
$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft (raw, json)
Hash identifier: b57mflbk/uycF8W+13OmI9z1CH1QCixueKZkYh25Qxw=
Subject key identifier: 00:9F:38:D4:3C:C3:1A:85:53:68:7B:51:35:D6:5D:A1:70:1B:AA:52
Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC
Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
Certificate serial: 1FB0AC61A80DE44EB0D51BBC48B0BC5EADD20716
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 01:05:27 +0000
Manifest this update: Fri 24 Jul 2026 01:00:27 +0000
Manifest next update: Sat 25 Jul 2026 02:12:27 +0000
Files and hashes: 1: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl (hash: bY4mB3ymur2ruvtFjNjqIuquktNLX+MHU+5LNkt1g1U=)
2: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=)
3: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: 9rQw2DH4LTYRz6Ld/+alvv30wJq+CpxWAZ/IZNVGNXA=)
4: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: 3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=)
5: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: F6jYcafaJJAQNsDnKDwNAvNPZwSOu96osD17ejMa0IA=)
6: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl
rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 02:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:b0:ac:61:a8:0d:e4:4e:b0:d5:1b:bc:48:b0:bc:5e:ad:d2:07:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC
Validity
Not Before: Jul 24 01:00:27 2026 GMT
Not After : Jul 25 02:12:27 2026 GMT
Subject: CN=009F38D43CC31A8553687B5135D65DA1701BAA52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a1:4e:de:19:36:f0:95:da:67:05:25:36:aa:
9c:68:1f:ba:3d:cb:b6:b3:45:6f:72:e3:8e:44:50:
c2:36:3a:67:25:f0:3d:42:7c:9e:19:70:b2:40:37:
89:95:a2:c8:f4:4f:41:18:26:14:bd:36:7b:9f:38:
f7:cc:05:50:c0:56:b8:c1:2d:eb:7f:05:26:1f:e0:
d8:c6:2c:25:0f:22:f9:23:e1:09:0d:a7:1d:93:bb:
85:ab:6b:12:f0:60:70:f9:95:02:de:2a:51:1f:12:
98:b6:1f:92:2f:d5:3e:17:bc:50:2d:2f:61:a0:11:
38:02:6d:e1:cb:3a:06:a0:02:5e:62:8b:d1:31:1b:
b0:94:90:6c:d3:26:90:de:2d:43:01:f9:e0:38:2a:
a7:1b:f8:35:4a:dc:a4:29:72:07:d2:6c:c7:36:c9:
20:0b:e0:46:23:31:27:9e:45:06:bb:25:5b:d1:1b:
0f:01:6e:7f:49:27:62:e8:1a:f8:19:72:4b:20:1b:
dd:8e:39:97:a8:f2:a0:63:ea:a8:26:00:7e:02:d3:
a3:ad:95:11:5b:af:10:0c:32:5c:3b:94:60:4f:ae:
61:da:7b:77:30:14:c7:a5:d8:d2:31:1d:9e:74:c8:
36:f6:5f:48:7d:9e:9d:d3:52:fb:f1:5e:a9:cd:0f:
f6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:9F:38:D4:3C:C3:1A:85:53:68:7B:51:35:D6:5D:A1:70:1B:AA:52
X509v3 Authority Key Identifier:
keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1b:5b:23:f6:fb:ee:46:8b:e1:f0:8c:51:81:6f:45:d6:a0:
72:b7:09:32:32:12:a4:6a:9a:dd:49:17:e7:ac:ae:3e:07:12:
1f:d9:13:2f:34:f2:fb:97:7e:8f:78:34:30:5c:68:87:90:04:
e8:e8:b1:01:00:bb:67:7f:77:3a:78:5f:8b:76:e0:ea:bc:80:
3c:1d:8f:92:d8:2b:81:b2:b0:a2:43:e0:21:16:08:9b:29:f3:
a6:c9:c6:cf:4b:83:97:42:c9:a8:58:b0:6f:9d:88:b7:62:30:
d8:71:c4:c0:e8:c8:2c:09:52:4a:2d:f4:32:4f:82:d6:9d:1b:
26:31:51:06:5d:81:b5:b1:36:fc:dc:18:e5:c7:f8:e6:be:74:
02:f9:fc:19:50:bc:d5:eb:8e:0e:44:5d:80:34:d9:fb:fe:8c:
53:44:c4:fa:e1:8b:a0:ed:a4:63:b3:dd:33:b6:1d:7d:c4:24:
66:0d:85:0f:42:9a:99:67:17:74:b7:37:ac:4c:d8:eb:f3:e8:
eb:63:70:ba:1a:90:81:e2:7d:af:50:68:0e:f6:c3:d8:2c:b8:
2c:86:88:96:bf:14:4d:6c:4c:49:e5:bf:35:f3:df:49:ef:3f:
1c:0b:7f:10:7a:ed:33:23:fa:8d:ce:ee:77:30:88:ee:39:d4:
b0:dd:da:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:40 2026 by rpki-client