$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft File: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft (raw, json) Hash identifier: u6zLRGM7DSFx0RGaohfwrRvNU5fOBkDbf9zzRNI9nhA= Subject key identifier: EF:CB:F4:12:4C:26:DA:B4:01:70:6F:81:13:05:B3:B2:7C:28:CD:6F Authority key identifier: 91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B Certificate issuer: /CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Certificate serial: 14803624E0AC91310791D471B26D512F65418BEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft Manifest number: BD Signing time: Mon 21 Sep 2026 06:19:30 +0000 Manifest this update: Mon 21 Sep 2026 06:14:30 +0000 Manifest next update: Tue 22 Sep 2026 07:54:30 +0000 Files and hashes: 1: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: qojtjE9o52vzXHMZCgvkvLBCgGKTsugY41lPAH2vlqA=) 2: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl (hash: NJjh5P1sDw8JSBydsLRFb3oqg0Iv3dsRi32XFrOz/PA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:24:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:80:36:24:e0:ac:91:31:07:91:d4:71:b2:6d:51:2f:65:41:8b:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Validity Not Before: Sep 21 06:14:30 2026 GMT Not After : Sep 22 07:54:30 2026 GMT Subject: CN=EFCBF4124C26DAB401706F811305B3B27C28CD6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:c6:30:e5:35:7c:08:52:fe:68:d9:02:66: e1:c4:b0:2a:dc:8f:ac:32:62:57:ee:70:e8:bb:e5: 06:9d:ce:30:09:16:c6:6e:db:82:f6:d7:74:e9:7c: d6:10:66:0e:2d:71:95:6c:2d:d9:4c:84:7b:36:06: 91:e1:f0:2a:b9:24:34:9a:18:4e:55:86:3c:a3:74: 2e:8b:fa:45:ed:98:a0:70:3a:d0:40:de:13:c4:82: c7:e4:1c:43:9e:9c:31:bd:4e:7a:af:9f:57:88:e6: 16:75:7d:22:13:0f:3c:6b:91:1c:89:13:9d:ef:d1: 22:8f:e7:f0:7e:e8:47:50:40:33:97:2c:a9:91:1f: 64:e9:b9:19:5b:25:e9:e0:fe:bd:ef:4d:96:da:cb: ed:05:f9:1f:64:96:29:b6:7a:99:63:ea:e6:e6:68: 15:2b:a0:72:d1:3a:e3:da:3a:53:d4:06:f2:63:87: 73:48:0b:07:92:bc:ff:f9:da:38:91:10:38:04:92: 64:5a:a8:39:a7:16:d8:8f:60:31:04:bf:1c:76:77: 75:f1:8e:83:15:c4:f3:ec:c2:d4:26:ec:6c:80:2e: 62:7a:b4:46:f2:39:74:9a:74:b7:7e:9d:84:61:20: 94:24:e7:0d:bb:16:0f:31:75:15:48:ba:a7:dc:72: df:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:CB:F4:12:4C:26:DA:B4:01:70:6F:81:13:05:B3:B2:7C:28:CD:6F X509v3 Authority Key Identifier: keyid:91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:40:5b:8f:8e:64:8c:fd:ac:93:71:47:ac:3f:f5:bc:8f:1e: