$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json) Hash identifier: m7qn8z/KwjDycvTYM/dBj/zIc9Imv+ceZHnRx8lfQiM= Subject key identifier: EC:A0:0E:6D:7C:02:D2:8A:2B:03:EF:A3:9F:82:91:77:0E:95:DF:2A Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Certificate serial: 6FBD7292606D821ED50F9A02DE6826A994054A7B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:42:55 +0000 Manifest this update: Thu 24 Sep 2026 01:37:55 +0000 Manifest next update: Fri 25 Sep 2026 05:18:55 +0000 Files and hashes: 1: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: TavISHgSchSrdo1tPoT1m01tqXkkmHadZdiVCIEiM9o=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 05:18:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:bd:72:92:60:6d:82:1e:d5:0f:9a:02:de:68:26:a9:94:05:4a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Validity Not Before: Sep 24 01:37:55 2026 GMT Not After : Sep 25 05:18:55 2026 GMT Subject: CN=ECA00E6D7C02D28A2B03EFA39F8291770E95DF2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b1:49:3b:80:83:3b:81:60:94:1a:7a:81:b5: b1:ca:d5:51:70:ff:c7:66:97:2a:df:bf:59:1e:77: 3f:14:0b:1b:90:bc:00:70:7b:c8:e9:e2:e7:f8:db: bd:08:c4:01:7b:5b:06:c9:56:c9:3d:2a:4b:2e:5c: a3:0d:62:54:3d:56:27:ae:b7:80:e8:d5:f4:28:83: 02:41:dc:27:71:98:6c:f3:8f:07:cf:ed:c5:5f:83: 3a:e7:f0:ea:b9:24:75:d1:29:c4:f4:9e:0d:bc:99: 2f:1f:f3:a8:6d:32:08:dc:e5:a5:03:46:21:22:d9: 57:d5:0a:fd:0a:a4:4e:c0:b5:50:28:6e:f5:2f:74: ae:69:e3:29:01:32:d0:2d:42:8f:91:ec:93:8d:61: c6:f2:ce:ef:33:0a:91:43:f8:07:a0:f6:e8:eb:3c: e2:91:40:13:13:5b:ca:20:b7:3e:3f:df:c2:cb:8c: 7f:2a:74:d5:ea:82:66:e4:9f:6d:f3:1e:8f:04:25: 0d:40:3d:2a:a9:13:96:94:ee:a9:b3:37:3c:54:3c: b5:35:59:ec:18:c8:e2:a2:6f:09:98:52:69:22:be: 8c:73:a5:24:e4:cd:57:7b:29:61:57:c4:4f:b1:0a: 00:0f:06:d1:d8:52:42:a7:3c:60:b8:1f:42:17:25: 24:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:A0:0E:6D:7C:02:D2:8A:2B:03:EF:A3:9F:82:91:77:0E:95:DF:2A X509v3 Authority Key Identifier: keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:de:69:ed:ea:3f:98:a3:fa:ff:90:a7:23:d7:73:c6:9f:c1: cc:bc:db:3b:70:4c:37:a4:fb:65:ca:4e:b6:e0:97:4f:20:40: a4:da:33:95:2d:ff:74:0b:98:1b:4a:5a:b4:d9:9e:45:45:64: 4a:56:79:c5:98:ab:78:c1:ac:c0:96:ed:fd:fb:d1:3c:a8:3a: 36:c3:4d:bf:ea:5a:96:4d:9c:5d:bc:e6:f6:f9:d3:f0:44:60: e1:51:39:fd:5b:bb:d4:4e:01:db:a3:18:c6:3b:9d:d0:55:67: 07:c5:3d:95:90:dd:1a:72:0f:d4:51:92:47:91:1d:91:57:aa: b2:cf:72:b3:c8:c2:38:6c:bd:cf:b4:b5:67:d2:6d:f1:02:33: 17:8e:31:90:f1:2f:6c:31:e4:9c:0b:5e:a0:31:4f:a9:75:50: 51:b0:7b:fc:e1:6d:5f:d6:46:be:4b:bf:e2:ad:b8:49:09:c1: 25:b9:8a:55:a5:54:4b:67:df:6a:ef:30:8a:ae:fe:3c:57:0f: 4c:47:a1:88:a3:fb:4c:23:f9:00:b4:cd:cf:70:ed:65:96:37: 24:8d:49:5c:65:65:bd:a7:8c:56:46:96:99:b4:45:03:f0:5f: ed:d9:14:79:d3:89:9e:9b:a9:df:29:97:c8:e1:d1:36:16:33: 9c:61:97:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb71ykmBtgh7VD5oC3mgmqZQFSnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5 NzhFMUY5MjAeFw0yNjA5MjQwMTM3NTVaFw0yNjA5MjUwNTE4NTVaMDMxMTAvBgNV BAMTKEVDQTAwRTZEN0MwMkQyOEEyQjAzRUZBMzlGODI5MTc3MEU5NURGMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqsUk7gIM7gWCUGnqBtbHK1VFw /8dmlyrfv1kedz8UCxuQvABwe8jp4uf4270IxAF7WwbJVsk9KksuXKMNYlQ9Vieu t4Do1fQogwJB3CdxmGzzjwfP7cVfgzrn8Oq5JHXRKcT0ng28mS8f86htMgjc5aUD RiEi2VfVCv0KpE7AtVAobvUvdK5p4ykBMtAtQo+R7JONYcbyzu8zCpFD+Aeg9ujr POKRQBMTW8ogtz4/38LLjH8qdNXqgmbkn23zHo8EJQ1APSqpE5aU7qmzNzxUPLU1 WewYyOKibwmYUmkivoxzpSTkzVd7KWFXxE+xCgAPBtHYUkKnPGC4H0IXJSTdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7KAObXwC0oorA++jn4KRdw6V3yowHwYDVR0j BBgwFoAUkaabsn+67KjqRrxdikLSCZeOH5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NmYyZTUtZGZiZC00ZjdmLThiM2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3 RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5NzhFMUY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUE2OUJCMjdGQkFFQ0E4RUE0NkJDNUQ4QTQyRDIwOTk3OEUx RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQy MDk5NzhFMUY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABneae3qP5ij+v+QpyPXc8afwcy82ztwTDek +2XKTrbgl08gQKTaM5Ut/3QLmBtKWrTZnkVFZEpWecWYq3jBrMCW7f370TyoOjbD Tb/qWpZNnF285vb50/BEYOFROf1bu9ROAdujGMY7ndBVZwfFPZWQ3RpyD9RRkkeR HZFXqrLPcrPIwjhsvc+0tWfSbfECMxeOMZDxL2wx5JwLXqAxT6l1UFGwe/zhbV/W Rr5Lv+KtuEkJwSW5ilWlVEtn32rvMIqu/jxXD0xHoYij+0wj+QC0zc9w7WWWNySN SVxlZb2njFZGlpm0RQPwX+3ZFHnTiZ6bqd8pl8jh0TYWM5xhl9Y= -----END CERTIFICATE-----Generated at Thu Sep 24 08:28:55 2026 by rpki-client