$ rpki-client -vvvf rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft File: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft (raw, json) Hash identifier: REOQOiqF53xI5HB4t9zJbhHI7XZY1GE0JtcYIGRSOTI= Subject key identifier: B9:53:EB:22:BD:17:DD:59:B4:6B:70:9D:EB:7C:03:D9:9C:A9:3A:39 Authority key identifier: 91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B Certificate issuer: /CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Certificate serial: 293462DFFE0D952F94E0DCBA95E90641680C159E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft Manifest number: C2 Signing time: Fri 25 Sep 2026 00:20:35 +0000 Manifest this update: Fri 25 Sep 2026 00:15:35 +0000 Manifest next update: Sat 26 Sep 2026 03:49:35 +0000 Files and hashes: 1: 91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl (hash: 4hvpx2YF3MJ4jpTgWBmlteG+L4paQCgEK0WFL1fwv3o=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: qojtjE9o52vzXHMZCgvkvLBCgGKTsugY41lPAH2vlqA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 03:49:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:34:62:df:fe:0d:95:2f:94:e0:dc:ba:95:e9:06:41:68:0c:15:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91683C0C0C2989A9F59C3D00EEC50C6CFD30279B Validity Not Before: Sep 25 00:15:35 2026 GMT Not After : Sep 26 03:49:35 2026 GMT Subject: CN=B953EB22BD17DD59B46B709DEB7C03D99CA93A39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:18:d2:6b:da:7c:c4:1e:62:6a:ca:94:d1:02: c4:2b:25:a6:db:15:86:4b:36:e0:94:58:63:c2:39: b2:c0:f5:24:97:33:ee:9d:c8:70:48:d8:83:c6:19: b5:4b:3a:35:60:20:b9:72:6c:59:bd:be:2b:f4:1d: e8:c2:f5:e3:02:26:cc:9e:78:6e:7d:85:c0:3f:74: 55:4e:a7:ac:a3:3a:07:d0:1b:9f:2f:94:ef:d9:bf: 4a:5c:44:50:fd:5c:2d:75:6e:7f:35:22:5b:32:fd: 45:1f:a0:b7:87:9d:a7:74:e6:0b:dd:62:02:34:d4: 5b:b5:8f:29:e7:14:40:f9:40:db:36:32:a2:2f:40: af:54:66:fa:f8:38:98:8a:0e:d0:0d:56:65:a2:7d: 25:5a:0e:db:c9:17:48:94:40:d1:a0:84:e6:83:b9: ee:db:bf:b6:2e:5a:34:4f:d0:89:97:e0:05:a3:08: a0:7e:e0:bd:2d:59:2f:3b:50:db:73:a4:99:a7:3e: bb:18:3c:f5:71:39:b3:19:2f:ff:d9:da:43:29:1f: 81:51:3f:45:61:db:db:6f:ce:33:0b:b1:e5:c4:b9: b6:6a:1a:d1:99:24:bf:8f:33:39:d2:04:54:16:5e: ab:96:0b:c6:14:7e:10:61:ea:3b:df:aa:e9:7c:fe: fa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:53:EB:22:BD:17:DD:59:B4:6B:70:9D:EB:7C:03:D9:9C:A9:3A:39 X509v3 Authority Key Identifier: keyid:91:68:3C:0C:0C:29:89:A9:F5:9C:3D:00:EE:C5:0C:6C:FD:30:27:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/91683C0C0C2989A9F59C3D00EEC50C6CFD30279B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:4e:e7:59:3c:46:6d:b3:75:aa:63:f4:d2:ec:f5:af:da:16: 