$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json) Hash identifier: E4NtgnHS75Z089L8Ns63MpJNsPz8uFFSwN4NFdm8S6E= Subject key identifier: ED:C7:CF:27:2E:4C:77:F5:9E:AE:3F:41:93:C4:40:D8:A7:CF:9D:D6 Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Certificate serial: 3D64C39FE9201EC346DDD18109FAEB0F0B8C1EA1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft Manifest number: BF Signing time: Tue 22 Sep 2026 11:56:17 +0000 Manifest this update: Tue 22 Sep 2026 11:51:17 +0000 Manifest next update: Wed 23 Sep 2026 14:49:17 +0000 Files and hashes: 1: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: sW7LiptH7y42/TYM+okGKzqBR2aeJIuCcLvFdC8GWdc=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 12:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:64:c3:9f:e9:20:1e:c3:46:dd:d1:81:09:fa:eb:0f:0b:8c:1e:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Validity Not Before: Sep 22 11:51:17 2026 GMT Not After : Sep 23 14:49:17 2026 GMT Subject: CN=EDC7CF272E4C77F59EAE3F4193C440D8A7CF9DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:be:5e:ed:98:a0:0c:b4:0e:4a:6e:8e:f9:d6: 9d:a4:d7:09:fb:25:53:4a:73:17:d0:06:64:b1:6e: b9:c0:2c:b5:81:b9:ba:b6:b4:a3:49:92:97:5c:6e: 8b:f8:b5:52:6b:90:01:36:22:5d:51:81:bf:be:5b: e9:4c:9c:ff:24:a3:37:15:13:47:e6:3d:02:49:02: 49:80:d9:f1:d5:1f:d4:73:0e:b0:da:56:fe:01:38: ee:a5:a7:20:68:20:e1:a7:39:92:9e:c4:3c:8c:bb: 50:d3:38:b0:e2:a7:a1:98:91:08:d7:15:d8:2f:c5: 52:b6:74:3b:87:fe:46:22:21:57:85:b9:70:1a:1a: ef:5e:38:7f:1a:69:03:01:bb:db:8c:b9:0f:29:ed: 7b:b7:0f:d5:b4:11:98:ef:ae:c6:3c:80:41:69:1f: 3b:07:de:2f:84:5b:96:aa:6a:86:c0:6a:35:a2:a8: 62:24:21:3c:48:13:41:f3:ea:59:92:83:b0:b4:74: 05:ae:1f:86:46:1c:df:d5:3e:44:b7:60:f2:1f:24: 18:75:b4:68:d2:36:58:18:3b:36:10:e0:e0:70:5b: 12:60:b7:38:90:1b:f4:ef:0a:51:41:02:28:1a:f1: fb:a6:fa:34:8b:79:ed:65:08:0d:c8:0d:e8:ec:d8: 46:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C7:CF:27:2E:4C:77:F5:9E:AE:3F:41:93:C4:40:D8:A7:CF:9D:D6 X509v3 Authority Key Identifier: keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:4d:9d:b7:89:08:8a:f2:87:6f:98:d0:67:14:76:d7:f9:46: 3c:4b:37:b3:6d:6c:61:8b:96:c3:a8:f2:c6:ab:68:3b:b8:ad: 62:1d:68:66:da:d5:34:60:22:44:76:81:b4:f7:9a:72:3e:3c: ce:42:00:ad:09:46:1f:e5:ec:be:f1:be:d6:61:3f:c2:a5:b5: 35:29:b5:5e:92:c1:46:f8:f8:5c:01:ed:49:29:c3:5b:de:cd: 51:d6:f7:ee:28:61:45:c6:bf:f9:3e:7c:61:ce:89:3a:19:49: ac:0b:b5:2c:90:10:0a:6c:01:62:ab:33:e7:c3:4c:36:6b:bf: 73:52:0c:ee:81:f8:ff:33:41:8d:ef:7c:7e:df:6e:9a:c6:17: 03:db:05:bc:a8:65:33:e0:bb:8f:f9:ca:94:35:6c:87:5d:1d: fa:ef:17:61:99:e7:c9:99:04:a2:e3:f2:f4:98:b5:da:3b:91: 36:e5:05:09:f2:80:3f:1b:93:37:85:61:fd:d2:19:b0:19:89: 36:12:fb:b3:63:05:1a:1d:ab:f2:57:05:cb:77:60:29:30:9b: 78:95:18:36:22:45:32:bb:47:7c:a4:02:f5:e7:b6:91:e4:65: 47:1b:ae:af:ff:a9:88:84:90:3c:0f:15:a9:85:fa:4c:0a:11: e0:97:7b:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWTDn+kgHsNG3dGBCfrrDwuMHqEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5 NzhFMUY5MjAeFw0yNjA5MjIxMTUxMTdaFw0yNjA5MjMxNDQ5MTdaMDMxMTAvBgNV BAMTKEVEQzdDRjI3MkU0Qzc3RjU5RUFFM0Y0MTkzQzQ0MEQ4QTdDRjlERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWvl7tmKAMtA5Kbo751p2k1wn7 JVNKcxfQBmSxbrnALLWBubq2tKNJkpdcbov4tVJrkAE2Il1Rgb++W+lMnP8kozcV E0fmPQJJAkmA2fHVH9RzDrDaVv4BOO6lpyBoIOGnOZKexDyMu1DTOLDip6GYkQjX FdgvxVK2dDuH/kYiIVeFuXAaGu9eOH8aaQMBu9uMuQ8p7Xu3D9W0EZjvrsY8gEFp HzsH3i+EW5aqaobAajWiqGIkITxIE0Hz6lmSg7C0dAWuH4ZGHN/VPkS3YPIfJBh1 tGjSNlgYOzYQ4OBwWxJgtziQG/TvClFBAiga8fum+jSLee1lCA3IDejs2EY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cfPJy5Md/Werj9Bk8RA2KfPndYwHwYDVR0j BBgwFoAUkaabsn+67KjqRrxdikLSCZeOH5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NmYyZTUtZGZiZC00ZjdmLThiM2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3 RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5NzhFMUY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUE2OUJCMjdGQkFFQ0E4RUE0NkJDNUQ4QTQyRDIwOTk3OEUx RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQy MDk5NzhFMUY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHVNnbeJCIryh2+Y0GcUdtf5RjxLN7NtbGGL lsOo8saraDu4rWIdaGba1TRgIkR2gbT3mnI+PM5CAK0JRh/l7L7xvtZhP8KltTUp tV6SwUb4+FwB7Ukpw1vezVHW9+4oYUXGv/k+fGHOiToZSawLtSyQEApsAWKrM+fD TDZrv3NSDO6B+P8zQY3vfH7fbprGFwPbBbyoZTPgu4/5ypQ1bIddHfrvF2GZ58mZ BKLj8vSYtdo7kTblBQnygD8bkzeFYf3SGbAZiTYS+7NjBRodq/JXBct3YCkwm3iV GDYiRTK7R3ykAvXntpHkZUcbrq//qYiEkDwPFamF+kwKEeCXezw= -----END CERTIFICATE-----Generated at Tue Sep 22 15:03:42 2026 by rpki-client