$ rpki-client -vvf rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft File: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft (raw, json) Hash identifier: ogi2uyRzCJ/7jNl7ke6ogv0wC4xLNd8l42YvncD5dcs= Subject key identifier: 73:FB:E9:9D:E3:DF:C2:88:A1:1B:38:2F:93:9A:8A:58:64:22:A5:41 Authority key identifier: 91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 Certificate issuer: /CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Certificate serial: 49CE667F1CE57422992DDD3F93E987297921603F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft Manifest number: 6B Signing time: Mon 20 Jul 2026 22:44:09 +0000 Manifest this update: Mon 20 Jul 2026 22:39:09 +0000 Manifest next update: Wed 22 Jul 2026 00:04:09 +0000 Files and hashes: 1: 91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl (hash: 9WFNz3DpAA6OKRVUfNu9mGIHX2cJ5qG4hUneghsUWxA=) 2: 3130332e3134372e3231392e302f32342d3234203d3e20313339393739.roa (hash: yk1O5C1BOxz+IbSF0vGTgF2z9BWG6BcqwgclHoMMF8k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 00:04:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ce:66:7f:1c:e5:74:22:99:2d:dd:3f:93:e9:87:29:79:21:60:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91A69BB27FBAECA8EA46BC5D8A42D209978E1F92 Validity Not Before: Jul 20 22:39:09 2026 GMT Not After : Jul 22 00:04:09 2026 GMT Subject: CN=73FBE99DE3DFC288A11B382F939A8A586422A541 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:7c:d8:1d:b1:82:ef:f9:2b:6d:06:49:fa: 87:af:82:f2:68:1f:69:c6:29:a7:37:59:03:67:1d: 35:48:1d:a8:ce:b5:12:9e:7b:73:12:d8:6b:98:56: 8a:48:34:90:74:09:a1:09:3f:91:88:8c:14:e2:79: 67:11:49:66:b3:43:56:53:28:97:6b:5a:ef:5a:a1: 5e:e9:66:6e:d7:92:5a:b4:4a:95:c2:a0:30:8b:c5: 27:c3:09:18:5c:26:60:f0:af:fd:89:4e:de:9e:da: ea:32:4d:14:64:13:13:06:2c:fb:8b:4c:d3:a8:1b: 20:ad:ac:10:34:2f:b4:be:9d:21:1f:99:76:0d:33: db:4d:66:cf:0e:b3:a1:10:94:b8:fb:75:b0:18:f4: ec:1a:80:18:3a:4d:5d:43:91:8c:54:c7:66:be:d3: 2f:ad:a4:b7:cf:8d:fe:6d:33:25:47:d1:1a:94:ca: 10:81:c0:62:40:64:10:cb:b9:84:cf:70:da:3b:82: d8:d2:45:c3:a4:66:9e:06:0e:a5:95:40:cf:0d:71: ab:f3:8e:3d:97:42:55:30:69:b0:7e:66:1c:dd:ac: bb:e8:85:71:d5:e9:46:3c:74:03:4a:1c:52:de:3e: 2e:e4:05:ec:a9:a6:5c:89:7c:b1:3e:97:93:f7:de: b9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:FB:E9:9D:E3:DF:C2:88:A1:1B:38:2F:93:9A:8A:58:64:22:A5:41 X509v3 Authority Key Identifier: keyid:91:A6:9B:B2:7F:BA:EC:A8:EA:46:BC:5D:8A:42:D2:09:97:8E:1F:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7776f2e5-dfbd-4f7f-8b3d-7b970d541b8f/0/91A69BB27FBAECA8EA46BC5D8A42D209978E1F92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:34:0a:98:c1:27:4a:a7:20:83:b3:91:16:b1:48:27:47:80: 