$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: OKUM7xY2B+0g40wJISnoi1S9neLRrP/Ait+LusWnzmU= Subject key identifier: 3E:56:C0:B5:0C:B7:73:04:81:89:F2:A7:4B:33:E5:2A:18:76:05:5E Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 274AB6D5E537D440D763D4D34ED149980578BCD5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: CB Signing time: Wed 30 Sep 2026 20:36:15 +0000 Manifest this update: Wed 30 Sep 2026 20:31:15 +0000 Manifest next update: Fri 02 Oct 2026 00:32:15 +0000 Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) 2: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 3: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 4: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) 5: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: rS6XxH3pUTqZrY9Vngx/tNpQ4IOENoAVLWOD4LFurMQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 16:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:4a:b6:d5:e5:37:d4:40:d7:63:d4:d3:4e:d1:49:98:05:78:bc:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Sep 30 20:31:15 2026 GMT Not After : Oct 2 00:32:15 2026 GMT Subject: CN=3E56C0B50CB773048189F2A74B33E52A1876055E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:10:82:5f:83:32:be:75:24:a0:f6:41:58:df: 2d:9a:d1:b6:c3:7d:24:2c:f6:fe:ef:7b:07:62:48: 80:ea:7f:c4:1f:75:4e:9c:2c:af:21:81:9a:ea:59: 2d:45:6a:79:17:01:ef:76:22:c6:85:cd:da:44:e1: 35:43:cb:38:84:4b:ae:63:b4:1f:fe:04:18:01:8f: 70:88:cc:e7:fa:63:07:e6:9d:9f:aa:b3:93:2e:1a: 82:37:a6:02:f3:a7:92:22:f8:c7:62:5c:86:57:f5: a5:37:83:e0:12:80:04:8a:78:80:f1:a9:19:9c:2f: 43:99:c0:d9:cd:6c:35:dc:f9:19:c4:01:14:be:69: 27:0c:84:d7:5e:fd:97:ef:8e:d0:ec:61:b0:9f:de: 9c:ed:30:1d:9e:d0:85:6e:6e:f2:e7:bc:7a:7f:9c: 6d:b8:89:94:8f:94:68:9d:bc:cb:e7:bc:87:b1:20: a8:52:1b:4e:96:12:e5:72:72:16:49:88:6a:ca:f7: 1c:3a:17:51:7e:21:a8:b4:f7:d4:29:99:50:3b:75: 69:29:5d:51:89:72:2d:62:25:06:1d:d5:ed:63:5d: 6b:99:d5:18:fa:fd:6a:20:27:37:a3:91:6f:cd:fa: b1:53:d3:75:1c:2e:ab:64:6b:1a:cf:f0:3b:ef:54: aa:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:56:C0:B5:0C:B7:73:04:81:89:F2:A7:4B:33:E5:2A:18:76:05:5E X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:d2:e1:10:e5:40:32:05:de:25:8a:3b:2f:31:aa:99:5d:8f: 10:33:9e:b5:8a:89:d5:5e:7c:c0:6f:59:2a:69:36:0b:d5:83: 5b:9a:32:92:93:60:c5:e5:5d:32:a5:04:95:68:62:65:3e:e1: 4e:03:97:3e:4f:59:18:ef:44:ea:02:3b:cc:6d:80:58:13:0d: eb:7a:db:13:15:0d:12:c2:13:3d:04:af:ba:50:ba:c8:0f:18: c2:9d:11:80:03:9f:0a:a3:61:a8:91:4f:8c:87:6e:2e:b8:48: 11:f6:8b:f3:28:2b:e1:db:c2:58:21:6b:72:dc:c9:fc:42:14: bf:b1:00:45:89:26:18:13:5b:a2:18:cb:57:8b:96:d0:ac:84: 1a:b6:5a:a8:9f:46:c8:26:57:1a:0b:8d:6f:d4:51:07:0f:d7: 23:47:15:51:5d:d2:e6:2e:5f:af:d1:75:35:82:44:d1:fe:b4: 57:7c:c5:2e:f9:e0:1d:ed:9e:bc:61:41:c6:0f:05:7c:38:d3: e5:72:e8:27:9c:f2:b6:a6:1e:e3:c3:c6:fd:8f:f6:a6:19:15: f9:bf:f7:39:7e:cd:1e:be:fe:ac:28:2c:fe:2a:cc:54:b2:f5: cf:69:76:fb:db:b7:37:7f:2c:b0:ba:35:4b:65:f1:82:48:ed: eb:47:a2:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0q21eU31EDXY9TTTtFJmAV4vNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA5MzAyMDMxMTVaFw0yNjEwMDIwMDMyMTVaMDMxMTAvBgNV BAMTKDNFNTZDMEI1MENCNzczMDQ4MTg5RjJBNzRCMzNFNTJBMTg3NjA1NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEIJfgzK+dSSg9kFY3y2a0bbD fSQs9v7vewdiSIDqf8QfdU6cLK8hgZrqWS1FankXAe92IsaFzdpE4TVDyziES65j tB/+BBgBj3CIzOf6YwfmnZ+qs5MuGoI3pgLzp5Ii+MdiXIZX9aU3g+ASgASKeIDx qRmcL0OZwNnNbDXc+RnEARS+aScMhNde/ZfvjtDsYbCf3pztMB2e0IVubvLnvHp/ nG24iZSPlGidvMvnvIexIKhSG06WEuVychZJiGrK9xw6F1F+Iai099QpmVA7dWkp XVGJci1iJQYd1e1jXWuZ1Rj6/WogJzejkW/N+rFT03UcLqtkaxrP8DvvVKqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPlbAtQy3cwSBifKnSzPlKhh2BV4wHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErS4RDlQDIF3iWKOy8xqpldjxAznrWKidVe fMBvWSppNgvVg1uaMpKTYMXlXTKlBJVoYmU+4U4Dlz5PWRjvROoCO8xtgFgTDet6 2xMVDRLCEz0Er7pQusgPGMKdEYADnwqjYaiRT4yHbi64SBH2i/MoK+Hbwlgha3Lc yfxCFL+xAEWJJhgTW6IYy1eLltCshBq2WqifRsgmVxoLjW/UUQcP1yNHFVFd0uYu X6/RdTWCRNH+tFd8xS754B3tnrxhQcYPBXw40+Vy6Cec8ramHuPDxv2P9qYZFfm/ 9zl+zR6+/qwoLP4qzFSy9c9pdvvbtzd/LLC6NUtl8YJI7etHomE= -----END CERTIFICATE-----Generated at Thu Oct 1 05:18:37 2026 by rpki-client