
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json)
Hash identifier: c12cUp9TPBinvcXeYPC+VMrdlFV5I+iwMghYJUe7/Nk=
Subject key identifier: 64:C4:DC:75:DC:5E:93:8E:A4:DF:23:3E:B7:71:BF:C7:26:F0:1E:C1
Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92
Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92
Certificate serial: 1470A7F8A361E97E40E65A7E3A0BAE02AE74DD7C
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 10:35:12 +0000
Manifest this update: Thu 03 Sep 2026 10:30:12 +0000
Manifest next update: Fri 04 Sep 2026 14:10:12 +0000
Files and hashes: 1: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: SUgf6w6UvkQxdHgFbfIEp1GHfJDxYYhA5HKw8SEd64c=)
2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl
rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 04 Sep 2026 14:10:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:70:a7:f8:a3:61:e9:7e:40:e6:5a:7e:3a:0b:ae:02:ae:74:dd:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92
Validity
Not Before: Sep 3 10:30:12 2026 GMT
Not After : Sep 4 14:10:12 2026 GMT
Subject: CN=64C4DC75DC5E938EA4DF233EB771BFC726F01EC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:fe:1e:aa:c5:02:90:ec:6d:59:08:94:fb:
b7:06:9b:aa:14:8e:1f:ce:d3:2d:11:c7:9c:83:d7:
17:ad:42:5a:4f:2c:ab:8a:59:00:ae:c5:09:b9:25:
72:36:eb:0a:d3:f1:32:c5:39:5d:f2:b4:a5:90:21:
c9:90:a2:a6:a2:fb:bb:39:81:73:bc:40:b2:18:08:
ef:6a:8d:49:84:7e:fd:fa:11:ad:de:ed:4c:69:d4:
69:08:9a:60:2b:e1:91:2b:93:7b:8c:5e:d0:7d:a9:
08:45:80:00:49:f0:bc:3b:1e:c9:eb:2b:42:c4:4b:
9b:e6:94:62:5c:f7:f4:41:c1:8a:fc:a7:48:42:bf:
50:ae:c8:64:68:1b:ec:8f:be:4e:17:45:e2:13:51:
51:a3:c4:71:5b:3f:7b:a7:35:7c:6c:bb:49:df:0a:
cd:c9:9f:93:80:13:be:9c:32:8b:4e:e0:ec:25:3e:
56:9d:6a:30:1d:f7:f0:d5:79:1b:6f:64:1e:ec:fa:
c0:41:2e:d9:01:e2:47:a6:7e:2f:7d:5e:a4:82:01:
1f:85:11:78:3a:05:31:41:f9:9b:3c:1e:15:30:82:
e0:1a:02:f4:90:9d:2d:78:b9:ef:f6:4f:ea:9a:79:
8d:af:5c:6b:d8:7c:02:ae:61:f8:03:38:df:f8:54:
20:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C4:DC:75:DC:5E:93:8E:A4:DF:23:3E:B7:71:BF:C7:26:F0:1E:C1
X509v3 Authority Key Identifier:
keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:87:e8:50:53:70:b5:ab:a4:ad:62:b9:e4:52:c6:7d:9e:d3:
51:a5:aa:85:69:9e:6a:30:cc:ba:b4:9c:d1:63:6b:25:1b:8f:
a8:12:74:63:60:54:c9:16:12:77:48:2c:36:ce:88:10:18:1b:
ef:06:3a:5f:e3:b7:55:fd:a2:83:01:ac:de:a2:0f:d9:ca:72:
51:8d:21:7d:86:f0:36:4d:7e:78:1c:15:f9:44:50:45:10:e7:
54:79:6a:46:a8:2e:65:82:42:be:0d:cb:24:fb:9f:c2:d9:86:
82:ec:ca:74:a7:52:a2:25:86:ea:6b:ba:2b:c5:af:af:04:ac:
c2:68:a3:fb:20:8a:ff:ef:38:14:71:5e:27:6a:45:66:05:67:
da:ee:ad:55:c5:24:9c:6e:61:42:7a:8d:bc:96:8e:a9:2e:63:
92:c3:97:37:37:1a:16:99:a9:e4:5d:af:18:95:b1:99:03:b3:
56:2d:4a:c7:e5:b0:4b:b7:a8:0f:d0:c9:36:ad:e1:51:1c:62:
be:f3:9e:ae:5b:25:26:09:2e:47:33:ee:f5:e2:30:6a:a1:c2:
93:a6:3a:ed:70:d6:83:96:fb:29:c4:bb:94:bf:39:f8:54:09:
bc:64:9d:44:14:e0:07:37:6c:45:92:79:06:60:55:93:40:40:
f7:fb:8b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 07:57:37 2026 by rpki-client