
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
File: 591286FA978EE719A57E5A972B00E176D16D8BD5.mft (raw, json)
Hash identifier: 3kvN0e3XR4nSHgC29XJ9KyvS7A4caXHPM1ZkNLHg0JY=
Subject key identifier: 79:40:5E:6A:C5:43:6F:17:D6:6D:C0:B8:4D:15:BF:83:02:73:DE:9F
Authority key identifier: 59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
Certificate issuer: /CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Certificate serial: 52A3D85E6A69E0671F429244DD6AD2C9002CE8A3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
Manifest number: 6F
Signing time: Fri 24 Jul 2026 00:29:46 +0000
Manifest this update: Fri 24 Jul 2026 00:24:46 +0000
Manifest next update: Sat 25 Jul 2026 02:24:46 +0000
Files and hashes: 1: 3130332e3132302e37362e302f32342d3234203d3e20313530353031.roa (hash: SnKbiJCVGtegt8XCckG5YzkpcAALoWkVUsik+AGbmDg=)
2: 591286FA978EE719A57E5A972B00E176D16D8BD5.crl (hash: m2ybEdMW5CxuUbkyi0/TYLhN61j5SnYYCAE7UTBNZq0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 00:48:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:a3:d8:5e:6a:69:e0:67:1f:42:92:44:dd:6a:d2:c9:00:2c:e8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=591286FA978EE719A57E5A972B00E176D16D8BD5
Validity
Not Before: Jul 24 00:24:46 2026 GMT
Not After : Jul 25 02:24:46 2026 GMT
Subject: CN=79405E6AC5436F17D66DC0B84D15BF830273DE9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e5:b4:16:8c:f3:74:9e:ae:5f:ad:63:df:c4:
6a:5d:b6:a6:fe:40:26:5f:c5:e2:75:46:0f:81:bb:
f7:9f:b7:88:35:ae:f8:34:2b:f6:db:ee:4b:6e:54:
63:55:0d:3d:0c:0f:59:a2:27:95:79:ba:57:84:52:
10:79:77:e6:53:ec:1e:ef:2f:7e:b7:5b:4e:b3:1b:
b3:56:ea:83:4f:ee:ed:2f:6d:97:b6:f3:75:8e:28:
74:b3:21:0f:bc:31:37:59:8e:8c:d5:44:cf:9e:93:
f1:92:40:60:f8:4c:36:94:ef:34:46:cd:ab:7f:fa:
ef:79:53:af:ae:28:1c:dd:f8:9f:43:02:8a:90:bf:
97:f9:d9:d1:1e:36:54:d5:33:36:68:07:9b:f7:b5:
c9:d7:61:1a:d2:0f:5e:57:c5:fa:66:69:8d:e5:f8:
4f:4b:8f:a3:49:cb:64:85:51:f8:7b:30:53:91:bd:
2a:b1:62:0f:31:d1:9d:c7:e7:52:48:61:4f:96:a6:
43:d1:92:e9:db:9b:9e:43:95:33:2c:b3:ed:bc:fa:
2a:c7:63:59:df:d4:d0:91:96:5f:59:d8:b2:70:13:
c2:5b:a4:4f:f1:b7:20:01:87:65:e6:02:5d:e6:ac:
8f:9e:4d:9e:e7:9a:e8:2d:59:a2:2f:0e:0f:fe:1e:
fc:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:40:5E:6A:C5:43:6F:17:D6:6D:C0:B8:4D:15:BF:83:02:73:DE:9F
X509v3 Authority Key Identifier:
keyid:59:12:86:FA:97:8E:E7:19:A5:7E:5A:97:2B:00:E1:76:D1:6D:8B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/591286FA978EE719A57E5A972B00E176D16D8BD5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9adc765a-ff8d-4b1f-a59a-25ff7bd4f58a/0/591286FA978EE719A57E5A972B00E176D16D8BD5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:06:3e:62:7b:71:a2:26:10:28:7b:15:75:68:69:a3:63:30:
51:39:0d:a6:47:89:f4:64:89:49:36:00:ac:62:2e:27:4b:78:
61:22:9f:b5:c6:99:04:c2:aa:33:f7:20:d4:dc:76:11:9c:7a:
65:c8:e8:6a:16:0b:82:d6:69:13:7e:a6:e8:0b:78:76:dc:b9:
7b:88:d8:cd:56:65:83:88:07:16:0a:c5:ba:85:d1:9a:79:1b:
c1:86:6e:ed:f4:4d:23:b2:ee:67:ec:dc:82:7e:06:ea:49:67:
07:c4:94:aa:e2:ed:29:72:cb:d3:70:71:76:65:3c:36:78:c8:
5d:5c:fe:0e:fe:6e:ea:b1:0b:4f:54:f2:a6:95:bd:f6:37:5a:
82:b6:52:95:e6:d7:64:ae:09:86:2f:16:85:27:f9:4d:01:92:
8a:01:90:9f:50:b8:2a:ee:ed:d9:92:aa:fd:13:d1:75:4a:81:
77:39:8c:76:a8:6a:c8:cc:28:b1:95:43:6f:05:2c:07:80:22:
cf:1c:c8:c1:a9:75:a1:ff:86:08:da:0a:87:ed:7d:8f:a1:14:
5f:ca:31:1a:b2:70:db:59:86:92:83:b2:d7:90:68:75:0d:a1:
a1:fc:42:35:23:2e:a2:f9:f0:4e:d9:96:19:9e:11:24:77:87:
21:3a:03:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:07:27 2026 by rpki-client