$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: mv6JJ1xLUyo/31G9n6EdV2vXxI3yfZ6v7Rec9RV4qmM= Subject key identifier: 51:F8:24:E8:80:88:CE:BE:1D:10:B6:94:A7:CE:8E:3E:6D:6E:A3:9C Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 080C4053EE565365C4677CF57362B4E3611F5008 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: C4 Signing time: Fri 25 Sep 2026 16:30:42 +0000 Manifest this update: Fri 25 Sep 2026 16:25:42 +0000 Manifest next update: Sat 26 Sep 2026 18:48:42 +0000 Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) 2: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: hQgHwJpO17Kc7TMg4BfAQDAdqpthO48T7cIJv8AyTzc=) 3: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) 4: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) 5: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 17:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0c:40:53:ee:56:53:65:c4:67:7c:f5:73:62:b4:e3:61:1f:50:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Sep 25 16:25:42 2026 GMT Not After : Sep 26 18:48:42 2026 GMT Subject: CN=51F824E88088CEBE1D10B694A7CE8E3E6D6EA39C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:9d:a5:2d:eb:94:5a:64:af:33:76:28:d0:0c: 2c:23:d4:48:53:74:28:b8:50:2a:14:bb:70:a7:1a: a8:9c:7d:c2:ab:6b:98:71:01:c6:41:47:c9:a6:d6: 18:82:be:1d:2e:a8:f7:37:16:ce:60:a3:87:36:e2: a3:11:73:52:bd:23:f8:75:db:50:63:31:57:bd:fc: 71:67:40:3f:e3:31:c1:c9:0c:a4:96:0b:4d:17:f4: 6a:8c:a2:16:31:7b:a3:55:e2:4a:e9:92:0e:8d:b3: 59:cb:66:34:75:6d:f3:d1:82:28:32:16:33:a6:c9: 83:f1:0a:04:71:48:4a:f0:cd:be:8d:19:dd:90:1b: a2:47:0e:f6:30:28:4c:c7:32:5a:43:bc:67:f7:e2: 8c:4f:21:01:dd:97:b0:d6:27:88:2e:ab:6a:43:cc: 61:6d:e0:43:1d:64:d3:9f:43:0e:be:f3:45:19:f5: 48:99:62:62:8c:d2:04:86:73:e0:ac:dc:bd:bd:c1: 1f:7e:44:e9:dd:ac:d4:12:c0:7e:cc:eb:f2:5c:d0: 38:29:22:90:8a:b1:73:25:5d:5c:8a:72:cc:02:78: 08:24:12:63:68:87:c4:d8:19:a0:4c:b9:be:e2:3a: 61:6e:e1:24:16:86:f3:2c:9c:62:56:75:75:1f:b9: 5b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F8:24:E8:80:88:CE:BE:1D:10:B6:94:A7:CE:8E:3E:6D:6E:A3:9C X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:6b:7e:8b:34:dd:f1:aa:ed:7b:43:52:ca:cd:ad:98:a7:cb: af:a0:5c:dd:72:45:57:8e:47:93:be:d9:ea:e5:ba:77:01:5a: ad:d3:a5:af:bc:02:23:ef:1d:e6:1f:58:8a:ca:8a:6c:73:42: be:b6:3c:41:fc:b1:a0:14:a3:7f:e8:81:e1:3a:3e:83:1e:e8: 85:44:7f:4e:0b:26:65:20:4f:7d:4f:71:61:b2:07:0d:ad:41: ad:c4:86:45:4c:ae:fd:01:9c:0a:10:32:69:6a:e8:3b:ee:ff: 3b:bc:d6:81:d3:37:1c:ee:b1:6b:bd:ad:a9:f9:90:72:a8:b2: d9:5b:4f:82:3a:43:91:a4:89:b5:bd:9b:d7:f4:8f:1c:fe:ea: 17:b5:63:f7:91:1c:32:66:ff:e7:57:e1:6a:fe:ef:f4:4d:db: 54:64:99:76:9d:27:e9:ef:3b:4a:e0:c2:66:fb:91:73:10:24: 7c:ca:4c:e2:06:c5:a6:8d:4c:72:a9:8e:5d:79:25:68:da:8d: 89:00:eb:8b:cb:19:fb:c4:fe:ef:d5:50:db:b9:da:38:c6:2b: 68:ec:58:51:84:56:c6:ba:96:96:2a:f3:df:21:04:b6:76:3d: eb:e1:fa:52:55:05:8a:a5:43:84:ce:73:36:f0:67:85:ce:3c: 68:6c:07:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCAxAU+5WU2XEZ3z1c2K042EfUAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA5MjUxNjI1NDJaFw0yNjA5MjYxODQ4NDJaMDMxMTAvBgNV BAMTKDUxRjgyNEU4ODA4OENFQkUxRDEwQjY5NEE3Q0U4RTNFNkQ2RUEzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTnaUt65RaZK8zdijQDCwj1EhT dCi4UCoUu3CnGqicfcKra5hxAcZBR8mm1hiCvh0uqPc3Fs5go4c24qMRc1K9I/h1 21BjMVe9/HFnQD/jMcHJDKSWC00X9GqMohYxe6NV4krpkg6Ns1nLZjR1bfPRgigy FjOmyYPxCgRxSErwzb6NGd2QG6JHDvYwKEzHMlpDvGf34oxPIQHdl7DWJ4guq2pD zGFt4EMdZNOfQw6+80UZ9UiZYmKM0gSGc+Cs3L29wR9+ROndrNQSwH7M6/Jc0Dgp IpCKsXMlXVyKcswCeAgkEmNoh8TYGaBMub7iOmFu4SQWhvMsnGJWdXUfuVt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUfgk6ICIzr4dELaUp86OPm1uo5wwHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZrfos03fGq7XtDUsrNrZiny6+gXN1yRVeO R5O+2erluncBWq3Tpa+8AiPvHeYfWIrKimxzQr62PEH8saAUo3/ogeE6PoMe6IVE f04LJmUgT31PcWGyBw2tQa3EhkVMrv0BnAoQMmlq6Dvu/zu81oHTNxzusWu9ran5 kHKostlbT4I6Q5GkibW9m9f0jxz+6he1Y/eRHDJm/+dX4Wr+7/RN21RkmXadJ+nv O0rgwmb7kXMQJHzKTOIGxaaNTHKpjl15JWjajYkA64vLGfvE/u/VUNu52jjGK2js WFGEVsa6lpYq898hBLZ2Pevh+lJVBYqlQ4TOczbwZ4XOPGhsB5M= -----END CERTIFICATE-----Generated at Fri Sep 25 23:54:01 2026 by rpki-client