$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft (raw, json) Hash identifier: evACDCIHpkxlLKNXVZbHQzOaHagPUbWCJEnm2yLbdLA= Subject key identifier: FD:FA:77:95:37:4B:3B:AF:FA:AC:B0:24:99:58:B0:EC:B0:8B:A3:3F Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Certificate serial: 436F8D8920DC0042586EF4C5DF7C27907B1D68C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 12:06:04 +0000 Manifest this update: Wed 23 Sep 2026 12:01:04 +0000 Manifest next update: Thu 24 Sep 2026 13:48:04 +0000 Files and hashes: 1: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: 9rQw2DH4LTYRz6Ld/+alvv30wJq+CpxWAZ/IZNVGNXA=) 2: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl (hash: I1Jig05NBA1aUnFMb3qyTYZebxBTuFVKJPIiZVQPERQ=) 3: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: 3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=) 4: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=) 5: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=) 6: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: F6jYcafaJJAQNsDnKDwNAvNPZwSOu96osD17ejMa0IA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 13:48:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6f:8d:89:20:dc:00:42:58:6e:f4:c5:df:7c:27:90:7b:1d:68:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Validity Not Before: Sep 23 12:01:04 2026 GMT Not After : Sep 24 13:48:04 2026 GMT Subject: CN=FDFA7795374B3BAFFAACB0249958B0ECB08BA33F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:2d:30:d3:08:48:f4:70:00:5b:37:6d:6c:0c: 6e:a6:63:5f:13:8c:e5:6c:dd:61:7f:c2:e0:c5:19: b0:91:b6:9d:29:2b:3d:fd:44:1a:98:f9:f1:3a:bc: 3a:2e:2e:0b:d1:c3:23:97:90:9c:cc:63:f8:fc:bf: 21:f9:c4:f7:fe:38:97:51:28:81:57:85:80:11:ce: b1:e9:90:bd:e2:63:e6:ac:51:fa:8b:e5:45:5e:83: cb:b8:2b:36:d1:92:55:27:5a:b9:f0:c0:8e:ee:1c: c4:0d:cf:c4:5d:69:b0:b7:79:70:eb:9f:10:ed:45: 0b:95:0b:9f:cd:ca:e0:35:8b:70:a4:50:bb:4b:6b: 9a:0b:29:bc:33:37:7e:c6:5d:c7:42:00:4a:eb:73: 5b:22:d4:a1:00:a3:90:79:87:c8:4a:e5:f1:24:b1: 0c:5e:16:e7:50:03:57:f4:01:bc:7f:1c:5f:ba:ec: 94:eb:fc:37:c1:0e:a3:eb:98:4d:7b:56:10:12:e1: bb:c8:bf:60:df:b7:a9:31:87:7d:18:98:7e:56:72: f5:4e:ae:de:5e:64:3b:31:c6:d0:7f:6e:35:da:bc: c5:17:ff:bb:e1:9e:ab:04:6b:59:10:02:79:da:44: 96:c2:d3:6f:92:f5:c0:4d:7e:18:f4:98:24:f2:57: b2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:FA:77:95:37:4B:3B:AF:FA:AC:B0:24:99:58:B0:EC:B0:8B:A3:3F X509v3 Authority Key Identifier: keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:a3:22:eb:cc:75:7f:3d:45:09:33:0e:7b:8b:39:87:41:8e: 2a:0b:90:07:a3:f3:b5:b5:a1:07:42:b4:0c:22:76:18:47:8b: 4d:07:42:b9:b2:31:fd:be:90:63:65:5f:28:a3:4d:f3:dc:79: cc:20:97:23:a4:99:1a:cf:e0:b0:d3:01:cb:4d:0c:04:54:fd: 7e:b2:55:8f:d5:cb:12:ff:ba:2f:e3:fb:6e:93:9e:88:5f:d2: e5:0d:01:48:68:4b:7a:ec:6a:00:2b:01:08:ed:17:ea:c0:19: ff:96:eb:0f:c2:b3:d0:6b:c0:54:32:fa:49:c0:03:30:98:04: 5f:8c:41:80:0c:ac:92:0b:9a:f9:da:97:cf:c6:6d:32:ce:0e: e1:0e:b5:75:c1:5f:a6:e0:82:a1:cf:ad:2b:68:56:07:32:4e: 69:c0:9a:4c:26:11:60:bb:f3:9b:fe:57:74:8f:d2:38:c1:11: 65:ca:89:38:29:dc:4b:47:8b:d7:4b:54:bc:08:58:1d:4a:a5: 27:1d:3a:ad:ca:80:0c:98:c2:16:b4:49:45:d6:5d:1f:08:c4: 1f:6d:d3:76:ad:38:bf:85:51:f5:69:c0:54:dd:de:95:a9:0a: 09:19:1b:8a:58:42:51:23:cf:68:cc:da:ff:56:00:64:e9:e7: 9e:4d:e6:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2+NiSDcAEJYbvTF33wnkHsdaMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEwOThF ODQ2RTlGQzAeFw0yNjA5MjMxMjAxMDRaFw0yNjA5MjQxMzQ4MDRaMDMxMTAvBgNV BAMTKEZERkE3Nzk1Mzc0QjNCQUZGQUFDQjAyNDk5NThCMEVDQjA4QkEzM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiLTDTCEj0cABbN21sDG6mY18T jOVs3WF/wuDFGbCRtp0pKz39RBqY+fE6vDouLgvRwyOXkJzMY/j8vyH5xPf+OJdR KIFXhYARzrHpkL3iY+asUfqL5UVeg8u4KzbRklUnWrnwwI7uHMQNz8RdabC3eXDr nxDtRQuVC5/NyuA1i3CkULtLa5oLKbwzN37GXcdCAErrc1si1KEAo5B5h8hK5fEk sQxeFudQA1f0Abx/HF+67JTr/DfBDqPrmE17VhAS4bvIv2Dft6kxh30YmH5WcvVO rt5eZDsxxtB/bjXavMUX/7vhnqsEa1kQAnnaRJbC02+S9cBNfhj0mCTyV7J1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/fp3lTdLO6/6rLAkmViw7LCLoz8wHwYDVR0j BBgwFoAUkdpePq7HglACwrCyEWkQmOhG6fwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMyNzg3NDctNmFjNy00Zjg3LTliMmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VB RUM3ODI1MDAyQzJCMEIyMTE2OTEwOThFODQ2RTlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MURBNUUzRUFFQzc4MjUwMDJDMkIwQjIxMTY5MTA5OEU4NDZF OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEw OThFODQ2RTlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOjIuvMdX89RQkzDnuLOYdBjioLkAej87W1 oQdCtAwidhhHi00HQrmyMf2+kGNlXyijTfPcecwglyOkmRrP4LDTActNDARU/X6y VY/VyxL/ui/j+26Tnohf0uUNAUhoS3rsagArAQjtF+rAGf+W6w/Cs9BrwFQy+knA AzCYBF+MQYAMrJILmvnal8/GbTLODuEOtXXBX6bggqHPrStoVgcyTmnAmkwmEWC7 85v+V3SP0jjBEWXKiTgp3EtHi9dLVLwIWB1KpScdOq3KgAyYwha0SUXWXR8IxB9t 03atOL+FUfVpwFTd3pWpCgkZG4pYQlEjz2jM2v9WAGTp555N5to= -----END CERTIFICATE-----Generated at Thu Sep 24 04:05:10 2026 by rpki-client