
$ rpki-client -vvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json)
Hash identifier: XyIFxOCzIEDl1punPNQLd0lsfPes+x0OcW8rgLiCbIs=
Subject key identifier: AF:F3:EE:29:8D:A5:4F:D4:3C:69:9C:A6:A7:A8:BA:B7:6D:F0:67:8C
Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92
Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92
Certificate serial: 52F48F24E3C3865A1C24CE04C0F1D912C877903C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
Manifest number: 2B
Signing time: Tue 02 Jun 2026 16:50:16 +0000
Manifest this update: Tue 02 Jun 2026 16:45:16 +0000
Manifest next update: Wed 03 Jun 2026 18:25:16 +0000
Files and hashes: 1: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: CY3IeUzfauC9tGWIW9UH4YMc+ONXq6lM03hnoTuvGNA=)
2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl
rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 03 Jun 2026 10:27:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f4:8f:24:e3:c3:86:5a:1c:24:ce:04:c0:f1:d9:12:c8:77:90:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92
Validity
Not Before: Jun 2 16:45:16 2026 GMT
Not After : Jun 3 18:25:16 2026 GMT
Subject: CN=AFF3EE298DA54FD43C699CA6A7A8BAB76DF0678C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cc:10:45:ad:f6:a3:fd:6c:6b:33:0d:1b:ba:
17:81:41:0d:32:e0:fa:e1:be:d1:97:00:13:ea:a4:
f6:48:66:01:bb:e6:9c:df:c3:ad:4c:63:4f:9b:36:
11:d3:89:8c:ba:d8:eb:f2:5e:9f:72:2b:8f:08:07:
3f:00:3d:cf:0a:81:40:b4:bd:03:ce:38:cc:39:3f:
c2:ab:76:f6:a3:0a:50:a7:1d:b8:4c:8c:81:28:26:
9b:93:94:80:f5:b5:45:ae:24:cc:8d:cd:e4:93:de:
c6:df:b3:76:ad:bf:c4:88:38:76:6e:8f:b5:1c:ed:
c1:ac:e0:45:d6:4c:77:4e:c5:0b:80:42:84:08:fa:
49:3f:b2:4a:24:65:25:d2:9d:06:da:a6:8b:b6:8c:
60:d1:6b:70:6a:ea:b8:c7:be:0a:98:e8:1e:62:a9:
cd:d3:ab:4e:71:6b:df:06:21:68:f9:d0:d4:38:62:
58:f1:f1:ef:c8:df:d0:23:76:bb:31:6e:38:42:e0:
cf:ba:74:5c:80:e3:64:6e:2b:33:07:c4:09:a7:35:
18:20:e2:dc:ef:fc:be:1c:ad:34:36:38:d9:79:7d:
73:6a:8f:6f:01:d1:2c:e6:fe:71:da:18:1e:2f:4b:
63:ce:57:dd:38:24:74:2a:3b:e5:a4:89:ba:4f:80:
e1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:F3:EE:29:8D:A5:4F:D4:3C:69:9C:A6:A7:A8:BA:B7:6D:F0:67:8C
X509v3 Authority Key Identifier:
keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:92:91:11:c6:0c:60:cc:88:b3:90:b6:56:a9:ad:02:95:da:
5f:51:89:36:b3:4c:1c:6e:c7:47:05:85:a6:9e:cc:08:a6:e6:
de:db:50:22:06:f7:1b:6b:19:e1:de:2c:97:73:d8:c1:25:49:
6e:ed:09:55:88:04:ce:5a:8d:17:85:0b:4e:6a:c9:9b:6c:76:
4b:52:8c:3b:fe:02:a2:ad:71:2e:72:08:76:78:a5:f7:c8:84:
c4:34:f9:a0:cc:30:44:74:81:51:43:bc:6f:76:00:5f:f9:21:
71:d7:06:ee:c9:56:fb:c3:a5:c8:c5:82:65:52:29:12:dd:4d:
d7:a5:12:3d:17:0f:e1:c5:3e:18:71:7c:62:00:24:01:e2:61:
9f:94:56:7d:c6:a2:9e:54:97:4b:dd:4d:a6:32:95:af:f3:6a:
0c:a6:01:fb:e5:a6:a9:ba:30:bf:73:78:41:af:5c:44:c3:6a:
5a:52:76:f3:bd:c4:2d:76:2c:8c:2a:52:32:ea:5a:0e:bd:a2:
c7:fb:db:3d:d2:3c:91:66:e8:ae:1c:d6:de:4c:53:9e:a8:07:
28:cd:d7:0c:2a:a1:8b:fd:01:77:25:29:2a:1e:c5:d8:52:1c:
67:87:cd:9a:75:d5:52:fd:ab:96:b2:37:fd:c1:1b:d9:f0:bc:
3a:74:c7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 04:08:27 2026 by rpki-client