$ rpki-client -vvf rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft File: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft (raw, json) Hash identifier: yaM2NRUPDCoyaZVrLGm48afp/7iomZGlEBui5Krg2GQ= Subject key identifier: F1:F8:0B:71:3C:B7:60:D2:A1:79:75:1C:64:EE:DD:34:D0:B9:2F:63 Authority key identifier: 91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 Certificate issuer: /CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Certificate serial: 2093AC5CE46A247BCD5D02E2B99D2877CA8C3F23 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 09:56:36 +0000 Manifest this update: Fri 24 Jul 2026 09:51:36 +0000 Manifest next update: Sat 25 Jul 2026 12:51:36 +0000 Files and hashes: 1: 3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (hash: 6Np+q+5XOW4vxlMbVGZKdZf5J6Gwh/BuKQFsPk2H03I=) 2: 3130332e3133312e3231372e302f32342d3234203d3e203338373538.roa (hash: XA8Mg7RR9LICJm4QVN9sHHYBGExGVWnRlfGuHZaWDXk=) 3: 91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl (hash: 681Wf6g+t6QJMVe3VavTLLQphFi1w0Fn1b73vzhDtj4=) 4: 3130332e3133312e3231382e302f32342d3234203d3e203633343838.roa (hash: uikJ4h+kBmTlo/wV286gj8QmBKk/antrFLp6NHaL3Jo=) 5: 3130332e3133312e3231362e302f32342d3234203d3e203338373538.roa (hash: SC10OytBie2MbXaqxSkSZEMl+ckzrKygzl2td6Lp/wc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:93:ac:5c:e4:6a:24:7b:cd:5d:02:e2:b9:9d:28:77:ca:8c:3f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91196A98FE2E2236BB65CE28DCB5923E551C9CA5 Validity Not Before: Jul 24 09:51:36 2026 GMT Not After : Jul 25 12:51:36 2026 GMT Subject: CN=F1F80B713CB760D2A179751C64EEDD34D0B92F63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f4:42:1f:d6:fe:29:b9:44:d1:2d:c6:a7:f7: b8:e2:66:ea:83:81:fc:f9:eb:f5:d9:bf:c3:35:4b: e1:24:2e:0d:18:dc:5a:9e:de:0f:ee:13:2b:14:02: 64:d6:5b:ed:08:2e:34:76:93:f1:38:61:78:d2:b1: 0c:2c:37:0b:30:f7:58:f8:d5:ea:a4:91:6e:a2:ee: f8:3f:8e:50:ba:57:55:c2:bc:5f:12:64:60:ed:6a: 5b:60:48:86:c6:a9:5f:55:2e:12:2c:f0:b8:e0:5c: ac:8b:fb:56:8c:d4:97:35:67:94:2c:f9:e2:76:b2: 86:b5:ef:59:15:61:12:47:36:9b:c5:39:46:98:b9: 9d:60:fd:fb:c3:f4:68:a7:f7:1e:79:9a:17:73:91: a6:7b:7b:7d:af:c9:20:e5:ff:84:37:c1:39:e2:0e: d5:68:77:9c:c0:1e:72:bf:f1:ae:95:3f:ad:8d:72: 7e:7d:30:55:d2:fc:ca:70:99:34:19:8c:0b:eb:52: 1d:ef:1d:ee:3e:49:5e:b8:0f:b0:09:16:ad:88:d2: 2e:71:01:f7:8e:e9:02:e6:4e:06:c9:6f:41:30:ed: 61:27:b7:b3:79:e2:e2:e2:c1:3e:36:b6:94:54:c2: 69:32:de:57:7c:53:f5:bf:33:34:2a:78:f6:eb:61: 0b:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:F8:0B:71:3C:B7:60:D2:A1:79:75:1C:64:EE:DD:34:D0:B9:2F:63 X509v3 Authority Key Identifier: