$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json) Hash identifier: OQ+qSfA3nUOE4MzBT+HdwIeUhGZ5F+iwSu4dnOTYXz4= Subject key identifier: 7E:70:38:6A:32:51:1E:D6:FA:28:03:6A:9E:C9:4E:ED:06:69:E6:67 Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9 Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9 Certificate serial: 4322E366F6B522EF8B2432B230786639C403A8B3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:57:46 +0000 Manifest this update: Mon 21 Sep 2026 04:52:46 +0000 Manifest next update: Tue 22 Sep 2026 04:59:46 +0000 Files and hashes: 1: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: 8At+vzkViFeOxSuWsKzFgOLkB21/Rh2oOdtBucRNs48=) 2: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=) 3: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=) 4: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=) 5: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:22:e3:66:f6:b5:22:ef:8b:24:32:b2:30:78:66:39:c4:03:a8:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9 Validity Not Before: Sep 21 04:52:46 2026 GMT Not After : Sep 22 04:59:46 2026 GMT Subject: CN=7E70386A32511ED6FA28036A9EC94EED0669E667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6b:c3:45:88:b8:9c:4c:2f:40:bb:cf:8d:cf: 85:2d:24:49:cf:a1:8d:8c:eb:a4:f2:c3:d0:73:35: 2e:0f:1d:36:2e:68:c1:07:4d:dd:7a:6a:a1:b7:53: 59:63:31:a7:2b:9f:66:30:7c:81:4c:9c:48:6a:6a: db:26:64:3e:d3:7b:ef:a5:28:7a:35:6e:f0:d4:c0: e8:66:f6:db:31:2e:bb:dc:6c:a5:94:91:d1:a5:cc: 4d:e7:48:95:43:50:1d:11:f0:2c:29:e3:a5:8d:ba: 33:06:8f:cd:b0:68:d5:05:13:4c:81:23:d3:50:bd: 8c:00:bd:55:06:64:61:9b:ac:9e:58:ba:d7:c1:9e: 46:79:9b:f3:af:08:8b:6b:fe:ad:a8:dc:28:fb:bb: ec:e5:12:04:3b:03:b8:11:34:28:cf:50:5c:05:e8: 3c:fe:06:77:55:80:c2:7e:56:3c:91:f9:4b:1f:b6: 9c:f8:e6:f2:90:e4:2e:32:50:11:97:ac:00:47:19: 36:b4:03:63:07:6f:13:cd:db:7a:bf:26:8b:35:e5: 91:75:21:e1:84:bd:f5:ec:b9:d9:d8:db:b1:e7:2f: 15:f5:f7:d4:ca:de:fa:e1:e8:64:c8:96:c2:29:96: 84:69:38:8c:2a:0d:b8:2c:3c:35:54:5f:62:d9:80: 71:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:70:38:6A:32:51:1E:D6:FA:28:03:6A:9E:C9:4E:ED:06:69:E6:67 X509v3 Authority Key Identifier: keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:3e:30:0a:3d:56:c5:97:50:7c:23:bc:a5:e1:2e:fa:9d:b2: 42:cc:7f:68:f5:c3:5d:24:ce:98:f4:b0:08:9a:7e:07:99:72: 40:0b:45:52:fb:52:d4:8b:2f:f9:12:ee:03:98:68:e0:9b:8b: 38:76:17:5b:ee:10:24:e5:3d:69:28:56:38:b6:ca:c1:fa:5f: 16:d2:dd:ca:27:02:4d:de:03:1c:b5:d1:dd:9b:f6:d4:c2:c5: 83:20:a1:c4:e7:3b:31:65:e0:39:e0:bb:a0:c8:06:76:25:53: 91:96:d9:17:43:9e:92:43:b3:62:c9:54:a7:c0:7a:94:ba:99: 8b:f5:cd:ae:af:bf:69:c4:11:45:d0:5a:85:3a:13:25:8b:4b: ab:7b:bb:e4:af:4f:97:52:8c:5b:46:05:7a:5f:9e:c8:18:43: 09:75:9b:bb:5a:63:dd:8d:24:b4:4a:da:68:cc:96:2d:59:40: 48:81:96:53:7c:f2:f5:7c:18:04:a4:31:a6:36:bf:e1:38:7c: 84:d4:52:5f:ad:ca:c2:95:26:b2:90:94:fa:e7:a2:43:98:73: cf:40:ad:84:d1:fb:05:c7:17:55:16:6b:a8:fe:a1:a2:54:f2: aa:22:36:92:70:85:bc:95:7b:5d:c1:44:cf:72:e8:3b:5f:7d: 6f:5e:ad:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQyLjZva1Iu+LJDKyMHhmOcQDqLMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RG RjRBQjlCOTAeFw0yNjA5MjEwNDUyNDZaFw0yNjA5MjIwNDU5NDZaMDMxMTAvBgNV BAMTKDdFNzAzODZBMzI1MTFFRDZGQTI4MDM2QTlFQzk0RUVEMDY2OUU2NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFa8NFiLicTC9Au8+Nz4UtJEnP oY2M66Tyw9BzNS4PHTYuaMEHTd16aqG3U1ljMacrn2YwfIFMnEhqatsmZD7Te++l KHo1bvDUwOhm9tsxLrvcbKWUkdGlzE3nSJVDUB0R8Cwp46WNujMGj82waNUFE0yB I9NQvYwAvVUGZGGbrJ5YutfBnkZ5m/OvCItr/q2o3Cj7u+zlEgQ7A7gRNCjPUFwF 6Dz+BndVgMJ+VjyR+Usftpz45vKQ5C4yUBGXrABHGTa0A2MHbxPN23q/Jos15ZF1 IeGEvfXsudnY27HnLxX199TK3vrh6GTIlsIploRpOIwqDbgsPDVUX2LZgHF1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfnA4ajJRHtb6KANqnslO7QZp5mcwHwYDVR0j BBgwFoAUkSNOsZXhl4MK91puy21YPf9KubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZjOTA5NmMtMjhkYy00NGU0LWI0Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5 NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RGRjRBQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTIzNEVCMTk1RTE5NzgzMEFGNzVBNkVDQjZENTgzREZGNEFC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4 M0RGRjRBQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHo+MAo9VsWXUHwjvKXhLvqdskLMf2j1w10k zpj0sAiafgeZckALRVL7UtSLL/kS7gOYaOCbizh2F1vuECTlPWkoVji2ysH6XxbS 3conAk3eAxy10d2b9tTCxYMgocTnOzFl4Dngu6DIBnYlU5GW2RdDnpJDs2LJVKfA epS6mYv1za6vv2nEEUXQWoU6EyWLS6t7u+SvT5dSjFtGBXpfnsgYQwl1m7taY92N JLRK2mjMli1ZQEiBllN88vV8GASkMaY2v+E4fITUUl+tysKVJrKQlPrnokOYc89A rYTR+wXHF1UWa6j+oaJU8qoiNpJwhbyVe13BRM9y6DtffW9erXE= -----END CERTIFICATE-----Generated at Mon Sep 21 20:07:56 2026 by rpki-client