13:f4:2d:46:f1:4d:fe:d5:2a:88:bd:c5:cd:ac:94:d7:9d:23: 4c:59:f1:66:ff:ce:15:30:e0:06:86:77:11:95:48:51:02:65: 36:ed:00:30:8f:6b:90:43:a4:18:ae:83:03:b1:c7:55:d1:4a: 0a:e6:7b:f1:a5:db:5f:56:39:45:bb:bf:f9:ec:b2:df:eb:dc: c7:f5:96:3c:7a:aa:9c:7f:82:75:4e:27:b9:7f:c7:d2:42:8b: 5e:32:3b:4c:62:dd:99:55:14:c3:4e:f2:04:02:c3:a2:e0:5d: fa:47:5a:46:4e:9d:5e:56:5d:c1:fa:bd:de:13:e9:86:55:0a: 1e:89:ea:86:f6:cc:0a:6b:1a:64:41:f0:82:6a:e4:fd:d6:55: 9c:7b:ec:20:75:a6:90:9d:2e:65:fe:a4:fb:2f:2a:8f:8d:44: 2a:e1:d3:ce:ff:1f:d6:3f:f7:e2:c8:15:1b:8c:78:6b:95:c7: bb:c5:dc:d0:c2:98:e4:24:a8:21:94:a1:09:ad:a7:ce:16:08: de:ac:d1:b2:05:10:eb:9f:22:12:68:81:27:15:11:9d:84:58: 40:a3:be:36:24:4a:e9:1a:f6:78:9d:18:1a:8b:f7:5e:64:75: 16:8c:27:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTRi3/4NlS+U4Ny6lekGQWgMFZ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE2ODNDMEMwQzI5ODlBOUY1OUMzRDAwRUVDNTBDNkNG RDMwMjc5QjAeFw0yNjA5MjUwMDE1MzVaFw0yNjA5MjYwMzQ5MzVaMDMxMTAvBgNV BAMTKEI5NTNFQjIyQkQxN0RENTlCNDZCNzA5REVCN0MwM0Q5OUNBOTNBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRGNJr2nzEHmJqypTRAsQrJabb FYZLNuCUWGPCObLA9SSXM+6dyHBI2IPGGbVLOjVgILlybFm9viv0HejC9eMCJsye eG59hcA/dFVOp6yjOgfQG58vlO/Zv0pcRFD9XC11bn81Ilsy/UUfoLeHnad05gvd YgI01Fu1jynnFED5QNs2MqIvQK9UZvr4OJiKDtANVmWifSVaDtvJF0iUQNGghOaD ue7bv7YuWjRP0ImX4AWjCKB+4L0tWS87UNtzpJmnPrsYPPVxObMZL//Z2kMpH4FR P0Vh29tvzjMLseXEubZqGtGZJL+PMznSBFQWXquWC8YUfhBh6jvfqul8/vp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuVPrIr0X3Vm0a3Cd63wD2ZypOjkwHwYDVR0j BBgwFoAUkWg8DAwpian1nD0A7sUMbP0wJ5swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzBlNmZkODEtYjg3Ny00ZjdjLWFiYzYtMDgyZmNiZWExODlmLzAvOTE2ODNDMEMw QzI5ODlBOUY1OUMzRDAwRUVDNTBDNkNGRDMwMjc5Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTY4M0MwQzBDMjk4OUE5RjU5QzNEMDBFRUM1MEM2Q0ZEMzAy NzlCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvOTE2ODNDMEMwQzI5ODlBOUY1OUMzRDAwRUVDNTBD NkNGRDMwMjc5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMJO51k8Rm2zdapj9NLs9a/aFhP0LUbxTf7V Koi9xc2slNedI0xZ8Wb/zhUw4AaGdxGVSFECZTbtADCPa5BDpBiugwOxx1XRSgrm e/Gl219WOUW7v/nsst/r3Mf1ljx6qpx/gnVOJ7l/x9JCi14yO0xi3ZlVFMNO8gQC w6LgXfpHWkZOnV5WXcH6vd4T6YZVCh6J6ob2zAprGmRB8IJq5P3WVZx77CB1ppCd LmX+pPsvKo+NRCrh087/H9Y/9+LIFRuMeGuVx7vF3NDCmOQkqCGUoQmtp84WCN6s 0bIFEOufIhJogScVEZ2EWECjvjYkSuka9nidGBqL915kdRaMJ6E= -----END CERTIFICATE-----Generated at Fri Sep 25 16:27:13 2026 by rpki-client