6:ee:60:
32:f5:23:17:b0:36:cb:27:37:b4:78:b2:b6:e3:47:
e5:41:02:24:15:06:11:82:12:5e:6c:76:00:b4:8d:
4b:ec:74:f2:f7:3e:3c:ef:ac:8f:2a:f0:ad:03:1e:
31:28:6f:e5:9c:94:9d:0b:5c:86:0e:24:eb:df:cb:
39:c9:f6:15:26:5b:01:b6:0a:8b:2b:34:14:88:5f:
ac:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:31:96:BD:AC:38:1F:91:D0:74:22:47:1C:9E:9C:34:F8:30:AF:69
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:aa:80:e9:01:21:ee:96:02:6b:79:68:d2:1d:a5:fe:e1:86:
8d:2c:f3:ef:b3:aa:b5:64:8c:d1:29:96:30:82:c6:12:28:29:
a6:37:e5:bd:92:98:79:77:39:f1:f2:f8:c5:ab:7e:8a:09:a1:
c2:fc:4d:35:47:f9:d9:89:06:34:a8:a2:fd:3b:d3:48:a1:d1:
7f:0c:19:f0:e2:e0:d5:14:8f:55:96:cf:84:9e:5e:ae:97:9a:
b7:f3:90:87:25:72:62:6a:b1:2e:14:fd:da:bd:48:0c:ab:86:
82:d6:a0:a9:9d:b2:ed:40:e8:15:09:d3:51:59:e8:3b:d9:fa:
7a:e2:ab:b9:0c:67:f9:9b:1b:38:2d:2f:bf:10:26:4b:7c:21:
99:14:fb:0c:36:87:7a:28:ec:e7:20:ad:63:1c:1f:41:93:b8:
67:ff:22:58:33:4a:d4:16:cb:a0:84:aa:63:b0:cb:5c:9d:c8:
b8:bf:16:c5:50:1a:b2:a4:c0:bf:fd:f3:34:a6:ca:30:73:53:
49:dc:87:33:29:fc:ae:f3:cf:9b:6f:45:6c:55:a1:9c:a8:77:
9a:85:4f:37:b5:6e:4b:12:72:d0:78:13:14:ab:75:7e:1d:88:
a2:4e:cb:ee:8f:2f:0f:cf:be:ea:7c:3e:bd:6b:45:8e:2b:15:
b5:4a:8f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:45 2026 by rpki-client