$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft File: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft (raw, json) Hash identifier: Xf4s19pYmngvhj6kqtNm3rEJCasc9LaUHov+5naZsv0= Subject key identifier: D5:54:FD:F9:AB:00:25:FF:9A:75:52:E5:F0:B2:70:02:66:5B:BD:79 Authority key identifier: 91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9 Certificate issuer: /CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9 Certificate serial: 45E8411EFB23DF1E834749262D9DE82CE08E1587 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 04:00:38 +0000 Manifest this update: Thu 24 Sep 2026 03:55:38 +0000 Manifest next update: Fri 25 Sep 2026 05:51:38 +0000 Files and hashes: 1: 3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (hash: wfUQ37XeOGm7jzZpf2FPTMaP2YK1PBiPpRHVJZh3ugQ=) 2: 3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (hash: wnLMTQk8SQ7lV0/M9rjyfzbhdbpAXWWgoE3gZvCji1E=) 3: 3130332e31332e3230342e302f32342d3234203d3e203634333030.roa (hash: k+fN663QoGkAVafLC19nOM8MyT5BZaDIktaNW/yCe7M=) 4: 91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl (hash: vuHUZl/+A+CCvr7YwylFysTiXp4HwuNxuaGat+xIs8Y=) 5: 3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (hash: jIh+jw53Ys2p6MNmWuM3k5khpTf8/hkKVSJ8JJmzh6w=) 6: 3130332e31332e3230352e302f32342d3234203d3e203438343635.roa (hash: 9UFc5/2EEKBmLJRS06htYDtGWMCExY3p8nIYkJcd4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:51:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e8:41:1e:fb:23:df:1e:83:47:49:26:2d:9d:e8:2c:e0:8e:15:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91234EB195E197830AF75A6ECB6D583DFF4AB9B9 Validity Not Before: Sep 24 03:55:38 2026 GMT Not After : Sep 25 05:51:38 2026 GMT Subject: CN=D554FDF9AB0025FF9A7552E5F0B27002665BBD79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e5:6a:78:97:d9:eb:76:5a:e8:05:ab:67:cc: e6:02:b4:21:56:5d:03:0f:3b:91:94:ca:48:f3:e8: aa:87:85:4c:d1:c4:fd:06:75:77:ca:6a:e5:1e:31: ec:21:01:4c:d1:59:93:87:75:5d:04:89:d3:3f:22: 8a:55:71:0b:a5:83:91:6f:0a:48:ef:f9:48:eb:ef: 88:19:29:ca:ce:b9:27:a1:91:f4:4e:29:c8:04:bd: 1b:9a:c7:95:50:e0:0f:44:e2:4d:62:22:3b:1a:9f: 78:a8:ee:4e:13:c3:89:ef:36:3f:4c:a2:e4:ee:4e: 0f:96:9a:f3:76:b7:8e:e9:87:35:bd:e3:ba:81:59: 1d:cb:07:a3:bf:c2:f9:00:19:ee:81:4d:97:90:a8: ca:da:e4:7c:da:02:52:b3:60:82:0f:14:43:1a:65: ba:36:c4:b4:d4:69:3b:b6:b6:a1:b8:d3:68:fd:0b: f0:b4:f2:4d:1d:9a:ac:8b:ee:7e:2f:bb:3d:61:de: 11:e7:04:00:01:8f:ef:d6:26:74:cb:9b:5b:16:18: 1c:42:e3:d7:57:1e:98:86:68:bd:99:9d:ce:6c:30: 68:67:e5:ce:f5:ec:13:6b:9a:97:76:15:ab:a3:9f: a5:97:b2:b9:b1:a1:63:d0:61:46:83:12:d3:f0:be: 5a:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:54:FD:F9:AB:00:25:FF:9A:75:52:E5:F0:B2:70:02:66:5B:BD:79 X509v3 Authority