
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: nWk3ltDvZTRgSpUGOIc0leyQtQF7jzRfTMm4Ymiz0CE=
Subject key identifier: D7:BD:F9:34:6F:4A:02:5D:01:3D:37:B3:82:8D:93:B5:36:D9:23:FE
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 65ACDAB5977A620B13D195A13B7B4F7C16560A53
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 05
Signing time: Tue 05 May 2026 09:07:02 +0000
Manifest this update: Tue 05 May 2026 09:02:02 +0000
Manifest next update: Wed 06 May 2026 12:03:02 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
2: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
3: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
4: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: 8q1Ga/VP575FOBSuZvzvCvupU9vk9ePac1IYBF+Gegw=)
5: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 06 May 2026 12:03:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:ac:da:b5:97:7a:62:0b:13:d1:95:a1:3b:7b:4f:7c:16:56:0a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: May 5 09:02:02 2026 GMT
Not After : May 6 12:03:02 2026 GMT
Subject: CN=D7BDF9346F4A025D013D37B3828D93B536D923FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:5e:24:a9:95:18:b9:7b:9d:3a:24:cf:b9:
89:97:88:78:87:b0:60:35:e0:6c:62:ef:6d:3a:3a:
d6:de:84:6c:eb:94:bf:e2:8b:87:b4:06:c0:cb:ae:
9a:d8:3b:40:29:0a:04:cf:6f:47:c1:62:65:90:c3:
d1:b9:dc:af:3b:6e:d1:6f:c3:b0:4c:b1:c1:a6:97:
08:2d:13:7f:a3:a6:74:ae:38:08:9c:ee:c0:1c:00:
58:7e:f1:44:f4:11:ad:b8:a1:3b:71:f9:ee:93:6a:
d4:ed:b9:f4:46:41:f0:a6:95:5c:3f:b0:1a:8f:69:
8d:3e:59:fb:64:df:68:0f:41:51:38:67:bc:66:5f:
b0:87:58:4a:ad:a3:98:06:b0:90:62:e3:a4:94:a4:
78:09:90:7d:66:5a:41:20:5e:d2:3f:d4:7f:81:a6:
e3:65:31:92:3f:24:61:64:e2:49:4b:ff:de:b4:f3:
41:ee:fe:15:7c:3c:59:71:15:f6:f9:3e:e8:2d:14:
4e:67:e9:3d:e8:cd:df:28:dd:91:10:da:7b:22:47:
c2:ef:24:ac:73:06:19:8b:12:f5:77:ad:bd:68:b2:
9a:3b:e0:21:99:ec:09:8d:bd:96:bc:fd:51:f7:86:
44:7f:c4:84:8b:82:18:a9:c6:8f:fe:92:b6:3e:73:
9b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BD:F9:34:6F:4A:02:5D:01:3D:37:B3:82:8D:93:B5:36:D9:23:FE
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:dc:5c:47:ea:5e:61:bd:82:21:4c:5e:d0:80:1b:be:a7:24:
23:7b:1b:d3:f6:c7:3a:50:b7:b7:b1:e0:c6:68:26:d5:92:3a:
c7:b4:81:73:e3:93:72:c7:dd:68:48:32:11:69:ad:cc:1f:04:
bd:3a:f0:92:bc:71:c6:c9:7c:8c:d7:58:71:81:76:ba:91:e3:
14:c1:66:ee:7f:46:27:01:96:e2:d4:33:25:9e:4d:ce:6a:52:
1b:02:23:74:73:22:cd:ee:a7:b7:af:e7:b4:30:25:c0:1e:58:
95:cc:b3:f6:1d:8b:63:6f:c6:1e:26:5b:1c:46:9d:fd:72:8c:
7b:4e:4b:33:0d:40:90:f4:6e:4c:bd:fe:f9:cb:7f:63:ea:5a:
0c:21:38:2d:5b:38:e6:f2:f2:f5:9b:88:f9:20:c3:4f:0d:3c:
d5:d5:93:cd:37:d0:6e:c7:44:92:f4:10:ea:ac:c0:33:29:c4:
5a:4f:b0:44:58:21:9b:c0:c0:ee:9c:4b:a5:8e:41:18:2c:18:
a2:26:ee:e6:c7:be:bd:68:ce:7e:85:5a:43:e5:0c:8a:a9:c5:
9b:ed:64:ff:78:50:c2:12:f5:b5:48:18:33:28:7a:3e:ab:cf:
5b:a3:1d:00:53:a6:6d:43:35:9e:c5:27:4c:79:b8:2e:6a:d4:
0a:ca:1d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 5 17:52:00 2026 by rpki-client