
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: uLUzGeG2T79m7nvlCDy3qU0KJBFaR6hQU0XbIk6VUOw=
Subject key identifier: 50:DD:07:E1:04:93:CC:64:32:88:A1:48:7B:25:3F:52:F1:53:BC:BB
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 4B04B718582B7002D4AF841AB99EF07F64D9B906
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 6E
Signing time: Thu 23 Jul 2026 13:41:47 +0000
Manifest this update: Thu 23 Jul 2026 13:36:47 +0000
Manifest next update: Fri 24 Jul 2026 16:12:47 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
2: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
3: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
4: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
5: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
6: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: tmijgyJ54BO3oskN+hMfsbkp9QGKdGf8mceujE0fKZ0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 24 Jul 2026 16:12:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:04:b7:18:58:2b:70:02:d4:af:84:1a:b9:9e:f0:7f:64:d9:b9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: Jul 23 13:36:47 2026 GMT
Not After : Jul 24 16:12:47 2026 GMT
Subject: CN=50DD07E10493CC643288A1487B253F52F153BCBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:03:40:c9:dc:bf:36:1e:00:1f:b9:af:f3:40:
43:ed:b1:a0:0c:b3:bc:7f:81:04:c3:a0:5f:80:2b:
2d:46:cb:13:a8:31:40:c7:40:19:00:ad:b9:43:94:
ad:66:70:7e:1d:67:6b:66:d5:01:0b:ea:44:03:72:
28:d8:c9:28:33:5a:96:fb:92:3b:41:62:36:82:16:
d3:86:ef:ee:21:6a:da:51:84:8d:9f:dc:43:85:03:
71:91:d1:40:65:79:e1:7d:b4:36:c0:a3:47:1f:6a:
87:a3:9b:17:4a:63:ae:90:f8:15:57:0f:41:88:0f:
69:3e:4c:fe:34:7f:3a:05:48:50:33:3d:f6:c4:91:
0b:dc:7f:26:40:75:cc:ca:97:11:7f:53:59:f0:07:
fd:dd:fd:65:98:11:85:02:d5:6a:12:0a:cb:4d:65:
79:41:fb:bb:10:7b:60:53:87:b8:bf:a6:d0:75:ed:
ad:a6:88:3f:4d:7e:79:cb:0f:15:2a:fa:74:64:b2:
cf:38:bb:c3:2f:01:4e:02:05:01:b9:d8:46:d2:60:
a6:44:67:75:76:49:47:94:33:d6:ab:90:84:b2:78:
1f:e1:df:70:b4:26:c3:bf:e7:3a:1d:cf:6a:69:b5:
ba:1f:39:42:63:34:a1:8b:99:07:25:f2:73:c4:bd:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:DD:07:E1:04:93:CC:64:32:88:A1:48:7B:25:3F:52:F1:53:BC:BB
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:77:31:a9:c8:38:fb:8b:4a:68:a4:97:56:bc:f3:6a:df:14:
fa:85:27:c4:da:82:b5:0e:a3:ab:7c:f5:b8:91:22:80:e5:01:
63:79:d9:ae:bb:de:34:64:9b:21:4e:e9:85:c9:73:b0:89:14:
9e:64:1e:20:8a:d7:6a:54:46:0c:f4:0a:be:04:9e:2f:53:6e:
ef:4f:1b:29:4c:ed:0e:a8:dc:e8:0d:41:a5:0b:d8:17:0c:6b:
69:9c:3e:40:9f:d3:c2:bb:8e:54:1e:8a:c8:97:da:67:26:fd:
54:83:5b:f5:e3:9b:a5:0e:56:0a:d4:37:e9:b0:9b:7c:5d:ce:
f5:0d:f9:36:e5:44:e2:ef:60:2e:b8:e1:87:92:fa:a1:6f:15:
89:64:a7:2d:ac:59:08:73:66:f8:97:68:68:89:fd:f5:98:76:
74:c4:d1:ab:2b:f0:f3:02:b6:05:80:1f:39:6d:1f:a8:10:b3:
b5:db:f2:cb:d0:ee:b1:e5:ed:d6:50:59:5f:50:24:ad:e3:e3:
bb:99:15:6d:4b:83:a2:5c:30:5e:b1:0b:01:d5:94:c3:78:6c:
d1:a6:b6:ab:3f:02:ba:c9:48:e6:81:28:d0:d0:aa:37:53:e1:
e0:69:d0:0b:0b:86:84:2f:14:24:5d:cf:1d:44:74:1a:1f:a9:
3e:9c:80:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:50 2026 by rpki-client