4e:8c:77:56:52:30:a1:0f:b5:41:ff:2a:94:bf:16:d4:ae:2b: 73:40:e4:e4:18:24:75:21:ec:47:a9:d6:86:55:6c:a2:63:34: 1d:51:8f:77:7d:9b:a4:af:a1:17:f5:d6:83:8e:03:84:3d:7f: cf:17:13:fb:24:04:42:0b:50:b1:55:7a:ba:32:0c:91:23:e2: c0:57:b6:51:50:71:cc:f3:41:5f:3b:44:d1:35:d5:53:0c:ce: 99:e5:32:94:d0:12:64:d1:42:e5:87:90:f2:b1:0f:80:f1:62: 7f:31:78:c8:24:9f:7e:6c:14:c1:b7:29:7d:42:aa:91:1c:d1: 6f:55:84:76:0d:68:e1:19:49:91:fe:bd:39:73:2a:63:04:2d: ca:f4:51:04:6c:aa:1d:3a:a1:1f:ed:25:a3:ce:d6:da:6e:ef: ea:c1:2d:fc:bc:c1:ed:6e:a6:b3:90:93:f4:3f:9b:cb:4d:61: ad:f1:4f:08:79:92:35:47:9d:e8:96:e3:2b:2f:c9:c9:79:0b: 6e:ea:db:5d:fe:bb:aa:76:c2:ac:f7:1d:de:94:ba:ef:a5:74: 00:47:c2:27:94:e0:ea:5c:d1:7e:25:ee:e9:ce:2a:4c:ec:ac: e6:2d:4a:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSc5mfxzldCKZLd0/k+mHKXkhYD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5 NzhFMUY5MjAeFw0yNjA3MjAyMjM5MDlaFw0yNjA3MjIwMDA0MDlaMDMxMTAvBgNV BAMTKDczRkJFOTlERTNERkMyODhBMTFCMzgyRjkzOUE4QTU4NjQyMkE1NDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpHzYHbGC7/krbQZJ+oevgvJo H2nGKac3WQNnHTVIHajOtRKee3MS2GuYVopINJB0CaEJP5GIjBTieWcRSWazQ1ZT KJdrWu9aoV7pZm7Xklq0SpXCoDCLxSfDCRhcJmDwr/2JTt6e2uoyTRRkExMGLPuL TNOoGyCtrBA0L7S+nSEfmXYNM9tNZs8Os6EQlLj7dbAY9OwagBg6TV1DkYxUx2a+ 0y+tpLfPjf5tMyVH0RqUyhCBwGJAZBDLuYTPcNo7gtjSRcOkZp4GDqWVQM8Ncavz jj2XQlUwabB+ZhzdrLvohXHV6UY8dANKHFLePi7kBeypplyJfLE+l5P33rn5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc/vpnePfwoihGzgvk5qKWGQipUEwHwYDVR0j BBgwFoAUkaabsn+67KjqRrxdikLSCZeOH5IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Nzc3NmYyZTUtZGZiZC00ZjdmLThiM2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3 RkJBRUNBOEVBNDZCQzVEOEE0MkQyMDk5NzhFMUY5Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MUE2OUJCMjdGQkFFQ0E4RUE0NkJDNUQ4QTQyRDIwOTk3OEUx RjkyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzc3NmYyZTUtZGZiZC00ZjdmLThi M2QtN2I5NzBkNTQxYjhmLzAvOTFBNjlCQjI3RkJBRUNBOEVBNDZCQzVEOEE0MkQy MDk5NzhFMUY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIg0CpjBJ0qnIIOzkRaxSCdHgE6Md1ZSMKEP tUH/KpS/FtSuK3NA5OQYJHUh7Eep1oZVbKJjNB1Rj3d9m6SvoRf11oOOA4Q9f88X E/skBEILULFVeroyDJEj4sBXtlFQcczzQV87RNE11VMMzpnlMpTQEmTRQuWHkPKx D4DxYn8xeMgkn35sFMG3KX1CqpEc0W9VhHYNaOEZSZH+vTlzKmMELcr0UQRsqh06 oR/tJaPO1tpu7+rBLfy8we1uprOQk/Q/m8tNYa3xTwh5kjVHneiW4ysvycl5C27q 213+u6p2wqz3Hd6Uuu+ldABHwieU4Opc0X4l7unOKkzsrOYtSoU= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:27 2026 by rpki-client