$ rpki-client -vvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft (raw, json) Hash identifier: eYnQsVy5m1XggT+gp/pm2p79HmdFDSD0b0VEKy05DFc= Subject key identifier: 45:A1:CB:EC:F8:44:03:4E:1D:64:76:9E:F2:C8:F2:11:F4:AA:AA:68 Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Certificate serial: 5BC9D3A7465D248A851B06F8B765D98602886F46 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 01:58:12 +0000 Manifest this update: Tue 21 Jul 2026 01:53:12 +0000 Manifest next update: Wed 22 Jul 2026 04:10:12 +0000 Files and hashes: 1: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: 3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=) 2: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=) 3: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: 9rQw2DH4LTYRz6Ld/+alvv30wJq+CpxWAZ/IZNVGNXA=) 4: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=) 5: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: F6jYcafaJJAQNsDnKDwNAvNPZwSOu96osD17ejMa0IA=) 6: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl (hash: Fjx8mTqBayXElKDk3mY1EF0lLJSGALx+OptpBx0y38o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:c9:d3:a7:46:5d:24:8a:85:1b:06:f8:b7:65:d9:86:02:88:6f:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Validity Not Before: Jul 21 01:53:12 2026 GMT Not After : Jul 22 04:10:12 2026 GMT Subject: CN=45A1CBECF844034E1D64769EF2C8F211F4AAAA68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:11:98:da:27:f1:44:77:5d:ef:89:ca:18:65: 0e:76:1d:8b:ea:4b:42:44:17:b6:3d:3c:ff:11:ff: 91:90:9e:13:da:ab:1d:1f:54:2f:cb:95:fd:2e:00: bd:43:c2:b9:98:d3:c2:f8:07:c8:94:fd:20:9f:5e: e8:29:34:8d:bd:33:b6:60:2b:69:d7:0d:9c:97:34: 65:f0:18:a2:0f:79:b4:7c:e5:6d:43:8c:f8:59:1b: 68:14:f6:ec:95:f6:6c:d2:ce:df:a2:98:14:40:1a: 6f:0e:bc:49:fa:0f:d1:2e:c5:55:23:20:65:c7:9c: e5:c6:4d:ae:28:32:c2:84:e9:23:56:8f:e3:d0:a0: da:64:e7:4d:c5:4a:a0:a1:93:e0:f3:b7:d6:ab:e7: 50:0f:8e:0d:81:e5:3a:cd:1e:50:21:17:23:60:60: 12:40:a7:60:b4:bb:bc:e0:df:61:df:1c:ac:80:c5: df:f0:fb:a7:9c:34:51:9f:f0:33:9d:fc:e1:bd:80: 15:52:9b:8f:30:3c:c4:2a:01:46:fb:4d:c3:43:11: 26:d5:28:c1:7d:d5:5b:63:bb:33:9f:a0:c8:d4:54: 3e:53:42:af:42:fc:e2:e9:0c:6a:e9:29:42:18:ab: 7e:b4:ec:52:04:07:6a:7b:a2:92:b4:6b:86:0b:51: ce:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A1:CB:EC:F8:44:03:4E:1D:64:76:9E:F2:C8:F2:11:F4:AA:AA:68 X509v3 Authority Key Identifier: keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:9c:3e:74:57:94:96:11:78:41:37:d6:4e:c7:1c:2a:25:3f: aa:3d:bc:ff:7a:07:71:03:f7:67:88:a8:48:01:54:bb:66:ab: d5:ed:2f:f9:06:40:52:cc:fb:10:77:91:f0:78:57:bc:07:19: 26:84:24:15:73:81:ae:bb:b1:e6:2c:5d:85:5c:01:5c:f3:f1: 21:4c:f9:56:99:a6:2a:cf:86:b6:23:21:6b:f6:da:7c:e0:ae: cc:48:bd:3a:33:e9:a0:b5:30:da:5e:56:35:63:f7:6c:57:2f: 8b:cb:90:bb:8d:bd:26:6f:83:02:d6:85:23:a1:d8:e4:73:56: 30:2e:96:af:1d:d3:2a:4e:1f:3b:de:68:68:07:74:6b:39:99: 7e:20:35:12:70:9f:cf:7e:f9:7f:7d:35:34:bc:03:8d:90:0f: c1:fa:c6:46:ca:2e:53:4d:c7:8c:3f:b5:f9:99:f2:14:30:b6: 28:2e:23:4d:82:b8:4c:88:86:3e:3b:60:7c:32:ea:8b:93:5c: fe:c3:cc:0c:58:d9:90:5f:c3:89:e3:77:fe:71:af:01:f5:49: f3:e9:27:dc:6f:eb:fc:a9:e8:6f:f8:a9:26:0e:50:2d:4a:af: 6e:28:22:23:b9:43:05:2f:d6:1c:a2:ff:bc:5b:bc:80:66:a1: 6c:af:13:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW8nTp0ZdJIqFGwb4t2XZhgKIb0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEwOThF ODQ2RTlGQzAeFw0yNjA3MjEwMTUzMTJaFw0yNjA3MjIwNDEwMTJaMDMxMTAvBgNV BAMTKDQ1QTFDQkVDRjg0NDAzNEUxRDY0NzY5RUYyQzhGMjExRjRBQUFBNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChEZjaJ/FEd13vicoYZQ52HYvq S0JEF7Y9PP8R/5GQnhPaqx0fVC/Llf0uAL1DwrmY08L4B8iU/SCfXugpNI29M7Zg K2nXDZyXNGXwGKIPebR85W1DjPhZG2gU9uyV9mzSzt+imBRAGm8OvEn6D9EuxVUj IGXHnOXGTa4oMsKE6SNWj+PQoNpk503FSqChk+Dzt9ar51APjg2B5TrNHlAhFyNg YBJAp2C0u7zg32HfHKyAxd/w+6ecNFGf8DOd/OG9gBVSm48wPMQqAUb7TcNDESbV KMF91VtjuzOfoMjUVD5TQq9C/OLpDGrpKUIYq3607FIEB2p7opK0a4YLUc5vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURaHL7PhEA04dZHae8sjyEfSqqmgwHwYDVR0j BBgwFoAUkdpePq7HglACwrCyEWkQmOhG6fwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMyNzg3NDctNmFjNy00Zjg3LTliMmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VB RUM3ODI1MDAyQzJCMEIyMTE2OTEwOThFODQ2RTlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MURBNUUzRUFFQzc4MjUwMDJDMkIwQjIxMTY5MTA5OEU4NDZF OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEw OThFODQ2RTlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAWcPnRXlJYReEE31k7HHColP6o9vP96B3ED 92eIqEgBVLtmq9XtL/kGQFLM+xB3kfB4V7wHGSaEJBVzga67seYsXYVcAVzz8SFM +VaZpirPhrYjIWv22nzgrsxIvToz6aC1MNpeVjVj92xXL4vLkLuNvSZvgwLWhSOh 2ORzVjAulq8d0ypOHzveaGgHdGs5mX4gNRJwn89++X99NTS8A42QD8H6xkbKLlNN x4w/tfmZ8hQwtiguI02CuEyIhj47YHwy6ouTXP7DzAxY2ZBfw4njd/5xrwH1SfPp J9xv6/yp6G/4qSYOUC1Kr24oIiO5QwUv1hyi/7xbvIBmoWyvE/g= -----END CERTIFICATE-----Generated at Tue Jul 21 06:50:45 2026 by rpki-client