keyid:91:19:6A:98:FE:2E:22:36:BB:65:CE:28:DC:B5:92:3E:55:1C:9C:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/91196A98FE2E2236BB65CE28DCB5923E551C9CA5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:08:d7:ed:5a:e5:38:b5:95:6d:8a:8e:28:87:8b:f0:0a:ad: 4e:36:22:71:48:fb:63:b6:fc:d1:de:1a:fa:53:05:2d:cc:d8: b2:05:23:23:6d:61:60:7e:a5:d6:1d:d9:b7:bd:d6:44:53:80: 02:83:07:c0:6f:32:e7:c9:5e:a5:e6:b3:eb:c9:7b:35:2d:56: 34:85:e0:43:cf:1e:c5:1f:d4:1e:da:50:26:02:07:78:cc:0d: c9:1b:7f:3c:7c:2a:76:0b:23:5c:a5:a0:66:29:82:0b:3c:ed: 52:34:9f:52:d8:e3:11:76:88:ad:8b:65:87:06:df:eb:47:3e: 81:29:6c:b4:b0:1e:11:92:31:c7:25:3c:e0:43:a3:14:75:d4: 36:25:6d:91:ee:72:53:a2:4c:ce:1e:fd:c1:2b:99:2b:47:07: 99:cb:60:4f:75:e8:74:4f:07:07:70:dc:1b:a4:27:fa:8b:20: 0b:7d:c9:96:d7:07:ce:03:56:59:5f:cc:13:08:29:ba:d0:7b: 74:eb:9c:e4:21:3d:32:2b:a0:0e:0f:f8:90:b7:01:9b:0e:af: d7:7d:26:b2:bb:07:dd:b9:75:53:9c:a9:50:a7:5e:11:8c:dc: 58:c1:63:91:7e:11:be:5a:26:e2:05:13:42:9a:cd:5f:de:e6: c0:42:fa:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIJOsXORqJHvNXQLiuZ0od8qMPyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1 NTFDOUNBNTAeFw0yNjA3MjQwOTUxMzZaFw0yNjA3MjUxMjUxMzZaMDMxMTAvBgNV BAMTKEYxRjgwQjcxM0NCNzYwRDJBMTc5NzUxQzY0RUVERDM0RDBCOTJGNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ9EIf1v4puUTRLcan97jiZuqD gfz56/XZv8M1S+EkLg0Y3Fqe3g/uEysUAmTWW+0ILjR2k/E4YXjSsQwsNwsw91j4 1eqkkW6i7vg/jlC6V1XCvF8SZGDtaltgSIbGqV9VLhIs8LjgXKyL+1aM1Jc1Z5Qs +eJ2soa171kVYRJHNpvFOUaYuZ1g/fvD9Gin9x55mhdzkaZ7e32vySDl/4Q3wTni DtVod5zAHnK/8a6VP62Ncn59MFXS/MpwmTQZjAvrUh3vHe4+SV64D7AJFq2I0i5x AfeO6QLmTgbJb0Ew7WEnt7N54uLiwT42tpRUwmky3ld8U/W/MzQqePbrYQtxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8fgLcTy3YNKheXUcZO7dNNC5L2MwHwYDVR0j BBgwFoAUkRlqmP4uIja7Zc4o3LWSPlUcnKUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDU1M2VkYWItNGEzZC00NGU0LThkOTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThG RTJFMjIzNkJCNjVDRTI4RENCNTkyM0U1NTFDOUNBNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MTE5NkE5OEZFMkUyMjM2QkI2NUNFMjhEQ0I1OTIzRTU1MUM5 Q0E1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDU1M2VkYWItNGEzZC00NGU0LThk OTYtNjI1YTFjMjAzNzhkLzAvOTExOTZBOThGRTJFMjIzNkJCNjVDRTI4RENCNTky M0U1NTFDOUNBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEkI1+1a5Ti1lW2KjiiHi/AKrU42InFI+2O2 /NHeGvpTBS3M2LIFIyNtYWB+pdYd2be91kRTgAKDB8BvMufJXqXms+vJezUtVjSF 4EPPHsUf1B7aUCYCB3jMDckbfzx8KnYLI1yloGYpggs87VI0n1LY4xF2iK2LZYcG 3+tHPoEpbLSwHhGSMcclPOBDoxR11DYlbZHuclOiTM4e/cErmStHB5nLYE916HRP Bwdw3BukJ/qLIAt9yZbXB84DVllfzBMIKbrQe3TrnOQhPTIroA4P+JC3AZsOr9d9 JrK7B925dVOcqVCnXhGM3FjBY5F+Eb5aJuIFE0KazV/e5sBC+lM= -----END CERTIFICATE-----Generated at Fri Jul 24 12:44:13 2026 by rpki-client