
$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json)
Hash identifier: yaM2NRUPDCoyaZVrLGm48afp/7iomZGlEBui5Krg2GQ=
Subject key identifier: F1:F8:0B:71:3C:B7:60:D2:A1:79:75:1C:64:EE:DD:34:D0:B9:2F:63
Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Certificate serial: 2093AC5CE46A247BCD5D02E2B99D2877CA8C3F23
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
Manifest number: 70
Signing time: Fri 24 Jul 2026 09:56:36 +0000
Manifest this update: Fri 24 Jul 2026 09:51:36 +0000
Manifest next update: Sat 25 Jul 2026 12:51:36 +0000
Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=)
2: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=)
3: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: 681Wf6g+t6QJMVe3VavTLLQphFi1w0Fn1b73vzhDtj4=)
4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=)
5: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 07:07:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:93:ac:5c:e4:6a:24:7b:cd:5d:02:e2:b9:9d:28:77:ca:8c:3f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5
Validity
Not Before: Jul 24 09:51:36 2026 GMT
Not After : Jul 25 12:51:36 2026 GMT
Subject: CN=F1F80B713CB760D2A179751C64EEDD34D0B92F63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f4:42:1f:d6:fe:29:b9:44:d1:2d:c6:a7:f7:
b8:e2:66:ea:83:81:fc:f9:eb:f5:d9:bf:c3:35:4b:
e1:24:2e:0d:18:dc:5a:9e:de:0f:ee:13:2b:14:02:
64:d6:5b:ed:08:2e:34:76:93:f1:38:61:78:d2:b1:
0c:2c:37:0b:30:f7:58:f8:d5:ea:a4:91:6e:a2:ee:
f8:3f:8e:50:ba:57:55:c2:bc:5f:12:64:60:ed:6a:
5b:60:48:86:c6:a9:5f:55:2e:12:2c:f0:b8:e0:5c:
ac:8b:fb:56:8c:d4:97:35:67:94:2c:f9:e2:76:b2:
86:b5:ef:59:15:61:12:47:36:9b:c5:39:46:98:b9:
9d:60:fd:fb:c3:f4:68:a7:f7:1e:79:9a:17:73:91:
a6:7b:7b:7d:af:c9:20:e5:ff:84:37:c1:39:e2:0e:
d5:68:77:9c:c0:1e:72:bf:f1:ae:95:3f:ad:8d:72:
7e:7d:30:55:d2:fc:ca:70:99:34:19:8c:0b:eb:52:
1d:ef:1d:ee:3e:49:5e:b8:0f:b0:09:16:ad:88:d2:
2e:71:01:f7:8e:e9:02:e6:4e:06:c9:6f:41:30:ed:
61:27:b7:b3:79:e2:e2:e2:c1:3e:36:b6:94:54:c2:
69:32:de:57:7c:53:f5:bf:33:34:2a:78:f6:eb:61:
0b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F8:0B:71:3C:B7:60:D2:A1:79:75:1C:64:EE:DD:34:D0:B9:2F:63
X509v3 Authority Key Identifier:
keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:08:d7:ed:5a:e5:38:b5:95:6d:8a:8e:28:87:8b:f0:0a:ad:
4e:36:22:71:48:fb:63:b6:fc:d1:de:1a:fa:53:05:2d:cc:d8:
b2:05:23:23:6d:61:60:7e:a5:d6:1d:d9:b7:bd:d6:44:53:80:
02:83:07:c0:6f:32:e7:c9:5e:a5:e6:b3:eb:c9:7b:35:2d:56:
34:85:e0:43:cf:1e:c5:1f:d4:1e:da:50:26:02:07:78:cc:0d:
c9:1b:7f:3c:7c:2a:76:0b:23:5c:a5:a0:66:29:82:0b:3c:ed:
52:34:9f:52:d8:e3:11:76:88:ad:8b:65:87:06:df:eb:47:3e:
81:29:6c:b4:b0:1e:11:92:31:c7:25:3c:e0:43:a3:14:75:d4:
36:25:6d:91:ee:72:53:a2:4c:ce:1e:fd:c1:2b:99:2b:47:07:
99:cb:60:4f:75:e8:74:4f:07:07:70:dc:1b:a4:27:fa:8b:20:
0b:7d:c9:96:d7:07:ce:03:56:59:5f:cc:13:08:29:ba:d0:7b:
74:eb:9c:e4:21:3d:32:2b:a0:0e:0f:f8:90:b7:01:9b:0e:af:
d7:7d:26:b2:bb:07:dd:b9:75:53:9c:a9:50:a7:5e:11:8c:dc:
58:c1:63:91:7e:11:be:5a:26:e2:05:13:42:9a:cd:5f:de:e6:
c0:42:fa:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:44:13 2026 by rpki-client