
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft
File: 910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft (raw, json)
Hash identifier: VCdE4ojQt71ugtbpRVAKgZW+YOAE8mqALVcuvb6nd5I=
Subject key identifier: EC:7C:C2:7A:F2:26:F2:0D:6E:43:37:74:48:C1:3E:1C:E9:8A:C3:52
Authority key identifier: 91:0B:BD:8E:DE:1B:FA:0D:6C:FE:B0:37:EA:0D:54:85:D7:3D:C0:B6
Certificate issuer: /CN=910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6
Certificate serial: 2B30885F3585CCDB2AA93ED3825A0F18712F858F
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft
Manifest number: ED
Signing time: Mon 26 Oct 2026 23:55:07 +0000
Manifest this update: Mon 26 Oct 2026 23:50:07 +0000
Manifest next update: Wed 28 Oct 2026 00:49:07 +0000
Files and hashes: 1: 3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (hash: 7e0kueZvukBaw/w+2U3am34yJGnMeR4ZQpPBC80ggF4=)
2: 3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (hash: uEwJ39Esd5UK0/qDEB/17rp/+8xbpISLdutBSs4AKYk=)
3: 910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.crl (hash: qfVPD5l8Lb/tJa9sMX1zW3shL1U91QNoGk9E6fAJwOs=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.crl
rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 00:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:30:88:5f:35:85:cc:db:2a:a9:3e:d3:82:5a:0f:18:71:2f:85:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6
Validity
Not Before: Oct 26 23:50:07 2026 GMT
Not After : Oct 28 00:49:07 2026 GMT
Subject: CN=EC7CC27AF226F20D6E43377448C13E1CE98AC352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:aa:64:07:ec:29:4f:72:07:61:15:13:43:65:
30:09:63:5f:b6:5e:47:b6:c4:f1:fb:91:a9:77:b0:
fb:3c:65:d7:d2:87:10:9c:a9:54:e5:9c:a5:fe:ff:
57:ce:8c:e1:75:eb:96:76:ff:c6:01:63:01:6c:73:
ff:69:86:bf:54:b7:1a:69:b1:3d:2b:bb:03:74:5a:
55:ab:c5:fd:11:40:ef:e8:79:bc:8c:85:1a:ad:cc:
4d:07:c1:4f:0a:7a:5a:34:cd:2e:4f:25:f3:5c:ac:
7d:22:15:78:5d:c2:74:6e:c3:71:86:eb:a8:26:73:
d1:d4:16:3c:42:3c:d0:a4:67:67:72:ee:17:f0:53:
02:4f:b5:9e:96:1f:88:4a:67:4c:ad:81:c3:37:45:
93:ba:25:a9:50:1f:4b:6f:df:f3:5a:5e:19:ec:19:
7d:c0:a5:e4:02:a4:66:87:da:40:a3:8b:59:e8:63:
5f:81:05:80:42:23:77:43:7b:5c:4f:2b:ba:8f:84:
15:c0:34:f6:aa:2d:a8:09:a1:1e:8e:11:ae:b1:12:
8a:b0:bc:81:df:84:21:b1:6a:a9:22:87:87:7c:51:
e1:1a:23:75:99:3f:7e:0e:7f:bb:f7:63:f8:f3:fc:
2a:cb:1c:c7:bf:d7:f1:ae:dc:3b:09:78:dd:42:23:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:7C:C2:7A:F2:26:F2:0D:6E:43:37:74:48:C1:3E:1C:E9:8A:C3:52
X509v3 Authority Key Identifier:
keyid:91:0B:BD:8E:DE:1B:FA:0D:6C:FE:B0:37:EA:0D:54:85:D7:3D:C0:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/910BBD8EDE1BFA0D6CFEB037EA0D5485D73DC0B6.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:d2:fc:cb:ec:4a:8c:55:c0:6a:ad:a8:90:fe:3c:9e:33:6b:
9c:89:a8:a5:fe:1b:a5:b9:e8:aa:9c:d2:85:2e:cf:10:d8:23:
70:a1:c8:37:08:0c:f5:52:49:ef:49:96:be:ec:47:f3:a1:df:
cc:b3:e1:d3:02:d4:6d:0e:f6:e8:81:16:96:ca:e4:08:75:00:
f0:8e:92:6d:ef:b9:3f:1a:47:04:54:a2:f3:8e:a1:09:3b:89:
0b:8c:bd:14:65:8e:fe:1e:28:e4:d2:3e:42:bd:df:b3:38:2b:
03:ad:0b:92:f3:06:a7:31:a7:2a:ef:62:9b:46:11:30:40:79:
eb:47:ed:dc:6c:b9:e4:58:48:ce:55:b0:9e:7a:79:87:8d:5a:
30:62:30:40:c1:f5:fe:c5:86:4e:32:51:7f:42:b9:e2:ee:7f:
34:95:76:bc:c9:7c:0f:c0:a2:7d:c2:a4:3d:c3:f0:f7:35:ff:
73:75:f6:4c:91:3a:27:78:e8:75:ff:9d:e9:e9:69:82:d4:ae:
60:89:06:c3:e6:70:64:11:08:91:c7:d1:fa:7c:02:77:41:48:
57:1e:70:ba:57:b9:49:fb:53:aa:37:5c:29:6e:ed:c8:89:54:
93:f2:68:1c:8a:cc:78:e0:bd:81:9a:2b:7f:f0:01:28:20:9c:
57:eb:39:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:48:10 2026 by rpki-client