
$ rpki-client -vvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json)
Hash identifier: bnY8vfQb7PQEboxSDzt6KfsLmSF5Ss/0HtE3d0nalKY=
Subject key identifier: 5A:6A:2C:E7:B3:4E:49:FE:69:70:1E:89:EB:A5:93:7A:1B:C7:7D:0A
Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Certificate serial: 1C82A08DC1180F533C95C0C19FB774596CA90F52
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
Manifest number: 93
Signing time: Thu 20 Aug 2026 04:43:23 +0000
Manifest this update: Thu 20 Aug 2026 04:38:23 +0000
Manifest next update: Fri 21 Aug 2026 05:21:23 +0000
Files and hashes: 1: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=)
2: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=)
3: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=)
4: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=)
5: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: LlNjhi6kLNeut3gnrtvcz2XXhXDWbBduZZR8NZ6R2zQ=)
6: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 21 Aug 2026 05:21:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:82:a0:8d:c1:18:0f:53:3c:95:c0:c1:9f:b7:74:59:6c:a9:0f:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9
Validity
Not Before: Aug 20 04:38:23 2026 GMT
Not After : Aug 21 05:21:23 2026 GMT
Subject: CN=5A6A2CE7B34E49FE69701E89EBA5937A1BC77D0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:34:3a:8f:a0:35:78:1d:fc:be:04:f7:48:
58:92:ae:f8:e0:fc:f4:9e:ea:85:ff:b3:6c:4c:40:
ae:d0:ab:be:d2:48:95:e7:56:86:9d:cf:16:ab:d5:
d6:21:45:29:79:87:56:ac:73:7b:bf:d8:0f:39:b6:
8f:8b:87:20:bb:44:8c:a7:bc:be:16:69:e9:95:45:
40:39:ed:00:13:b2:37:3d:30:b9:2c:b6:66:f0:d8:
3f:a5:18:72:db:a5:fe:5e:41:6e:20:dc:57:cb:e7:
f8:fb:3e:7e:3f:58:8a:c1:6a:93:49:45:00:22:52:
db:60:b0:20:4a:a2:e9:3c:70:be:6e:15:9d:b9:65:
0d:b3:53:3a:02:64:82:f2:70:e5:57:2f:f6:7b:37:
05:57:90:ac:1b:58:c8:8d:7a:d9:0e:e7:5e:74:09:
9d:e8:8c:80:0c:96:b9:b7:c3:7a:ee:37:0c:a6:11:
ca:c8:b4:05:5a:a3:9e:75:5a:b6:99:ed:aa:e5:e7:
00:00:cc:fa:cf:1f:80:86:bb:13:90:74:1d:8d:fc:
88:4c:f0:bc:4f:a0:01:66:f4:49:98:2a:ab:0e:41:
e7:43:ae:b1:fd:76:97:90:c2:21:30:4e:0b:af:9b:
b5:17:21:c1:3e:db:29:8e:f6:65:dd:92:fe:ff:cb:
fa:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:6A:2C:E7:B3:4E:49:FE:69:70:1E:89:EB:A5:93:7A:1B:C7:7D:0A
X509v3 Authority Key Identifier:
keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f1:09:0d:6b:4d:8c:f7:74:1f:f8:c6:3a:48:ba:b5:f1:4a:
a9:9f:35:d0:04:07:06:74:a0:30:e5:a7:6b:e3:aa:00:37:ef:
b5:e3:5b:45:6a:26:74:d3:5b:20:2f:0a:0b:91:b0:70:94:79:
5f:a3:34:db:dc:9d:af:73:b0:a3:61:5a:2c:40:e9:cd:9d:0f:
00:a0:ed:1e:a3:05:74:b1:45:36:71:90:db:ef:9a:df:65:ea:
fb:c5:89:67:05:bc:87:a3:04:b5:bf:06:2d:01:2b:e5:a7:1a:
b8:e0:44:33:d9:78:7c:37:24:35:61:97:6e:df:42:21:90:21:
c9:a5:a2:5f:be:f2:53:6e:f1:94:da:8d:89:a6:5e:41:bc:8e:
48:4b:1c:f4:04:a5:1b:d0:97:7d:e6:87:52:07:d3:2f:ed:fc:
9f:77:d8:77:4d:cd:57:b4:0e:d5:57:cb:b6:c7:85:12:1e:47:
d0:5d:b8:34:df:4c:89:82:97:8a:90:66:fa:c7:0b:01:17:2c:
7b:b7:d8:20:49:4d:ca:5a:48:de:a0:0c:e5:52:e8:e5:bc:ec:
27:ca:9d:a3:de:bd:e3:85:3e:47:f9:50:44:8c:f8:42:73:f6:
63:16:bd:82:ea:71:1e:fc:eb:78:10:3d:4e:32:46:8d:0c:80:
57:0d:01:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 13:15:12 2026 by rpki-client