d9:e9:b4:c4:7a:b1:23:ae:2c:a4:be:53:25:8f:41:7e:3f:1a: 30:34:49:88:bf:a4:60:73:68:c2:f6:aa:31:1c:3e:53:a2:48: de:0e:6b:ff:9e:a8:83:ea:24:b6:4f:3b:1d:7e:87:53:69:3e: 8f:fa:0b:1d:7c:3b:25:4e:db:91:53:da:2d:08:63:88:4a:8b: 6d:ba:72:5e:74:4a:62:cb:f5:a0:4f:3b:d1:b3:26:79:ee:d2: e7:dd:cd:41:39:18:36:0c:53:7b:8c:87:a2:1c:97:16:8c:83: 36:9d:d8:f4:df:16:bf:22:6a:df:a6:3a:fb:62:6f:9f:f7:0b: c4:54:bd:16:c9:34:d8:8c:7b:ff:77:a3:02:50:e1:0a:b5:22: 0b:ef:cf:47:a3:44:c8:00:43:8c:0e:a4:dd:60:1a:9c:7a:e1: 40:cc:43:61:55:90:a1:3d:f9:dd:2e:21:7e:67:cf:27:8d:6b: c4:29:8c:75:e7:11:e7:ad:bb:f8:bf:2f:b6:22:b6:5e:1e:b8: 3c:00:ae:8c:61:65:6e:0c:80:ff:9d:6e:69:b2:cd:22:31:26: 7c:c5:f6:1f:ed:ac:c6:a8:8d:c8:36:dd:2a:f7:2d:99:8e:1e: 3e:06:ee:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIA2JOCskTEHkdRxsm1RL2VBi+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2ODNDMEMwQzI5ODlBOUY1OUMzRDAwRUVDNTBDNkNG RDMwMjc5QjAeFw0yNjA5MjEwNjE0MzBaFw0yNjA5MjIwNzU0MzBaMDMxMTAvBgNV BAMTKEVGQ0JGNDEyNEMyNkRBQjQwMTcwNkY4MTEzMDVCM0IyN0MyOENENkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBj8Yw5TV8CFL+aNkCZuHEsCrc j6wyYlfucOi75QadzjAJFsZu24L213TpfNYQZg4tcZVsLdlMhHs2BpHh8Cq5JDSa GE5VhjyjdC6L+kXtmKBwOtBA3hPEgsfkHEOenDG9Tnqvn1eI5hZ1fSITDzxrkRyJ E53v0SKP5/B+6EdQQDOXLKmRH2TpuRlbJeng/r3vTZbay+0F+R9klim2eplj6ubm aBUroHLROuPaOlPUBvJjh3NICweSvP/52jiREDgEkmRaqDmnFtiPYDEEvxx2d3Xx joMVxPPswtQm7GyALmJ6tEbyOXSadLd+nYRhIJQk5w27Fg8xdRVIuqfcct+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78v0Ekwm2rQBcG+BEwWzsnwozW8wHwYDVR0j BBgwFoAUkWg8DAwpian1nD0A7sUMbP0wJ5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBlNmZkODEtYjg3Ny00ZjdjLWFiYzYtMDgyZmNiZWExODlmLzAvOTE2ODNDMEMw QzI5ODlBOUY1OUMzRDAwRUVDNTBDNkNGRDMwMjc5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTY4M0MwQzBDMjk4OUE5RjU5QzNEMDBFRUM1MEM2Q0ZEMzAy NzlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvOTE2ODNDMEMwQzI5ODlBOUY1OUMzRDAwRUVDNTBD NkNGRDMwMjc5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALtAW4+OZIz9rJNxR6w/9byPHtnptMR6sSOu LKS+UyWPQX4/GjA0SYi/pGBzaML2qjEcPlOiSN4Oa/+eqIPqJLZPOx1+h1NpPo/6 Cx18OyVO25FT2i0IY4hKi226cl50SmLL9aBPO9GzJnnu0ufdzUE5GDYMU3uMh6Ic lxaMgzad2PTfFr8iat+mOvtib5/3C8RUvRbJNNiMe/93owJQ4Qq1Igvvz0ejRMgA Q4wOpN1gGpx64UDMQ2FVkKE9+d0uIX5nzyeNa8QpjHXnEeetu/i/L7Yitl4euDwA roxhZW4MgP+dbmmyzSIxJnzF9h/trMaojcg23Sr3LZmOHj4G7kM= -----END CERTIFICATE-----Generated at Mon Sep 21 17:54:50 2026 by rpki-client