$ rpki-client -vvvf rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft File: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft (raw, json) Hash identifier: sU4QlaVCEFWNsIZiSyvdGwBW8NGpNQGM2Kw1/8nPr4U= Subject key identifier: ED:E1:84:57:15:B4:87:1A:92:2E:F9:5D:C4:1B:4C:1A:B6:58:E4:C0 Authority key identifier: 91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC Certificate issuer: /CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Certificate serial: 055E695D1261E605109FF0E73EAB537F1D51999C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft Manifest number: F9 Signing time: Wed 04 Nov 2026 14:21:09 +0000 Manifest this update: Wed 04 Nov 2026 14:16:09 +0000 Manifest next update: Thu 05 Nov 2026 18:16:09 +0000 Files and hashes: 1: 3130332e38372e31382e302f32342d3234203d3e20313336303835.roa (hash: 3YW3wpzif7Ii0+9H5ajQcKu+WhGUBsXKkY6vurMFFkQ=) 2: 91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl (hash: tJeI1ED7F5NM0U1GT6x+yOlRrBwOGpEUpqvivdNpDtM=) 3: 3130332e38372e31362e302f32342d3234203d3e20313336303835.roa (hash: 9rQw2DH4LTYRz6Ld/+alvv30wJq+CpxWAZ/IZNVGNXA=) 4: 323030313a6466303a373530303a3a2f34382d3438203d3e20313336303835.roa (hash: lSaknhLFqjOMQh5hKJz89kJXJK6lU8/KmLPb953U3wQ=) 5: 3130332e38372e31372e302f32342d3234203d3e20313336303835.roa (hash: LlPUFkB0sceEK94Yu8wPw+JUw9peMjPuBGA5gFdUP0s=) 6: 3130332e38372e31392e302f32342d3234203d3e20313336303835.roa (hash: F6jYcafaJJAQNsDnKDwNAvNPZwSOu96osD17ejMa0IA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Nov 2026 18:16:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:5e:69:5d:12:61:e6:05:10:9f:f0:e7:3e:ab:53:7f:1d:51:99:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=91DA5E3EAEC7825002C2B0B211691098E846E9FC Validity Not Before: Nov 4 14:16:09 2026 GMT Not After : Nov 5 18:16:09 2026 GMT Subject: CN=EDE1845715B4871A922EF95DC41B4C1AB658E4C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:21:dc:ab:e9:ad:62:85:54:62:2c:8c:17: 6f:21:91:44:a9:fc:b3:8d:9b:1d:a4:d1:f2:4d:0b: c6:97:d6:48:3f:d5:d6:96:90:17:1e:2c:ae:13:15: ab:e0:5c:f5:c2:e8:d8:1d:c8:59:b9:a0:18:32:2b: 4e:df:1b:40:36:9c:df:ab:b8:78:31:bb:85:2c:09: ca:11:56:9c:dd:44:f3:5f:12:fd:a4:ad:ad:c6:4b: c6:92:4f:38:f4:2d:b8:5e:c9:db:b5:9f:4f:33:77: 91:f5:af:55:9b:cb:ab:81:40:7c:4a:6c:ca:57:fc: 1e:54:4d:76:35:23:cd:6d:48:d9:41:d9:32:3b:93: 7c:64:32:bd:ea:d8:a1:5a:38:4c:6c:fe:4e:17:b2: 2f:82:fa:e3:c6:28:fd:62:dc:23:21:18:d0:a2:01: 3c:3a:d4:f3:de:cf:bb:5f:ed:9d:ed:3b:4b:f4:09: fa:22:ee:f9:f0:06:9b:5c:36:1a:91:07:d9:99:2c: 07:8e:39:b2:09:4a:3e:31:82:77:da:8b:8d:5d:a1: 0d:58:5c:5f:f7:39:6f:93:99:15:06:ba:68:d0:7e: d4:b1:86:ed:6a:b5:9f:95:83:62:93:c2:b5:10:71: eb:c4:3b:46:80:8e:ea:77:d7:70:e1:0f:cf:3c:30: 3c:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:E1:84:57:15:B4:87:1A:92:2E:F9:5D:C4:1B:4C:1A:B6:58:E4:C0 X509v3 Authority Key Identifier: keyid:91:DA:5E:3E:AE:C7:82:50:02:C2:B0:B2:11:69:10:98:E8:46:E9:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/91DA5E3EAEC7825002C2B0B211691098E846E9FC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8c278747-6ac7-4f87-9b2b-21359294f034/0/91DA5E3EAEC7825002C2B0B211691098E846E9FC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:f3:0d:e4:95:b5:07:77:95:f7:26:f5:b8:10:26:ac:d3:c9: 78:9f:4a:8a:62:bc:98:fb:c7:68:6e:44:fd:c3:b2:1f:ce:f8: b2:11:c6:6b:f9:cf:6c:e7:64:92:d3:45:c1:fb:d1:b8:ef:6b: 92:37:3c:ae:b7:c4:9e:a6:a5:09:65:35:44:41:68:9a:7a:35: 3b:3b:0c:eb:ca:89:ac:a5:0d:52:93:1e:c2:fd:ab:72:10:6a: 17:13:43:87:53:34:10:0f:1e:fc:fe:0c:c9:b9:cd:b6:1c:7c: 8a:b4:fe:ca:e6:6e:1e:c5:b0:dd:d3:d3:59:24:b2:61:67:c1: 29:d7:a5:15:dc:bf:dc:51:f8:e6:06:15:3e:28:cf:ca:4e:e4: f9:a8:d1:0a:d8:50:48:a0:ac:a5:c9:a8:5e:4b:b3:f9:e2:d4: 5d:18:a8:1c:9f:52:78:5c:88:16:09:06:93:1c:af:57:51:1b: ae:b1:4c:d2:b2:80:0f:13:81:84:d2:5a:10:6f:74:8a:ec:3b: 0b:78:ff:0c:56:cf:8a:48:d5:9c:6c:07:35:53:60:fe:f9:6c: e8:f1:23:3c:b7:7d:8b:52:fc:54:d6:b3:8d:79:78:ad:3f:08: 25:c2:6f:ae:73:70:3c:f3:16:6e:63:55:37:a9:20:0e:ba:5b: cb:80:8d:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBV5pXRJh5gUQn/DnPqtTfx1RmZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEwOThF ODQ2RTlGQzAeFw0yNjExMDQxNDE2MDlaFw0yNjExMDUxODE2MDlaMDMxMTAvBgNV BAMTKEVERTE4NDU3MTVCNDg3MUE5MjJFRjk1REM0MUI0QzFBQjY1OEU0QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLCHcq+mtYoVUYiyMF28hkUSp /LONmx2k0fJNC8aX1kg/1daWkBceLK4TFavgXPXC6NgdyFm5oBgyK07fG0A2nN+r uHgxu4UsCcoRVpzdRPNfEv2kra3GS8aSTzj0Lbheydu1n08zd5H1r1Wby6uBQHxK bMpX/B5UTXY1I81tSNlB2TI7k3xkMr3q2KFaOExs/k4Xsi+C+uPGKP1i3CMhGNCi ATw61PPez7tf7Z3tO0v0Cfoi7vnwBptcNhqRB9mZLAeOObIJSj4xgnfai41doQ1Y XF/3OW+TmRUGumjQftSxhu1qtZ+Vg2KTwrUQcevEO0aAjup313DhD888MDzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7eGEVxW0hxqSLvldxBtMGrZY5MAwHwYDVR0j BBgwFoAUkdpePq7HglACwrCyEWkQmOhG6fwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OGMyNzg3NDctNmFjNy00Zjg3LTliMmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VB RUM3ODI1MDAyQzJCMEIyMTE2OTEwOThFODQ2RTlGQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85MURBNUUzRUFFQzc4MjUwMDJDMkIwQjIxMTY5MTA5OEU4NDZF OUZDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOGMyNzg3NDctNmFjNy00Zjg3LTli MmItMjEzNTkyOTRmMDM0LzAvOTFEQTVFM0VBRUM3ODI1MDAyQzJCMEIyMTE2OTEw OThFODQ2RTlGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDzDeSVtQd3lfcm9bgQJqzTyXifSopivJj7 x2huRP3Dsh/O+LIRxmv5z2znZJLTRcH70bjva5I3PK63xJ6mpQllNURBaJp6NTs7 DOvKiaylDVKTHsL9q3IQahcTQ4dTNBAPHvz+DMm5zbYcfIq0/srmbh7FsN3T01kk smFnwSnXpRXcv9xR+OYGFT4oz8pO5Pmo0QrYUEigrKXJqF5Ls/ni1F0YqByfUnhc iBYJBpMcr1dRG66xTNKygA8TgYTSWhBvdIrsOwt4/wxWz4pI1ZxsBzVTYP75bOjx Izy3fYtS/FTWs415eK0/CCXCb65zcDzzFm5jVTepIA66W8uAjQQ= -----END CERTIFICATE-----Generated at Thu Nov 5 05:26:41 2026 by rpki-client