
$ rpki-client -vvf rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
File: 91C44F4E918B247652B1384F03FD41D436EEC992.mft (raw, json)
Hash identifier: wkjPiBt9gk1XgZ0ApH6LsRxb64HKfRA+vlKUxpPSU5Y=
Subject key identifier: DD:F7:15:DE:15:9B:2C:CA:2A:33:69:AB:CF:B6:FF:41:0E:CF:8F:F4
Authority key identifier: 91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
Certificate issuer: /CN=91C44F4E918B247652B1384F03FD41D436EEC992
Certificate serial: 0270D876B22CCFFD5D2C1B6928380192AE948EB6
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
Manifest number: 2A
Signing time: Tue 02 Jun 2026 11:54:48 +0000
Manifest this update: Tue 02 Jun 2026 11:49:48 +0000
Manifest next update: Wed 03 Jun 2026 11:59:48 +0000
Files and hashes: 1: 91C44F4E918B247652B1384F03FD41D436EEC992.crl (hash: 2HnKtTsnsU3tTwG8E11iHVp2umsRs5dimjSITGbRzQ8=)
2: 3130332e3131352e39392e302f32342d3234203d3e20313337333536.roa (hash: FEkvsfE4ha6uu8kBv920BlUS4PCELQ7grX+3/QQrY20=)
3: 323030313a6466353a323530303a3a2f34382d3438203d3e20313337333536.roa (hash: ufeXbfr/jLc+wJlLQ93DC6bBsAaagmv1lEQKSFaOyLc=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:70:d8:76:b2:2c:cf:fd:5d:2c:1b:69:28:38:01:92:ae:94:8e:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91C44F4E918B247652B1384F03FD41D436EEC992
Validity
Not Before: Jun 2 11:49:48 2026 GMT
Not After : Jun 3 11:59:48 2026 GMT
Subject: CN=DDF715DE159B2CCA2A3369ABCFB6FF410ECF8FF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:44:84:cd:e5:ce:9c:2c:e6:4e:bb:d3:65:3f:
07:91:79:7c:59:7f:08:df:0b:81:9a:27:88:fe:7a:
44:d2:cf:08:cb:67:ec:96:d2:a4:e2:ae:0c:4f:86:
14:3e:84:bf:2f:32:77:e5:c2:0d:b4:7b:a2:cb:e2:
07:bb:e0:6a:30:1d:cf:6d:72:2f:68:7e:12:4f:eb:
2c:87:8b:5e:12:18:32:63:ad:8e:be:70:61:f8:3e:
32:04:5d:12:d3:01:fe:ae:fa:41:3b:f5:72:fc:a6:
87:90:2d:58:a3:44:a3:db:53:b3:75:c2:f9:11:9d:
78:f1:9a:65:7f:d5:e9:c4:2d:45:27:32:01:56:29:
e4:f5:a2:df:1a:7d:bc:c0:85:d5:8e:69:b4:6e:f0:
6f:79:ff:8b:14:d1:71:68:86:11:5b:b9:0f:82:11:
7c:ed:9d:31:84:39:d3:91:9b:09:9c:99:af:c5:df:
ac:78:71:3d:18:6c:23:99:76:8a:dc:e6:f6:4e:b9:
1b:c7:fb:44:fd:8a:27:6c:a4:e1:71:25:61:79:4b:
bf:4f:35:cd:a4:ff:5a:bc:87:29:4b:2a:fe:5e:3f:
e7:18:99:41:1c:d9:6c:c8:79:1d:4f:1e:7e:35:d3:
dc:4b:bf:ec:ee:b8:b2:f4:43:70:20:61:45:38:0d:
a0:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F7:15:DE:15:9B:2C:CA:2A:33:69:AB:CF:B6:FF:41:0E:CF:8F:F4
X509v3 Authority Key Identifier:
keyid:91:C4:4F:4E:91:8B:24:76:52:B1:38:4F:03:FD:41:D4:36:EE:C9:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91C44F4E918B247652B1384F03FD41D436EEC992.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/4c4c2f62-f735-4d60-9237-927efad9dad0/0/91C44F4E918B247652B1384F03FD41D436EEC992.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:3d:91:65:a7:94:31:02:d3:23:6a:83:70:da:44:db:cb:43:
e2:80:c6:ac:3a:2b:6c:84:b6:21:a3:3a:0c:4e:b2:2d:7c:d6:
2e:8f:c2:ab:6f:b8:26:a4:de:d7:a5:97:b2:16:a4:62:45:f2:
09:49:22:07:15:01:72:d6:a2:d7:a5:c5:6e:81:9f:72:e8:85:
58:86:75:3e:c1:28:20:d8:ce:7f:7f:0c:4e:8d:e2:92:82:d5:
84:83:6d:16:eb:50:74:11:3a:98:a9:46:96:3c:70:4c:31:d4:
b9:69:b0:30:54:79:ac:97:3a:29:57:4b:4b:38:3a:e6:09:99:
bb:14:d1:85:39:ec:c5:25:25:ed:95:9c:74:a9:80:40:81:75:
14:94:c7:e2:fc:87:99:3c:eb:9d:c8:e3:ac:05:8d:1e:fe:1e:
b9:ef:dc:b9:6e:ff:56:51:a3:d3:7c:e8:6c:de:62:5a:52:7c:
b2:b5:47:5a:c1:fb:70:18:5b:c8:6e:b4:bb:cd:fe:40:9d:64:
9f:fb:a6:3a:72:a9:dd:bf:99:b8:c2:12:58:07:37:29:ee:7f:
c3:df:e3:02:f4:13:97:55:18:21:1a:7a:b2:c4:97:f6:7e:bb:
a3:5b:c0:fe:ab:61:04:5d:2f:b6:af:da:c1:52:c1:42:c7:49:
2d:8d:66:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:11:49 2026 by rpki-client