Key Identifier: keyid:91:23:4E:B1:95:E1:97:83:0A:F7:5A:6E:CB:6D:58:3D:FF:4A:B9:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/91234EB195E197830AF75A6ECB6D583DFF4AB9B9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d9:36:b7:b4:f4:c4:9f:8f:34:da:17:92:30:2f:66:ff:f6: c6:39:35:ab:ef:21:8b:33:0e:bd:4a:cc:a9:9c:b9:31:82:c2: 9d:7f:03:46:d1:cc:19:fd:77:60:0f:d6:d8:9c:b9:be:b7:ef: 2b:ce:de:f5:19:d4:12:d0:ec:f3:31:ef:3f:71:52:0c:dc:51: 0d:fb:a2:c5:25:ed:fb:3b:f1:1c:b4:8f:9d:97:d3:1e:65:80: bc:ac:b9:52:9c:bc:67:29:ba:14:f6:04:77:dd:86:1b:ea:0d: ab:94:ee:90:a7:0a:4b:0d:3f:74:f3:46:67:3d:51:13:5d:32: 54:e0:39:62:1a:a6:62:4d:21:08:8e:9c:4a:9c:af:4f:53:c1: 26:5c:6d:79:e4:78:71:06:cb:ec:dc:25:d1:ba:ec:e0:7e:b9: 51:67:7d:58:8d:da:99:09:b1:a8:c0:ed:99:75:62:41:4e:64: 33:87:ab:34:b4:f2:b1:58:9f:99:b7:60:66:1b:8e:99:41:18: 6b:37:ad:dc:ca:d8:e6:fd:0b:32:b1:a8:a9:a7:db:45:2f:a8: d0:a1:ea:bc:65:f0:20:9e:41:ab:fd:91:22:4f:14:32:86:eb: d9:f0:e4:12:6e:b3:a2:4e:ab:dd:7d:e4:36:10:06:92:53:0b: da:b6:4b:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURehBHvsj3x6DR0kmLZ3oLOCOFYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RG RjRBQjlCOTAeFw0yNjA5MjQwMzU1MzhaFw0yNjA5MjUwNTUxMzhaMDMxMTAvBgNV BAMTKEQ1NTRGREY5QUIwMDI1RkY5QTc1NTJFNUYwQjI3MDAyNjY1QkJENzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu5Wp4l9nrdlroBatnzOYCtCFW XQMPO5GUykjz6KqHhUzRxP0GdXfKauUeMewhAUzRWZOHdV0EidM/IopVcQulg5Fv Ckjv+Ujr74gZKcrOuSehkfROKcgEvRuax5VQ4A9E4k1iIjsan3io7k4Tw4nvNj9M ouTuTg+WmvN2t47phzW947qBWR3LB6O/wvkAGe6BTZeQqMra5HzaAlKzYIIPFEMa Zbo2xLTUaTu2tqG402j9C/C08k0dmqyL7n4vuz1h3hHnBAABj+/WJnTLm1sWGBxC 49dXHpiGaL2Znc5sMGhn5c717BNrmpd2Faujn6WXsrmxoWPQYUaDEtPwvlpzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1VT9+asAJf+adVLl8LJwAmZbvXkwHwYDVR0j BBgwFoAUkSNOsZXhl4MK91puy21YPf9KubkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NmZjOTA5NmMtMjhkYy00NGU0LWI0Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5 NUUxOTc4MzBBRjc1QTZFQ0I2RDU4M0RGRjRBQjlCOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTIzNEVCMTk1RTE5NzgzMEFGNzVBNkVDQjZENTgzREZGNEFC OUI5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNmZjOTA5NmMtMjhkYy00NGU0LWI0 Y2YtOTZkNjMxYjczYWMwLzAvOTEyMzRFQjE5NUUxOTc4MzBBRjc1QTZFQ0I2RDU4 M0RGRjRBQjlCOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjZNre09MSfjzTaF5IwL2b/9sY5NavvIYsz Dr1KzKmcuTGCwp1/A0bRzBn9d2AP1ticub637yvO3vUZ1BLQ7PMx7z9xUgzcUQ37 osUl7fs78Ry0j52X0x5lgLysuVKcvGcpuhT2BHfdhhvqDauU7pCnCksNP3TzRmc9 URNdMlTgOWIapmJNIQiOnEqcr09TwSZcbXnkeHEGy+zcJdG67OB+uVFnfViN2pkJ sajA7Zl1YkFOZDOHqzS08rFYn5m3YGYbjplBGGs3rdzK2Ob9CzKxqKmn20UvqNCh 6rxl8CCeQav9kSJPFDKG69nw5BJus6JOq9195DYQBpJTC9q2S6A= -----END CERTIFICATE-----Generated at Thu Sep 24 08:40:23 2026 by rpki-client