$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft (raw, json) Hash identifier: EUGdK3sdSjBXw/Cyo7fyx5ANOQVf5SRDym0jPJdTSoo= Subject key identifier: 30:38:D0:CD:52:39:86:A2:A6:A6:67:26:1C:6C:26:ED:99:32:28:D6 Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Certificate serial: 53EA7BC1D295474FE70C328888197F0C3FAE3731 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft Manifest number: BE Signing time: Mon 21 Sep 2026 05:23:22 +0000 Manifest this update: Mon 21 Sep 2026 05:18:22 +0000 Manifest next update: Tue 22 Sep 2026 07:43:22 +0000 Files and hashes: 1: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: 9rQw2DH4LTYRz6Ld/+alvv30wJq+CpxWAZ/IZNVGNXA=) 2: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: 3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=) 3: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=) 4: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl (hash: dgqwPZ2aKNa+KugK+gI5NAJwDtBR4VMXxpu3xbgVIvo=) 5: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=) 6: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: F6jYcafaJJAQNsDnKDwNAvNPZwSOu96osD17ejMa0IA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 07:43:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:ea:7b:c1:d2:95:47:4f:e7:0c:32:88:88:19:7f:0c:3f:ae:37:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Validity Not Before: Sep 21 05:18:22 2026 GMT Not After : Sep 22 07:43:22 2026 GMT Subject: CN=3038D0CD523986A2A6A667261C6C26ED993228D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:cf:9c:e0:22:24:f1:ec:47:3e:12:28:d6:fc: 15:9a:d4:fc:8a:15:e6:d4:92:75:79:41:2a:5c:36: 54:94:3d:eb:92:56:e7:54:c9:85:1c:cb:89:03:ee: 89:5b:45:88:79:a2:2e:b2:aa:ab:27:12:3a:90:31: 2c:29:36:73:16:29:17:98:10:83:11:e4:c2:a8:a5: c1:c1:9a:8f:6b:b1:fe:1c:7b:26:c6:2f:05:20:90: c6:5f:8e:e7:97:b0:64:ca:41:b8:e8:11:51:d9:e4: ea:72:d7:98:2c:d0:8f:16:15:19:3c:73:f3:0d:8e: 29:21:03:09:a4:4d:3f:a8:b2:b6:cf:6f:e6:0e:01: 5d:0e:90:d7:3d:06:fb:cd:d3:8e:4e:94:87:a7:9b: 43:2e:6f:2f:1b:bf:20:5d:c6:4f:0f:e0:5c:4c:e8: dc:a1:76:95:5f:88:0e:b2:ae:33:9c:fc:c5:2e:99: 01:3e:7d:a5:69:fe:7c:b3:f1:8b:fd:1d:17:a3:e8: 4d:29:51:8e:0e:f5:86:c9:7c:79:01:5c:41:f4:d6: e6:37:ba:bf:2b:aa:0c:06:a5:2e:b4:1a:92:71:6c: ab:4d:f6:27:bd:59:dd:dd:da:15:00:e3:20:ff:4f: c3:99:f6:c7:9e:ee:f5:f3:52:7a:4b:96:ba:82:bb: 21:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:38:D0:CD:52:39:86:A2:A6:A6:67:26:1C:6C:26:ED:99:32:28:D6 X509v3 Authority Key Identifier: keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:db:dc:99:e9:8e:a3:71:82:fa:54:03:f8:0f:7e:19:b1:1d: 41:cd:6f:5a:9d:e5:42:65:fb:15:81:63:94:c5:ab:a6:55:03: 96:97:af:46:06:45:08:97:b2:04:48:41:45:e2:cc:b7:0e:fe: 40:03:3f:47:a2:03:62:02:04:89:03:8d:18:5b:56:fa:d1:90: e9:31:60:43:5d:70:70:28:bf:59:a3:ed:f5:d7:a9:63:31:86: 44:e3:42:e7:b7:92:21:4c:34:e7:b1:1e:bc:69:35:4e:57:ff: 63:20:04:96:f7:1d:10:b2:17:6a:82:44:0f:0b:a7:a4:70:c9: c0:97:bb:4d:95:5a:9e:52:ed:88:05:44:a9:e3:31:ac:f9:78: 43:88:8d:68:19:af:82:7c:2d:e4:51:20:53:22:20:ba:b3:bc: 8a:0e:52:a6:a8:30:f3:41:8c:32:cc:1a:83:aa:4a:77:13:81: ae:23:02:0b:13:98:98:a3:cc:7e:64:48:04:b1:d4:0f:9e:22: 2c:94:c9:fc:50:39:e4:2b:a0:d1:1c:d5:3d:9c:ca:e4:26:ad: f4:06:be:03:32:3f:e2:2f:0f:70:9c:01:78:34:af:7a:1e:78: 6b:73:9c:fe:f4:36:43:d7:1d:73:74:6a:36:34:16:8f:94:84: 9e:74:33:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU+p7wdKVR0/nDDKIiBl/DD+uNzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEwOThF ODQ2RTlGQzAeFw0yNjA5MjEwNTE4MjJaFw0yNjA5MjIwNzQzMjJaMDMxMTAvBgNV BAMTKDMwMzhEMENENTIzOTg2QTJBNkE2NjcyNjFDNkMyNkVEOTkzMjI4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTz5zgIiTx7Ec+EijW/BWa1PyK FebUknV5QSpcNlSUPeuSVudUyYUcy4kD7olbRYh5oi6yqqsnEjqQMSwpNnMWKReY EIMR5MKopcHBmo9rsf4ceybGLwUgkMZfjueXsGTKQbjoEVHZ5Opy15gs0I8WFRk8 c/MNjikhAwmkTT+osrbPb+YOAV0OkNc9BvvN045OlIenm0Muby8bvyBdxk8P4FxM 6NyhdpVfiA6yrjOc/MUumQE+faVp/nyz8Yv9HRej6E0pUY4O9YbJfHkBXEH01uY3 ur8rqgwGpS60GpJxbKtN9ie9Wd3d2hUA4yD/T8OZ9see7vXzUnpLlrqCuyGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDjQzVI5hqKmpmcmHGwm7ZkyKNYwHwYDVR0j BBgwFoAUkdpePq7HglACwrCyEWkQmOhG6fwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMyNzg3NDctNmFjNy00Zjg3LTliMmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VB RUM3ODI1MDAyQzJCMEIyMTE2OTEwOThFODQ2RTlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MURBNUUzRUFFQzc4MjUwMDJDMkIwQjIxMTY5MTA5OEU4NDZF OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEw OThFODQ2RTlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvb3JnpjqNxgvpUA/gPfhmxHUHNb1qd5UJl +xWBY5TFq6ZVA5aXr0YGRQiXsgRIQUXizLcO/kADP0eiA2ICBIkDjRhbVvrRkOkx YENdcHAov1mj7fXXqWMxhkTjQue3kiFMNOexHrxpNU5X/2MgBJb3HRCyF2qCRA8L p6RwycCXu02VWp5S7YgFRKnjMaz5eEOIjWgZr4J8LeRRIFMiILqzvIoOUqaoMPNB jDLMGoOqSncTga4jAgsTmJijzH5kSASx1A+eIiyUyfxQOeQroNEc1T2cyuQmrfQG vgMyP+IvD3CcAXg0r3oeeGtznP70NkPXHXN0ajY0Fo+UhJ50MwQ= -----END CERTIFICATE-----Generated at Tue Sep 22 01:49:20 2026 by rpki-client